Personal data protection policy
Our personal data protection policy in accordance with European Regulation no. 2016/679 (the GDPR) on the protection of natural persons with regard to personal data processing and on the free movement of such data, appears below.
This data includes any information that identifies you directly or indirectly as a natural person.
The aim of this personal data protection policy (hereinafter the Policy), is to inform you what data we collect, for what reasons and on what basis we collect it, how we use and store it, and your rights in respect of the data. Please read the Policy carefully, it explains the practices we employ for processing your personal data.
Note that this Policy may be modified or supplemented by our offices at any time, specifically to comply with any legislative, regulatory, jurisprudential or technological changes. You are therefore advised to re-read this Policy regularly in case there are any changes.
I. Identity of data controller
The controller of the personal data processing is the
LAITA company - Registered office: 4 Rue Henri Becquerel 29806 BREST CEDEX 9 - Registered with the BREST Trade and Companies Register under number 380 656 439.
Tel: 02 98 42 54 25, email: firstname.lastname@example.org
II. Personal data subject to processing
The information we collect is used to improve the services we provide. The data is as follows:
• Relating to your identity: surname, first name, title, postal and electronic addresses, phone number (landline and/or mobile);
• Relating to your work situation: company, position;
• Necessary for statistical purposes.
Please be aware that certain information is also collected and stored automatically when you access our services:
• When you browse our website and/or create an account on the site (IP addresses, login data, type and version of internet browser used, type and version of browser plugin, operating system and platform, information about your browsing activity on our site, cookies);
• When you contact us from a phone number;
• Certain types of personal data that we process may also originate from third-party partners, e.g. your profile on social media such as Facebook, LinkedIn, etc. See Section V below for details.
III. Les différents traitements effectués sur ces données
We process your personal data in order to carry out, deliver and improve the services we provide.
The processing may be for some or all of the following purposes:
1. TO COMPLY WITH OUR LEGAL OBLIGATIONS
In certain cases we have a legal obligation to collect and process your personal data.
2. TO ACCOMMODATE YOUR RIGHTS
We may process your personal data to fulfil any requests you make to exercise your rights. Please see Section VI of this Policy for your rights.
3. SHARING YOUR DATA
We do not sell your personal data. We only share it with third-party partners in certain specific circumstances. In this case, we only share your personal data where it is required by law, or transmit it to third-party partners (established within or outside the European Union) who provide us with services such as hosting our websites and sending emails. Please see Section V of this Policy for more information.
4. MANAGING AND IMPROVING OUR WEBSITE
When you visit our website, we collect information such as your IP address, location, time of visit, etc. to identify the habits of the people who use the site and improve their experience.
IV. Data retention period
Your personal data is retained for the length of time necessary to fulfil the purpose for which it was required when it was collected.
We also retain personal data for the time needed to process or respond to complaints or requests for information.
Your personal data may also be stored for a longer period of time if required by the applicable laws, statutory limitation periods or CNIL (French National Information Science and Liberties Commission) recommendations, e.g.
• Connection logs: 1 year from last connection;
• Cookies: 13 months from when they are placed on your computer.
V. Recipients of personal data
Your personal data may also be transferred to other companies within our Group which are located within the European Union. All our companies are required to observe the confidentiality and personal data protection practices outlined in this Policy. Your personal data may also be transferred to other companies established within or outside the European Union, based on contracts that include the standard clauses drawn up by the CNIL and stipulating the requirements to be met in respect of the transfer of personal data. See the table below for details:
[trouver une solution pour affichage tableau]
VI. Your rights
You have the following rights in respect of your personal data, which you may exercise by emailing us at email@example.com or writing to us at Laïta – ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9.
To exercise your rights, note that the CNIL provides an email generator to help you formulate your request: https://www.cnil.fr/fr/modeles/courrier
If we cannot identify you definitively from the information you include in a request to exercise your rights, we may ask you for a copy of a valid identity document (ID card or passport) in the form of a GIF, JPG, PNG or PDF document.
1. RIGHT OF ACCESS AND COMMUNICATION OF DATA
You have the right to know if and how we process your personal data and to receive notification of this in an understandable format. However, in view of our obligations with respect to security and confidentiality when processing personal data, note that your request will only be processed if you provide us with proof of identity, specifically by supplying a copy of a valid identity document (electronically or a signed photocopy).Note that we are entitled to refuse any requests that are openly abusive (due to the number of requests or requests that are repetitive or systematic) and requests that infringe the rights of third parties.You can submit your request at the above address, using the CNIL template.
