WE TAKE GREAT CARE OF YOUR PERSONAL DATA.
This policy (“Privacy Policy”) describes what personal data is collected on users of Nest & Cut (“Users”), while subscribing to the Service, and using it, and how such data is used. You will also find our contact details if you have any questions or concerns about the way your personal data is processed by ALMA.
1. Definitions
For the purposes of this privacy policy, the terms below shall be defined as follows:
- Client: the legal entity having subscribed to the Service.
- Client Representative: the Natural person entitled to approve the Terms and Conditions of Use, as well as this Privacy Policy, on behalf of the Client,
- Data: personal data of the User, as defined under article 4 of GDPR, processed by ALMA for the purposes set in this Privacy Policy
- Service: “Nest&Cut” online application
- Subscription: subscription by the Client to an offer enabling use of the Service
- User: Natural person acting under the authority of the Client, including the Client Representative (as the case may be) and duly authorized to use the Services, under the terms and conditions provided by the Contract. User may also be referred to as “You”, in the following Privacy Policy.
All other terms used in capital shall be used as defined in Nest&Cut’s Terms and Conditions of Use.
2. Who collects and processes User’s Data?
The company in charge of collecting and processing your data (“data controller”) is ALMA, a company incorporated under French law, located15 rue Georges Pérec 38430 ST MARTIN D’HERES, France
3. What personal data is collected on Users, and for which purpose?
We decided to list processing purposes, for each type of Data collected:
| User | Data Collected | Purpose |
| Client Representative | Email address | Subscribing to trial offer or taking out a final subscription to the Service |
| Client Representative | Email address | presenting our offers, products, webinars, software updates
sending quotations, proposals or commercial offers; by email |
| Client Representative | Ip address | Checking localization of the Client, to (i) apply corresponding subscription fee and/or (ii) refuse subscription of Clients in countries under international sanctions
Prevent abusive use of the Service, such as multiple subscriptions of 30-days free trial offers |
| All Users | Email address | Webinar registration |
| All Users | Email address | Creating User Account
User Account Management User Identification (log in, retrieval of lost passwords) |
| All Users | Email address | Management of User’s comments on the Service |
| All Users | Email address | Handling requests for exercising rights on Data |
| All Users | Email address | Giving access to User documentation and User Support
Handling Support requests from Users |
| All Users | Email address | Subscription to Nest&Cut’s newsletter |
4. What is the legal basis for such processing and collection of User’s Data?
Once again, we thought it would be clearer to present such legal basis for each kind of Data processing.
| User | Data Collected | Purpose | Legal Basis |
| Client Representative | Email address | Subscribing to trial offer or taking out a final subscription to the Service | Consent (6.a) GDPR) |
| Client Representative | Email address | presenting our offers, products, webinars, software updates
sending quotations, proposals or commercial offers; by email |
Legitimate Interest (6.f) GDPR) |
| Client Representative | Ip address | Checking localization of the Client, to (i) apply corresponding subscription fee and/or (ii) refuse subscription of Clients in countries under international sanctions
Preventing the repeated use or misuse of trial offers |
Legitimate Interest (6.f) GDPR)
Responding to a request prior to entering a contract (6.b) GDPR) |
| All Users | Email address | Webinar registration | Performance of the Contract (6.b) GDPR) |
| All Users | Email address | Creating User Account
User Account Management User Identification (log in, retrieval of lost passwords) |
Performance of the Contract (6.b) GDPR) |
| All Users | Email address | Management of User’s comments on the Service | Legitimate Interest (6.f) GDPR) |
| All Users | Email address | Handling requests for exercising rights on Data | Compliance with a legal obligation (6.d) GDPR) |
| All Users | Email address | Giving access to User documentation and User Support
Handling Support requests from Users |
Performance of the Contract (6.b) GDPR) |
| All Users | Email address | Subscription to NestCut’s newsletter | Consent (6.a) GDPR) |
5°) Doi we share or transfer User’s Data?
Personal data collected by ALMA under the terms and conditions set forth in this policy. may be transferred to sub- processors, for the purposes of such processing (such as e-mailing,).
Data Hosting
Personal Data are stored and processed electronically on the “Amazon Web Services Global Infrastructure” also known as the “AWS Cloud». Service’s servers hosting personal data are located in Paris, France.
The Client acknowledges and agrees that ALMA may entrust Data Hosting to AWS as a subcontractor. If, for the purposes of delivering the Service, more hosting resources were needed, ALMA may at any time entrust another hosting provider, acting as a subcontractor, with hosting all or part of the Personal Data; subject to informing the Client prior to this change. Such a provider shall give adequate guarantees as to Data security and confidentiality. In any case, ALMA remains liable for any breach of its obligations that may be attributed to one of its subcontractors.
Emailing
Any e-mailing to Users shall be processed by TouchDown, which stores the data in France, their servers being primarily located in France.
ALMA will not transfer Data outside European Union, without User’s consent.
Subject to the exceptions listed above, ALMA does not sell, trade, or otherwise transfer to third parties User’s Data, or all type of content that you may upload or send while using the Service, unless specifically requested by legal competent authorities, under a judicial or administrative order.
6°) Will your data be transferred outside the European Union?
