Privacy Policy

At FAKS, protecting your personal data is a priority.

When you use the faks.co website (hereinafter the “Website”) and the Faks app (hereinafter the “App”), we collect personal data about you.

The purpose of this policy is to inform you about how we process this data in accordance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”)

1. Who is the data controller?

The data controller is COMMANDES PHARMA, a simplified joint-stock company registered with the Paris Trade and Companies Register under number 881 529 861, with its registered office located at 40 rue de Provence, 75009 Paris(hereinafter “We”) when you use the Website and/or the Application, when you create your customer account, or when managing our contractual relationships.

However, when our client pharmacies and laboratories use our services, we may process personal data on their behalf and for their account, particularly regarding their own teams. In this case, our clients act as data controllers in accordance with Article 4 of the GDPR, and we act as a data processor, in our capacity as a service provider.

2. What data do we collect?

Personal data is any data that allows an individual to be identified directly or by cross-referencing with other data.

We collect data regarding pharmacists and laboratory staff who use the Website and the App.
This data falls into the following categories:
Identification data (including your last name, first name, email address, landline number, and cell phone number);
Data related to your professional life (including the name and address of the pharmacy or laboratory where you work);
Data related to orders placed with laboratories (photos of invoices and delivery notes);
Data contained in communications between pharmacists and laboratories;

Required data is indicated when you provide us with your information. It is marked with an asterisk and is necessary for us to provide our services to you.

3. On what legal basis, for what purposes, and for how long do we retain your personal data?

Objectives

Legal Basis

Shelf life

Allow you to create and manage your account

Performance of a contract you have entered into

The data is retained for the duration of the contractual relationship

Perform customer management tasks related to contracts, invoices, and customer relationship management

Performance of a contract you have entered into

Personal data is retained for the duration of the contractual relationship.

In addition, your data is archived for evidentiary purposes for a period of 5 years.

Build a database of customers and prospects

Our legitimate interest in developing and promoting our business

For customers: Data is retained for the duration of the contractual relationship and is deleted three years after the relationship ends, for marketing purposes. For prospects: Data is retained for three years from the date of your last contact.

Process your requests for demos or information

Our legitimate interest in responding to your requests for demos or information  

The data is retained for as long as necessary to process your request for a demo or information and is deleted once it has been processed.

Comply with the legal obligations applicable to our business

Comply with our legal and regulatory obligations

Regarding invoices: Invoices are retained for a period of 10 years. Transaction data is retained for 5 years.

Manage requests to exercise rights

Comply with our legal and regulatory obligations

If we ask you to provide proof of identity, we will retain it only for as long as necessary to verify your identity. Once the verification is complete, the proof of identity will be deleted.

Compile usage statistics for the app

Our legitimate interest in improving our services and, in certain cases, sharing these statistics with pharmacy groups in order to analyze how their members use the App

The data is retained for a period of three years from the date of collection.

4. Who receives your data?

The following will have access to your personal data:

(I) Our company’s staff;
(II) Our subcontractors: hosting provider, transactional email service provider, CRM tools, payment service provider;
(III) Our partner pharmacies, pharmacy groups, and pharmaceutical companies
(IV) Where applicable: public and private entities, exclusively to fulfill our legal obligations.

5. Is there a possibility that your data will be transferred outside the European Union?

Your data is retained and stored for the entire duration of processing on the Heroku platform, hosted on AWS servers located in Ireland within the European Union.

As part of the tools we use (see the section on recipients regarding our processors), your data may be transferred outside the European Union. The transfer of your data in this context is secured using the following tools:
● either this data is transferred to a country that has been deemed to offer an adequate level of protection by a decision of the European Commission;
● or we have entered into a specific contract with our processors governing the transfer of your data outside the European Union, based on the standard contractual clauses between a data controller and a processor approved by the European Commission;
● or we rely on the appropriate safeguards provided for by applicable regulations.

6. What are your rights regarding your data?

You have the following rights regarding your personal data:
- Right to information: this is precisely why we have drafted this policy. This right is provided for in Articles 13 and 14 of the GDPR.
- Right of access: You have the right to access all of your personal data at any time, pursuant to Article 15 of the GDPR.
- Right to rectification: You have the right to rectify your inaccurate, incomplete, or outdated personal data at any time in accordance with Article 16 of the GDPR
- Right to restriction: You have the right to obtain the restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
- Right to erasure: you have the right to request that your personal data be erased and to prohibit any future collection thereof for the reasons set forth in Article 17 of the GDPR
- Right to lodge a complaint with a competent supervisory authority (in France, the CNIL), if you consider that the processing of your personal data constitutes a violation of applicable laws. (Article 77 of the GDPR)
- Right to establish guidelines regarding the retention, erasure, and disclosure of your personal data after your death, in accordance with Article 40-1 of the French Data Protection Act.
- Right to withdraw your consent at any time: for processing based on consent, Article 7 of the GDPR provides that you may withdraw your consent at any time. Such withdrawal will not affect the lawfulness of processing carried out prior to the withdrawal.- Right to data portability: under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard, machine-readable format and to request its transfer to a recipient of your choice.
- Right to object: pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue to process your data despite this objection, for legitimate reasons or to defend our legal rights.

