CNIL Compliance Notice

Effective Date: December 5, 2024

Introduction Mind Your Biz Online ("we," "our," "us") is committed to protecting the personal data of our users in compliance with the French Data Protection Act and the General Data Protection Regulation (GDPR). This CNIL Compliance Notice outlines how we collect, use, and protect personal data in accordance with the guidelines of the French data protection authority (CNIL).

1. Data Controller Information

Mind Your Biz Online operates as the data controller responsible for processing personal data. For inquiries or concerns, you may contact us at:

  • Email: info@mindyourbiz.online

  • Contact: Laura Bait

  • Addresses:

    • New York: 60 E 42nd St Suite 4600, New York, NY 10165, United States

    • London: 4th Floor, Rex House, 4-12 Regent St., London SW1Y 4PE

    • Tokyo: 8F, 1 Chome-11-1 Marunouchi, Chiyoda City, Tokyo 100-6028, Japan

2. Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you provide explicit consent (e.g., signing up for newsletters).

  • Contractual Necessity: To fulfill a service or product purchase.

  • Legal Obligation: To comply with applicable laws and regulations.

  • Legitimate Interests: To improve services, prevent fraud, or enhance user experience.

3. Data Collection and Use

We collect the following categories of personal data:

  • Identity Data: Name, email address, and postal address.

  • Technical Data: IP address, browser type, operating system.

  • Usage Data: Interactions with our website, such as pages visited.

  • Marketing Data: Preferences for receiving communications and offers.

Purpose of Data Collection:

  • To provide and improve our services.

  • To process transactions and fulfill orders.

  • To communicate about updates, promotions, or relevant offers.

  • To comply with legal and regulatory requirements.

4. Rights of Data Subjects

Under French and EU law, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right of Rectification: Correct inaccurate or incomplete personal data.

  • Right to Erasure (Right to Be Forgotten): Request deletion of your personal data, subject to legal obligations.

  • Right to Restriction: Request limited processing of your data.

  • Right to Object: Object to data processing based on legitimate interests or for marketing purposes.

  • Right to Data Portability: Receive your data in a structured, commonly used format.

  • Right to Withdraw Consent: Withdraw consent at any time for processing based on your consent.

To Exercise Your Rights: Contact us at info@mindyourbiz.online. We will respond to your request within one month, as mandated by CNIL guidelines.

5. Data Retention

We retain personal data only for as long as necessary for the purposes stated above or as required by law. Specific retention periods include:

  • Transactional data: Retained for 6 years for tax and legal compliance.

  • Marketing data: Retained until you opt out or withdraw consent.

6. Data Transfers

We may transfer your personal data internationally, including to countries outside the European Economic Area (EEA). Such transfers are safeguarded through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.

  • Binding Corporate Rules (BCRs) where applicable.

7. Security Measures

We implement technical and organizational measures to protect personal data, including:

  • Encryption of sensitive data.

  • Regular system audits and vulnerability assessments.

  • Restricted access to personal data based on role-specific needs.

8. Cookies and Tracking

Our website uses cookies to enhance user experience and analyze website traffic. You can manage your cookie preferences through our Cookie Policy or your browser settings.

9. Complaints to CNIL

If you believe we have processed your data unlawfully, you have the right to file a complaint with CNIL:

  • Website: www.cnil.fr

  • Phone: +33 1 53 73 22 22

  • Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France

10. Policy Updates

This CNIL Compliance Notice may be updated periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised effective date.

Last Updated: December 5, 2024