Our privacy policy

LEAKMITED, a simplified joint stock company with capital of €2,043.40, registered with the Versailles Trade and Companies Register under number 847 886 199, whose registered office is located at 30b rue du vieil abreuvoir (hereinafter ‘LEAKMITED’) pays particular attention to the protection of personal data and undertakes to protect it in accordance with applicable regulations, in particular Regulation (EU) No. 2016/679 of 27 April 2016 known as the "General Data Protection Regulation or ‘GDPR’ and Law No. 78-17 of 6 January 1978, as amended, known as the ‘Data Protection Act’ (together hereinafter referred to as the ‘Applicable Data Protection Law’).

‍

Within the framework of this privacy policy (hereinafter the ‘Privacy Policy’), LEAKMITED processes certain personal data (hereinafter ‘Personal Data’) of users of the website accessible at <www.leakmited.com> (hereinafter the ‘Site’).

‍

Users of the Website (hereinafter referred to as the ‘Data Subjects’) may be required to provide Personal Data on the Website under the conditions set out in the following article, in which case LEKAMITED would be considered the ‘Data Controller’ within the meaning of the Applicable Data Protection Law.

‍

LEAKMITED undertakes to comply at all times with the requirements of the Applicable Data Protection Law and to process Personal Data only under the conditions set out below.

‍

1. Mapping of personal data processing

LEAKMITED may collect the following Personal Data:

‍

Data concerned:

- email address

- identifying data collected via the contact form: surname, first name, email address, work telephone number, organisation postcode, free text fields

‍

Purpose:

• Email address: communication between the Data Subject and Leakmited
• Identifying data: consent of the Data Subject

Legal basis

• Email address: consent of the Data Subject
• Identifying data: consent of the Data Subject

Retention period

• Email address: 3 years from the last contact
• Identifying data: 3 years from the last contact

In the contact form and in general, the presence of an * after a piece of personal data requested means that the collection of that data is mandatory in order to fulfil the purpose of the processing.

‍

Beyond the aforementioned periods, and in accordance with Applicable Data Protection Law, Personal Data may be archived by LEAKMITED, in a secure environment, for the legal limitation period for the purposes of evidence for the establishment, exercise or defence of a legal claim.

2. Cookies and Plug-in

LEAKMITED uses cookies for the proper functioning of the Website and to track and analyse traffic on the Website. A ‘cookie’ is a small data file sent to the Data Subject's browser by a web server and stored on the hard drive of their computer or other IT device. Cookies do not damage the device in any way.

‍

The information collected through cookies is solely and strictly intended for LEAKMITED, in accordance with applicable data protection regulations. Cookies from third-party publishers allow these publishers to access the information collected through their cookies, in accordance with the terms and conditions specified below.

‍

LEAKMITED uses different types of cookies:

‍

• Cookies that are strictly necessary for the website to function properly. They are generally only set in response to actions taken by the Data Subject on the Website that require a request for services or the completion of forms. The Data Subject may set their web browser settings to block the use of these cookies, but some features of the website will no longer be accessible. These cookies do not store any information that personally identifies the Data Subject;
• Performance cookies, which enable the website to provide features and personalise the user experience based on previous visits and selections;
• Advertising cookies may be used to create a profile of the Data Subject's interests in order to display relevant advertisements on other websites.

When the Data Subject clicks on the ‘In’ icon of LinkedIn Corp., they are redirected directly to the LinkedIn page of Leakmited. If the Data Subject is logged into their LinkedIn account, LinkedIn Corp. may collect browsing data (cookies) without Leakmited having any control over this.

3. Recipients of personal data

Unless legally or judicially required to do so, LEAKMITED will never disclose, transfer, rent or transmit the Personal Data it processes to third parties other than the following recipients:

• LEAKMITED's internal departments to carry out the processing for which the Personal Data has been collected;
• The hosting provider Webflow, whose registered office is located at 398 11th Street, 2nd Floor, CA 94103 San Francisco, whose email address is contact@webflow.com, and whose personal data protection policy is available at the following address: https://webflow.com/legal/eu-privacy-policy.

It is hereby stated that the aforementioned service provider acts as a ‘subcontractor’ of LEAKMITED within the meaning of the Applicable Data Protection Law, on the instructions of the latter, which provides them with the data strictly necessary for the performance of their tasks under the contractual conditions signed with LEAKMITED and in accordance with the Applicable Data Protection Law.

4. Security measures implemented

LEAKMITED will do its best to:

‍

• Ensure the physical and logical security of the servers hosting the Website and, in particular, the integrity of the network and servers against any external malicious acts or known cyber attacks. The servers are protected against intrusion by a firewall. Security updates for operating systems and anti-virus software are installed regularly.

