Privacy Notice

The persons affected by our processing of the aforementioned categories of data are internet users accessing our website.

The purposes of the processing of the data mentioned above is to make our website work properly, to optimize marketing activities and to adjust our offer and our information on the websites accordingly. The legal basis for our processing of access data is our legitimate interest which corresponds with the mentioned purposes (legitimate interest pursuant to Art. 6(1)(f) GDPR).

We also store your consent in the form of a cookie (“opt-in cookie”) on your end device in order to determine whether you have granted your consent when you visit the website again.

Strictly necessary cookies cannot be deactivated using the cookie management function of this website. However, you can deactivate these cookies in general at any time in your browser.

You can also manage cookies using your browser’s settings. Different browsers have different ways to configure cookie settings. You can find more extensive information on this by accessing the following link: https://www.allaboutcookies.org/manage-cookies.

Please note that some functions of our website may not work properly or at all if you deactivate cookies in general in your browser.

Our Figures Application is made available to our customers – essentially start-up and scale-up companies – on a subscription basis by means of customer contracts for software application services. In respect of customer contact data, Figures acts as a controller.

A key feature of our service offering related to the Figures Application is that our customers are granted the opportunity to enter specific data regarding their employees and their business on dedicated dashboards displayed exclusively to the respective customer via the Figures Application. For this processing activity, Figures acts as a processor.

Further, our customers are provided the opportunity to compare their employee data with statistical market benchmarking data generated by us in connection with the Figures Application. The specific employee and business data provided by our customers are used by us as basis for creating further statistical and market benchmarking data, always on a pseudonymized basis – without identifying any of our customers or their employees. For this processing activity, Figures acts as a controller.

In respect of the first processing activity mentioned under item 1, the controller is:
‍
Figures SAS ("Figures")
5, rue Gallieni
92100 Boulogne-Billancourt
FRANCE

Contact : contact@figures.hr

In respect of the second processing activity, the controller is the customer of Figures that has signed a customer contract for the use of the Figures Application.In respect of the third processing activity, the controller is:

Figures SAS ("Figures")
5, rue Gallieni
92100 Boulogne-Billancourt
FRANCE

Contact : contact@figures.hr
and the customer of Figures that has signed a customer contract for use of the Figures Application

Under the customer contract, we provide for specific Data Processing Terms regarding the processing of personal data. The key provisions are summarised below.

The categories of personal data processed by us in connection with the Figures Application are the following:

Personal data of contact persons of our customers (hereinafter: "Customer Contact Data"):
- Name, surname and email address of contact persons for contract administration
- Name, surname and email address of contact persons for invoicing

Personal data of employees of our customers (hereinafter: "Customer Employee Data"):

The data subjects affected by the data processing activities in connection with the Figures Application are the following:

Customer Contact Data:

Employees of our customers designated for administration of the Customer Contract-
Employees of our customer designated invoicing related to the Customer Contract

Customer Employee Data:

Employees of our customer reported by our customer to us for purposes of using the Figures Application.

We process the aforementioned categories of personal data exclusively for the following purposes:

Customer Contact Data:
for the purpose of administration and execution of the respective customer contract,including receipt of the remuneration owed by our customers under such contracts;

Customer Employee Data:

for the purpose of generating overviews and reports made available exclusively to our respective customer by means of dashboards displayed as part of the Figures Application and

only in pseudonymized form - without identification of our customers or any of their employees - for the purpose of generating aggregated statistical benchmarking data; such data are stored by us on separate databases which are accessed by the Figures Application for display of aggregated market benchmarks to our customers.

We process your personal data on the following legal bases:

Purpose A – processing is necessary for the performance of a contract to which the data subject is party (Art. 6(1)(b) GDPR);

Purpose B – Figures is processor and the customer acting as controller is responsible to have a legal basis in place;

Purpose C – processing is necessary for the legitimate interest of Figures (Art. 6 (1)(f) GDPR) to generate aggregated statistical benchmarking data, in order to provide customers with aggregated market benchmarks, assisting them to improve their compensation policy.

We engage the following sub-processors for hosting the Figures Application:

Digital Ocean ____ 101 Avenue of the Americas (Grand St.) New York, NY 10013 United States of America

All personal data hosted by Digital Ocean will be stored on servers located in the European Union and in accordance with the following privacy policies:

We may engage other third parties to process personal data in connection with the Figures Application. Any such sub-processors will be selected with due care and we will provide that such will be bound by adequate contractual arrangements in such a way as to ensure that they comply with the requirements for the protection of personal data pursuant to Art. 28 of GDPR.

We do not transfer any personal data outside the EU/EEA, or engage sub-processor to process personal data outside of the EU/EEA.

We use appropriate technical and organisational security measures in order to protect your data processed by us against manipulation, loss, destruction and against access by unauthorised persons.

We process and/or store personal data for no longer than is necessary for the purposes set forth above.

Customer Contact Data related to contract administration and execution is retained for the mandatory preservation period prescribed by the laws applicable to our commercial activities, which is five (5) years from termination or expiry of the Customer Contract. Customer Contact Data related to accounting and billing is retained for a period of ten (10) years in accordance with applicable tax legislation.

Customer Employee Data is retained by us for the duration of the Customer Contract and erased after termination or expiry of the Customer Contract, unless erasure at an earlier point in time should be required upon request of a data subject, in which case Figures will act under the instruction of customer.. The right of Figures to retain Processed Data for archiving and statistical benchmarking purposes is set forth in Section 8.2 of the Data Processing Terms.

We reserve the right to retain aggregated statistical benchmarking data generated on the basis Customer Employee Data submitted to us by our customers for longer periods as the retention periods set forth in the foregoing Section 6.1(ii), it being understood that none of such statistical benchmarking data will identify any Customer employee or other data subject.

n accordance with the provisions of the GDPR, you as a data subject may assert the following data protection rights against us, where we are controller:

If you wish to exercise your rights, please contact us by e-mail at the following address: privacy@figures.hr.

This privacy notice was last updated on [12/May/2022].

We reserve the right to amend or update this privacy notice from time to time in order to adapt it to changes in the law or changes in the framework conditions for our data processing activities. The amended version will be published on the website. We will obtain your consent for any changes or adjustments to this privacy statement that can only be implemented with your consent as a data subject.