Automated Decision Making and Profiling

When processing your Personal Data, we do not use processes that involve automated decision making or profiling.

How long do we keep your information?

We keep Personal Data for as long as is necessary for the purposes described in this Privacy Notice, complying with legal and regulatory obligations, protecting our or other’s interests, and as otherwise permitted or required by law. When Personal Data is no longer necessary for or compatible with these purposes, it is removed from our systems in accordance with our internal retention policies. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide the Website or our maintain related communications with you;

• Two years from the time of our last communication with you;

• Where the Personal Data has been de-identified, anonymized, and/or aggregated, it may be retained indefinitely; and/or

• Whether there is a legal obligation to which we are subject.

Your rights and choices regarding your Personal Data

Your rights will depend on the data protection law that applies to your specific context, determined by the country/territory in which you reside.

1. The right of access: 

You can access all Personal Data we hold about you and obtain a copy in an understandable format.  Upon your request, we may make known to you the purposes for which your Personal Data is processed, the legal basis for such processing, scope and method of processing, processors or recipients of your Personal Data, and retention limits relating to your Personal Data.

You may use your right to access your Personal Data to control the exactness of the data we hold about you by having data rectified or deleted;

2. The right to rectification:

In order to avoid that inaccurate or incomplete Personal Data relating to you is process or shared, you can ask us to rectify, correct, complete or update your Personal Data; 

3. The right to erasure: 

You may request the erasure or deletion of the Personal Data we hold about you. This is not an absolute right since we may have to keep your Personal Data for legal or legitimate reasons. You may, for example, exercise your right to deletion in the following cases:

(a) if you have withdrawn your consent to the processing (see below);

(b) if you legitimately objected to the processing of your data (see below);

(c) when data is not or is no longer necessary for the purposes for which it was initially collected or processed;

(d) the data is processed unlawfully (e.g., publishing hacked data);

4. The right to object to the processing of your Personal Data:

You may at any time object to our processing of your Personal Data which is not based on your consent, for reasons relating to your personal situation. We may nevertheless, on a case-by-case basis, reject such a request by pointing out legitimate reasons for such exception in accordance with applicable personal data protection laws. 

5. The right to restrict processing:

The right to restrict the processing of your Personal Data means that the data processing relating to you and that we are performing becomes limited, such that we may keep the data, but we cannot use it or process it in any other manner. This right applies in specific circumstances, i.e.:

(a) if you challenge the exactness of your Personal Data. The processing is then limited for a period of time so that the agency may verify the exactness of the Personal Data;

(b) if the processing is unlawful and you object to the erasure of your Personal Data and request instead that its use be limited;

(c) if we do not need the Personal Data for the purposes mentioned above anymore, but you still need it to establish, exercise or defend rights before a Court; and

(d) in the cases where you objected to the processing which is based on the legitimate interests of the agency, you may ask to limit the processing for the time necessary for us to verify if we can accept your objection request (i.e., the time necessary to verify whether the legitimate reasons of the agency prevail over yours).

6. Right to object to data processing for direct marketing purpose

You may unsubscribe or object, at any time and without any justification, to the receipt of direct marketing communications. Simply either (i) click on the link in the footer of the communications you receive from us; or (ii) use the hyperlink above; or (iii) send us an email at the email address set out in the “Further Information” section below with the word unsubscribe in the subject field of the email. 

7. The right to data portability:

If available in your country or territory of residence (e.g. in mainland China, Indonesia, Japan, Philippines, South Korea and Thailand):

(a) You may request to retrieve the Personal Data you provided us with, in a structured, commonly used, and machine-readable format, for personal use or to share them with a third party of your choice.

(b) This right only applies to Personal Data you provided us with, directly or indirectly, and which was processed through automated means, if this processing is based on your consent or the performance of a contract. Please check the list of our Personal Data processing activities’ legal grounds to know whether our processing is based on the performance of a contract or on consent.

8. The right to withdraw your consent to the processing of your Personal Data at any time:

(a) You may read this Privacy Notice in order to identify the purposes for which the processing of your Personal Data is based on your consent.

(b) If you are unsatisfied with the way we process your Personal Data in reliance on your consent, you may withdraw your consent at any time.

(c) We will respond without undue delay and in accordance with any timelines prescribed by applicable personal data protection laws.

If you are dissatisfied with our response to any request made in exercise of your rights above, including where your request has been rejected by us, you may lodge a formal complaint with your local competent data protection authority.

Data Security

We use a variety of methods, such as firewalls, intrusion detection software and manual security procedures, designed to secure your data against loss or damage and to help protect the accuracy and security of information and to prevent unauthorized access or improper use. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you. If you think that the Website or any Personal Data is not secure or that there has been unauthorized access to the Website or your Personal Data, please contact privacyofficer@publicisgroupe.com immediately.

Data Transfers

Due to the international nature of our business, your Personal Data may be transferred outside of the country / territory in which you reside, and the destination may not be considered to have the same level of data protection as your country / territory. While in those jurisdictions, your Personal Data may be accessible to regulatory authorities in accordance with the laws of those jurisdictions. However, we ensure all data transfers comply with applicable legal requirements, including by executing standard contractual clauses. Should you wish to know more about how your Personal Data is protected or wish to request a copy of the contractual protections please contact privacyofficer@publicisgroupe.com.