Privacy Policy

What is the purpose of this policy?

DiamPark SAS, the entity managing the diampark.io site, places great importance on the protection and confidentiality of your personal data, which represents a symbol of seriousness and trust for us.

The data privacy policy precisely reflects our commitment to comply with the applicable rules on data protection, especially those of the General Data Protection Regulation (GDPR).

In particular, the privacy policy aims to inform you about how and why we process your data within the scope of the services we provide.

Who is this policy for?

The policy applies to you, regardless of your place of residence, as long as you are at least 15 years old, whether you are a customer, a candidate for a position at DiamPark SAS, or a visitor to the diampark.io site.

Why do we process your data?

In the context of the services offered, we are necessarily required to process your personal data to:

  • browse our website, benefit from our services, and respond to your requests (e.g., information requests, complaints, etc.) based on our terms of use and our legitimate interest in providing you with the best possible service.
  • follow and comment on our social media posts based on our legitimate interest in having a dedicated presence on social media.
  • apply for a position at DiamPark SAS based on the discussions we have with you during the recruitment process and our legitimate interest in recruiting and selecting candidates.

Your data is collected directly from you when you use our website, and we commit to processing your data only for the reasons described above.

However, when you voluntarily post content on the pages we edit on social media, you acknowledge being fully responsible for any personal information you may transmit, regardless of the nature and origin of the provided information.

What data do we process and for how long?

We have summarized the categories of personal data we collect and their respective retention periods.

If you want more details on the applicable retention periods for your data, you can contact us at the following address: rgpd@diampark.io.

  • Personal identification data (e.g., name, surname, etc.) kept for the entire duration of the service provision, plus the legal prescription periods, which are generally 5 years.
  • Data indicated in the CV and cover letter kept during the recruitment process and then for 2 years from your application.

  • Connection data (e.g., logs, IP address, etc.) kept for a period of 1 year.

At the expiration of the retention periods described above, the deletion of your personal data is irreversible, and we cannot provide them to you after that period. At most, we can only retain anonymous data for statistical purposes.

Also note that in case of litigation, we are obligated to retain all data related to you throughout the processing period, even after the expiration of their previously described retention periods.

What rights do you have to control the use of your data?

The applicable data protection regulations grant you specific rights that you can exercise at any time and free of charge to control the use we make of your data.

  • Right of access and copy of your personal data, provided that this request is not in contradiction with trade secrets, confidentiality, or correspondence secrecy.

  • Right to rectify personal data that is incorrect, outdated, or incomplete.

  • Right to object to the processing of your personal data implemented for commercial prospecting purposes.

  • Right to request the erasure ('right to be forgotten') of your personal data that is not essential to the proper functioning of our services.

  • Right to limit your personal data, which allows you to document the use of your data in case of dispute over the legitimacy of a processing.

  • Right to data portability, allowing you to retrieve some of your personal data to store or easily transmit them from one information system to another.

  • Right to give instructions on the fate of your data in the event of death, either through you, a trusted third party, or an heir.

For a request to be considered, it is imperative that it be made directly by you to the address rgpd@diampark.io. Any request not made in this way cannot be processed.

Requests cannot be made by anyone other than you. Therefore, we may ask for proof of identity if there is doubt about the identity of the requester.

We will respond to your request as soon as possible, within a maximum of one month from its receipt, unless the request proves complex or repetitive. In such cases, the response time may be up to three months.

Please note that we can always refuse to respond to any excessive or unfounded request, especially in terms of repetition.

Who can access your data?

WE NEVER TRANSFER OR SELL YOUR DATA TO THIRD PARTIES OR COMMERCIAL PARTNERS. ALL OF YOUR PERSONAL DATA IS EXCLUSIVELY USED BY OUR TEAMS OR OUR IT SERVICE PROVIDERS.

More specifically, we only share your data with individuals duly authorized to use it to provide our service, such as our IT service or our customer relations service.

Your personal data is also transferred to our IT service providers solely for the purpose of technically operating our service (e.g., data hosting provider).

We want to emphasize that we scrutinize all our IT service providers before hiring them to ensure that they scrupulously comply with the applicable rules on the protection of personal data.

How do we protect your data?

We implement all the technical and organizational means required to guarantee the security of your data on a daily basis and, in particular, to counteract any risk of destruction, loss, alteration, or unauthorized disclosure of your data (e.g., training, access control, passwords, antivirus, 'https', etc.).

Can your data be transferred outside the European Union?

Unless it is strictly necessary and exceptionally, we never transfer your data outside the European Union, and your data is always hosted on European soil. Furthermore, we make every effort to recruit only providers hosting your data within the European Union.

In the event that our providers are nevertheless required to transfer personal data about you outside the European Union, we meticulously ensure that they implement appropriate guarantees to ensure the confidentiality and protection of your data.

Who can you contact for more information?

To better ensure the protection and integrity of your data, we have officially appointed an independent Data Protection Officer (DPO) with our supervisory authority.

You can contact our DPO at any time and free of charge at the address rgpd@diampark.io to obtain more information or details on how we process your data.

How can you contact the CNIL?

You can contact the 'Commission Nationale de l'Informatique et des Libertés' or 'CNIL' at any time at the following addresses: CNIL Complaints Department, 3 Place de Fontenoy – TSA 80751, 75334 Paris Cedex 07, or by phone at 01.53.73.22.22.

Can the policy be modified?

We may modify our privacy policy at any time to adapt it to new legal requirements and to new treatments that we may implement in the future.

Certified compliant by Dipeeo ®