_rzilient legal

Privacy Policy

Updated: March 10, 2025

Table of contents
  1. Why a Privacy Policy?
  2. Who are we?
  3. What is personal data?
  4. Definitions
  5. Collection & processing
  6. Access & sharing
  7. Your rights
  8. Security
  9. Contact
  10. Cookies

Why a Privacy Policy?

Rzilient Group places great importance on the confidentiality and security of your personal data.

The purpose of this Privacy Policy is to inform you in a clear, simple and transparent way about the processing carried out on the personal data you provide to us, or that we may collect when you browse our web or mobile platform www.rzilient.club (the “Platform”), any possible transfer to third parties, and the rights and options you have to control your personal information and protect your privacy.

This policy also explains how we collect, use and protect the data of Rzilient customers (you), visitors, and people who interact with Rzilient via the Platform, emails, or social networks.

Who are we?

Rzilient Group (“_rzilient”) is a simplified joint-stock company (SAS) with share capital of €5,318.50, registered in Paris under number 881 969 976, with registered office at 146, rue de Monmartre, 75002 Paris, France.

Rzilient Group acts as the data controller under applicable data protection laws (French Data Protection Act and GDPR).

When you use the Platform, Rzilient collects and processes certain Personal Data entered directly by Users on the Platform.

Questions / contact: [email protected]

What is personal data?

Personal data means any information relating to an identified or identifiable natural person, directly (name, email, address) or indirectly (online identifier, account number, IP address, browsing data, etc.).

Definitions

  • Subscription: contractual model allowing the Client to access maintenance services.
  • Administrator: Client representative authorized to manage an Administrator Account and create/supervise Collaborator Accounts.
  • Client: legal entity acting as a professional customer of Rzilient.
  • Administrator Account: account enabling creation of Collaborator Accounts and access to the Platform services.
  • Collaborator Account: account created by invitation from an Administrator Account holder.
  • User Account: account accessible via Identifiers (includes Administrator and Collaborator accounts).
  • Terms: the Platform terms of use.
  • Collaborator: natural person within the Client organization authorized to use the Platform.
  • Identifiers: your email address and personal password.
  • GDPR: Regulation (EU) 2016/679.
  • Platform: www.rzilient.club.
  • Products: IT equipment available for purchase and/or leasing.
  • Services: Platform features.
  • Telemetry tool: software installed on an employee workstation at the Client’s request/subscription.

Why and how is my data collected and processed?

Rzilient collects personal data through different means:

  • (i) Directly: forms, customer support, communications via Platform/email/social networks, etc.
  • (ii) Third-party services: when you authorize/use third-party services to connect to Rzilient.
  • (iii) Public sources: publicly available information.

Purposes, legal bases, and retention periods

Purpose Personal data collected Legal basis Retention
Client data — Purchasing Products / orders Name, job title, postal address, email, phone, fax, device serial number, client number Contract performance Active during the contractual relationship, intermediate archiving 5 years. Purchase history + invoice identifiers: 10 years from last purchase.
Client data — Leasing Name, job title, postal address, email, phone, fax, device serial number, client number Contract performance + consent for transfer to financial partner Active during the contractual relationship, intermediate archiving 5 years. Purchase history + invoice identifiers: 10 years from last purchase.
Administrator account creation Identifiers, identity/contact details, device serial number, client number Contract performance For the contractual relationship; deleted at end; archived separately for 5 years.
Collaborator account creation Identifiers, identity/contact details, device serial number, client number Contract performance Kept while the account exists; deleted at contract end or on admin request; inactive 3 years: deleted after 1‑month notice.
Invoices & payments Administrator identity/contact + payment method info Contract performance Invoice identifiers: 10 years from end of relationship.
Offers to professional clients Administrator identity/contact Legitimate interest During relationship; up to 3 years after end/last contact; archived 5 years.
Maintenance contact Identity/contact of admins and collaborators Contract performance During relationship; archived 5 years.
Telemetry tool CPU/memory/disk usage, system specs, installed software, serial number, etc. Contract performance 2 months.
Surveys Identity/contact + client/file numbers, serial number Legitimate interest As needed for the survey purpose (max 3 years or until objection).
Social network interactions Name, identifier Consent Until withdrawal or 6 months after last contact (may be longer for proof/contestation).
Events / contests Identity/contact + client number Consent / legitimate interest Until withdrawal or 3 years after last contact.
Hardware tracking & interventions Serial number, name, personal email, phone (remote work), postal address (delivery) Contract performance During contract + 1 month; longer for proof (1 year) or contestation if applicable.
Customer relationship / IT support Identity/contact + client/file numbers, ticket, serial number Contract performance During relationship (up to 5 years after end).
Product tests Identity/contact + client/file numbers, ticket, serial number Consent Until withdrawal or 3 years after last contact.
Call recordings Name, phone number, voice Legitimate interest Up to 6 months.
Prospects — Contact to finalize registration Name, phone, email Legitimate interest 3 years from collection or last contact.
Prospects — User account creation Identifiers, identity, job title, email, postal address Consent 3 years from collection or last contact.
Cookies — Optimization & audience Connection and browsing data Consent 6 months from initial placement.

Access & sharing

Access is limited to authorized Rzilient staff. We may share data with processors for hosting, IT maintenance, operations, compliance, analytics, and purchase financing.

  • AWS: privacy
  • DigitalOcean: privacy + DPA
  • GoCardless SAS (payments)

Your rights

To exercise your rights, contact us and specify the purpose of your request. An ID copy may be requested to prevent fraud.

CNIL: rights information

  • Withdraw consent
  • Access / rectification / restriction / objection
  • Data portability
  • Erasure (subject to legal/legitimate retention)
  • Complaint to CNIL: https://www.cnil.fr/fr/plaintes

After contract termination, data may be retained up to 5 years. For early deletion: [email protected]

Security

We implement organizational and technical measures to protect data integrity and confidentiality, including encryption for sensitive online transmissions.

Contact

Email: [email protected] (or [email protected])

Postal: Rzilient GROUP – 146, rue de Monmartre, 75002 Paris, France.

Cookies

Cookies are text files stored on your device (subject to your choices) when browsing an online service.

Third‑party cookies

  • reCAPTCHA: policy
  • Mailgun: policy
  • Metacall: policy

Audience measurement

Google Analytics: privacy · cookies · opt‑out

Cookie settings

Use the cookie module in the footer of the Platform or browser settings. Cookie choices are stored for up to 6 months.