数据隐私 政策
上次更新时间
本数据隐私政策以英文起草。为方便起见，可以将其翻译成其他语言。如果与翻译版本发生冲突，则以英文版本为准。
Questel保留更改其隐私政策的权利。你可以在这个网页上找到最新版本。当我们在网站上发布修订后的隐私政策时，任何更改都将生效。本隐私政策的最后更新日期为上面列出的日期（“更新日期”）。我们鼓励您定期查看此页面，了解有关我们隐私惯例的最新信息。
序言——范围
Questel是提供有关知识产权服务和软件解决方案的可信信息和分析的全球领导者，也是独特的知识产权数据库集合的提供商。
Questel非常重视和关注隐私和个人数据的保护，以及对适用法律条款的尊重。《通用数据保护条例（欧盟）2016/679》（以下简称 “GDPR”）以及当地数据隐私法规定，必须合法、公平和透明地处理个人数据。因此，本政策旨在根据您的浏览和在我们网站上进行的操作，向您提供有关您的个人数据的处理的简单、清晰的信息。
本政策描述了Questel SAS及其关联公司（以下简称 “Questel”、“我们” 和 “我们的”）在访问我们的网站、SaaS平台或其他线下业务联系时，在我们与客户或其他专业人员的业务关系中，或者在您向Questel提供个人数据的所有其他场合，尤其是当您订阅我们的时事通讯或通讯时，如何收集、使用、处理和保护您的个人数据在专业活动中。
供您参考，一些Questel网站可能有自己的隐私政策，该政策描述了如何专门处理这些网站的个人数据。如果特定隐私声明与本政策发生冲突，则以具体的隐私声明为准。
Questel已任命一名数据保护官员（DPO），负责监督与数据隐私有关的问题。如果您有任何疑问，包括任何行使任何隐私权的请求，请通过以下方式联系我们的 DPO [email protected]。
点击以下链接，了解有关Questel数据隐私政策的更多信息：
1。我们收集哪些个人数据以及如何收集？
个人信息（“个人数据”）通常是指能够识别您、与您有关的、与您有关的、合理能够与您相关或可以合理地与您直接或间接关联的信息。个人数据不包括公开、匿名或汇总的数据。
1.1.Questel collects your Personal Data interacting with you directly:
- 当您购买或有权使用我们的服务时：
- 您通常需要向我们提供您的姓名和电子邮件地址。
- 您可能还需要提供使用我们的服务所必需的其他信息或您选择向我们披露的其他信息，例如您的专业详细信息或用户偏好。
- 当您来到我们的办公室或参加活动时 由 Questel 或其他专业活动组织。
- 当您与我们互动时：
- 当您在线填写表格时。
- 当您联系我们或向我们索取信息时。
- 当您向我们发送申请或回复招聘广告时。
- 通过我们服务中包含的 Cookie 和类似技术：
- 当您访问我们的服务时，我们会收集与您使用我们的服务有关的设备和信息。
- 有关我们如何使用这些标准技术的更多信息，请参阅Questel Cookie政策，点击此处 click here
1.2.Questel may also collect your Personal Data, indirectly, from third parties:
我们收集的个人数据可能包括以下内容：
- 我们的合作伙伴和服务提供商：
- 与您使用我们的服务相关的技术提供商。
- 市场研究机构。
- 内容提供商。
- 我们的客户：
- 我们的客户可能会向我们提供个人数据以整合我们的服务，您的雇主或您所属的机构可能会向我们提供联系信息，以便我们可以设置您的登录信息等。
- 公开来源：
- 学术或科学出版物。
- 专利和商标局和监管机构。
- 法庭档案。
- 公共网站、社交媒体或来自数据提供商。
- 个人标识符，例如，姓名、用户名、电子邮件地址、电话号码、签名等
- 联系信息，例如，电子邮件、电话、地址、职务、职能等。
- 人口统计信息，例如，性别、地点、语言等
- 身份验证数据，例如，互联网协议 (IP) 地址等。
- 专业信息，例如，出版物、雇主、地点、执照、证书、职业识别号、工作经历/简历、教育经历、专业、专业知识、空缺性等。
- 间接标识符，例如，学习 ID、Cookie、IP 地址、计算机设备信息等。
- 知识、信念和偏好数据，例如，通过调查、访谈等提供的想法、顾虑、偏好、反馈、意见和其他信息。
- 使用数据，例如，有关您使用我们服务的信息，例如访问日期和时间、浏览的页面、在我们的某个网站上停留的时间等。
- 财务信息， 例如，付款信息和相关的银行详细信息等。
- 商业信息，例如，购买记录、订阅信息、交易详情、有关制裁和限制的信息等。
- 通信数据， 例如，通过电话录音、语音信箱、电子邮件等与您沟通或传达给您的信息。
- 感官数据， 例如，照片、音频、视频或其他类似的电子记录等。
Questel 不收集特殊类别的任何个人数据（敏感信息） 列出了《通用数据保护条例》第 9 条，即披露种族或族裔起源、政治观点、宗教或哲学信仰或工会成员资格的个人数据，以及遗传数据、用于唯一识别自然人的生物识别数据、有关健康的数据或有关自然人性生活或性取向的数据。
2。我们为什么收集您的个人数据？
Questel收集的个人数据经过计算机处理，因此我们可以管理您的请求并确保对其进行跟进。我们出于特定目的和以下不同的法律依据收集您的个人数据。
2.1 合同的执行
在执行合同或合同前措施的背景下，处理您的数据是出于以下目的：
- 管理信息请求
- 管理索取有关我们服务信息的请求。
- 管理我们网站上的客户信息。
- 向我们的客户、业务合作伙伴、内容和技术提供商传达产品使用信息。
- 合同管理
- Order management, purchasing.