‍

• Implement and maintain security and confidentiality measures for the Website, which take into account the principles of Personal Data protection applicable and are appropriate to the risk posed by their processing to the rights and freedoms of Data Subjects, in accordance with the requirements of Applicable Data Protection Law. These measures are designed to (i) protect Personal Data against destruction, loss, alteration, disclosure to unauthorised third parties and (ii) ensure the restoration of the availability of Personal Data and access to it within appropriate time limits in the event of a physical or technical incident. LEAKMITED also implements a procedure to regularly test, analyse and evaluate the effectiveness of the aforementioned security measures.

5. Transfer of personal data outside the European Union

The Webflow hosting provider is located outside the European Economic Area. As a result, the personal data of Data Subjects may be transferred to third countries (in particular the United States) for the purposes of maintaining the IT equipment of the databases that the service providers process on behalf of LEAKMITED.

‍

The Data Subject is also informed that these companies may be subject to legal, governmental or judicial obligations to disclose data, including personal data, regardless of where such data is hosted.

‍

LEAKMITED ensures at all times that these transfers are carried out under appropriate and suitable conditions of security and confidentiality, guaranteeing a level of protection of the personal data of the Data Subject equivalent to that required within the European Union, in accordance with the Applicable Data Protection Law, in particular by entering into the standard contractual clauses adopted by the European Commission.

‍

It is specified that, as of the date of this Privacy Policy, Webflow is registered on the compliance list of the Data Privacy Framework Programme and therefore undertakes to comply with Applicable Data Protection Law regardless of the signing of any standard contractual clauses.

6. Rights of data subjects regarding their personal data

Data Subjects have the following rights over their Personal Data at any time:

‍

• Right of access: to obtain confirmation that your Personal Data is being processed, as well as certain information about the processing, it being understood that this information is in any case provided in this document;
• Right to rectification: obtain the rectification of your Personal Data when it is inaccurate or incomplete;
• Right to erasure, also known as the ‘right to be forgotten’: to obtain the erasure of Personal Data when it is no longer necessary for the purposes for which it was collected or when the Data Subject objects to the processing of their Personal Data;
• Right to restriction of processing: obtain restriction of the processing of their Personal Data when the Data Subject disputes the accuracy of the data, when the retention period for the Personal Data has expired but the Data Subject still needs to retain this Personal Data for the establishment, exercise or defence of legal claims, or if the Data Subject has objected to the processing;
• Right to portability: obtain the Personal Data that the Data Subject has provided to LEAKMITED in a readable format, or request that LEAKMITED transmit the Personal Data that the Data Subject has provided to another data controller;
• Droit d’opposition : s’opposer à tout moment, pour des motifs tenant à sa situation personnelle, au traitement de ses Données Personnelles, notamment dans le cas où cette opposition concerne de la prospection commerciale, y compris le profilage ;
• Withdrawal of consent: withdraw consent to the future processing of Personal Data by LEAKMITED, where processing is based on consent;
• Right to lodge a complaint: lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés, “CNIL”) if the Data Subject considers that the processing carried out by LEAKMITED constitutes a violation of their Personal Data. The CNIL can be contacted at:
  
  • By phone: +33(0)1 53 73 22 22 ;
  • Via an online form available here: https://www.cnil.fr/webform/nous-contacter 

The rights of Data Subjects regarding their Personal Data may be exercised at any time by contacting LEAKMITED by email at the following address: contact@leakmited.com. 

7. Hyperlinks

The Website may contain hypertext links to third-party websites. LEAKMITED has no control over the content of third-party websites referenced by hypertext links. These websites are published by third-party companies independent of LEAKMITED. LEAKMITED therefore cannot accept any responsibility for the content, advertising, services or any other information or data available on or from these websites. Consequently, the Data Subject acknowledges that they are solely responsible for accessing and using these websites. LEAKMITED cannot be held liable for any proven or alleged damage or loss resulting from or in connection with the use of or reliance on the content, goods or services available on these websites.

‍

The Data Subject is not authorised to create hypertext links to the Website. Links to the Website may only be created with the prior express consent of LEAKMITED.

8. Changes to our privacy policy

This Privacy Policy may be modified, supplemented or updated at any time by LEAKMITED, in particular to take into account any legal, regulatory, jurisprudential and/or technical developments, with the aim of ensuring the best possible protection of the Personal Data of Data Subjects at all times. The Data Subject is invited to consult the Privacy Policy regularly to stay informed about the processing carried out by LEAKMITED on their Personal Data. If the Data Subject does not agree with the terms of the new version of the Privacy Policy, they are free to request the deletion of their Personal Data under the conditions and in accordance with the procedures set out in Article 6 above.