Privacy policy

Preamble

Update February 2023

The Company undertakes to respect privacy and to protect the personal data collected and processed during your browsing on our website.

The Company undertakes to comply with the applicable regulations on the protection of personal data, in particular the provisions of the General Data Protection Regulations (EU Regulation 2016/679) and the “Informatique et Libertés” law of January 6. 1978 amended.

More specifically, the Company takes care to collect only the strictly necessary data, in a fair and transparent manner, for specific, explicit and legitimate purposes and not to reuse them for purposes incompatible with those initially intended. The Company implements technical and organizational measures to guarantee the accuracy, updating, rectification or erasure of data. Finally, the Company undertakes to respect the retention periods for the personal data collected as well as the obligations relating to cross-border transfers of personal data when they exist.

1 / Identity of the data controller

As part of the use of the services accessible on its website www.siradel.com (hereinafter the “website”), the company SIRADEL (“The Company”, “we”, “our”), a simplified joint stock company with share capital of €16,400,000, registered with the Rennes RCS under number 444 062 624, located at 2 Parc de Brocéliande, 35760 Saint-Grégoire, France, as data controller, is likely to collect and process personal data concerning you. Consequently, the Company ensures that it complies with the applicable regulations regarding the protection of personal data.

2 / Means of data collection

When browsing our website, you are likely to communicate your personal data to us by various means, in particular via connection cookies or through contact forms accessible on the website.

Cookies are also ways to collect certain data about you. For more details in this regard, we invite you to consult our Cookies notice.

Contact forms are present on the website in the “Contact” tab. The characteristics of the processing of your personal data collected via the aforementioned forms are reminded to the User before submitting the form.

3 / Purposes of data processing and legal bases

Depending on the case, the Company mainly processes your data for the following purposes:

  •     Management of requests for information and/or contact (customer, press, etc.);
  •     Enrichment of the database of candidates by allowing spontaneous applications;
  •     Commercial management and marketing;
  •     Management and monitoring of the relationship with customers in general;
  •     Optimization of the operations of the website.

The purpose of the processing is reminded to you at the time of the collection of the data.

The legal basis for the processing described in this data protection notice depends on the personal data collected and the context in which the collection was made. The Company may process your data because you have consented to the processing or if we have legitimate interest grounds or to ensure compliance with a legal obligation or in the context of a contractual obligation. For example, in the context of contact forms, you will be reminded of the legal basis of the processing.

4 / How is your personal data protected?

We apply the necessary internal and technological security measures so that your data is neither lost, nor diverted, nor consulted, nor communicated to third parties – except at the request of a judicial authority, the police or any authority empowered by the law.

Your information is encrypted on servers based in France. Access to your user account is protected by your password. You are responsible for the confidentiality of the password you chose when registering on our website, and you agree not to communicate it to anyone.

5 / Data minimization

Through each contact form available on the website, the Company only collects the personal data strictly necessary for the purposes for which they are processed, namely only for administrative and commercial purposes. The purposes pursued by the forms are recalled before their submission by the User.

The Company invites Users to minimize the data (confidential or personal) they transmit when the website offers the possibility in the free comment areas or in attachments.

Several categories of data are collected via the website, in particular:

  •     Via the contact forms: Data relating to identity (surname, first name, e-mail), data relating to professional life (professional contact details, functions, entity to which they belong, subject of contact). Mandatory information in the forms is marked with an asterisk. The contact form allowing you to exercise your Data Protection rights allows you to also attach your identity document.
  •     Via non-essential cookies in the event of acceptance of their deposit by the User: data relating to navigation (date, time, IP address, page consulted, browser used, etc.)

6 / Recipients of data and disclosure

The data processed are only communicated to recipients authorized and determined with regard to the purposes of the processing. These recipients may be internal Company departments (HRD, sales department, etc.).

In certain cases (investigations by competent supervisory authorities, disputes, etc.), the Company may be required to communicate personal data to authorized third parties, not directly involved in the processing, for example:

  •     For compliance with a legal obligation;
  •     To protect and defend its property rights;
  •     To prevent any harmful event on the website;
  •     To ensure the safety of users of the website or the public.

7 / Duration of data retention

The Company only keeps your data for the duration necessary for the purposes for which it was collected.

The data retention period is three-fold: retention in an active database accessible only to persons duly authorized to fulfill the purpose for which they were collected; storage in an intermediate database, with restricted access, for a fixed period meeting the legal obligations in force; the purge which consists in permanently deleting the data.

You will be reminded of the applicable retention period when the data is collected. With regard to the retention period of non-essential cookies placed in the User’s browser (subject to obtaining their prior consent), this is recalled on the Cookies page.

8 / Data security

The Company is committed to the security of your personal data. Consequently, the Company implements all the appropriate technical and organizational measures in order to guarantee a level of security adapted to the risks, taking into account the state of knowledge, the costs of implementation and the nature, scope, the context and purposes of the processing.

9 / Subcontracting

The Company may use service providers and other third parties to facilitate, maintain, improve, analyze and secure the use of the website. These service providers may have access to your personal data for the sole and exclusive purpose of performing the tasks in accordance with the purposes of the processing. The Company ensures that the service providers have the guarantees necessary for the performance of the tasks assigned to them and to ensure the protection of your data.

10 / Data transfer

Your personal data may, where appropriate, be processed in a territory outside the European Union.

The Company takes all necessary measures to protect the processing of your data and ensures that no transfer is made to a country or an entity that does not provide sufficient guarantees. For example, through the signature by the recipient, on a case-by-case basis, of contractual clauses based on the model of the European Commission or any other mechanism provided for by the GDPR when the recipient country is not considered by the European Commission as providing an adequate level of protection.

11 / Your rights over your data

In accordance with the Data Protection Act of January 6, 1978 as amended and European Regulation 2016/679 of April 27, 2016, you have the right to access, rectify, delete, limit, portability of personal data which concern you.

You also have the right to oppose the processing of your personal data for reasons relating to your particular situation.

Finally, you have the right to define general and specific directives defining the way in which you intend to manage your data after your death.

To exercise your rights, simply make a request via the Data Privacy Manager address, contact@siradel.com

We make every effort to respond to you as soon as possible and at the latest within one month of receipt of your request. We reserve the right to extend this period to three months if your request is particularly complex.

Finally, you also have the right to contact the competent supervisory authority, the Commission Nationale Informatique et Libertés (CNIL), in order to lodge a complaint.

12 / Update

The Company may update this notice relating to the protection of personal data at any time. Consequently, the User is invited to refer regularly to this notice.

Last updated on 03/02/23