- Create software accounts.
- Contract management.
- Provide user and technical support.
- Perform other related administrative tasks.
- Customer relationship management
- Enforce our terms of business.
- Management of your customer account.
- Contact you about renewal of your subscriptions.
- Complaints and after-sales service management.
- If you answer a job advertisement or send an application, so that Questel can reply and potentially reuse those data at the time of the recruitment procedure.
2.2 同意
根据您的同意，您的数据将用于以下目的：
- 业务发展
- Carrying out commercial and marketing prospecting operations.
- Transmission of your Data to our commercial partners.
- Administer events we host or attend (e.g., conferences, webinars, etc.).
- Management of cookies requiring your consent.
- Management of the newsletter.
- Provide you with advertising based on your activity on our websites and services and on third-party websites.
您可以随时选择退出我们的营销信息——所有Questel营销电子邮件都包含 “取消订阅” 或 “管理我的偏好” 链接。如果您对我们出于营销目的使用您的信息有任何疑问，请联系 [email protected]。参见第 8 节”你的隐私权是什么？”。
- Product customization and development
- Deliver personalized functionality and content in our services, for instance we may retain your browsing and usage information to make your searches within our services more relevant.
- Use information collected on our services to improve the functionalities, the design and content of our services (including sharing your Personal Data across our group which allows us to facilitate the use of these services).
- Analyze product usage information to understand which content and tools are most useful for our users and to allow us to deliver and suggest tailored content, features and other services that we believe may interest you.
您可以随时撤回您的同意。我们将确保您有机会随时以简单的方式选择退出。参见第 8 节”What are your privacy rights?”.”。
- Recruitment – Use of AI tools during interviews
As part of the recruitment process, Questel may use AI tools to:
- automatically transcribe interview discussions,
- generate a summary of key points,
- solely to support recruiters’ note-taking and the completion of standardized evaluation grids.
- No automated decision-making is performed. Transcripts and summaries are accessible only to authorized recruiters, not used to train AI models, and are deleted within one month following the interview. This processing is optional. You may refuse the transcription without justification or impact on your application; or withdraw your consent during the interview or by written. In this case, the interview will be conducted without recording, with manual note-taking. See section 9 “
- What are your privacy rights?".
2.3 合法利益
在Questel的合法利益框架内，处理您的个人数据是出于以下目的：
- 管理和发展与客户的关系。
- Establishment of statistics for the improvement of products and services.
- Marketing activities.
2.4 合法权利
- Prevent misuses of our services.
- Protect the security of our IT systems, architecture and networks.
- Manage access to our premises and for security purposes.
- 安全措施
- 诉讼前和诉讼管理。
- Fight against Fraud.
- Fight against money laundering and the financing of Terrorism.
在Questel所遵守的法律和监管义务的框架内，处理您的个人数据是出于以下目的：
- 一般和辅助会计。
- 回应法院命令或监管机构。
- 遵守法律义务。
这些法律义务由国家和（或）国际法律以及国家主管监管机构发布的国家法规规定，可能包括维护记录、合规检查或为税务、社会或安全目标进行筛选和记录。
3.我们会将您的个人数据保留多长时间？
Questel在您与我们的关系期间存储您的个人数据，并在必要的时间内保留这些数据，以实现Questel收集数据的目的，包括履行法律、会计或报告义务或解决争议。有关我们存储您的个人数据多长时间的更多信息，请通过以下方式联系我们 [email protected]。
4。我们会分享您的个人数据吗？
数据接收者是负责管理您和我们之间合同的人员，以及/或接收通过我们的网站发送给Questel的请求的人，以及/或最能回应您的请求的人，具体取决于请求的类型。
作为一家跨国公司，Questel可能会在内部与其办公室和分支机构或第三方服务提供商共享其通过其网站收集的个人数据。根据处理的目的，您的个人数据可能会被披露给不同的个人和组织，包括：
- Questel 集团的员工和承包商 谁的角色需要访问您的数据。
我们的人员必须遵守保密条款，这些条款涵盖了他们保护个人数据的义务。
- 服务提供商 谁代表我们处理个人数据（“处理者/供应商”）。
Questel可能会使用第三方的服务来支持我们完成某些任务，例如互联网技术支持，营销自动化，设计师，网站开发人员，翻译服务等。
- 我们可能会与这些第三方服务提供商共享您的数据，以便他们可以代表我们提供服务。他们处理执行我们要求他们的服务所必需的个人数据。根据合同，此类供应商有义务按照本政策中规定的相同标准保护您的数据。 经正式授权的公共当局 (司法, 控制...), 在我们的法律和监管义务框架内.