You may exercise these rights by writing to us at the address below. We may ask you to provide additional information or documents to verify your identity.

7. Contact person for personal data matters

Contact email: rgpd@faks.co
Contact address: COMMANDES PHARMA, 40 rue de Provence, 75009 Paris

8. Changes

We may modify this policy at any time, in particular to comply with any regulatory, legal, editorial, or technical changes. These modifications will take effect on the date the revised version becomes effective. We therefore encourage you to review the latest version of this policy regularly. However, we will notify you of any significant changes to this privacy policy. Effective Date: September 21, 2022

Cookie Policy

1. What is a cookie?

When you browse the faks.co website (hereinafter the “Website”) or our Faks app (hereinafter the “App”), cookies, pixels, and other trackers (hereinafter referred to collectively or individually as “Cookie(s)”) are stored on your browser or device.

A Cookie is a small file, often encrypted, stored in your browser or device and identified by a name. It is placed when you visit a website or use an app. Each time you return to the website or app in question, the Cookie is retrieved from your browser or device. Thus, each time you visit the website or app, your browser is recognized.

The placement of these Cookies may allow us to access your browsing data and personal data about you.

2. Identification of Cookies

We may use advertising, content personalization, social media, or analytics cookies. You will be notified of this during your first visit to the Website and the App that use these cookies. You will then be asked to accept or decline them in accordance with the terms described below.

Technical and functional cookies

Technical and functional cookies are necessary for the proper functioning of the Website and the App and to provide you with our services. They are used throughout your browsing session to facilitate navigation and perform certain functions.

For example, a technical cookie may be used to remember the answers you entered in a form or your preferences regarding the language or layout of the Website and the App, when such options are available.

We use the following technical and functional cookies: None

Advertising cookies

Advertising cookies may be set not only by our Website and our App, but also by other websites and apps that display ads, banners, widgets, or other elements on the page being viewed.

These cookies may be used, for example, to personalize and measure the effectiveness of advertising, or to enable targeted advertising.

We use the following advertising cookies: None

Cookies and Content Personalization

Content personalization cookies allow us to provide you with content that is most likely to match your interests based on your browsing profile. Your browsing profile is determined based on the content you have already viewed.

We use the following content personalization cookies: none

Social media cookies

Social media cookies allow you to share content from our Website and App on social media platforms and to express your opinion or indicate that you have used our services on those platforms, particularly by clicking the “Like” and “Share” buttons. These cookies may also be used to track users’ browsing activity on the Website and App.

We encourage you to review the privacy policies of the social media platforms that set these cookies to understand the purposes for which they may use the browsing information collected through these cookies and how to exercise your rights with these platforms.
We use the following social media cookies: None

Analytical cookies

These cookies allow us to measure the number of visits, the number of page views, and user activity. They may, where applicable, collect your IP address to determine the city from which you are connecting. Analytical cookies allow us to generate traffic and navigation statistics for our Website and App in order to improve our performance. The cookies used also help identify navigation issues and, ultimately, resolve them.

We use the following analytical cookies: None

3. Your cookie preferences

Cookies that may be placed without consent

Some cookies do not require your consent, including:

● Technical and functional cookies that are necessary for the Website and the App to function;

● Certain audience measurement cookies or cookies that allow us to test different versions of the Website and the App for the purpose of optimizing editorial choices.

Acceptance or rejection of cookies that require your express consent

All other cookies require your consent. These include advertising cookies, social media cookies, content personalization cookies, and certain audience analytics cookies. You are free to choose whether to accept or reject the use of these cookies.

You can accept or reject these cookies when you first visit the Website or when you first use the App.

Your choices to accept or reject Cookies will be retained for a period of six (6) months.

You are free to withdraw your consent and, more generally, to modify your preferences at any time via the following link. (Not applicable)

Your browser settings

You can also configure your browser to accept or reject certain cookies.

Each browser has different settings.

4. Advertising IDs

Personal data about you may be collected in connection with your advertising ID.
Every mobile phone has its own unique advertising ID, which allows advertisers to deliver targeted ads.

Android and Apple allow mobile users to control their privacy in their settings, making it impossible to link their advertising history to their future browsing activity.

You can disable and reset your advertising ID at any time if you no longer wish to receive targeted ads:

You will likely receive the same number of ads, but they will be less relevant.

Instructions for limiting ad tracking on iOS: https://support.apple.com/fr-fr/HT205223

Instructions for disabling ad targeting on Android: https://support.google.com/ads
/answer/2662922?hl=fr