Privacy Policy, Personal Data Protection & General Data Protection Regulation (GDPR)

As part of its business operations, ELCIMAÏ collects and processes the personal data of its users (hereinafter the “Users”).
This Privacy Policy, established by ELCIMAÏ, is intended to provide users with a concise and comprehensive overview of how ELCIMAÏ processes personal data.
ELCIMAÏ places particular importance on respecting Users’ privacy and the confidentiality of their personal data, and is therefore committed to processing data in compliance with applicable laws and regulations, including Law No. 78-17 of January 6, 1978, on Information Technology, Data Files, and Civil Liberties (hereinafter the “Data Protection Act”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”).

DEFINITIONS :
Personal data : Personal data means any information relating to an identified or identifiable natural person, that is to say, a person who can be identified, directly or indirectly, by reference to an identification number or to one or more factors specific to that person.
Processing of personal data : any operation or set of operations performed on such data, regardless of the method used, including collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, as well as blocking, erasure, or destruction.
Cookie : A cookie is a piece of information stored on a user’s hard drive by the server of the website they are visiting. It contains several pieces of data : the name of the server that placed it, an identifier in the form of a unique number, and possibly an expiration date. This information is sometimes stored on the computer in a simple text file that a server accesses to read and record information.

DATA CONTROLLER – DPO :
The data controller for the personal data referred to herein is the company GROUPE ELCIMAÏ, registered with the MELUN Trade and Companies Register under number 421 470 063, with its registered office located at 3 rue de la brasserie Grüber, 77000 MELUN.
ELCIMAÏ has appointed a Data Protection Officer who may be contacted at any time regarding any inquiry concerning the company’s processing of personal data at the following address : dpo@elcimai.com.

DATA COLLECTED :
ELCIMAÏ collects Users’ data in order to provide them with the services they have requested. Whether the data provided is mandatory or optional (to complete the User’s registration and provide them with the offers and services offered by ELCIMAÏ) is indicated at the time of collection by an asterisk.
In addition, certain data is collected after obtaining the User’s consent based on the User’s actions on the site (see the section on cookies).

PURPOSES :
The personal data collected by ELCIMAÏ in connection with the provision of services is limited to what is necessary for ELCIMAÏ to pursue its legitimate, specific, and explicit interests, while respecting the User’s rights. All such personal data is processed based on the User’s consent.

ELCIMAÏ processes data for the following purposes :

• The commercial and administrative management of its business ;
• Marketing event management ;
• Collecting applications as part of its internal recruitment process
• Detection of malicious behavior (fraud, phishing, spam, etc.) ;
• Improving the user experience on the website ;
• More generally, any purpose referred to in Article 2 of Resolution No. 2012-209 of June 21, 2012, establishing a simplified standard for the automated processing of personal data relating to the management of users and prospects.

DATA RECIPIENTS :
The personal data collected is intended for ELCIMAÏ’s sales and recruitment departments. It may be shared with ELCIMAÏ’s subsidiaries or with subcontractors that ELCIMAÏ may engage in connection with the provision of its services.
In this context, personal data may be transferred to a country that is or is not a member of the European Union. The user will be systematically notified of this, and their consent will be explicitly obtained. ELCIMAÏ implements safeguards to ensure the protection and security of this data, in accordance with regulations.
ELCIMAÏ does not sell or rent personal data to third parties for marketing purposes.
However, the disclosure of personal data to third parties may occur in the following cases :

• At the request of the competent legal authorities, pursuant to a court order, or in connection with legal proceedings.

DATA RETENTION PERIOD :
To comply with its legal obligations or to ensure it has the necessary information to assert its rights, ELCIMAÏ may retain data in accordance with applicable regulations.
Accordingly, personal data collected by ELCIMAÏ :

• for a maximum period of ten years following the termination of the contractual relationship for customer Users, or from the date of collection by the data controller or the last contact initiated by the prospective User for data relating to the latter.
  The termination of the contractual relationship is understood to mean the express termination of the contract by the User,
  • for a maximum of two years after the information is collected, in the case of a candidate who is not selected.