- 受监管的职业 (律师, 法警等...), 他们可以在执行担保, 收款或诉讼时进行干预.
- 订阅者和会员。如果您的个人数据是从公共来源收集的，以包含在我们的产品数据库中，以及您选择提供给我们以显示在我们的服务中（例如，在个人资料和使用在线论坛时）的任何个人数据，则我们的服务用户可能会访问您的个人数据。此外，如果您或您的组织注册我们的某个会员制社区或产品，我们可能会通过在线和离线服务向其他成员提供有关您的信息（包括联系人和机构信息）。
Questel不会将您的个人数据出售或出租给第三方。
5。我们如何确保您的个人数据安全？
Questel会注意保护和保护您的个人数据，以确保其机密性，并防止它们被扭曲，损坏，销毁或泄露给未经授权的第三方。为此，Questel采取了适当的管理、技术和物理安全措施。它可能包括加密、防火墙、基于角色的数据访问、入侵检测软件和对数据中心的物理访问控制。此外，我们会定期审查我们的做法、政策以及物理和逻辑安全措施（安全访问、身份验证流程、备份、软件、内部培训等），并在必要时进行更新。请参阅 Questel IT 安全政策。
根据适用的欧洲规则，如果发现个人数据泄露可能对数据主体的权利和自由造成高风险，Questel将把该违规行为通知国家主管监管机构，并在法规要求的情况下通知数据主体（视情况单独或集体）。
Questel在实现约定目的所需的时间内保留您的个人数据，但须遵守其存档某些数据的合法权利、保留某些数据的义务和/或可以匿名化数据的事实。
此外，Questel的网站可能会提供您可能感兴趣的第三方网站的链接。Questel无法控制这些第三方网站的内容，也无法控制这些第三方如何处理他们可能收集的任何个人数据。因此，Questel对这些不受本政策约束的第三方处理您的个人数据不承担任何责任。您有责任了解这些第三方的数据保护政策。
6。您的个人数据是否转移到第三国？
Questel是一家全球性企业，您的数据可能会被转移到与您自己的隐私和数据保护法律不同的国家。
我们通过经批准的法律保障措施保护我们从欧盟向非欧盟国家的转账，其中可能包括：
- Questel’s intra-group Agreements incorporating the Standard Contractual Clauses approved by the European Commission (“Standard Contractual Clauses”);
- Standard Contractual Clauses and other contract terms executed between Questel and applicable third parties that ensure personal data remains protected in accordance with applicable laws.
7。我们如何使用 Cookie 和跟踪技术？
请阅读Questel Cookies政策，了解有关我们网站和服务上使用的Cookie和其他跟踪技术的详细信息。这个 Cookie Policy includes information on how you may disable these technologies. You can indeed change the personal configuration of your navigator to prevent cookies registration. Please be aware that if you choose not to accept cookies, you will be able to navigate in the freely accessible public part of the Questel web sites only. 包括有关如何禁用这些技术的信息。实际上，您可以更改导航器的个人配置以防止 Cookie 注册。请注意，如果您选择不接受Cookie，则只能在Questel网站的免费公共部分中导航。
8。你的隐私权是什么？
Questel may use Artificial Intelligence (“AI”) technologies in connection with its websites, products, and services. For further information on how AI technologies are used, including applicable safeguards and governance principles, please refer to the Questel Artificial Intelligence Policy.
9。如何行使您的隐私权？
The following privacy rights are available to all individuals. The rights may differ based upon local data protection laws. Please contact us through [email protected] if you have further questions about your privacy rights.
9.1. For European citizen
This section applies to individuals who are located in the European Union or the European Economic Area at the time their personal data are processed, where such processing falls within the territorial scope of the General Data Protection Regulation (GDPR).
The GDPR grants these individuals specific rights with respect to the collection, use, and disclosure of their personal data by Questel.
- Right to information on the processing of your Personal Data. Questel endeavors to provide you with concise, comprehensible, and easily accessible information in clear and simple terms about how your Personal Data are processed.
