Preamble

[COMPANY NAME] undertakes to ensure that the processing of personal data carried out on [CUSTOMER WEBSITE ADDRESS] complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

This data protection policy applies to the processing of data carried out via the website [CUSTOMER SITE ADDRESS].

It informs you about the purposes of the processing carried out, the legal basis for the processing, the recipients of the data as well as their retention period, the security measures, the possible existence of data transfers outside the European Union or automated decision making, the use and management of cookies, your computer rights and freedoms and the way to exercise them.

Who is the data controller of this website?

The person responsible for the data processing carried out by the website [CUSTOMER WEBSITE ADDRESS] is the company [CUSTOMER COMPANY NAME], located at [CUSTOMER'S HEAD OFFICE ADDRESS].

To learn more, see the legal notice.

Does this site collect personal data?

According to article 4.1 of the RGPD, personal data is any information that allows you to be identified either directly or indirectly. This site collects personal data via its various contact forms. The personal data are freely communicated to [COMPANY NAME CUSTOMER] by the persons concerned by consenting to the processing and by taking note of the information displayed under the various contact forms. The data collected is adequate, useful, necessary and limited to the strict minimum.

These include data:

[QUALIFY THE DATA COLLECTED (E.G. IDENTIFICATION DATA)]

What are the purposes of data collection?

The processing of personal data collected through the various contact forms on the website has the following purposes:

What are the purposes of data collection?

The personal data collected through the various contact forms on the website are used for the following purposes :

• [TO BE COMPLETED BY THE CLIENT]
• [TO BE COMPLETED BY THE CLIENT]
• [TO BE COMPLETED BY THE CLIENT]
• [TO BE COMPLETED BY THE CLIENT]
• [TO BE COMPLETED BY THE CLIENT]
• [TO BE COMPLETED BY THE CLIENT]

What is the legal basis for the processing done by this site?

The processing of your personal data by [COMPANY NAME CUSTOMER] is based :

• Or on your consent for all cases where you entrust your personal data yourself. Your consent can be withdrawn at any time.
• Or on legitimate interests pursued by [COMPANY NAME CUSTOMER].
• Or on the respect of a legal obligation in particular as regards the exercise of your rights under the RGPD and the Data-processing law and Freedoms.
• [TO BE COMPLETED BY THE CLIENT]

Who are the recipients of the data processed by this site?

Your personal data is primarily intended for [CUSTOMER'S BUSINESS NAME], [CUSTOMER'S ACTIVITY]. They are processed by the staff of the various departments concerned by your requests.

They are processed solely for the purposes indicated above. Your personal data is hosted exclusively in France by a subcontractor of our Service Provider (within the meaning of Article 4.8 of the RGPD) in a strictly controlled manner. They are never communicated to third parties for commercial purposes.

Is personal data transferred outside the European Union?

Personal data collected by this website is not transferred to actors located outside the European Union. In case of contractual transfer of personal data, [COMPANY NAME] ensures that the recipients are based in the European Union.

How is the personal data processed by this site secured?

[CUSTOMER COMPANY NAME] is committed to protecting personal data processed within the framework of this site, in accordance with the state of the art.

The following are the main security measures to protect your personal data:

• [TO BE COMPLETED BY THE CLIENT]
• [TO BE COMPLETED BY THE CLIENT]
• [TO BE COMPLETED BY THE CLIENT]
• [TO BE COMPLETED BY THE CLIENT]

How long will personal data processed by this site be kept?

[TO BE COMPLETED BY THE CLIENT]

Does this site use cookies?

When you visit this site, one (1) session cookie is placed on your computer, tablet or ordiphone.

This cookie allows the proper functioning of the site and greatly improves your user experience.

This cookie is only used to assign a specific session to the user. A major advantage of the session ID is that if you open multiple windows of the same web page, they are assigned to a single session.


This makes it possible to launch several requests at the same time without losing important personal information.


The session cookie is therefore used to store information about the current session.


Other information, such as login data or previously completed online forms, is also retained during the session.


However, if you end your browsing session, the session ID and all other stored data will be deleted. This means that when you open the same web page in a new browser window, you will be considered a new visitor.

For more information on cookies, you can visit our cookie use policy or go to the site of the CNIL.

Can I object to these cookies?

Yes, and in several ways. If you do not want this website to place cookies on your computer, you can block them:

• by using a browser that, by default, refuses cookies;
• by configuring your browser appropriately or by installing an additional component on your browser, specifically designed for cookie management;

This website respects your choice.

