Privacy policy

Last update: 16/01/2024

EBP, in its capacity as data controller, attaches great importance to the protection and respect of your privacy. You will find below the conditions under which we use your personal data when you browse evabattleplan.com (the “Platform”).

By continuing to browse the Platform, you accept the terms of this Privacy Policy.

Capitalized terms used in this Privacy Policy and not defined herein have the meanings ascribed to them in the Terms and Conditions.

This Privacy Policy aims to inform you in complete transparency, in accordance with Regulation No. 2016-679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and the free movement of this data (“GDPR”) and to Law No. 78-17 of January 6, 1978 relating to information, files and freedoms in its latest amended version (together the “Regulations”), on the way we use your personal data and the rights you have over it.

Article 1: How and why we collect your data?

We may collect your personal data when you use the Platform for the purposes of:

Create your Account on the basis of the performance of the contract concluded between you and us;
Manage the Orders and the invoicing of any Subscription on the basis of the execution of the contract concluded between you and us;
To allow the payment of your Subscriptions on the basis of the execution of the contract concluded between you and us;
Facilitate subsequent purchases if you have consented to this;
Process and grant your request for contact or information by virtue of the execution of pre-contractual measures;
Send newsletters (news and news) on the basis of our legitimate interest if you are already a customer and the newsletter concerns products and services similar to those already provided, failing which you have consented.

The fields present on the data collection forms with an asterisk are mandatory. In the event of a lack of response to one of the fields, your request cannot be processed.

Article 2: The categories of personal data collected

As part of the purposes listed in Article 1 above, we collect the following categories of personal data from you:

Identification data (first name, postal address, postal code, city, country, email address);
Login data (such as username, password);
Account data (such as account creation date);
Bank details (credit card number, expiry date and cryptogram);
Data relating to the Subscription (such as end date of the Subscription, date of the next direct debit, deadline for terminating the Subscription);

Article 3: Duration of retention of personal data

Your personal data will not be kept beyond the time strictly necessary for the purposes pursued as set out in the Privacy Policy and in accordance with the Regulations.

In this regard :

The personal data collected for the purpose of creating your Account is kept until your Account is deleted;
The personal data collected for billing management purposes is kept for the time necessary for their processing plus a period of one (1) year in order to keep a history of Orders;
The payment data collected for the payment of your Orders is kept by our service provider until payment is made. In the event of a Subscription, your payment data is kept until the termination of the Subscription;
Personal data collected for the purpose of sending newsletters is kept for a period of three (3) years from the last active contact;
The personal data collected for the purpose of processing and granting your contact request is kept for the time necessary to process your request;

Your personal data is deleted when the retention periods mentioned above expire or anonymized for statistical purposes. However, your data may be archived beyond the periods provided for administrative and/or probationary purposes. Archiving implies that your personal data will no longer be searchable in an active database but will be extracted and stored on an autonomous and secure medium.

Article 4: Recipients of your personal data

a- Personal data transferred to public authorities and/or bodies

In accordance with the Regulations, your personal data may be transmitted to the competent authorities on request and in particular to public bodies, court officers, ministerial officers, bodies responsible for collecting debts, etc., exclusively to meet the obligations legal, as well as in the case of the search for the perpetrators of offenses committed on the Internet.

b- Personal data transferred to recipients

As part of the purposes listed in Article 1, your personal data is transmitted to our sales, marketing and web departments. In addition, we use subcontractors who may have access to your personal data only for the purposes listed above, including:

The Platform hosting provider;
Platform development service providers;
The online payment solution provider available from the Platform;
The provider of the CRM software we use.
The provider of the SASS account management service we use.

We only transmit to these service providers and partners the personal data they need to perform their services and processing, and we require that they do not use your personal data for other purposes. Our third-party service providers act only in accordance with our instructions and are contractually bound to ensure a level of security and confidentiality of your data adapted according to the Regulations.

Article 5: International transfers of your personal data

Your personal data may be transferred to countries outside the European Union for the purposes listed above, and in particular to the United States. Where applicable, transfers are governed by appropriate measures such as the signing of Standard Contractual Clauses of the European Commission, the adoption of Internal Company Rules or any other adequate guarantee according to the Regulations.

You can access the guarantees implemented by contacting us at the address mentioned below.

Article 6: Security measures implemented on your personal data

We are concerned about the security and confidentiality of your personal data.
We therefore take appropriate technical and organizational measures to prohibit unauthorized access to or modification, disclosure, loss or destruction of your personal data. In this context, it is important that you maintain the confidentiality of your Account identifiers in order to prevent any unauthorized use of your Account.

Article 7: The rights you have over your personal data

In accordance with the Regulations, you have the following rights relating to your personal data:

A right of access and information: you have the right to be informed about how your personal data is processed. You also have the right to obtain (i) confirmation that personal data is being processed by EBP and, where applicable (ii) to access this data and obtain a copy thereof;
A right of rectification: you have the right to obtain the rectification of inaccurate personal data concerning you. You also have the right to complete incomplete data concerning you, by providing an additional declaration. In the event of exercise of this right, we undertake to communicate any rectification to all the recipients of your personal data;
A right to erasure: in certain cases, you have the right to obtain the erasure of your personal data. However, this is not an absolute right and we may for legal or legitimate reasons keep your data;
A right to limit processing: in certain cases, you have the right to obtain the limitation of processing of your data;
A right to portability: you have the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to transmit it to a third party of your choice. This right only applies when the processing is based on your consent, on a contract or when this processing is carried out by automated means;
A right to object to processing: you have the right to object at any time to the processing of your personal data for processing based on our legitimate interest, a mission of public interest and those for commercial prospecting purposes. This is not an absolute right and we may for legal or legitimate reasons refuse your request to object;
The right to withdraw your consent at any time: you can withdraw your consent to the processing of your personal data when the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent, carried out before such withdrawal;
The right to lodge a complaint with the CNIL: you have the right to contact the CNIL to file a complaint relating to our personal data protection practices;
The right to give instructions concerning the fate of your data after your death: you have the right to give us directives concerning the use of your personal data in the event of death.

To exercise your rights, please write to us at the following address: contact@evabattleplan.com.

Article 8: Modification of the privacy policy

We may modify this Privacy Policy, in particular to comply with any regulatory, jurisprudential, editorial or technical developments. If necessary, we will inform you by any means of this modification and will modify the date at the top of this document. However, we invite you to consult this page regularly.

Article 9: Contact

For any question relating to the Privacy Policy or for any request relating to your personal data, you can contact us:

By e-mail to the following address: contact@evabattleplan.com;