5. How long are User’s Data processed and/or retained?
| User | Data Collected | Purpose | Processing time of Data |
| Client Representative | Email address | Subscribing to trial offer or taking out a final subscription to the Service | Up to 1 year after termination of the Subscription by Client |
| Client Representative | Email address | presenting our offers, products, webinars, software updates
sending quotations, proposals or commercial offers; by email |
Up to 3 years after termination of the Subscription by Client; or after last contact with Client Representative if no Subscription has been taken. |
| Client Representative | Ip address | Checking localization of the Client, to (i) apply corresponding subscription fee and/or (ii) refuse subscription of Clients in countries under international sanctions
Preventing the repeated use or misuse of trial offers |
13 months after Subscription, or each renewal thereof |
| All Users | Email address | Webinar registration | Up to 1 year after closure of User Account |
| All Users | Email address | Creating User Account
User Account Management User Identification (log in, retrieval of lost passwords) |
Up to 1 year after closure of User Account |
| All Users | Email address | Management of User’s comments on the Service | Up to 1 year after closure of User Account |
| All Users | Email address | Handling requests for exercising rights on Data | Up to 5 years after management of User’s request |
| All Users | Email address | Giving access to User documentation and User Support
Handling Support requests from Users |
Up to 1 year after closure of User Account |
| All Users | Email address | Subscription to NestCut’s newsletter | Upon unsubscribing to newsletter by User |
6. How are User’s Data protected?
ALMA commits to ensure the highest protection and confidentiality to your personal data and to implement appropriate technical and organizational measures, on a permanent basis, in order to ensure a sufficient level of protection as required by Data Protection regulations. ALMA chooses its partners, subcontractors and hosting companies based on their ability to guarantee the security of the data entrusted to them, and by regularly ensuring that its partners, subcontractors and hosting companies are able to guarantee this security.
More specifically, ALMA has implemented the following security measures:
- The servers are secured, only ALMA’s personnel are entitled to login.
- Data hosted on servers is backed up every day, with a retention period of 90 days
7. Profiling
ALMA shall not use any personal data collected through its websites for profiling purposes. Profiling is hereby defined as the assessment of certain of your personal features, in order to analyze or predict some of your personal or professional behaviors, interests, health condition or any other actions from your side.
8. Cookies
Under certain circumstances, we may store on your devices some files called “cookies”, in order to offer you some services; to understand your preferences and to optimize our website. Cookies are small text files that contain a unique Id, and that are registered on your devices from a web server. Cookies store information that may be read by the web server which installed it. They are composed a of series of letters and numbers and sometimes other information that allows to identify your computer.
We use the following cookies:
Audience and statistical cookies:
Nest&Cut connects with Matomo which is a web analytics platform used in a way that aligns with the General Data Protection Regulation (GDPR) requirements. GDPR is a European Union regulation designed to protect the privacy and personal data of individuals.
Technical, settings and browsing cookies:
These cookies facilitate your navigation between the different pages of this website. They are also necessary to allow you to benefit from certain functionalities or services (account creation, identification, information entered on certain forms, comment fields, …). These cookies also memorize your usage preferences, display settings and readers that you use to facilitate your navigation during your next visit to our Site.
You may control the cookies of our websites by changing your browser’s settings, in order not to accept any cookies, or to accept them upon request only; or by erasing such cookies when finishing your browser session.
Cookies shall be stored for a maximum period of 13 months from their collection.
9. What are Your rights and how to exercise them?
1°) The right of access to your personal data
You may ask ALMA if we process any data on yourself; what are the purposes of such processing, what are the type of data we process and how long we keep them; who are the recipients of these data. You may obtain a copy of such data in an open format.
2°) The right to rectify your personal data
If you think or observe that your personal data is incorrect, you may ask ALMA to rectify them.
3°) The right to oppose the processing of your personal data
You may at any time oppose the processing of your data by ALMA, if such processing has no longer any legal basis (by sending an email to the address set forth below in 5°) or if you subscribed to our newsletter (by clicking on the “unsubscribe” link).
4)° The right to erasure of your personal data
In the case set forth in 3°) above, your data shall be erased from the file from which they were processed. However, such data may be processed on other grounds, or in other files that ALMA controls or processes Such data shall not be automatically erased unless a request for erasure has been made for these specific files and has been granted by ALMA.
5°) The right to data portability
You may, under the conditions set forth in Section 20 of GDPR, ask for communication, for free, of your personal data in an open and interoperable format. Only “raw data”, that you had provided to ALMA, will be returned to you, within 30 days of your request, unless such request appears to be technically complex, in which case such period may be extended for a maximum of 2 months, which you will be notified of. Any third-party data or data protected by intellectual property rights or business secret shall be excluded from such communication.
6°) Contact for exercising such rights
In order to make any request based on any of the above rights, please write to: ALMA 15 rue Georges Pérec 38430 ST MARTIN D’HERES., or by email to dataprivacy@alma.fr.
You may also use our contact form to send such request.
7°) The right to lodge a complaint with the CNIL
In case of unresolved dispute, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés, at the following address: https://www.cnil.fr/fr/plaintes.
Google Drive
Nest&Cut app uses Google Drive data to create easily new projects in Nest&Cut. Data used are zip files containing geometric files (DXF, DWG, Step, DSTV, SVG, PDF, CSV) and description of properties (json or CSV file). Such data are stored on Nest&Cut cloud infrastructure powered by Amazon Web Services for a maximum of three months, as all projects created in Nest&Cut are, and are not disclosed to any other partner.