Privacy Policy

1. Introduction

This Privacy Policy describes how Red Hill (hereinafter referred to as “the Company,” “we,” “our,” or “us”) collects, uses, stores, and protects the personal data of its customers, users, and prospects (hereinafter “you”). Its purpose is to inform you about the data processing activities we conduct in compliance with the General Data Protection Regulation (GDPR) and other applicable French and European legislation.

By using Red Hill’s services or interacting with our website, you agree to the practices described in this Privacy Policy.

2. Identity and Contact Details of the Data Controller

Company Name: Red Hill
Address: 2 rue Léchappé, 78290 Croissy-Sur-Seine
Telephone: 09 72 32 89 92
Email: contact@red-hill.com

The data controller is the natural or legal person who determines the purposes and means of processing your personal data. In our business operations, Red Hill acts as the data controller.

3. Personal Data Collected

We may collect various types of personal data, including:

Identity Data: name, surname, job title, etc.
Contact Information: email address, phone number, mailing address.
Professional Information: company name, position, security-related needs, etc.
Connection Data: browser type, pages visited, visit duration (when using our website).
Financial and Billing Data: bank details, billing information (only within the scope of service provision).

Whether data collection is mandatory or optional is indicated at the time of collection (e.g., via forms).

4. Purposes of Data Processing

We use your data for the following purposes:

Service Provision: To manage and deliver our services.
Customer Relationship Management: To communicate with you, respond to inquiries, process requests, prepare quotes and contracts, etc.
Billing and Accounting: To manage invoices, payments, accounting, and comply with legal and regulatory obligations.
Commercial Prospecting: To send you commercial offers or newsletters, subject to your consent or in compliance with current legislation.
Service Improvement: To assess service performance, conduct statistical analyses, and enhance our website and internal tools.

5. Legal Basis for Processing

We process your personal data only if one of the following conditions is met:

Consent: You have given your consent for data processing (e.g., subscribing to our newsletter).
Contract Execution: Processing is necessary to execute a contract with you or to take pre-contractual steps.
Legal Obligation: We may process your data to comply with legal obligations (e.g., tax and accounting requirements).
Legitimate Interest: We pursue a legitimate interest that does not override your rights and freedoms (e.g., service improvement, security measures).

6. Data Recipients

Internal Services: Red Hill employees who need access to your data to perform their duties (sales team, customer service, technical service, accounting, etc.).
Service Providers and Subcontractors: Certain service providers (hosting, IT maintenance, transport, etc.) may process data on our behalf and under our instructions. We ensure that these third parties provide sufficient data protection guarantees and comply with applicable regulations.
Administrative or Judicial Authorities: We may disclose your data to competent authorities if legally required or to defend our rights.

7. Data Transfers Outside the European Union

We strive to host and process your data within the European Union. However, if some of our providers or subcontractors are located outside the EU, we ensure that adequate safeguards are in place (standard contractual clauses, European Commission adequacy decisions, etc.) to protect your data and maintain an adequate level of protection.

8. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which they were collected and to meet legal or regulatory requirements. For example:

Customer Data: Retained for the duration of the contract, then archived as needed to comply with legal obligations.
Prospects: Retained for three years from the last contact initiated by you.

After these periods, data is either deleted or anonymized.

9. Cookies and Similar Technologies

When browsing our website, cookies or similar technologies may be placed on your browser or device (computer, smartphone, tablet). These cookies are used to:

Ensure the website functions properly (technical cookies).
Measure audience and generate statistics (analytical cookies).
Improve user experience and facilitate navigation.

10. Data Security

We implement appropriate technical and organizational measures to ensure the security of your personal data and protect them from unauthorized access, use, loss, or disclosure. These measures include:

Access control to premises and servers.
Encryption or password protection of certain files.
Firewalls and intrusion detection systems.
Regular backups to prevent data loss.

However, despite our efforts, no method of transmission or electronic storage is entirely secure. We encourage you to take your own precautions to protect your data (e.g., using strong passwords).

11. Your Rights

Under applicable regulations, you have the following rights:

Right of Access: Request access to the data we hold about you.
Right to Rectification: Request correction or update of your data.
Right to Erasure (Right to be Forgotten): Request deletion of your data under certain conditions (e.g., if no longer needed for its original purpose).
Right to Object: Object to data processing based on your specific situation or for marketing purposes.
Right to Restriction of Processing: Request temporary suspension of data processing.
Right to Data Portability: Request your data in a structured, machine-readable format or its transfer to another controller.
Right to Withdraw Consent: When processing is based on consent, you may withdraw it at any time.

To exercise your rights or for any data-related inquiries, please contact us (see Section 13). We will respond as soon as possible, within the legal timeframe of one month (extendable by two months for complex requests).

12. Complaints to the Supervisory Authority

If you believe we are not complying with your rights or data protection obligations, you may file a complaint with the competent supervisory authority. In France, this is the National Commission for Informatics and Liberties (CNIL):

Website: www.cnil.fr
Mailing Address: 3 Place de Fontenoy, 75007 Paris

13. Contact Us

For any questions, additional information, or to exercise your rights, you can contact us:

By email: contact@red-hill.com
By mail: Red Hill, 2 rue Léchappé, 78290 Croissy-Sur-Seine.
By phone: 09 72 32 89 92

14. Changes to the Privacy Policy

We may update this Privacy Policy to reflect changes in legislation, practices, or services. We encourage you to review this page regularly to stay informed of the latest version. In the event of significant changes, we will notify you through a notice on our website or by email.

Last update : 02/01/2025