PRIVACY AND COOKIES POLICY

PRIVACY AND COOKIES POLICY

LATEST UPDATED: 28 NOVEMBER, 2018

Any data of a personal nature (hereinafter 'personal data') is information that allows you to be identified, as a private individual, either directly (e.g. your surname, first name etc.), or indirectly, particularly by means of a reference number (e.g. your customer reference numbers etc.)

The SDRM is particularly committed to safeguarding your personal data. The Society complies with the legislation in force, as defined by the General Data Protection Regulations of 27 April, 2016 (hereinafter the 'GDPR'), which came into force on 25 May, 2018, and Act No. 78-17 of 6 January, 1978, 'Informatique et Libertés' (French Data Protection Act).

1. USE AND RETENTION PERIODS OF YOUR PERSONAL DATA BY THE SDRM

The personal data collected by the SDRM is processed for the purposes of managing your customer account, collecting mechanical reproduction rights and transactions related to billing, accounting and collection.

This data is processed based on the provisions of the French Intellectual Property Code (hereinafter 'IPC'). The SDRM may also have to process any personal data that you submit when you make contact with the Society. This data is processed based on the SDRM's legitimate interest in responding to requests for information, as well as any other request related to its activities.

Any personal data collected and processed in this context will be kept only for the time necessary to achieve the purpose of the processing in question, plus any applicable limitation period. This data may be shared with the following organisations:

  • SACEM, which carries out various administrative and accounting tasks on behalf of the SDRM, and which shares information with the SDRM related to performance and mechanical reproduction rights;
  • technical service providers for the SDRM site, including OVH and SIGMA, who host and maintain the site www.sdrm.sacem.fr;
  • AGESSA, the body entrusted with the management of social security issues since 1 January, 1978;
  • SOGENACTIF, a secure platform for the online payment of invoices. In addition, the terms and conditions of use that apply specifically to online payments are those published by SOGENACTIF. Please read them before using this platform to make any payments. The SDRM cannot be held responsible for any technical malfunctions of SOGENACTIF.

Personal data collected on the SDRM website is not transferred outside the EU.

The SDRM, a not-for-profit civil society organisation (CSO), does not engage in any commercial activity. Therefore your personal information is not made available, either for free or for payment, to any third parties and is not used for any kind of commercial exploitation.

2. YOUR RIGHTS CONCERNING YOUR PERSONAL DATA

In accordance with the regulations on the protection of personal data, you have:

  • the access right to your personal data that is processed by the SDRM. In this regard, you can obtain confirmation that your personal data has actually been processed by SDRM and, if requested, receive a copy of your data, as well as information on how it has been processed by the SDRM (for more information, please refer to Article 15 of the GDPR or the CNIL website www.cnil.fr);
  • the right to amend your personal data. In this regard, you can request that the SDRM correct any incomplete or inaccurate personal data that it holds (for more information, please refer to Article 16 of the GDPR or the CNIL website www.cnil.fr);
  • the right to delete your personal data. In this regard, you can request that the SDRM delete your personal data in certain situations, for example, when there is no longer any valid reason for the SDRM to hold such data (for more information, please refer to Article 17 of the GDPR or the CNIL website www.cnil.fr) ;
  • the right to restrict the processing of your personal data. In this regard, you can, in certain circumstances, ask the SDRM to stop using your personal data, except if you have already consented to this, or if it is required for the establishment, exercise or defence of any claims in a court of law (for more information, please refer to Article 18 of the GDPR or the CNIL website www.cnil.fr);
  • the right to object to the processing of your personal data for reasons related to your particular situation, even when this processing is based on the legitimate interest of the SDRM or that of a third party. However, the SDRM may deny your request if there are legitimate and compelling reasons justifying this data processing or if it is necessary for the establishment, exercise or defence of any claims in a court of law (for more information, please refer to Article 21 of the GDPR or the CNIL website www.cnil.fr);
  • the right to give instructions on the use of your personal data after your death, for example, to determine how your rights shall apply and by whom (for more information, please refer to Article 40- 1 of the French Data Protection Act or the CNIL website www.cnil.fr);

In order to exercise these rights:

  • if you have a private account, you can view your personal information directly and make a number of changes;
  • you can send your request in writing to the SDRM at the following address:
    SDRM
    225 Avenue Charles de Gaulle
    92528 Neuilly sur Seine Cedex
  • Finally, you can exercise your rights by submitting the form on our site.

However, the SDRM hereby informs you that, when you exercise these rights, it is within its rights:

  • to ask you to provide additional information to confirm your identity or
  • to refuse to process applications that are manifestly unfounded or excessive, in particular if they are repetitive in nature, or will require the payment of reasonable expenses to apply the measures requested, in such a case.

Finally, if you feel, after contacting the SDRM, that your rights are being abused or that any processing carried out by the SDRM does not comply with the regulation for the protection of personal data, you can submit a complaint to the CNIL or any other competent national data protection authority, (in particular, the authority of the European Union Member State in which you usually reside, where your workplace is located, or where a violation of the GDPR has taken place).

3. COOKIES

3.1. What are « cookies » ?

A 'cookie' is a file, usually a small text file, which is downloaded to your browser when you visit a website. This file is stored for a certain period of time on the device from which you accessed the website and your browser will send it to the web server every time you log in.

Cookies have multiple uses: they can be used to store your customer ID for a specific website or even to track your browsing activity for statistical or advertising purposes.

3.2 Cookies used on the website www.sdrm.sacem.fr

The SDRM uses two types of cookies on the site www.sdrm.sacem.fr

3.2.1 Session cookies

Session cookies are only intended to allow the site you are browsing to function in an optimal manner.

On www.sdrm.sacem.fr the following session cookies are used by the SDRM:

Cookie name

Purpose

Retention period

JSESSIONID

A cookie used to manage the user session sites written in Java

It is deleted at the end of every user session

You have the option to block these cookies by changing your browser settings. However, doing so could result in the loss of certain site features and degradation to the user experience.

3.2.2 Visitor Cookies

Visitor cookies allow the SDRM to gather information about how you navigate the site, such as the number of times you have visited the site or the number of pages viewed, in order to compile statistics on visitors' activity on the site.

The following visitor cookies are used on www.sdrm.sacem.fr:

Cookie name

Purpose

Retention period

_ga

This cookie is used by Google Analytics. It makes it possible to measure each separate visit to the site, in order to compile visitor statistics.

13 months

The personal data collected (cookie identifier) are stored by the SDRM for a period of 13 months.

3.3 How to accept or block cookies

The SDRM website uses OneTrust's centralised privacy management software solution. To set which cookies can be downloaded to your device, click on the following link: Preferences.