Personal data protection policy
1. Purpose
This Policy informs you about how your personal data is collected and used by HAVAS LIFE PARIS, a société anonyme (public limited company) with a board of directors, with a share capital of €307,676.40, whose registered office is located at 29/30 quai de Dion Bouton, 92800 Puteaux (hereinafter the “Agency”) in the course of operating the HAVAS LIFE PARIS website accessible at https://havaslifeparis.com/ as data controller.
This policy is accessible from our homepage and at the bottom of each page of the website.
For more information on our group policy on personal data protection, please refer to our Group Policy.
We also invite you to read it in its entirety and to consult our general terms and conditions of use accessible on the Website.
2. Definitions
The terms below, whether used in the plural or the singular, have the following meaning:
- “personal data”: any information relating to an identified or identifiable natural person, directly or indirectly, within the meaning of the regulations;
- “data subject”: natural person whose personal data is processed by HAVAS LIFE PARIS;
- “regulations”: regulations in force in France applicable to the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”) and Law No. 78-17 of 6 January 1978, the “Informatique et Libertés” Act, as amended;
- “data controller”: natural or legal person who determines the means and purposes of personal data processing within the meaning of the regulations;
- “processor”: natural or legal person who processes data on behalf of the data controller in the context of a service or contract;
- “Website”: the HAVAS LIFE PARIS website accessible at https://havaslifeparis.com/;
- “processing”: any operation or set of operations carried out, whether or not by automated means, applied to data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction.
3. How do we process your personal data?
When you browse and interact on the Website, we may collect and process data about you, for the management of activities carried out on our own behalf, as data controller.
Our agency respects the right of every individual, client, supplier, partner, candidate, prospect or internet user to have their personal data protected. We observe the principles set out by the regulations:
- Processing your personal data fairly, lawfully and transparently.
- Collecting your personal data for explicit, specified and legitimate purposes, and not further processing it in a manner incompatible with those purposes.
- Ensuring that the personal data collected is relevant, proportionate and not excessive in relation to the purposes for which it is collected and processed. Personal data may be anonymised where possible and appropriate, depending on the nature of the data and the risks associated with the intended uses.
- Keeping your personal data accurate, updated where necessary. We will take reasonable steps to rectify or delete inaccurate or incomplete data.
- Personal data will be kept for the period necessary in view of the purposes for which it is collected and processed.
- Personal data processing will be carried out in compliance with the rights of data subjects.
- Technical, physical and organisational measures are taken to secure your data and prevent unauthorised access, unlawful processing and the unauthorised or accidental loss, destruction or damage of personal data.
- Processing your personal data in compliance with the legal bases of the processing, including obtaining consent where required.
4. What types of personal data are collected?
As data controller, we collect and process your personal data after having informed you appropriately.
The personal data we process includes:
- your identification data (your first name, surname, email address, telephone number);
- your connection data: your IP address;
- your browsing data and expressed preferences: traffic and browsing history on the Website, data from cookies and trackers.
We do not collect so-called “sensitive” personal data or special categories of personal data.
In general and unless otherwise specified, use of our website is reserved for persons of legal age.
5. What is the purpose, legal basis of the collection of your data and the retention period?
In accordance with the regulations, the personal data we collect is used for the fulfilment of the purposes for which it was collected and for the period indicated in the table below.
The processing we carry out has the following purposes, legal bases and durations:
| Purposes | Legal basis | Duration |
|---|---|---|
| Management and follow-up of contact requests | Legitimate interest of HAVAS LIFE PARIS | Duration necessary to process the request |
| Reporting and securing access to websites | Legitimate interest of HAVAS LIFE PARIS | 6 months to 1 year maximum |
| Exercise of your rights relating to personal data | Legal and regulatory obligation | 1 year or 6 years from the date of the rights request, depending on the right exercised |
| Management of cookies and other trackers on the website | Consent Legitimate interest of HAVAS LIFE PARIS (technical cookies) | Durations specified in the website’s cookie policy |
In the event of litigation or proceedings, particularly judicial, initiated before the expiry of the above periods and which would require the retention of personal data, in particular for the purpose of establishing, exercising or defending rights, such data will be retained for the duration of said proceedings and until the definitive expiry of all avenues of appeal.
6. Who are the recipients of your data?
Your personal data may be communicated, according to their roles and authorisations and only where necessary for their activity, to the staff of the following departments, depending on the purposes strictly pursued:
- Internal recipients: Communications Department, General Management;
- External recipients: the Website host and any duly authorised service providers and processors to whom we may have recourse for the conduct of our activities, legal advisers, insurers, public authorities, officers of the court and ministerial officers where applicable.
7. Data transfers
We favour the transfer of personal data within Europe. Nevertheless, your personal data collected and processed in the context of the purposes described above may in certain cases be transmitted to companies outside the European Union.
Some of these countries have an adequate level of data protection.
In other cases, we inform you that the transfers of your personal data to other entities outside the European Union are governed by the implementation of appropriate safeguards to ensure the confidentiality and security of the data during transfers. In this context, we may have recourse to concluding, with the recipients of such data, contractual clauses in accordance with the recommendations of the European Commission, ensuring that appropriate safeguards are taken regarding the protection of said data.
Furthermore, where the legislation of the third country does not offer protection equivalent to that offered by the regulations, we ensure the implementation of additional measures designed to guarantee a level of protection of your personal data essentially equivalent to that provided for in the European Union and to ensure the effectiveness of such protection.
