IFSCC 2025


General Data Protection Regulation (GDPR)

Privacy Notice regarding the Protection of Personal Data.


The company QUINZE MAI (SASU WITH A CAPITAL OF 3,070,884.00 Euros - RCS NANTERRE 302 382 858 - 42 rue Barbès - 92120 MONTROUGE) hereinafter referred to as « QUINZE MAI ».

QUINZE MAI is particularly concerned with respecting individuals' privacy and ensures that their personal data is processed in accordance with best practices in privacy and the applicable legislation on data protection, notably Regulation (EU) 2016/679 (hereinafter the "GDPR") and the French Law No. 78-17 of January 6, 1978 on Data Processing, Files, and Liberties, as amended (hereinafter the "Data Protection Law").

This Privacy Notice regarding the processing of personal data (hereinafter the "Notice") aims to communicate the commitments made by QUINZE MAI for the protection of personal data processed and to inform you about your rights in this regard.

 WHAT IS THE ROLE OF QUINZE MAI? 

As a reminder, the GDPR and the Data Protection Act define:
• The data controller as the person who determines the purposes and means of the processing,  
• The processor as the person who processed personal data on behalf of the data controller, 
• Joint controllers as two or more controllers who jointly determine the purposes and means of processing. 

As part of the processing of personal data collected, QUINZE MAI acts as the data controller

 WHAT PERSONAL DATA IS PROCESSED BY QUINZE MAI, AD FOR WHAT PURPOSES? 

 QUINZE MAI processes or may process the following categories of personal data: 
• Personal identification data: salutation, first name, last name, email address, phone number;
• Personal data related to professional life: employer's company name, business address, type of organization, industry sector, job title, department, involvement in the purchasing process, purpose related to participation in the event; 
• Personal data related to personal or professional life;
• Personal data related to the event: date and time of participation, information collected during the attendee badge scan by the organizer or exhibitor, including at booths, activity zones, or speaking areas visited.

These personal data are processed by QUINZE MAI to achieve the following purposes: 
• Management of attendee relations during the event;
 Communication of personalized content related to professional activity or profiles via newsletters, satisfaction surveys. 
 WHAT IS THE LEGAL BASIS FOR THE COLLECTION OF PERSONAL DATA BY QUINZE MAI? 

The processing is necessary for the performance of a contract with you (acceptance of the terms and conditions to access the congress);
The processing is necessary for the purposes of our legitimate interests (customer relationship management, prospecting, fraud prevention, or ensuring the security of our network and IT system information, conducting statistical studies);
The processing is based on your consent (sharing your personal data with partners or exhibitors).

DOES QUINZE MAI SHARE YOUR PERSONAL DATA? 

Internal recipients: your personal data may be processed by internal staff at QUINZE MAI, who are subject to confidentiality obligations.
External recipients: your personal data may also be shared by QUINZE MAI with the following external recipients:

RECIPIENT COMPANYPURPOSE
LEGAL BASIS FOR TRANSFER
Administrative authorityLegal obligation or procedure.Legal obligation.
Accounting, legal, and advisory firmsAccounting, legal, and advisory services.Legitimate interest.
Exhibitors at the event (list of exhibitors available on the event website)Emailing information/updates.Consent from participants who presented their badge at the exhibitor's booth.*
Customer: Société Française de CosmétologieEmailing/updates.Consent (opt-in at event registration).
Partners of QUINZE MAI (**)Emailing/updates.Consent (opt-in at event registration).
INWINKHosting of personal data for event registration.Execution of the contract (Terms and Conditions)
OVHHosting of websites.Execution of the contract (Terms and Conditions)
SarbacaneEmailing activity management tool.Execution of the contract (Terms and Conditions)
On-site registration provider - INWINKBadge creation tool before and during the event.Execution of the contract (Terms and Conditions)
(*) In the case of distribution to a list of partners, the updated list of these partners will be available online on the event website.
(**) QUINZE MAI draws your attention to the following point: during the congress, when visiting an exhibitor's booth, you have the option to present your badge to be scanned by the exhibitor. By doing so, you consent to the transfer of your personal data (salutation, first name, last name, organization, job title, email phone number) to the exhibitor, so that they can send you their updates.

In order to provide its products and services, QUINZE MAI may use service providers located outside the European Union. If a transfer occurs to a third country where the legislation has not been recognized as offering an adequate level of protection for personal data, QUINZE MAI ensures that the necessary measures are put in place in accordance with the French Data protection Act and the GDPR.
HOW DOES QUINZE MAI PROTECT YOUR PERSONAL DATA? 

QUINZE MAI uses appropriate technical and organizational measures designed to protect the personal data processed.
As the data controller, QUINZE MAI takes the necessary steps to ensure the confidentiality and the security of the personal data processed, in accordance with best practices in privacy and the applicable data protection legislation.

FOR HOW LONG DOES QUINZE MAI KEEP YOUR PERSONAL DATA? 

Your personal data is kept for a period of three years from the date of collection or the last contact from you. For example, a visit to an event, a request for documentation, or a click on a hyperlink in an email sent by QUINZE MAI (simply opening an email is not considered by QUINZE MAI as contact from you).

DOES QUINZE MAI USE PROFILING TECHNIQUES? 

When QUINZE MAI sends personalized content, it may use certain techniques known as "profiling" (defined as any form of automated processing of personal data, involving the use of such data to evaluate certain personal aspects related to an individual, particularly to analyze or predict elements concerning personal preferences, interests, financial situation, behavior, location, health, reliability, or movements of that individual). We centralize certain personal data about you and analyze it to assess and predict your personal preferences and/or interests. Based on this analysis, we send or display communications and/or content tailored to your interests/needs. You have the right to object to the use of your data for "profiling" purposes (see below).
WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

In accordance with the French Data Protection Act (Informatique & Libertés) and the GDPR, you can exercise the following rights at any time: 
Right of access: you can request information from QUINZE MAI about the processing of your data and a copy of the data held about you.
• Right of rectification: you can request the correction of inaccurate or incomplete data about you held by QUINZE MAI.
Right to erasure: you have the right to request that QUINZE MAI erase your data when one the reasons specified by the regulations applies (e.g., when the data is no longer needed, or if you withdraw your consent for processing based on consent,...).
• Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of your data, including for direct marketing purposes. You can unsubscribe or opt-out of receiving marketing communications from QUINZE MAI at any time by simply clicking the "unsubscribe" link in any email or communication sent to you by QUINZE MAI.
• Right to data portability: you have the right to receive your data in a machine-readable format. This right applies only when the data is provided to QUINZE MAI by you or results from your use of its services. The data must be processed based on your consent or the performance of a contract.
• Right to restriction of processing: you can request the suspension of processing of your data when one of the reasons specified by the regulations applies (e.g., disputing the accuracy of the data,...).
• Right to object to profiling: you can object to profiling by contacting QUINZE MAI using the contact details below.

You are informed of the possibility to address any request related to your rights and personal data, and to decide on the location of your personal data after your death, to the Data Protection Officer at the following address: data@15-mai.com, with a copy to the DPO (Data Protection Officer) at  data-privacy@groupe-nehs.com.

Finally, you have the right to bring any concerns regarding the processing of your personal data to a competent supervisory authority, particularly in the EU Member Stat of your habitual residence, place of work, or the place where you believe a breach of your rights has occurred.

In France, the data protection authority is the Commission Nationale de l'Informatique et des Libertés, or "CNIL" - 3 Place de Fontenoy - TSA 80715 - 75 334 Paris Cedex 07.