2. RIGHT TO RECTIFICATION OF DATA
You have the right to request rectification, updating, blocking or erasure of any personal data concerning you that may be inaccurate, erroneous, incomplete or obsolete. You can submit your request at the above address, using the CNIL template.
3. RIGHT TO OPPOSE
You have the right to oppose the processing of your personal data. You must justify any opposition with reasons pertaining to your particular situation, except in the case of processing for commercial prospecting purposes (including profiling, insofar as this is related to commercial prospecting), for which you do not need to justify your objection. If your opposition is not related to commercial prospecting purposes, therefore, we are entitled to refuse your request on the following grounds:
• you have already given us your consent; you may, however, withdraw your consent;
• there are compelling, legitimate reasons for processing your data;
• we are bound by a contract;
• we are under a legal obligation to process your data;
• the processing is necessary to protect your interests.
You can submit your request at the above address, using the CNIL template.
4. RIGHT TO ERASURE
You have the right to request the erasure of your personal data with the minimum delay. Note that in rare cases we may not be able to grant a request for erasure due to a legal obligation (e.g. to observe the retention period for an invoice, in which case the related data must be retained for 10 years).You can submit your request at the above address, using the CNIL template.
5. RIGHT TO RESTRICT
You have the right to request restriction of processing. You can submit your request at the above address, using the CNIL template.
6. RIGHT TO PORTABILITY
You have the right to portability of your personal data, i.e. to receive the personal data you have supplied in a structured, commonly-used and machine-readable format, and to transmit it to another controller. Note that this right can only be granted where your data is processed electronically (data processed in hard copy is therefore excluded) and based on your prior consent or the fulfilment of a contract concluded between us.To exercise this right, please contact us either by filling in our online form, by emailing us at firstname.lastname@example.org or by writing to us at Laïta – ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9.
7. DIGITAL WILL
You have the right to provide us with specific instructions regarding the fate of your personal data after your death in terms of its retention, erasure and communication in the context of the processing we carry out. These instructions can be submitted either by filling in our online contact form or by writing to us at Laïta – ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9.You can change your instructions at any time. In the absence of instructions or a declaration to the contrary, the heirs of a deceased person may exercise the rights of the deceased person.
8. RESPONSE TIME
We undertake to respond to requests for access, rectification and opposition and any other additional requests for information in the shortest possible time, not exceeding ONE (1) month from the time we receive it. However, we may extend this period by two additional months depending on the number and complexity of the request(s). In this event, you will be informed of the delayed response time within one month of your request.
9. RIGHT TO CONTACT THE COMPETENT SUPERVISORY AUTHORITY
If you experience difficulties, you have the right to complain to the CNIL: https://www.cnil.fr/fr/plaintes
10. WITHDRAWAL OF CONSENT
You also have the right to withdraw your consent to the processing of your personal data based on procurement of your consent. For example, if you have not given your consent to receiving publicity messages electronically, you can unsubscribe from these mailings at any time by clicking on the unsubscribe link at the bottom of any publicity message you receive. You can also delete your user account at any time without giving a reason, either directly online or by contacting our customer services department. For other types of consent withdrawal, please contact us either by filling in our online form, by emailing us at email@example.com or by writing to us at Laïta – ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9.
VII. SECURITY OF PERSONAL DATA
We undertake to implement the appropriate technical and organisational measures to ensure your personal data is adequately protected. These measures may include, among others:
• pseudonymisation and encryption of data;
• devices to guarantee the confidentiality, integrity, availability and long-term durability of the service and processing systems;
• devices to re-establish the availability of and access to data as soon as possible in the event of a physical or technical incident;
• a procedure for the regular testing, analysis and evaluation of the technical and organisational measures designed to ensure the security of processing.
In the interests of security, we ask you to keep your password secret and not disclose it to anyone. You are responsible for any transgression resulting from a failure on your part to safeguard the confidentiality of the password you have chosen to access your personal account.
VIII. DATA PROTECTION OFFICER
Contact details for our data protection officer: firstname.lastname@example.org
IX. SOCIAL MEDIA
Note that most internet browsers have a simple procedure for rejecting this technology.
X. PERSONAL DATE CONCERNING CHILDREN
Any person under the age of fifteen (15) wishing to apply for a placement with us must ensure that those who hold parental authority over them are aware of and agree to it.
Last updated: 11/08/2022