PRIVACY POLICY

Our Privacy Policy provides you with an overview of the situations in which personal data is processed by Dream Act when you use our website or interact with our services. Of course, not all of these situations necessarily concern you.

Here, you can learn about the personal data we may process, how we use it, with whom we share it, how we safeguard and secure it, and your rights regarding your data.

Our Privacy Policy forms part of a continuous compliance framework with the General Data Protection Regulation (GDPR), the European standard for personal data processing since 2028, and with French law No. 78-17 of January 6, 1978, as amended, known as the “Informatique et Libertés” law.

For more information on personal data protection, you may also consult the website of the French Data Protection Authority (CNIL): www.cnil.fr.

1. DATA CONTROLLER

Your personal data is processed by:

Dream Act SAS, with share capital of €24,951, registered with the Paris Trade and Companies Register under No. 814 383 832, represented by Diane Scemama, President.
Registered office: 1 rue Philidor, 75020 Paris.
Tel: +33 1 89 62 33 17.

2. HOW DO WE COLLECT YOUR PERSONAL DATA?

Your data is collected during your visit to our website https://sodiaal-box.dreamact.eu/fr/, during interactions with our teams (orders, information requests, complaints, inquiries, discount vouchers, satisfaction surveys), or when you participate in our contests, prize draws, or promotional activities.

Dream Act ensures that it collects and processes only the data strictly necessary for the purposes for which it is processed.

We record certain personal data that we may obtain directly from you (e.g., through online forms) or following your interactions with us. Only the fields marked with an asterisk are mandatory, as these data are essential for:

The performance of the contract concluded with you (e.g., purchase).
The provision of the service you requested (e.g., sending a newsletter).
Compliance with legal obligations or the defense of our rights (e.g., invoicing).

All other data are collected automatically when you browse our Website or use social media. Automatically collected data may include:

Your IP address: assigned by your Internet provider to allow access to the Internet. It is generally considered non-personally identifiable because it changes each time you connect.
Your login when browsing restricted-access sections.
The address of the website from which you were redirected.
The date and time of your visit and the pages viewed.
Your computer’s operating system and browser software.

3. WHY DO WE PROCESS YOUR PERSONAL DATA?

You are at the heart of everything we do. As our primary point of contact, the information we receive from you helps us get to know you better and develop and deliver products you value, within a continuous improvement approach. For these reasons, we process only the personal data necessary for specific, explicit, and legitimate purposes, based on a legal basis and for a limited retention period.

Retention periods may be shortened if you exercise one of your rights under the terms described herein. They may also be extended when a longer retention period is permitted or required by law or needed to safeguard our rights.

WHO ARE YOUR PERSONAL DATA SHARED WITH?

Your personal data are accessible only to authorized Dream Act and Sodiaal Group personnel, in line with their duties.
We may transfer your data, in compliance with this Policy, to trusted service providers who assist us in improving our services. We provide them only with the information necessary to perform their service and require them not to use your data for other purposes and to preserve confidentiality and security.

Service providers who may access your data include those handling: advertising, e-marketing and commercial campaigns, logistics and transportation, platform administration, surveys, data analysis, audits, consulting, accounting, IT expertise, hosting, security, and managed services.

Your personal data are not shared with our commercial partners without prior notice and without obtaining your consent. In such cases, your data will be processed by these partners acting as data controllers for their own purposes. We invite you to consult their terms of use and privacy policies.

If you would like more information or wish to know the identities of the service providers or partners to whom your data has been transmitted, you may contact our DPO.

Are your data transferred outside the European Union?

You are informed that your data may be transferred to companies located outside the European Union, where the level of data protection may be lower.

Before any such transfer, Dream Act will take all necessary measures and safeguards to secure the transfer.

How is your data used in connection with social media?

Use of social networks and Dream Act services or applications linked to social networks may result in the collection and exchange of some of your data between those networks and us. We invite you to consult the terms of use and privacy policies of these networks to understand what information is collected, transmitted, and the purposes of use, notably for advertising.

You may adjust access and privacy settings directly via your social media accounts.

We collect and process certain information related to your social media activity for our own purposes, particularly for advertising, improving our customer relationship, and delivering personalized experiences. The information collected is governed by this Policy and by the specific terms of the applications used by Dream Act.

However, Dream Act cannot be held responsible for the use of your data by social networks for their own purposes.

“Plug-ins” or social modules

Our website includes social plug-ins (e.g., Facebook “Like”, “Share”, Google+, Twitter). These allow you to like and share content from our Website.

When you visit a page containing a social plug-in, a connection is established with the social network’s servers (e.g., Facebook, Twitter), which are informed of your visit—even if you do not have an account or are not logged in.

If you browse our Website while logged into your social networks, your visit may be linked to your account. If you interact with the plug-ins (e.g., by clicking “Like”), these interactions may be published on your social media accounts depending on your settings.

To prevent this, simply log out of your social networks before visiting our Website.

5. WHAT ARE YOUR RIGHTS?

Under applicable regulations, you may exercise the following rights:

Right to information

To obtain clear and understandable information on how we use your data and on your rights. This Privacy Policy fulfills that role.

Right of access

To obtain confirmation whether your data are being processed and a copy of such data.

Right to rectification

To have your data corrected if inaccurate or outdated and/or completed if incomplete.

Right to erasure

To request the deletion of your data, subject to legal retention obligations, particularly when they are no longer necessary.

Right to restriction

To have processing temporarily limited, meaning your data will no longer be actively processed and cannot be altered. This applies if your data are used unlawfully, if you dispute their accuracy, or if you need them to establish, exercise, or defend your rights.

Right to object

To object to receiving marketing communications from Dream Act or its partners. You may also object to the processing of your data for specific purposes on grounds relating to your particular situation. Dream Act may nevertheless justify continuing the processing based on compelling legitimate grounds.

Post-mortem instructions

You may define general or specific instructions regarding the storage, erasure, and disclosure of your data after your death.

To exercise your rights, you may contact the Data Protection Officer (DPO) using the contact details below. Proof of identity may be required. The DPO commits to responding within one month of receipt.

If, after contacting us, you believe your rights have not been respected, you may file a complaint with the CNIL (www.cnil.fr).

DATA PROTECTION OFFICER (DPO)

For exercising your rights or any additional information, you may contact our DPO:

📧 annabel.francony@sodiaal.fr
📞 +33 (0)1 44 10 90 71
📬 DPO Sodiaal, 200/216 rue Raymond Losserand, 75014 Paris, France

6. HOW IS THE SECURITY OF PERSONAL DATA ENSURED?

Dream Act implements all appropriate security measures to ensure the confidentiality and integrity of personal data in compliance with applicable regulations. This includes safeguards against unauthorized access, misuse, accidental loss, theft, destruction, alteration, or any form of damage.

Security is central to our operations; therefore, subcontractors, service providers, and partners are selected based on their ability to provide high levels of security. Dream Act requires them to comply with confidentiality standards at least equivalent to its own.

UPDATE OF THE POLICY

This Policy may be amended at any time. Modifications are published online and deemed accepted by any User accessing the Website after publication.