USER RIGHTS :
In accordance with applicable regulations, the User has the right to access and rectify personal data concerning him or her, which allows the User to have data that is inaccurate, incomplete, ambiguous, or outdated, or whose collection, use, disclosure, or retention is prohibited, corrected, supplemented, updated, or deleted.
The User also has the right to request the restriction of processing and to object, on legitimate grounds, to the processing of their personal data. The User may also provide instructions regarding the handling of their personal data in the event of death.
Where applicable, the User may request the portability of their data, or, where the legal basis for processing is consent, withdraw their consent at any time.
The User may exercise their rights by contacting us at dpo@elcimai.com.
The User may unsubscribe from the ELCIMAÏ newsletter or marketing emails by following the unsubscribe links included in each of these emails.
In the event of a dispute, the User may file a complaint with the CNIL, whose contact information is available at http://www.cnil.fr.
The User may access detailed information regarding the use of their personal data, including the purposes of processing, the legal bases allowing ELCIMAÏ to process the data, their retention periods, their recipients, and, where applicable, transfers of such data to a country outside the European Union, as well as the safeguards implemented. To do so, the User may send their request by email to dpo@elcimai.com.

COOKIES :
The ELCIMAÏ website uses cookies for the purpose of facilitating navigation on the site, providing the service offered by ELCIMAÏ, measuring the site’s traffic and the performance of advertising campaigns, and enabling the sharing of pages on the site.

Types of cookies used :

Cookies necessary for browsing the site
These cookies are necessary for the elcimai.com website to function. They enable the use of the site’s main features. Without these cookies, users cannot use the site normally.

Functional
cookies These cookies help personalize the user experience.

Analytical
cookies These cookies help us understand how the site is used and how well it performs, and enable us to improve its functionality by analyzing traffic to information pages and tracking open rates, click-through rates, and bounce rates at the individual level.

Share
button cookies These social cookies allow users to share pages and content on third-party social networks via social sharing buttons.

Cookie management :

Users can accept or reject cookies by adjusting their browser settings.
If a user chooses to reject all cookies, their ability to access certain pages on the site will be limited.
Depending on the browser used, cookies can be deleted as follows :

In Internet Explorer

• Click the Tools button, then click Internet Options.
• On the General tab, under Browsing History, click Settings.
• Click the "View Files" button.
• Select the cookies you want to block and click "Delete."

In Firefox

• Click the browser's Tools icon, then select the Options menu
• In the window that appears, select "Privacy" and click "View cookies"
• Select the cookies you want to block and click "Delete."

On Safari

• Click the Edit icon, then select the Preferences menu.
• Click on "Security," then click on "View cookies."
• Select the cookies you want to block and click "Delete."

In Google Chrome

• Click the Tools icon, select the Options menu, then click the Advanced tab and go to the "Privacy" section.
• Click the "View Cookies" button.
• Select the cookies you want to block, then click "Delete."

Cookie lifespan

Cookies are stored on the User’s device for a maximum of 13 months from the date the User provides consent.
After this period, consent will be obtained again.

Safety :

ELCIMAÏ has taken all necessary precautions to ensure the security of personal data and, in particular, to prevent it from being altered or damaged or accessed by unauthorized third parties. These measures include the following :

• Multi-layered firewall
• A well-established antivirus solution and intrusion detection,
• Encrypted data transmission using SSL/HTTPS/VPN technology,
• Hosting in third-party data centers certified to PCI DSS and ISO 27001

Furthermore, access to data processing by ELCIMAÏ’s services requires the authentication of individuals accessing the data, using a unique access code and password that are sufficiently secure and regularly updated.
Data transmitted over unsecured communication channels is subject to technical measures designed to render such data unintelligible to any unauthorized person.
Any questions regarding the security of the ELCIMAÏ website may be directed to dpo@elcimai.com.

CHANGES TO THE PRIVACY POLICY :
ELCIMAÏ reserves the right to update this Privacy Policy to comply with changes in applicable laws and regulations.
Any changes made will be notified via our website or by email.

CONTACT :
Any questions regarding ELCIMAÏ’s Privacy Policy may be sent by email to dpo@elcimai.com