Privacy policy

Privacy

All personal data provided to the Company by users of the Site are strictly confidential and are used in particular for the provision of services (or the supply of products) through the Site.

Protection of personal data

  1. Legal basis for the protection of personal data
    The processing of personal data implemented by the Company is in strict compliance with the law of June 6, 2004 on the protection of the digital economy, the law of January 6, 1978 relating to information technology, files and freedom as amended by the law of June 20, 2018 relating to the protection of personal data, as well as the European General Data Protection Regulation dated April 27, 2016 that came into force on May 25, 2018 (hereinafter “GDPR”).

It also forms part of the contractual relationship between the Company and users of the Site as defined in the GTC / GCU, so that the latter and this information notice also form the legal basis for the processing and collection of personal data of users of the Site.

  1. Nature of personal data
    Personal data means “any information relating to an identified or identifiable natural person; a natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity” (Article 4 of the RGPD).

The Company collects and processes personal data provided directly by users of the Site.

This includes the following data:

  • Contact details saved in the search form
  • Anonymized information on navigation through the site, geolocation

The Company may also automatically collect and process personal data from users of the Site, in particular by means of cookies (for further information, please refer to the section below on cookies).

  1. Purposes of use of personal data / Recipients
    The data collected and processed by the Company is necessary to access and browse the Site.

Their purpose is to :

  • To meet the needs of commercial activities
  • Handle requests related to Human Resources activities (CVs, cover letters, candidate information)
  • Organize requests for subcontractors or suppliers

They are intended for :

  • For internal use by the company, but may also be passed on to partners in order to meet the stipulated requirements.
  1. Retention period for personal data
    Personal data collected via the Site may be retained for different periods depending on their nature:
  • 2 years for commercial contacts from the end of the business relationship.
  • 12 months for Human Resources data and quotations
  • 12 months for suppliers and subcontractors
  1. Person responsible for the processing of personal data
    Ms Marine Boudignon is designated as the person responsible for the processing of personal data within the meaning of Article 4 point 7 of the European General Data Protection Regulation dated 27 April 2016, i.e. the person who determines the purposes and means of the processing of personal data of users of the Site.

Any user of the Site may contact this manager in order to exercise his or her rights as specified in article 6 below.

  1. Rights of users of the Site
    Users of the Site are informed that they have the right to access, rectify, delete, limit and port their personal data, as well as the right to object to the processing of said data, under the conditions and within the limits of application of articles 15 to 21 of the General Regulation on the Protection of Personal Data.

They can exercise these rights by contacting Marine Boudignon via the contact form on this site, and by accompanying their request with a copy of their identity document.

Site users also have the right to lodge a complaint with the CNIL.

6.1 Right of access (article 15 of the RGPD)

Users of the Site have the right to obtain from the data controller access to their personal data and the following information:

  • processing purposes
  • the categories of personal data concerned
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients established in third countries or international organizations
  • where possible, the intended retention period for personal data or, where this is not possible, the criteria used to determine this period
  • the existence of the right to request from the controller the rectification or erasure of personal data, or a restriction of the processing of their personal data, or the right to object to such processing
  • the right to lodge a complaint with a supervisory authority
  • where personal data are not collected from the data subject, any available information as to their source
  • the existence of automated decision-making, including profiling, and, at least in such cases, useful information concerning the underlying logic, as well as the significance and expected consequences of such processing for them

Users of the Site will also be informed of the appropriate safeguards taken by the Company in the event of the transfer of their personal data to a third country or to an international organization.

6.2 Right of rectification (article 16 of the GDPR)

Users of the Site have the right to obtain from the data controller, as soon as possible, the rectification of personal data concerning them which may prove to be inaccurate.

In view of the purposes of the processing, users of the Site have the right to have incomplete personal data completed, including by providing an additional declaration.

The data controller shall notify each recipient to whom personal data have been communicated of any rectification of personal data, unless such communication proves impossible or would require disproportionate effort.

The data controller provides the user of the Site with information on these recipients on request.

6.3 Right to erasure (article 17 of the GDPR)

Users of the Site have the right to obtain from the data controller the deletion, as soon as possible, of personal data concerning them.