What are the rights of the data subjects of the processing carried out by this site?

 

We collect the individual data that you provide us in the context of these contacts, as well as in the emails you send us.

In accordance with the General Regulation on the Protection of Personal Data (RGPD) which came into force on 25 May 2018 and by the LAW n° 2018-493 of 20 June 2018 relating to the protection of personal data, known as LIL3, and Order n° 2018-1125 of 12 December 2018 taken in application of Article 32 of Law n° 2018-493 of 20 June 2018 relating to the protection of personal data and amending Law n° 78-17 of 6 January 1978 relating to information technology, files and freedoms, you have the following rights:

Fate of Data in case of death

In accordance with the provisions of Article 85 of the Data Protection Act, we inform you that, as an individual :

• You have the right to provide us with instructions regarding the retention, deletion and disclosure of your Personal Information after your death;
• You may change or revoke these instructions with us at any time;
• You will be able to designate a person to carry out these instructions, who will have the authority after your death to review these instructions and to request their implementation from us.
• You are also informed that if you do not provide [COMPANY CUSTOMER] with specific instructions on what to do with your Personal Data, your heirs may exercise the rights to retain, delete and disclose your Personal Data after your death to the extent necessary to organize and settle your estate and for [COMPANY CUSTOMER] to take account of your death.

You also have the right (where applicable) to formulate general or specific directives relating to the conservation, deletion and communication of your personal data after your death or right to be forgotten.

How can I exercise my rights under the RGPD and the Data Protection Act?

Your requests can be formulated in different ways:

• By email by writing to : [CUSTOMER EMAIL ADDRESS]
• In person at the reception of [COMPANY NAME + CLIENT ADDRESS].
• By mail by writing to [CUSTOMER MAILING ADDRESS].
• Through an agent who will use one of the above channels to make the request.

Please submit each of your requests by one of the above means and attach a copy of your identification.

For a right of access request:

Please specify in your request which data or processing operations it relates to.

Your data will be sent to you electronically or by post, by registered mail with acknowledgement of receipt.

[CUSTOMER'S BUSINESS NAME] may require payment of a reasonable fee based on administrative costs for any additional copies requested (Article 15.3 of the GDPR).

In case of manifestly unfounded or excessive requests, [CUSTOMER BUSINESS NAME] may require payment of a reasonable fee that takes into account the administrative costs incurred in providing the information or refuse to comply with such requests (Article 12.5 GDPR).

For a right of rectification request:

If you believe that information about you is inaccurate and should be corrected, please indicate precisely which data about you is inaccurate or incomplete, and provide any information that would allow it to be corrected or completed (Article 15 of the GDPR).

For a request for the right to erasure:

Please indicate precisely the data concerning you that you are requesting to be deleted, and the reasons for your request (article 17 of the RGPD).

Please note: this right is not absolute, [COMPANY NAME CUSTOMER] may be obliged to keep information about you, in particular in the context of the management of the commercial relationship (management of invoices, management of disputes) and in the context of documentation and the provision of evidence relating to the exercise of your rights.

For a request to limit processing:

Please indicate precisely which data about you you are requesting to limit the processing of, and the reasons for your request.

Please note: this right is not absolute, [CUSTOMER BUSINESS NAME] may decide to continue processing your data (Article 18.3 of the GDPR). Limitation, if implemented, may result in the suspension of services provided by [CUSTOMER BUSINESS NAME] (access to work and deliverables, receipt of information, etc.). These effects will be described to you in the letter acknowledging receipt of your request to limit processing.

For an objection request:

Please indicate precisely which data processing you wish to object to, and the reasons for your request.

Please note: this right is not absolute. Please indicate precisely the processing for which you object to the handling of your personal data, and the reasons for your request (Article 21 of the GDPR).

To apply for the right to portability:

Each user may at any time make a request for data portability in order to recover the personal data that [CUSTOMER'S BUSINESS NAME] has collected about him/her in the context of processing based on consent and on a contractual basis.

If you would like the data to be transferred to another controller in a standard format, please specify this and provide the contact details of the other controller.

How to contact the DPO?

You can contact the DPO of [COMPANY NAME CUSTOMER] by e-mail at the following address [CUSTOMER DPO E-MAIL ADDRESS] or by post by sending your mail to the following address: [POSTAL ADDRESS DPO CLIENT].

You can make a request to the CNIL at the following address

3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

Updated on May 07, 2021.