1. User's Personal Data Collected by and for ESTCT

The ordering process involves collecting a certain amount of personal information relating to the User. ESTCT only collects personal data provided voluntarily through various means, such as ordering products (online). ESTCT uses this data to provide the requested service or to provide information to the User about products or services.

ESTCT, in its capacity as the controller of this data, undertakes to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, applicable as of May 25, 2018 (hereinafter, "the GDPR").

ESTCT distinguishes data that must be kept for at least ten years for legal reasons: account creation date, last name, first name, email addresses, language, security information related to connections (date and IP address, failures), orders (including address and IP address) from other data, which will be automatically deleted from the operational database two months after the closure of the User's account: password (encrypted), address book, payment details and preferences, shopping carts, referral URLs and campaigns, affiliate links, etc.

This data is stored on servers located in France and is partially accessible by the contractor(s) we use to provide technical support to Users.

If the User wishes to exercise their right to access, rectify, or delete data, they can send their request by email to contact@pixfirst.com or by post addressed to: 

SARL ESTCT

24, boulevard Dassault - 64200 Biarritz

France

‍

2. User's Personal Data Collected by ESTCT but for the User's Needs

ESTCT may transmit personal information of the User to other affiliated companies and/or third parties authorized to provide specific services, such as the printing and delivery of products. All data transferred under such conditions is used exclusively for the purposes intended at the time of collection.

ESTCT acts as a processor of this data within the meaning of the GDPR, and the User is responsible for it; it is processed on behalf of and under the exclusive instructions of the User, and ESTCT makes no use of this data outside the scope of the service contracted and managed by the User.

This refers to  any personal data stored via the tools made available by ESTCT and necessary for the execution of the User's instructions: for example, the login details of potential Users of the site, data relating to their shopping carts, selections (viewers), orders, comments left, IP address, physical address, etc.

This data is primarily stored on servers located in France. The data is partially accessible by the contractor(s) we use to provide technical support to Users.

This data is only transmitted to third parties on the instruction of the User (for example, transferring order data to a laboratory).

This data may be automatically deleted from the operational databases two months after the closure of the User's account.

‍

3. Photographs, Videograms, etc.

Photographers act as data controllers within the meaning of the GDPR for data and metadata related to photographs and other content they upload to the Site for marketing purposes; ESTCT is only a processor of this processing, as a provider of a technical platform including, in particular, hosting services. ESTCT makes no use of these photographs or the accompanying data and metadata.

They are only transmitted to third parties on the instructions of the User (for example, transfer to a laboratory for the fulfillment of an order).

This data is primarily stored on servers located in France. The data is partially accessible by the contractor(s) we use to provide technical support to Users.

This data may be deleted from operational databases by Pixfirst, if the latter deems it appropriate.

‍

4. Security Measures

The security of physical access to data, servers, and the datacenters in which they are located is guaranteed by AWS.

ESTCT manages the security of remote IT access by restricting access to multiple software layers, on a "forbidden unless required and authorized" basis. Administrative access to servers and all data is reduced to an absolute minimum.

Connections by Users, Photographers, and Organizers to the web interface of the service, from outside the datacenters, are secured (SSL encryption). User connections to the Site are also secured in SSL when personal data is transmitted (orders, for example).

Global backups are encrypted before being stored with ESTCT's provider, which guarantees the physical security of the encrypted files. The decryption key is stored separately, offline.

The processor(s) offering technical support to Users have limited access to the service, via a secure web interface using individual login credentials.

Security updates for IT systems are carried out as soon as possible following their publication, thanks to monitoring of specialized communication channels.

‍

5. Cookies

ESTCT uses Cookies to improve its users' experience. These cookies do not communicate the email address or identity of the user.

If they wish, both the user and the visitor can decline these cookies by modifying their browser's Internet options. However, Users must accept the cookies necessary to process their order. In any case, information obtained through cookies will not be used for any other purpose than that directly related to ESTCT's activity.