The data controller is therefore obliged to delete personal data as soon as possible if one of the following reasons applies:

  • personal data are no longer required for the purposes for which they were collected or otherwise processed
  • the Site user withdraws the consent on which the processing is based, and there is no other legal basis for the processing
  • the user of the Site objects to the processing
  • personal data has been processed unlawfully
  • personal data must be deleted to comply with a legal obligation
  • the personal data have been collected as part of the information society service offering referred to in Article 8(1) of the GDPR

The right to erasure does not apply insofar as processing is necessary:

  • the exercise of the right to freedom of expression and information
  • to comply with a legal obligation
  • for reasons of public health interest
  • for archival purposes in the public interest, for scientific or historical research, or for statistical purposes
  • the establishment, exercise or defense of legal claims

The data controller shall notify each recipient to whom personal data have been communicated of any deletion of personal data, unless such communication proves impossible or requires disproportionate effort. The data controller provides the user of the Site with information on these recipients on request.

6.4 Right of limitation (article 18 of the GDPR)

Users of the Site have the right to obtain from the data controller the restriction of the processing of their personal data when :

  • the accuracy of the personal data is contested, for a period allowing the data controller to verify the accuracy of the personal data, or
  • the processing is unlawful and the data subject objects to their erasure and requests instead that their use be restricted, or
  • the controller no longer needs the personal data for the purposes of the processing, but the data is still necessary for the data subject to establish, exercise or defend legal claims, or
  • the data subject has objected to the processing pursuant to Article 21(1) of the GDPR during the verification as to whether the legitimate grounds pursued by the controller prevail over those of the data subject

Where processing has been restricted by virtue of one or more of the aforementioned cases, such personal data may, with the exception of storage, only be processed with the consent of the user of the Site, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for important reasons of public interest of the Union or of a Member State.

The user of the Site who has obtained the limitation of processing is informed by the data controller before the limitation of processing is lifted.

The data controller shall notify each recipient to whom personal data have been communicated of any restrictions on the processing of personal data, unless such communication proves impossible or requires disproportionate effort. The data controller provides the user of the Site with information on these recipients on request.

6.5 Right to portability (article 20 of the GDPR)

Users of the Site have the right to receive the personal data concerning them that they have provided to a data controller, in a structured, commonly used and machine-readable format, and have the right to transmit such data to another data controller without the data controller to whom the personal data has been communicated having any objection, where:

  • the processing is based on their prior and express consent or on a contract
  • processing is carried out using automated procedures

In such cases, the user has the right to have personal data transmitted directly from one controller to another, where technically possible.

6.6 Right to object (article 21 of the GDPR)

Users of the Site have the right to object at any time, for reasons relating to their particular situation, to the processing of personal data concerning them based on article 6, paragraph 1, point (b) of the Data Protection Act. e) or f) of the GDPR, including profiling based on these provisions.

The data controller may no longer process personal data, unless it can demonstrate that there are compelling legitimate grounds for the processing which override the interests and rights and freedoms of the user or for the establishment, exercise or defense of legal claims.

Where personal data is processed for canvassing purposes, users of the Site have the right to object at any time to the processing of their personal data for such canvassing purposes, including profiling insofar as it is linked to such canvassing.

In the event of opposition to processing for canvassing purposes, personal data will no longer be processed for these purposes.

Where personal data is processed for scientific or historical research or statistical purposes pursuant to Article 89(1) of the GDPR the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out in the public interest.

Cookies

The Site is designed to be particularly attentive to the needs of its users. To this end, the Site uses cookies, i.e. files stored on the hard disk of the user’s computer when browsing the Internet, which record information about the user’s visit to the Site and the means by which the user accessed the Site, compile statistics to measure Site traffic, facilitate browsing of the Site and improve its quality. Cookies are only used to improve the personalized service for each user. The user has the option of refusing these cookies by configuring them in his or her Internet browser. If the user refuses to accept these cookies (e.g. via his/her Internet browser), the Company cannot guarantee that all of the Site’s functions and services will function correctly.

By continuing their browsing, users of the Site acknowledge that they have been informed of their rights under the General Data Protection Regulation and release the Company from any liability concerning this information.