Privacy Policy
Updated : April 2024
MEDIA GROUP SAS, with a capital of €10,320, registered under number SIREN 821030574, 10 RUE DE LA BOURSE 75002 PARIS – France (hereinafter "MEDIA GROUP") operates the website accessible at the following address: the Site.
At MEDIA GROUP, we attach great importance to the protection of your personal data. When you entrust us with your information, we undertake to treat it with the utmost care and provide you with a transparent explanation of how we collect and use it.
The main purpose of this Privacy Policy is to provide you with a clear and simple explanation of why we collect and use your information when you use our services. In addition, we would like to inform you about the options available to you to control the use of your data, your rights towards them, and how to exercise them. At MEDIA GROUP, we are firmly committed to two fundamental principles:
- You retain complete control over your data;
- Your personal data is processed in a transparent, confidential and secure manner.
Respect for your privacy and your personal data is our priority, and we undertake to process your data in accordance with the Data Protection Act of 6 January 1978 (also known as "LIL"), as amended, as well as the Regulation (EU) General on Data Protection of 27 April 2016 (known as "GDPR").
Explanations / FAQ
What is personal data?
A personal data corresponds to any information relating to a user that makes it possible to identify him, whether directly or indirectly.
- Example #1 : Your name, surname and/or email address are examples of personal data that allow direct identification.
- Example #2 : Your phone number is an example of personal data that allows indirect identification.
What is a Treatment?
The term "Processing" refers to any operation or series of operations carried out on personal data, regardless of the method used. This includes collecting, recording, organizing, preserving, adapting, modifying, extracting, consulting, using, transmitting, disseminating, or otherwise making available, as well as the reconciliation or interconnection, locking, erasure or destruction of personal data.
1. SOME PREALABLE DEFINITIONS
The terms mentioned below have the following meanings in this Privacy Policy:
- Subscription: refers to the paid monthly subscription to which our customer has the opportunity to subscribe on the Site.
- Client: The term "co-contractor" of MEDIA GROUP may have two distinct qualities in accordance with French law and jurisprudence. On the one hand, it can be considered as a "consumer", which means a natural person acting for purposes not related to a commercial, industrial, craft, liberal or agricultural activity. On the other hand, it can be described as "professional", thus including natural or legal persons, whether public or private, who act in the context of their commercial, industrial, craft, liberal or agricultural activity, including when acting in the name or on behalf of another professional. Professional clients include companies and self-employed persons. The term "Customer" is used interchangeably to designate any user who makes a single purchase, benefits from the trial offer or subscribes on the site.
- Order: refers to the purchase of Products by a Customer on the Site.
- Data or Personal Data: refers to the personal data allowing to identify directly or indirectly a User and being the subject of Processing within the framework of this Privacy Policy, as defined in Article 4(1) of the GDPR.
- Personal space: refers to the interface hosted on the Site in which is grouped all the data provided by the Customer and allowing him to access the Site and the Services. Access to the Personal Space is made through the Identifiers, from the "My account" section of the Site.
- Identifiers: refers to the Customer’s email address and password, necessary for access to the Personal Space on the Site.
- Delivery: means the first presentation of the Products ordered by the Customer at the delivery address of the recipient indicated during the Order.
- Products: refers to all the products marketed by the company MEDIA GROUP on the Site, namely different Saas solutions to create dynamic and non dynamic QR Codes. Products may be ordered as part of a Subscription.
- General Data Protection Regulation or GDPR: refers to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the Processing of Personal Data and the free movement of such Data.
- Data Controller: means the person who determines the means and purposes of the Processing in accordance with Article 4(7) of the GDPR.
- Services: refers to services that include digital services offered as part of the Subscription.
- Site: means the Site published by the company MEDIA GROUP accessible at the following address: https://www.iloveqr.com. The Site includes all web pages and functionalities accessible to Users.
- Processor: means the natural or legal person, public authority, service or other body that Processes Personal Data on behalf of and under the instructions of the Data Controller in accordance with Article 4(8) of the GDPR.
