The French National Centre for Scientific Research (CNRS) has decided to set up an online platform, called the CNRS Boutique, offering the sale of identity products. The objects sold in this Boutique are intended to promote the CNRS brand(s).
The CNRS has entrusted SYNNEO with the distribution of the products and the supply of the e-commerce site, the sale of the items, and the hosting and facilities management of the site.
Personal data is collected and processed by SYNNEO SAS located at 40 impasse Madeleine Brès 77127 Lieusaint, on behalf of the CNRS located at 3 rue Michel Ange, 75016 Paris.
Types of personal data collected
| Categories of people concerned | Nature of the data processed |
| General public: Internet users, buyers | Identity data: title, surname, first name, date of birth |
Data is collected for the purposes specified below and on the legal grounds set out in Article 6 of the GDPR
| Goals | Legal basis | Current shelf life |
| Newsletter subscription | Legitimate interest | Until deregistration by the user or deletion of the user account |
| User account management | Legitimate interest | Maximum 3 years after the last connection |
| Order and invoice management | Contract | 10 years |
| Technical management of the site (security, technical management, visitor statistics) | Legitimate interest | Maximum 3 years |
The recipients of the data are SYNNEO staff responsible for the administration and security of the website, the management of user accounts and the management of orders and invoices.
Safety measures
The Data Controller undertakes to take all necessary measures to protect the security and confidentiality of the data and, in particular, to prevent unauthorised third parties from accessing, altering, disclosing or destroying it.
The information systems security policy applied is based on the CNRS PSSI (derived from the State's PSSI).
Personal law
You may access and obtain a copy of the data concerning you, object to the processing of this data or have it rectified. You also have the right to limit the processing of your data.
You can retrieve the data you have provided on our site at any time. Click on "Export my data" to automatically download a copy of your personal data in a pdf or csv file.
You can modify all the personal information on the "My account" page. For any other request you may have concerning the rectification and/or deletion of your personal data, please contact us via our contact form.
You can also contact SYNNEO's Data Protection Officer (DPO), Marie-Cécile Marechal, at the following address: dpo@synneo.fr
If you feel that your data protection rights have not been respected, you can lodge a complaint online with the CNIL, 3 Place de Fontenoy, TSA 80715 - 75334 Paris Cedex 07 (https://www.cnil.fr/).