PRIVACY POLICY

 

 

PROTECTION OF PERSONAL DATA

 

This Privacy Policy details SP3H’s (the “Company”) Personal Data Policy at www.sp3h.com . This Policy applies to all information provided by you, or collected by us during your navigation on our Site, in accordance with the regulations in force in France regarding personal data as issued by law no. 78-17 of 6 January 1978 on data processing, files and freedoms, known as the “Data Protection and Freedoms” Act and the EU Regulation 2016/679 of 25 May 2018 on data protection known as the “GDPR”.
The purpose of this Privacy Policy is to inform individuals accessing the services offered on our Site (hereinafter the “Users”) of how we collect, use and share their personal data. You will be informed of any changes or updates to this Privacy Policy. Your active consent to the new Privacy Policy will be required to continue using the services offered by the Company. As part of the operation of the website www.sp3h.com, SP3H may collect personal data. These data will be processed in accordance with the purposes provided for in the collection. The protection of personal data is a matter of trust and your trust is important to us. We respect your privacy. Any processing of your personal data is carried out in compliance with the relevant legal provisions. Below we would like to inform you about how we collect and use your data.

 

You can visit our website online without having to provide personal information. You remain anonymous throughout your visit and we cannot identify you at any time. We store the data you provide to us when you register your data on the contact form or when you register with our newsletter.

 

What personal data is collected?
We remind you that personal data is any information relating to an identified individual or that can be identified, directly or indirectly.
When browsing the Site and using the various services offered by the Company, you consent to our collection of the following categories of data:
-Civil status: Surname, First name, Postal address, Email address, Telephone number
-Working life: Society
-Connection data: IP address
You undertake to provide up-to-date and valid Personal Identification Data, as part of the information required on the Site, and guarantee that you will not make any false statement or provide any incorrect information.

How and why are your Personal Data collected?
You consent to the Company collecting your Personal Data when you provide the following documents:
-Contact form
Your Personal Data is collected on the basis of the following legal bases:
-The specific, free and informed consent of the User (especially for the subscription to the Newsletter)
-Performance of a legal obligation on the Company
-The execution of a contract concluded between the Company and the User (in particular for the execution of the general conditions of use/sale)
-The legitimate interest of the Company (in particular to ensure the security of transactions)

 

For what purposes are your Personal Data collected?
The mandatory Personal Data is the data strictly necessary for processing or for your requests. In the absence of communication of said data, the User is informed that certain services offered by the Company cannot be provided to him.
The mandatory nature of the information requested is reported to you during collection.
The optional Personal Data collected by the Company is intended to better understand you and improve your browsing experience on the Site.
Your Personal Data is collected and processed for the following purposes:
-Subscribe to our Newsletter
-Contact and assistance
-Recruitment Management
-Technical monitoring and site optimisation

 

Who has access to your Personal Data?
Your Personal Data are intended for persons duly authorised to process them within the Company, in particular, and according to the nature of the processing and the type of data, the persons in charge of the marketing department, the administrative department, the logistics and IT department.

 

What are your rights regarding your personal data?
You may, upon written request, access the Personal Data concerning you, request their modification or rectification, or require that they no longer appear in the Company’s database.
Under the right of access, you are authorised, in accordance with Article 15 of the GDPR, to question the Company in order to obtain the communication of the Personal Data concerning you in an accessible form, confirmation that your Personal Data is or is no longer being processed, communication of the purposes of the processing, the categories of Personal Data processed and the recipients to whom your Personal Data is communicated and the retention period of your Personal Data or the criteria used to determine this duration.
In accordance with Article 16 of the GDPR, the right of rectification gives you the right to require the Company to rectify, complete or update your Personal Data when it is inaccurate, incomplete, ambiguous or outdated.
Under the conditions provided for in Article 17 of the GDPR, you have a right to the erasure of your Personal Data, allowing you to ask the Company to erase your Personal Data as soon as possible, In particular, when they are no longer necessary for the purposes for which they are collected.
You also have the right to restrict the processing of your Personal Data in the cases listed in Article 18 of the GDPR. You may therefore request that your personal data be kept solely for the purpose of:
-verify the accuracy of the Personal Data you dispute,
-serve you in the establishment, exercise or defence of your legal rights, even though society no longer has the need to do so,
-verify whether the legitimate grounds pursued by the controller prevail over yours in the event that you oppose the processing based on the Company’s legitimate interest,
-satisfy your request to restrict the use of your data – rather than erasure – in the event that the processing of your data is unlawful.
In the circumstances provided for in Article 20 of the GDPR, you have a right to the portability of your Personal Data, allowing you to recover from the Company the Personal Data you have provided to it, in a structured format, This is commonly used and machine readable for transmission to another data controller.
In accordance with Article 21 of the GDPR, you have the right to object, at any time, to the processing of your Personal Data for commercial prospecting purposes.
To exercise your aforementioned rights of access, rectification, erasure, limitation, portability and opposition, simply send your request by e-mail to account@sp3h.com
The Company will provide the person exercising one of these rights with information on the measures taken, as soon as possible and in any case within one month of receipt of the request. This period may be extended by 2 months, due to the complexity and number of requests.
If the Corporation does not comply with the request, it will inform the person as soon as possible, At the latest, within one month of receipt of his request, the reasons for his inaction and the possibility of lodging a complaint with a supervisory authority and filing a judicial appeal.
The exercise of these rights is free of charge. However, in the event of a manifestly unfounded or excessive request, the Company reserves the right to require the payment of administrative costs or to refuse to act on such requests. You can also request the recovery or deletion of your personal data via a form.
How does the Company ensure the security and confidentiality of your personal data?
The Company undertakes to process your Personal Data in a manner that:
-lawful,
-loyal,
-transparent,
-for the duration necessary for the treatments put in place,
-securely.
The Company shall put in place and update appropriate technical and organisational measures to ensure the security and confidentiality of your Personal Data by preventing it from being distorted, damaged or communicated to unauthorized third parties.
What recourse in case of violation of your data?
In the event of a violation of your Personal Data that may pose a risk to your rights and freedoms, the Company shall notify the CNIL of the violation as soon as possible, and if possible within 72 hours of becoming aware of it. The Company will also inform the User as soon as possible in accordance with the provisions of Article 34 of the GDPR.
Without prejudice to any other administrative or judicial remedy, the User who considers that the processing of his Personal Data constitutes a violation of the provisions of the legislation in force may lodge a complaint with a competent supervisory authority such as the Commission Nationale de l’Informatique et des Libertés (CNIL).
Who do you want to ask?
For any question concerning the processing of their personal data and the exercise of their rights, Users can contact our dedicated service at the following address: account@sp3h.fr