- Processing/Processing: refers to any of the operations referred to in Article 4(2) of the GDPR, carried out on Personal Data in the context of the execution of this Privacy Policy.
- User: refers to any person who accesses and navigates the Site, whether Customer, subscriber or not, or simple user.
This Privacy Policy is intended for all users who visit and browse the site. Its main purpose is to provide information to the user on how his data may possibly be collected and processed by MEDIA GROUP.
LEGAL REMINDER:
The term "Data Controller", in accordance with the LIL and the GDPR, refers to the person who determines the methods and objectives of data processing. When several Data Controllers collaborate to jointly determine the objectives and methods of the processing, they are referred to as "joint controllers" of the processing, or co-controllers.
The "Processor" is an entity that processes personal data on behalf of the Controller, acting under the authority and in accordance with the instructions of the latter.
The Controller of your personal data is MEDIA GROUP SAS, registered under number 821030574, whose registered office is located at 10, rue de la Bourse, 75002 Paris, France.
If you have any questions regarding the management and use of your personal data, you can contact MEDIA GROUP SAS in one of two ways:
- By e-mail to legal@iloveqr.com
- By post to MEDIA GROUP SAS – 10 rue de la Bourse 75002 Paris - FRANCE.
2. HOW DO WE COLLECT YOUR DATA?
All data relating to the user is obtained directly from him, for example during his registration on the site or during interactions with MEDIA GROUP, such as contact requests or the preparation of his QR Code, etc.
3. WHAT ARE THE PURPOSES AND LEGAL BASES OF THE TREATMENTS WE IMPLEMENT?
When we base our data processing operations on the pursuit of a legitimate interest, you have the right, as a data subject, to request additional information regarding the assessment of that interest, upon request.
In any case, MEDIA GROUP SAS only collects personal data strictly necessary for clear and defined purposes, listed below:
| PURPOSE | DETAILS OF THE PURPOSE PURSUED | LEGAL BASES |
|---|---|---|
| Management of contact and information requests | Processing of information requests, responses to information requests, follow-up of requests, informative follow-up. | Contractual, the Processing is necessary for the performance of a contract or pre-contractual measures. |
| Management and monitoring of personal spaces and contracts | Registration of Users, creation of the Personal Space, management of contracts as part of a Subscription. | Contractual, the Processing is necessary for the performance of a contract or pre-contractual measures; User consent when required. |
| Order Management and Product Delivery | Management of Orders, commercial follow-up, management of Delivery of Products (information and terms of delivery). | Contractual, the Processing is necessary for the performance of a contract or pre-contractual measures; User consent when required. |
| Provision of Services | Provision of Services as part of the Subscription | Contractual, the Processing is necessary for the performance of a contract or pre-contractual measures; User consent when required. |
| Payment management | The payment of the Products ordered, the monitoring of invoicing, the keeping of accounting records and legal documents. | Legal obligation arising from Articles L102 B and following of the Tax Procedures Book. |
| Contract archiving | Archiving of contracts concluded between the Client and MEDIAZ GROUP SAS for an amount greater than 120 € TTC. | Legal obligation arising from Article L.213-1 of the Consumer Code. |
| Customer Experience | Management and publication of customer reviews | Consent of the User. |
| Sending news and commercial offers | Management of subscriptions to the newsletter, sending commercial offers. | Consent of the User. |
| The proper functioning and continuous improvement of the Site. | Ensure the proper functioning and permanent improvement of the Site and its functionalities (necessary update: addition of new functionalities, adaptation to technical evolutions, etc.). | Our legitimate interest in ensuring the best level of operation and quality of the Site through statistics of visits; The User’s Consent when required. |
| Management of requests for rights under the GDPR and the amended Data Protection Act | This Processing covers all the operations necessary to follow up rights requests sent to MEDIA GROUP SAS (qualification of the request, investigations, carrying out specific technical operations, etc.). It only concerns cases where MEDIA GROUP SAS acts as Data Controller | Legal obligation arising from the GDPR and the Data Protection Act. |
MEDIA GROUP may also use this personal data to comply with legal or regulatory obligations.
