Personal Data Protection Policy
Introduction
ENDEL undertakes to respect privacy and protect the personal data collected and processed during your browsing at www.altradendel.com (hereinafter, the “Site”).
The purpose of this personal data protection policy (hereinafter, the “Policy”) is to inform visitors or users (hereinafter, the “User” or “you”) of the www.altradendel.com website of the procedures for the protection of their personal data pursuant to French law no. 78-17 of 6 January 1978 on information technology, files and civil liberties, as amended by the French law of 20 June 2018, Implementing Decree no. 2019-536 of 29 may 2019 and Regulation no. 2016-679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to collectively as the “Regulations”).
ENDEL undertakes to respect your privacy and protect the personal data collected and processed during your use of its Supplier Procurement Portal.
1 – Identity of the data controller
Within the context of the use of the Site, the company ENDEL (“the Company”, “we”, “us” or “our”), located at 165 boulevard de Valmy – 92700 Colombes, France, in its capacity as data controller, will collect and process personal data. Consequently, ENDEL shall ensure its compliance with the applicable personal data protection regulations.
2 – Purposes of the processing and legal bases
ENDEL processes personal data for the following reasons:
- Management of the Site,
- Marketing purposes,
- To provide information requested by Users who have completed the contact form.
ENDEL processes personal on the grounds of the following legal bases:
- Legitimate interest: for the proper management of the Site when Users complete a contact form through the specific “Contact” area,
- Consent: where a User of the Site grants consent, Cookies may also be stored on said User’s terminal.
3 – Categories of data collected
As part of its activities, ENDEL may collect the personal data of visitors to its Site, persons who complete a contact form on its Site, persons who have subscribed to an electronic newsletter.
ENDEL may collect the following personal data:
- personal identification data: name, telephone number, e-mail address;
- electronic identification data: IP addresses, information collected through Cookies.
Each time some pieces of information must be provided, and others are optional, this will be clearly indicated to you.
5 – Recipients of data and disclosure
The data processed will only be communicated to authorised recipients, according to the purposes of the processing. These recipients will be internal ENDEL staff. Nevertheless, other Altrad Group entities or third parties involved in the fulfilment of the purposes which required the collection of said data may also be recipients thereof.
In some cases, ENDEL may be required to communicate the data to authorised third parties not directly involved in the processing, e.g. to satisfy a legal requirement.
The Company shall only retain your data for the period necessary for the purposes for which they were collected.
More specifically, the following retention periods apply:
- Direct marketing retention period: the data will be used until the data subject unsubscribes and ENDEL receives a message that the e-mail address is no longer used.
ENDEL shall retain your personal data for a longer period if ENDEL is legally obliged to do so or if this is necessary to defend its interests in legal proceedings.
ENDEL sets great store by the security of your personal data. Consequently, the Company implements all the appropriate administrative, technical and organisational measures to guarantee a level of security commensurate to the risks, in consideration of the state of knowledge, implementation costs and the nature, scope, context and purposes of the processing.
8 – Subcontracting
ENDEL may use service providers and other third parties for the processing of data. These service providers may have access to your personal data for the sole and unique purpose of executing their tasks in compliance with the purposes of the processing. ENDEL shall ensure that these service providers have the necessary safeguards for the execution of the tasks assigned to them and to ensure the protection of your data.
Your personal data will not be transferred to anywhere outside the European Union (EU) or the European Economic Area (EEA).
10 – Rights of the data subjects
In accordance with the information technology and civil liberties law of 6 January 1978, as amended, and European Regulation 2016/679 of 27 April 2016, data subjects have a right of access, rectification, erasure, restriction of processing and portability over data that concern you.
They also have a right to object to the processing of their personal data for reasons connected with their particular situation. They are also entitled to specify the general and specific guidelines that define the way in which they wish these rights to be exercised after their death.
To exercise these rights, just speak to your usual contact at ENDEL or submit a request:
- by e-mail: dpm@altradendel.com;
- or by post:
ENDEL
Legal Department
FAO the Data Privacy Manager
Bâtiment Fitzgerald
165 Boulevard de Valmy – 92700 COLOMBES
In both cases, you will be required to provide a document that proves your identity.
ENDEL shall do everything it can to respond as swiftly as possible and within one month from receipt of your request at the latest. ENDEL reserves the right to extend this to three months if the request is particularly complex.
Lastly, data subjects also have a right to contact the competent authority, the Commission Nationale Informatique et Libertés (French national information technology and civil liberties board – CNIL), to lodge a complaint.