Applicable To:	Website Users
Issued Date:	June 9, 2025
Version:	1.0
This Version Update Date:	June 9, 2025

3iS Website Privacy Policy

Last Updated: June 9, 2025

This Privacy Policy explains how 3iS (also referred to as “we”, “us”, or “our”) collects, stores, and uses your personal data when you visit www.3is.org (“Website”), complete and submit an online form using our Website, or otherwise reach out to us using contact details from our Website, as well as your rights. As such, this Privacy Policy only relates to your use of the Website.

1. Who We Are

3iS (also referred to as “3iSolution”) is headquartered and registered in France at 97 Rue Sauveur Tobelem 13007 Marseille and is subject to compliance with the French Data Protection Act No. 78-17 of 6 January 1978 (“La loi Informatique et Libertés”) and its amendments, including the European Union General Data Protection Regulation (“EU GDPR”).

We are the controller of personal data obtained via our Website.

2. Information We Collect

Personal Data

We may collect personal data from you when you visit our Website or otherwise engage with us through other means. This may include, but is not limited to information such as:

• Category of data: Data collected when you submit a Contact Us form.
  Details: Your Name, Email, Organization, and any information you include in the Message section.
• Category of data: Data collected when you make a direct enquiry with us to contact details available on our website such as for example info@3is.org or 3iS personnel’s email addresses.
  Details: Your Name, Email, and any information you include in the enquiry.
• Category of data: Data collected when you submit an application in relation to tenders or career opportunities with us either directly on our website or using contact details available on our website.
  Details: This will be dependent on what you submit, but as part of your CV and Cover Letter for example, this will likely include and is not limited to your Name, Date of Birth, Email, Phone Number, Mailing Address, Nationality, Employment History, as well as Education and Qualifications.
• Category of data: Data collected when you sign up for our newsletter.
  Details: Your Name and Email.
• Category of data: Other data collected when you use specific functions on the Website.
  Details: Your activities on, and use of, the Website that reveal preferences or usage history. Please refer to our Cookie Policy for more information. for more information.

Special Category Data

Please note that we do not knowingly or intentionally collect special category data (also known as “sensitive data”) or information about criminal convictions from individuals as part of your use of this Website.

Special category data means information related to personal data revealing racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic data; biometric data (where used for identification purposes); data concerning health; data concerning a person’s sex life; and data concerning a person’s sexual orientation.

If, however, you do submit special category data to us, we will assume that you have done so purposely.

3. Legal Basis

Our legal basis for collecting and using your personal data described above will depend on the type of information and the specific context for which it is collected. However, we will only use your personal data:

• Where you have consented with a positive opt-in;
• Where we need the personal data to perform a contract with you;
• Where we need to comply with our legal and regulatory obligations; or
• Where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.

4. How Long Your Personal Data Will Be Kept

We will not keep your personal data for longer than is strictly necessary for us to achieve the original purpose for which it was collected unless required to do so by law. Unless otherwise stated, we will keep your personal data for up to six years if necessary to comply with any accounting or legal obligations, including the event of pursuit or defence of legal claims. Following the end of the retention period, we will either anonymize or delete your personal data.

5. Who We Share Your Personal Data With

We may share your personal data with our service providers to help us run our business or provide the Website or functionalities on the Website, including developers, cloud storage providers, and analytics functionality. We only allow service providers to handle your personal data if we are satisfied that they have taken appropriate measures to protect your personal data. We also impose contractual obligations on service providers to ensure they can only use your personal data to provide the Website to us and to you. Please refer to our Cookies Policy for more information.

We may occasionally also need to share your personal data with:

• Other legal entities owned by or working on behalf of 3iS who will have entered into a contractual agreement with us;
• Other parties in connection with a significant corporate transaction or restructuring, including a merger, acquisition, or in the event of our insolvency – usually, information will be anonymized but this may not always be possible, however, the recipient of the information will be bound by confidentiality obligations;
• External auditors such as for the audit of our audits and company – the recipient of the information will be bound by confidentiality obligations;
• Professional advisors such as lawyers – the recipient of the information will be bound by confidentiality obligations; or
• Law enforcement agencies, courts or tribunals, and regulatory bodies to comply with legal and regulatory obligations where necessary.

If you would like more information, please contact us (see the “Contact Us” section below).

6. Transferring Your Personal Data to a Third Country

3iS may transfer your personal data outside of the European Union to processors and parties mentioned in the section above “5. Who We Share Your Personal Details With”, including our subsidiaries, or other legal entities owned by or working on behalf of 3iS. Where we do this, we will comply with applicable French laws and the EU GDPR designed to ensure the continued protection and privacy of your personal data.

Under French data protection law, we can only transfer your personal data to a country outside of the European Union where: the European Commission has decided the particular country ensures an adequate level of protection to personal data (known as “adequacy regulation”) further to Article 45 of the EU GDPR; there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you by including Standard Contractual Clauses or Binding Corporate Rules further to Articles 46 and 47 of the EU GDPR; or where a specific exception applies under relevant data protection law.

If you would like more information, please contact us (see the “9. Contact Us” section below).

7. Your Rights

You generally have the below rights, which you can exercise free of charge, but please note that they may not be absolute:

• Right to be informed: Obtain information about the processing of your personal data.
• Right of access: Obtain access to the personal data held about you.
• Right to rectification: Ask for incorrect, inaccurate or incomplete personal data to be corrected.
• Right to erasure: Ask for your personal data to be deleted.
• Right to restrict processing: Ask that the processing of your personal data be restricted in specific cases.
• Right to data portability: Ask for the personal data you provided to us in a machine-readable format or that it be sent to another controller.
• Right to object: Ask that your data no longer be used for direct marketing (including profiling) if applicable or the grounds relating to your particular situation.
• Rights in relation to automated decision-making and profiling: Ask that decisions based on your personal data and that significantly affect you are made by natural persons, not only by computers, where applicable.

For further information on each of those rights, including the circumstances in which they do and do not apply, please contact us (see the “Contact Us” section below).

If you would like to exercise any of those rights, please email privacy@3is.org. When contacting us, please:

• Provide enough information to identify yourself (e.g. your full name) and any additional identity information we may reasonably request from you; and
• Let us know which right(s) you want to exercise and the information to which your request relates.

8. Changes to This Privacy Policy

We may change this privacy policy from time to time. When we make significant changes, we will take steps to inform you, for example, via the Website or by other means such as email.

Contact Us

Please contact us by email if you have any questions regarding this privacy policy or wish to exercise a right under data protection law or to make a complaint.

Our contact details are: privacy@3is.org