In any case, MEDIA GROUP will take all necessary measures to guarantee the security and confidentiality of the personal data entrusted to it within the framework of each specific purpose, while scrupulously respecting the laws and regulations in force.
4. WHAT DATA IS COLLECTED?
In our interactions with users, we specify whether the provision of personal data is mandatory or optional, as well as the possible consequences of a failure to respond.
Below is an overview of the data we may hold about you. Please note that this list is not exhaustive and is primarily intended to inform you about the categories of data that MEDIA GROUP may process.
| TREATMENTS | PERSONAL DATA COLLECTED |
|---|---|
| Management of contact and information requests | Civility, Name, First name, Email address. |
| Management and monitoring of personal spaces and contracts | Civility, Name, First name, Age and if applicable, proof of identity, Quality of the Customer (Consumer or Professional), Email address, Telephone, Mailing address, Login credentials (login, password). |
| Order Management and Product Delivery | Civility, Name, First name, Email address, Phone number, Mailing addresses, Order number. |
| Provision of Services | Civility, Name, First name, Email address, Phone number, Mailing addresses. |
| Payment management | Payment data (credit card number, expiry date, cryptogram), Data required for invoicing (billing address). |
| Contract archiving | Civility, Name, First name, Archive number. |
| Customer Experience | Civility, Name, First name, Email address, Identifiers (login). |
| Sending news and commercial offers | Email address |
| The proper functioning and continuous improvement of the Site | Data collected via cookies and other trackers on our Site. For more details, see our cookie policy: https://iloveqr.com/cookie. |
| Management of requests to exercise rights | Last name, first name, Email address. If applicable, copy of proof of identity. |
In any case, MEDIA GROUP undertakes to Process all the Data collected in accordance with the GDPR and the Data Protection Act.5.
WHO CAN ACCESS YOUR PERSONAL DATA?
As part of their respective responsibilities and in accordance with the purposes stated above, the main parties likely to access your data are:
- The authorized personnel of MEDIA GROUP.
- The service providers in charge of the management, hosting the site and the IT infrastructure of MEDIA GROUP.
- The service providers responsible for managing payments (bank).
- Where applicable, the authorised personnel of our subcontractors. - Where appropriate, judicial authorities, mediators, accountants, auditors, lawyers, bailiffs, debt collection agencies, police or gendarmerie authorities in the event of theft or judicial requisition.
- Third parties likely to place cookies on your devices (computers, tablets, smartphones...) when you have consented.
Your data will not be disclosed, exchanged, sold or rented to anyone other than those mentioned above without your express prior consent in accordance with applicable laws and regulations.6.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We keep your Personal Data only for the time necessary for the purposes pursued, as described above, and summarized in the table below.
| TREATMENTS | DURATION |
|---|---|
| Management of contact and information requests | For the duration necessary for the Processing of the request and then storage in intermediate archiving for three (3) years at the end of the contractual relationship, or for three (3) years after the last contact with MEDIA GROUP. |
| Management and monitoring of personal spaces and contracts | For the duration of the contractual relationship and storage in intermediate archiving during the current limitation period (five (5) years for the purposes of proof). |
| Order Management and Product Delivery | For the duration of the contractual relationship and storage in intermediate archiving during the current limitation period (five (5) years for the purposes of proof). The accounting documents are also kept for 10 years. |
| Provision of Services | For the duration of the contractual relationship and storage in intermediate archiving during the current limitation period (five (5) years for the purposes of proof). The accounting documents are also kept for 10 years. |
| Payment management | For payments by credit card, in accordance with Article L.133-24 of the French Monetary and Financial Code, these Data may be kept for the purpose of proof in the event of any dispute or complaint, in intermediary archives, for a period of thirteen (13) months following the debit date (extended to 15 months for deferred debit payment cards). The Data relating to the visual PAN and cryptogram are not stored and the Data relating to the expiry date are deleted when its expiry date is reached. Invoices and accounting data issued are kept ten (10) years from their issuance. |
| Contract archiving | Contracts concluded between the Client and MEDIA GROUP SAS in the amount of more than 120 € TTC are retained for a period of ten (10) years in accordance with Article L.213-1 of the French Consumer Code. |
| Customer Experience | The Data is kept for three (3) years from the date of publication of the notice on the Site. |
| Sending news and commercial offers | The Data are kept until the withdrawal of consent (unsubscription by the link provided for this purpose) or, if necessary, for the duration of the contractual relationship, then stored in intermediate archiving for three (3) years at the end of the contractual relationship, or for three (3) years after the last contact with MEDIA GROUP SAS. |
| The proper functioning and continuous improvement of the Site. | The retention period of the various cookies installed by MEDIA GROUP SAS is detailed in the cookies charter accessible at: https://www.iloveqr.com/cookie. |
| Management of requests to exercise rights | The Personal Data relating to the management of requests for rights are kept for the duration necessary for the Processing of the request and then stored in intermediate archiving during the applicable period of penal limitation, namely six years, in intermediate archiving (Art. 8 of the Code of Criminal Procedure). |