We also inform you that transfers of personal data outside the European Union are lawful if, in particular, (i) the transfer is necessary for the performance of a contract between the data subject and the data controller or for the implementation of pre-contractual measures taken at the request of the data subject, (ii) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the data controller and another natural or legal person, or (iii) the data subject has given their explicit consent to the proposed transfer, after having been informed of the risks that such a transfer could entail due to the absence of an adequacy decision and appropriate safeguards.
8. Security and subcontracting
We attach particular importance to the security of your personal data.
To this end, we have implemented technical and organisational measures adapted to the nature of the personal data, in order to ensure their integrity and confidentiality and to protect them against any malicious intrusion, loss, alteration or disclosure to unauthorised third parties.
Nevertheless, the security and confidentiality of personal data relies on the good practices of each individual and you are invited to remain vigilant on this matter.
When we use a processor, we only share personal data after having obtained from them a commitment and guarantees regarding their ability to meet security and confidentiality requirements, and after having concluded a written contractual commitment with them.
9. Third-party websites and social networks
Our website may provide links to third-party applications, products, services or websites to facilitate your browsing and for your information. If you follow these links, you leave the Website.
HAVAS LIFE PARIS does not control these third-party websites or their privacy and data protection practices, which may differ from ours. We disclaim all responsibility for their content and their personal data protection practices. The personal data you choose to provide via these websites or that is collected by these third parties is not covered by this website’s Personal Data Protection Policy. We encourage you to consult the personal data protection policy of any website you interact with before allowing the collection and use of your personal data. We also provide links to social networks that allow you to share information with your own social networks and interact. When you use these links, information about you may be collected or shared. We encourage you to consult the personal data protection policies of the social networks you interact with, in order to know what information may be collected, used or shared by these websites. If you post, comment, indicate interests or share personal data on any public forum, social network, blog or similar forum, please be aware that any personal information you post may be collected or used by other users of these forums and networks. In any event, HAVAS LIFE PARIS cannot be held liable for such third-party uses which are not under its responsibility.
10. Cookie management
The management of cookies on the Website is covered by a cookie policy accessible on the Website.
11. What are your rights regarding personal data
HAVAS LIFE PARIS is particularly attentive to respecting the rights granted to you in the context of the data processing it carries out, to guarantee you fair and transparent processing given the particular circumstances and context in which your personal data is processed.
Your right of access
In this regard, you have the right to obtain confirmation as to whether or not your personal data is being processed and, where it is, you have the right to request a copy of your data and information concerning:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients as well as, where applicable if such communications were to be made, the international organisations to which the personal data has been or will be communicated, in particular recipients established in third countries;
- where possible, the envisaged retention period for the personal data or, where this is not possible, the criteria used to determine that period;
- the existence of the right to request from the data controller the rectification or erasure of your personal data, the right to request restriction of the processing of your personal data, the right to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- information relating to the source of the data where it is not collected directly from you;
- the existence, where applicable, of automated decision-making, including profiling, and in the latter case, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.
Your right to rectification of your data
You may ask us to rectify, complete your personal data if it is inaccurate, incomplete, ambiguous and/or outdated, as the case may be.
Your right to erasure of your data
You may ask us to erase your personal data in the cases provided for by the regulations.
Please note that the right to erasure of data is not a general right and that it may only be exercised if one of the grounds provided for in the applicable regulations is present.
Your right to restriction of data processing
You may request the restriction of the processing of your personal data in the cases provided for by the regulations.
Your right to object to data processing
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where the legal basis is the legitimate interest pursued by the data controller.
In the event of the exercise of such a right of objection, we will ensure that your personal data is no longer processed in the context of the processing concerned unless we can demonstrate that we may have compelling legitimate grounds for maintaining this processing. These grounds must override your interests and your rights and freedoms, or the processing must be justified for the establishment, exercise or defence of legal claims.
Your right to data portability
You have the right to the portability of your personal data. We draw your attention to the fact that this is not a general right. Indeed, not all data from all processing is portable and this right only concerns automated processing, to the exclusion of manual or paper processing.
This right is limited to processing whose legal basis is your consent or the performance of pre-contractual measures or a contract.
Your right to withdraw your consent
Where the data processing we carry out is based on your consent, you may withdraw it at any time. We will then cease processing your personal data without the operations previously carried out, for which you had given your consent, being called into question.
Your right to lodge a complaint
You have the right to lodge a complaint with the personal data supervisory authority of your country of residence, without prejudice to any other administrative or judicial remedy.
Your right to define post-mortem directives (France)
In accordance with the Informatique et Libertés Act of 6 January 1978, as amended, you have the option of defining directives relating to the retention, erasure and communication of your personal data after your death, under the terms defined below.
How to exercise your rights
You may exercise your rights with the Group DPO,
by email at: [email protected]
or by post to: Data Protection Officer, Havas Group, 29/30 Quai de Dion Bouton, 92800 Puteaux, France
We will respond as soon as possible and in any event within a maximum period of one month from receipt of the request. We may, where necessary, extend this period by two months, taking into account the complexity and number of requests, and we will inform you specifically.
In the event of a complaint regarding your rights, you may contact the supervisory authority (CNIL).
12. Changes to the Website’s personal data protection policy
HAVAS LIFE PARIS reserves the right to modify this policy if necessary, for example, to comply with a change in law, regulations, the agency’s practices and procedures, or requirements imposed by data protection authorities. The new policy will be published on the Website.
We invite you to consult it regularly.
If you have any questions or comments about this policy, please contact the Group DPO whose contact details are given in article 11 above.
Date: February 2026