Stereau Personal Data Policy
PREAMBLE
Stereau, a Société par actions simplifiée (simplified joint stock company) with a single shareholder, registered with the Nanterre Trade and Companies Register under number 602 011 918, located at 11, chemin de Bretagne, 92130 Issy-les-Moulineaux (in this policy, “Stereau”, or “we”) is a French company specializing in the design and optimization of water and wastewater treatment facilities.
Stereau is responsible for processing personal data within the meaning of the French Data Protection Act.
To comply with the latter, Stereau:
- has appointed a Data Protection Officer (DPO) whose main role is to inform and advise Stereau on issues relating to the protection of personal data.
- has drawn up this policy, which applies to employees of its customers, prospects and subcontractors in the context of its activities with customers in France and abroad (in this policy, “you”).
The purpose of this policy is to inform you about the collection, use and sharing of your personal data, as well as your data protection rights.
HOW IS YOUR PERSONAL DATA PROCESSED?
The table below tells you how we process your personal data.
To find out more, you can exercise your right of inquiry as indicated in the “What are your rights and how to exercise them” section.
| Finalités | Bases légales | Données concernées | Durées de conservation |
|---|---|---|---|
| Nous tâchons de vous indiquer à chaque collecte de données ce que nous allons en faire. | Ce sont fondements juridiques sur lesquels nous nous basons pour traiter vos données personnelles. | Nous traitons uniquement les données personnelles nécessaires aux finalités décrites ci-dessous. | Nous conservons vos données personnelles uniquement pour la durée nécessaire à l’accomplissement des finalités pour lesquelles nous les collectons. Cette durée peut être prolongée pour le respect de nos obligations légales ou la constatation, l’exercice ou la défense de nos droits en justice. |
| Gestion commerciale Gestion de la relation client Prospection et développement commercial | Intérêt légitime de Stereau | Données d’identification Données relatives à la vie professionnelle Données de contact électroniques | Données relatives aux clients et prospects : 3 ans à compter de la fin de la relation commerciale (par exemple, à compter du terme du dernier contrat de prestations de services ou du dernier contact émanant du prospect). |
| Gestion des réponses aux appels d’offre | Intérêt légitime de Stereau Exécution d’un contrat ou mesures précontractuelles | Données d’identification Données relatives à la vie professionnelle Données de contact électroniques | Données relatives aux clients et prospects : 3 ans à compter de la fin de la relation commerciale (par exemple, à compter du terme du dernier contrat de prestations de services ou du dernier contact émanant du prospect). |
| Gestion de projet et coordination Gestion de projet Gestion des co-traitants et fournisseurs Organisation de sessions de formation du personnel d’exploitation Gestion des PPSPS (plans particuliers de sécurité et de protection de la santé PPSPS) | Intérêt légitime de Stereau Obligation légale | Données d’identification Données relatives à la vie professionnelle Données de contact électroniques | Pendant la durée du contrat et 5 ans à compter de la fin dudit contrat. |
WHO RECEIVES YOUR DATA?
The recipients of your personal data are the following, depending on the processing carried out:
- Stereau’s internal services ;
- The service providers acting on our behalf for the purposes mentioned in the table above ;
- Competent authorities, in the strict application of our legal and regulatory obligations.
When we share your personal data with these recipients, we ensure that they treat your data securely and confidentially, and only for the purposes for which it was collected. We select our recipients carefully and inform them of their legal and contractual obligations with regard to the protection of personal data.
Is your personal data transferred outside the EEA?
Your personal data will not be transmitted to recipients outside the European Economic Area (EEA).
By default, your personal data is processed and stored on servers located in EEA member countries, thus ensuring an adequate level of data protection within the meaning of the regulations.
If your personal data is transferred to recipients outside the EEA, these transfers are carried out in accordance with the regulations.
WHAT SECURITY MEASURES ARE IN PLACE TO PROTECT YOUR DATA?
As the data controller, we take all necessary measures to ensure the security and confidentiality of personal data and, in particular, to prevent it from being damaged or accessed by unauthorized third parties. To this end, we implement all technical and organizational measures to guarantee an appropriate level of security. We also ensure that our subcontractors comply with the rules governing the protection of personal data.
WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM?
As a person concerned by the processing of personal data, you have the following rights:
Where the processing of personal data is necessary for the performance of a contract to which you are a party, the following rights apply:
- Right to information and access
- Right of rectification
- Right to erasure
- Right to restrict processing
- Right to data portability: If you have provided your personal data as part of the contract and the processing is carried out by automated means, you have the right to receive this data in a structured, commonly used and machine-readable format.
Where the processing of personal data is necessary to comply with a legal obligation to which we are subject, the following rights apply:
- Right to information and access
- Right of rectification
- Right to erasure
- Right to restrict processing
Where the processing of personal data is based on our legitimate interest or that of a third party, the following rights apply:
- Right to information and access
- Right of rectification
- Right to erasure
- Right to restrict processing
- Right to object: You have the right to object to the processing of your personal data where this is based on a legitimate interest, unless overriding legitimate grounds override your rights and freedoms.
You also have the right to define general and/or specific directives concerning the fate of your personal data and the way in which you wish your rights to be exercised after your death.
Commercial prospecting
Stereau undertakes to comply with the legal provisions applicable to commercial prospecting between professionals. For example, we do not prospect people who have expressed their opposition to receiving commercial solicitations from us.
We also undertake not to transmit your data to third parties for commercial prospecting purposes without your prior consent.
If you have given your consent to receive commercial communications from us, you may at any time object to the continuation of such communications by clicking on the unsubscribe link in each e-mail, or by contacting your Stereau point of contact or our DPO directly.
You can also register free of charge on the Bloctel opposition list, managed by Opposetel under a public service delegation agreement.
HOW TO CONTACT OUR DATA PROTECTION OFFICER (DPO)?
To exercise your rights or obtain more information about them, please contact our Data Protection Officer:
- by e-mail dpo@saur.com; or
- by post: STEREAU S.A.S., for the attention of the Data Protection Officer, 11 chemin de Bretagne 92130 Issy-les-Moulineaux.
Stereau’s DPO is available to answer any questions or concerns you may have regarding the processing of your personal data.
If you feel that we are not respecting your personal data protection rights, you can also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) at the following address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time. If we make material changes, we will notify you by appropriate means, such as a notice on our website or by e-mail. We encourage you to visit this page regularly to stay informed of any updates or changes to our privacy policy.