7. WHAT ARE YOUR RIGHTS REGARDING PERSONAL DATA?
In accordance with the Data Protection Act and the GDPR, you have several rights relating to your Personal Data:
- Right of access (article 15 GDPR), rectification (article 16 GDPR), updating, completeness of your Personal Data (more);
- Right to lock or erase your Personal Data (Article 17 GDPR), when it is inaccurate, incomplete, ambiguous, outdated, or where the collection, use, communication or storage is prohibited (more);
- Right to withdraw your consent at any time (Article 13-2c GDPR);
- Right to portability of the Personal Data you have provided to us, where your Personal Data is subject to Automated Processing based on your consent or a contract (Article 20 GDPR);
- Right to determine the fate of your Personal Data after Your death and to choose whether or not we disclose your Personal Data to a third party you have previously designated (Article 85 LIL) (more).
These rights may be exercised by:
- Email: contact@iloveqr.com;
- By post to: MEDIA GROUP SAS – 10 rue de la Bourse 75002 Paris - FRANCE.
Finally, you can also lodge a complaint with the supervisory authorities and in particular the CNIL (https://www.cnil.fr/en/plaintes).
8. WHAT ABOUT LOGIN DATA AND COOKIES AND OTHER “TRACKERS”?
MEDIA GROUP SAS makes use on its Site of connection data (date, time, Internet address, protocol of the visitor’s computer, page consulted) and cookies (small files saved on Your computer) allowing to identify you, to remember your consultations, and to benefit from audience measurements and statistics of the Site, in particular relating to the pages consulted.
Depending on the purposes, Users may consent, refuse or choose to place certain types of cookies on their terminals.
The methods of placing cookies and the rights that Users have are provided by the Cookies Charter of the Site.
To learn more about cookies (how to manage, delete and identify them), you can consult:
- The website of the CNIL;
- Our cookies policy accessible at the URL
9. IS YOUR PERSONAL DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
In principle, we process your data within the European Union. However, due to the nature of our activities, and subject to informing you beforehand, we may transfer your personal data to countries outside the European Union.
In such cases, MEDIA GROUP SAS will provide you with information on the measures taken to supervise this transfer and ensure its compliance with the applicable data protection standards.
10. WHAT SECURITY MEASURES ARE IN PLACE TO PROTECT YOUR DATA?
MEDIA GROUP is firmly committed to implementing all appropriate technical and organizational measures to ensure the security of data processing and the confidentiality of your data, in accordance with the amended Data Protection Act and the GDPR.
With this in mind, MEDIA GROUP takes appropriate precautions depending on the nature of your data and the risks inherent in processing, in order to preserve their security. This includes measures such as physical protection of premises, implementation of user authentication procedures with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain data, and many more.
11. UPDATED PRIVACY POLICY
We may periodically revise this Privacy Policy to reflect various changes, whether due to updates in our data processing practices or for other operational, legal or regulatory reasons.
We therefore encourage you to consult it regularly to stay informed about the use of cookies and related technologies. The date displayed at the top of this Privacy Policy indicates the date of the last update.