ELEPHANT VERT FRANCE (whose registered office is located at 5 cours du Danube, 77 700 Serris), in its capacity as data controller, attaches great importance to the protection and respect of your privacy. The purpose of this Policy is to inform you, in accordance with Regulation no. 2016-679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”), of our practices regarding the collection, use and sharing of information that you provide to us through our website www.elephant-vert.com (the “Site”).
The purpose of this Policy is to inform you about the categories of personal data we may collect or hold about you, how we use it, with whom we share it, how we protect it, and the rights you have over your personal data.
- The Data we collect
By using the Site, you are required to send us information, some of which are likely to identify you and therefore constitute personal data (hereinafter referred to as the “Data”). This is particularly the case when you contact us via the contact form or send us your application.
This information contains the following data in particular:
•Account data: means the data that you enter when creating an account by completing the registration form.
•Data relating to browsing: means the data that we collect during your browsing on the Site such as in particular the date, time of connection and/or browsing, the type of browser, the language of the browser, its IP address.
In the event that you connect to our services using the social media features made available to you, we will have access to some of the Data (including your first name, surname, photograph, email address and number of friends) from your account on said social media in accordance with the general terms and conditions of use of the relevant social media. We may also collect some of your Data when you interact with features of these social networks, such as “Like” features.
- How do we use the data we collect?
We use the Data we collect to:
|Allow you to manage your Personal Account||Consent|
|Study and analyse your application||Consent|
|Allow you to receive the newsletter||Consent|
|Contact you following a request from you||Consent|
|For statistical purposes||Legitimate interest|
When collecting the Data, you will be informed if certain Data must be completed or if it is optional. Data identified by an asterisk within the collection form is mandatory. Failing this, the execution of your request may be restricted.
- Who are the recipients of the Data we collect and why do we transmit this data to them?
3.1 Data processed by ELEPHANT VERT France
The Data collected is intended for us in our capacity as data controller.
|manage your Personal Account||Information Systems Department|
|Study and analyse your application||Human Resources|
|Allow you to receive the newsletter||Marketing/Communication Department|
|Contact you following a request from you||Marketing/Communication DepartmentSales Department|
|For statistical purposes||Information Systems DepartmentMarketing/Communication Department|
The Data collected are not disclosed to third parties.
3.2 Data transferred to public authorities and/or bodies
In accordance with the Regulations in force, the Data may be sent to the competent authorities on request and in particular to public bodies, judicial officers, ministerial officers, bodies responsible for collecting debts, exclusively to meet legal obligations, as well as in the case of the search for the perpetrators of offences committed on the Internet.
- How long do we keep your Data?
In this respect, the Data used to study your application file are retained for the entire period necessary to study your application file plus the duration of the legal limitation period. It being specified here that in the event that you are It is hereby specified that in the event that you are employed by one of the companies of the ELEPHANT VERT Group at the end of the recruitment process, the Data collected in connection with your recruitment will be retained for the duration of your employment plus the limitation period.
We also inform you that in the event of the negative outcome of an application to which you have applied, unless you issue a counter-order, your application will be kept for 2 years. You may delete your application at any time, except during the statutory limitation period, which would require us to keep your Data.
Also, the Data communicated in connection with registration for newsletters will be kept on our mailing list until you unsubscribe.
The retention period for other Data communicated will not exceed 3 years from your last activity recorded on the Site. You may at any time withdraw or modify your consent relating to our use or disclosure of your Data, or request that we delete them from the files of ELEPHANT VERT France, subject to the restrictions imposed by law and contracts.
Your Data is erased when retention periods expire. Nevertheless, your Data may be archived beyond the periods provided for the purposes of researching, ascertaining and prosecuting criminal offences for the sole purpose of making your Data available to the judicial authority as necessary.
Archiving means that your Data will no longer be available online but will be extracted and stored on an independent and secure medium.
5. Are your Data transferred, how and where?
Your Data may be communicated to the Human Resources departments of the various Group companies responsible for processing your transmitted Data for the purposes of studying your application. As such, your Data may be transferred from a country located in the European Union to a country located outside the European Union.
When we transfer your Data outside the European Union, we will always do so in a secure and lawful manner:
-Either by transferring the Data to a recipient located in a country that has been the subject of an adequacy decision by the European Commission certifying that it has an adequate level of protection;
-Either by executing or having executed the European Standard Contractual Clauses that have been approved by the European Commission as ensuring an adequate level of protection for your Data;
-Either by using Binding Corporate Internal Rules validated by the competent data protection authorities;
-Or by using any appropriate guarantees referred to in Article 46 of the Regulation.
You may access all these documents by contacting us at the address mentioned in Article 9 hereof.
6. How are your Data protected?
We take appropriate technical and organizational measures to prevent unauthorized access to or modification, disclosure, loss or destruction of your Data. It is important that you maintain the confidentiality of your credentials in order to prevent unlawful use of your account.
7. What are your rights on your Data?
In accordance with applicable personal data protection Laws and Regulations, you have rights relating to your Data, namely:
–A right of access and information: you have the right to be informed in a concise, transparent, intelligible and easily accessible manner of how your Data are processed. You also have the right to obtain (i) confirmation that Data about you are being processed and, where applicable (ii) access and obtain a copy of such Data.
–A right of rectification: you have the right to obtain the rectification of inaccurate Data concerning you. You also have the right to complete the incomplete Data concerning you, by providing an additional declaration. If this right is exercised, we undertake to communicate any rectification to all recipients of your Data.
–A right of erasure: in certain cases, you have the right to obtain the erasure of your Data. However, this is not an absolute right and we may for legal or legitimate reasons retain such Data.
–A right to restriction of processing: in certain cases, you have the right to obtain restriction of processing on your Data.
–A right to data portability: you have the right to receive your Data that you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to transmit them to a third party of your choice. This right only applies when the processing of your Data is based on your consent, on a contract or that this processing is carried out by automated means.
–A right to object to processing: you have the right to object at any time to the processing of your Data for processing based on our legitimate interest, a mission of public interest and those for commercial prospecting purposes. This is not an absolute right and we may for legal or legitimate reasons refuse your request to object.
–The right to withdraw your consent at any time: you may withdraw your consent to the processing of your Data when the processing is based on your consent. Withdrawal of consent does not compromise the lawfulness of processing based on consent made prior to such withdrawal.
–The right to lodge a complaint with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices.
–The right to give instructions concerning the fate of your Data after your death: you have the right to give us instructions concerning the use of your Data after your death.
To exercise these rights, you can contact us at the email or postal address indicated in article 9. Please note that we may require proof of your identity to exercise these rights.
We may modify this Policy from time to time, in particular to comply with any regulatory, jurisprudential, editorial or technical changes. If applicable, we will change the “Last update” date and indicate the date on which the changes were made. Where necessary, we will inform you and/or request your consent. We advise you to check this page regularly for any changes or updates to our Policy.
If you have any questions about this Policy or any queries about your Data, you can contact us by:
– Sending an email to the following address: firstname.lastname@example.org; or
– Sending a letter to the following address: Elephant Vert France – GDPR – 5 cours du Danube, 77700 Serris, France.
If you feel, after contacting us, that your “Data Protection” rights have not been respected, you can send a complaint to the CNIL.
10. Applicable law and jurisdiction
Last update: July 20th 2020©