The purpose of this Personal Data Protection Policy is to define the principles and guidelines implemented by Newstone with regard to the processing of personal data of users of websites administered by the company.
The notion of "personal data" or "personal data" corresponds to the definition given by article 4 of the General Regulation of the European Union on data protection (RGPD 2016/679) that is to say any information likely to allow the identification of a natural person directly or indirectly: name, first name, IP address, email address, etc.
Newstone affirms its commitment to compliance with applicable data protection laws and regulations, and is committed to preserving their security, confidentiality and integrity.
Newstone formally undertakes not to sell, rent, trade or give away any personal information free of charge.

1. Scope and exclusion
This Policy applies to all processing of personal data carried out by Newstone from its websites:
• •
This Policy applies to all processing of personal data carried out by Newstone from its websites:
This Policy also covers processing carried out within the framework of: - Recruitment of Newstone employees - Management of Newstone service providers and partners
The legal basis for processing is: - consent for other processing

2. Data collected
The data collected differs depending on the purpose of the associated processing.
• Forms: We collect your contact information (email), zip code, city •

3. Use of collected data
Each data collection is carried out specifically for explicit purposes and clearly referred to on the page of the Site where the data is collected. You will also be informed whether the data requested are necessary or optional for the achievement of the intended purpose, as well as the consequences of not providing the necessary data.
Newstone reserves the right to create additional and / or complementary collection methods. As such, Newstone will specify, in accordance with the regulations, the purposes specific to the processing concerned on the data collection page.
Newstone does not perform any processing that results in fully automated decision-making based on your personal data.
The data collected is used for different purposes:
• Information request form by email: the data collected via the contact form is used for processing your request and for producing statistics. • Connection data: connection data is used to guarantee the security and traceability of personal data. These data are also used for statistical purposes of consultation and visit of our websites. For more information on connection data and information collected through our trackers and cookies (see section III of this policy).

4. Recipients of personal data
There are several types of data recipients:
• the Newstone teams; • subcontractors and partners for the execution of the processing concerned; • where applicable, the judicial and administrative authorities, in accordance with applicable law and regulations.
These categories of recipients are supplemented, where applicable, by categories specific to each processing operation and expressly referred to in the apparent mentions on the data collection page.
The transmissions of personal data to recipients (regardless of their legal nature, subcontractor, data controller or simple recipient) are carried out in a secure manner and in accordance with an agreement between Newstone and each recipient. Newstone is committed to ensuring that each recipient is aware of the guiding principles for the protection of personal data and is subject to them in accordance with the law and / or a specific contract.
List of subcontractors and partners to whom personal data may be transmitted
• Google (for the Google Analytics, Google Maps, Recaptcha services) •

5. Retention period of your data
The retention periods practiced by Newstone comply with the regulations applicable in France on the date hereof, it being specified that some of your data may be kept and used during the periods of limitation provided for by law in the event that legal action arises.
The retention period for personal data differs depending on the processing purposes, for example:
• Contact form: your personal data is kept for 2 years after the last contact.

6. The case of processing carried out for the purposes of managing service providers and partners
Newstone is also required to process Personal Data concerning you when your company is in discussion or has finalized a contract with Newstone as a service provider or partner.
In this context, Newstone will collect information relating to:
- to the contact (s) indicated at Newstone such as the contact indicated on the form, the main referent for the contract, the contact for invoicing and any other contact person: name, first name, address professional email, professional telephone, function, and all the information contained in the exchanges (nature of the request, etc.); - to the signatory (s) of the contract: surname, first name, function, signature.
This Data is intended, as necessary, for employees in charge of monitoring the commercial relationship and / or partnership, accounting / invoicing and employees of the departments involved in the request / contract.
They are collected and stored:
- for requests for quotes not resulting in the conclusion of a contract: the time necessary for the study and follow-up of the request + one (1) year after the closing of the request (or of the last contact as the case applicable); - for contracts and in order to perform the contract: the duration of the contractual relationship; - for the purpose of meeting our legitimate interest in ensuring the protection and defense of our rights in the event of litigation, for five (5) years following the end of the contractual relationship.

7. The case of processing (s) carried out for recruitment purposes
Newstone is required to process Personal Data concerning you when you submit an unsolicited application or when you apply for a posted advertisement. In this context, Personal Data concerning you is collected: - directly from you during the recruitment process; - indirectly with Third Parties for the verification of your diplomas and references, with your agreement.

The Data collected are as follows: last name, first name, email address, telephone, professional experiences as well as all the information that you communicate to us through the transmission of your application and / or your curriculum vitae and / or interviews: photo, skills, level of study, languages spoken, salary expectations, personal address, hobbies, family situation etc. If you give us the contact details of a referral, it is your responsibility to ensure that the referral is informed and has given you their consent. This Data is only collected and stored as part of the management of your application, on the basis of Newstone's legitimate interest and / or your Consent and is not used for any other purpose, particularly commercial.

They are kept: in the event of a positive outcome to an application: the Data relating to an employee are kept for the time of their presence within Newstone and after their departure for the applicable legal retention period - in the event of a negative outcome to an application: two years, unless you object. Your Personal Data will in all cases be destroyed on simple request from you (see the section on how to contact the DPO), within a maximum period of 1 month from your request. These data are processed by employees in charge of recruitment within Newstone only and, incidentally, for technical and logistical reasons, by Newstone's Subcontractors.

8. Security of your data
Newstone is particularly attached to the protection of the personal data that we collect and process. These operations are carried out in a secure manner. We implement the technical, physical and organizational measures necessary to prevent, as far as possible, any alteration, loss or unauthorized access to your personal data.

9. Data storage
Personal data is stored in the European Union in Newstone databases or files or in those of service providers with whom the company has a dedicated contractual relationship.

10. Rights relating to personal data
In accordance with the General Data Protection Regulation 2016/679, you have the following rights: • right of access to your personal data; • right to rectify your personal data if they are inaccurate or incomplete; • right of limitation under the conditions referred to in Article 18 of the GDPR; • right of opposition for legitimate reasons; • right to the portability of your data; • for processing based on consent, to withdraw your consent at any time; • right to erase your personal data if:
- they are no longer necessary for the purposes for which they were collected or otherwise processed; -you withdraw your consent with regard to processing subject to consent; -you validly oppose the processing; -they have been the subject of unlawful processing; -a law requires it.
In accordance with article 40-1 of the Data Protection Act, you also have the possibility of giving directives relating to the storage, erasure and communication of your personal data after your death.

11. Complaints
In the event of a complaint, you can contact our DPO at dpo-stone [a]
or by mail: for the attention of the DPO - NEWSTONE - 8 rue Gounod - 75017 PARIS
You also have, in accordance with European Regulation, the right to lodge a complaint with the CNIL (