- Right of access of your Personal Data. The right of access enables you to obtain confirmation from Questel that your Personal Data are or are not processed, and where they are, to access them or obtain a copy of them.
- Right to rectification of your Personal Data. You may request that we correct inaccurate Personal Data we hold about you. You may also have the right to have incomplete Personal Data completed.
- Right to restriction of processing your Personal Data. You may ask us to restrict further processing your Personal Data.
- Right to erasure. The right, under certain conditions, to have the Personal Data erased or deleted, unless Questel has a legitimate interest in keeping it. Subject to the exceptions under the applicable law (e.g. retention of data necessary to comply with a legal obligation), you are entitled to request Questel to erase your Personal Data as soon as possible, where one of the following grounds applies:
- the Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you wish to withdraw your consent where that consent was the basis for processing your Personal Data when there is no other basis justifying that processing;
- You wish to object to the processing of your Personal Data for direct marketing purposes;
- You believe and are able to show that your Personal Data have been processed unlawfully;
- Your Personal Data must be erased pursuant to a legal obligation.
- Right to personal data portability. The right to request that Personal Data be transmitted in a reusable format that allows it to be used in another database.
- Right to object to the processing of personal data for reasons related to your particular situation (under conditions).
- Right to withdraw consent to the processing of personal data. Where Questel processes your Personal Data based on your consent, you can withdraw that consent at any time using the means made available to you for that purpose. Under the applicable law, however, withdrawing your consent is not retrospective and cannot therefore affect the lawfulness of processing carried out before the withdrawal.
- Right to define post-mortem directives. The right to define directives concerning the fate of Personal Data after your death.
- Right to make a complaint to a supervisory data protection authority. If, notwithstanding Questel's efforts to keep your Personal Data confidential, you believe that your rights have not been complied with, you have a right to lodge a complaint to the Data Protection Authority, ie for France: CNIL, 3 Place de Fontenoy – TSA 80715 – 75334, PARIS CEDEX 07, France
9.2. For Californian Citizen
This section applies exclusively to residents of the State of California, as defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”).
The CCPA provides California residents with specific rights regarding their personal information collected, used, and disclosed by Questel.
California Consumer Rights
Subject to applicable law, California residents have the following rights:
- Right to Know. The right to request disclosure of:
- the categories of personal information Questel collects;
- the categories of sources from which such information is collected;
- the business or commercial purposes for collecting, using, disclosing, selling, or sharing personal information; and
- the categories of third parties to whom Questel discloses personal information.
- Right of access. The right to request a copy of the specific pieces of personal information Questel has collected about them.
- Right to correction. The right to request the correction of inaccurate personal information maintained by Questel.
- Right to deletion. The right to request the deletion of personal information, subject to statutory exceptions.
- Right to opt‑out of sale or sharing. The right to direct Questel not to sell or share personal information, as those terms are defined under the CCPA.
- Right to limit Use and Disclosure of Sensitive Personal Information, where applicable.
- Right to Non‑Discrimination. The right not to receive discriminatory treatment for exercising any CCPA rights.
Sale or Sharing of Personal Information
Questel does not sell personal information in the traditional sense.
However, to the extent that certain data processing activities may be considered a “sale” or “sharing” under the CCPA’s broad definitions, California residents have the right to opt out of such activities.
Where required by law, Questel honors valid Global Privacy Control (GPC) signals as an opt‑out of sale or sharing of personal information.
10。如何联系我们？
You can email [email protected] specifying in the subject line of the email " Data subject rights". Upon receiving your request, we will first verify your identity by matching the information you provide (including your name, email address, and phone number) with what we have on file for you. We may ask you for additional information to verify your identity or to comply with your request. We will complete your request in the timeline prescribed by the applicable privacy laws.
Depending on where you are located or where you reside, you may have certain rights granted to you over your personal data under local data protection laws.
Responding to your requests. Questel undertakes to respond promptly, and in any event within the specific timeframe required by the laws applicable to personal data about you. When necessary, that period may be extended, having regard for the number and complexity of the request you sent. Where that occurs, you will be informed of that extension and the reasons for it.
Exercising Your California Privacy Rights
California residents may exercise their CCPA rights:
- directly, or
- through an authorized agent acting on their behalf, in accordance with CCPA requirements.
Questel may request information necessary to verify the identity of the requesting individual or authorized agent before processing a request, in order to protect personal information and prevent fraud.
Questel will respond to verified requests within the timeframes of 45 days required by applicable California law.
11. How to contact us?
If you have any questions or would like any further information about the collecting or processing of your Personal Data by Questel, you can contact Questel Data Protection Officer at [email protected] or at the following address: Questel SAS
Data Privacy - Group DPO
Ecopolis 1300 Route des Crêtes, CS60239
06904 Sophia Antipolis Cedex, France
If you want to exercise your privacy rights, please contact [email protected] specifying in the subject line of the email " Data subject rights".