Privacy Policy | PM Studio Paris

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration. Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

38 rue Jean Mermoz
75008 PARIS
France
Phone: +33156436894
E-mail: france@pm-st.com

You can reach our data protection officer at:

CAS Datenschutz GmbH & Co. KG
Bürgermeister-Mahr-Str. 14
63179 Obertshausen
Germany
Phone: +49 6104 9808-0
E-mail: dataprotection@pm-g.eu

Duration Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

You can contact us by email, telephone, or letter, which may involve the processing of personal data. We process your data for the purpose of handling and processing your request. We will not disclose your data to third parties without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of iconquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

When you contact us by email, we store your email address and the information contained in the email. If you contact us by letter, your sender address and the content of the letter will be stored. If you contact us by telephone, we will collect personal data depending on the individual case.

We store your data until you request us to delete it or until the purpose of processing (the processing of your request) has been fulfilled.

When you apply for a job with us, your personal data will be processed. The legal basis for processing is Art. 6 (1) (b) GDPR in connection with the implementation of pre-contractual measures. If your data is required after the application process has been completed in order to defend against legal claims, processing will be carried out on the basis of our legitimate interest in a duty of proof in accordance with Art. 6 (1) lit. f GDPR, for example in connection with the Equal Treatment Act.

We process the data that you have provided to us in your application and that we need to assess your suitability for the position in question.

The purposes of the processing are to manage your application, assess your suitability for the vacant position, and contact you in connection with your application or possible alternative positions.

We delete your data after six months. If you have agreed to be included in the applicant pool, we will delete it after two years, if you don’t withdraw your consent before that. If your application leads to employment, we will store your data for the duration of your employment with us.

We maintain online profiles on the following social networks (hereinafter referred to as “social media”) in order to communicate with customers, interested parties, and the public and to draw attention to our services:

• Instagram (Meta Platforms, Inc.)
• LinkedIn (LinkedIn Ireland Unlimited Company)

For information on the scope and purpose of data processing, please refer to the applicable privacy policies of the respective networks:
• Instagram: (https://privacycenter.instagram.com/policy)
• LinkedIn: (https://de.linkedin.com/legal/privacy-policy?)

Processing is carried out on the basis of Art. 6 (1) lit. f GDPR, as we have a legitimate interest in contemporary public relations work. If consent is required, processing is carried out on the basis of Art. 6 (1) lit. a GDPR.

If you provide additional data (e.g., personal messages) to the services, your consent is generally required. Please note that we have no influence on data processing by social media providers. If you have any questions or wish to exercise your rights as a data subject (e.g., information, deletion), please contact the respective platform operator directly.

You can subscribe to or unsubscribe from our social media profiles at any time. If you do not want social media service providers to collect data about your visit to our profiles, please use the deactivation options (e.g., log out, advertising tracker blocking) in your user account or install appropriate browser add-ons.

As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):

You have the right to request information about what personal data is stored about you, for what purpose it is processed, from whom it was received or to whom it is disclosed, and how long it will be stored.

You can request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.

You have the right to request the restriction of the processing of your personal data, for example if you dispute the accuracy of the data or if the processing is unlawful but you request restriction instead of erasure.

You can request that the personal data concerning you that you have provided to us be transmitted to you in a structured, commonly used and machine-readable format – or that we transfer this data directly to another controller.
‍

You have the right to object to the processing of your personal data at any time, provided that the processing is based on the legitimate interests of our company or on a task that is in the public interest. In the event of a justified objection, we will cease processing unless there are compelling legitimate grounds for the processing.
‍

If you have given us your consent, you can withdraw it at any time for the future without giving reasons.
‍

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
‍

The servers of our website are operated by the provider Webflow, Inc. We have concluded an order processing contract with the provider in accordance with Art. 28 GDPR. The legal basis for the use of external hosting is the fulfillment of a contract with our potential and existing customers in accordance with Art. 6 para. 1 lit. b GDPR and our legitimate interest in the secure and high-performance provision of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Each time our website is accessed, our system's web server collects information from the end device used. We collect the following data:

• Information about the browser type• Operating system of the user's device
• Date and time of access
• The previous website from which the user accessed our websites (referrer)

We only collect IP addresses anonymously, so we do not store any personal data in our log files within the meaning of the GDPR.
‍

We use the 'Amazon CloudFront' service on our website to efficiently deliver content and improve website performance. The provider is Amazon EU S.à r.l. ("Amazon"), 38 avenue John F. Kennedy, L-1855 Luxembourg.

The legal basis for the use of Amazon CloudFront is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to optimize the performance and delivery speed of our website content and improve user experience.

The data processed by Amazon CloudFront includes your IP address, location, time of visit, device information, information on website interaction, and it may set cookies to optimize content delivery.

The purpose of data processing is the efficient delivery and optimization of website content through a global content delivery network (CDN).

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Amazon that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Amazon is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.

Further information on the privacy policy of Amazon CloudFront can be found at: https://aws.amazon.com/compliance/data-privacy-faq/
‍

We use the 'jsDelivr' service on our website to deliver and optimize static assets such as JavaScript libraries and CSS files. The provider is Volentio JSD Limited ("Volentio"), Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom.

The legal basis for the use of jsDelivr is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to ensure the fast and reliable delivery of website resources and improve the performance and user experience of our website.

The data processed by jsDelivr includes your IP address, browser type, operating system, and request details such as the time and content requested; jsDelivr does not set cookies.

The purpose of data processing is to deliver website assets such as JavaScript libraries efficiently via a content delivery network (CDN).

Further information on the privacy policy of jsDelivr can be found at: https://www.jsdelivr.com/terms/privacy-policy
‍

We use the 'Webflow' service on our website to design, build, and host our web pages. The provider is Webflow, Inc. ("Webflow"), 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.

The legal basis for the use of Webflow is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to provide a visually appealing and user-friendly website by utilizing modern web design and hosting services.

The data processed by Webflow includes your IP address, device and browser information, usage data such as pages visited and actions taken, and may include cookies for functionality and analytics purposes.

The purpose of data processing is to provide website building, hosting, and content management services, including the storage and management of website data and user interactions.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Webflow is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Webflow that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.

Further information on the privacy policy of Webflow can be found at: https://webflow.com/legal/privacy

Information about the cookies used can be found at: https://webflow.com/legal/cookie-policy
‍

We use the 'Cloudflare' service on our website to enhance security, performance, and reliability. The provider is Cloudflare, Inc. ("Cloudflare"),101 Townsend St., San Francisco, CA 94107, USA.

The legal basis for the use of Cloudflare is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to improve website performance, enhance security, and protect our website from malicious attacks.

The data processed by Cloudflare includes your IP address, system configuration information, device information, log data, and may include cookies to enhance security and performance.

The purpose of data processing is to enhance website security, performance optimization, and protection against malicious traffic.

Cloudflare states that logs are typically retained for up to 7 days by default. You can find this information in Cloudflare's official privacy policy under the section 'Data retention': https://www.cloudflare.com/privacypolicy/

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Cloudflare is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Cloudflare that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.

Further information on the privacy policy of Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/

Information about the cookies used can be found at: https://www.cloudflare.com/cookie-policy/
‍