Personal data notice
Simplified joint-stock company with share capital of €25,988,669
Versailles Trade and Companies Register 549 850 253
Siret 54985025301505
VAT FR 0 55449850253
Privacy policy
In accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act, Fichet Group (hereinafter “Fichet Group” or “we”), whose registered office is at 7, rue Paul Dautier – CS 50011 78141 Vélizy-Villacoublay Cedex, France, is the data controller for the personal data it collects, uses and manages under the terms of this privacy policy (hereinafter the “policy”). We attach the highest importance to your personal data. We undertake to protect all personal data provided to Fichet Group, whether it comes from business partners, visitors or users of our websites or from elsewhere.
Personal data is information relating to an identified or identifiable natural person. This policy sets out what personal data we collect, how we may use and process it, and what your rights are in this respect. Before providing us with any personal data or browsing our websites, we recommend that you read this privacy policy in full to make sure you consent to our personal data practices. Please note that our websites may contain links to other sites.
These third-party websites are not subject to the terms of this policy. We therefore advise you to check the privacy and personal data protection policies of each website you visit.
We can only be held responsible for the confidentiality and security of the data we collect, and we have no means of controlling the actions of third-party companies regarding your data. For definitions of the terms used here, please refer to the glossary at the end of this document.
How we implement personal data protection
We meet the following obligations:
building personal data protection into projects from the outset: “Privacy by Design”.
We undertake to take the protection of your personal data and your privacy into account from the design stage of the services offered to you, thereby minimising the risk of failing to comply with the principles of the GDPR and the amended French Data Protection Act.
Technical and organisational measures appropriate and proportionate to the processing of personal data are therefore taken in light of the purpose sought by the processing envisaged.
Applying this principle makes it possible to put in place preventive measures that limit the risks to personal data.
Ensuring the highest level of personal data protection by default: “Privacy by default”.
We implement appropriate technical and organisational measures to guarantee that, by default, optimal security of processing is organised and applied.
Whose personal data do we collect?
In the course of its activities, Fichet Group collects the personal data of various people, in particular:
- representatives of our suppliers, clients or other business partners
- external service providers
- users of our websites
- people who contact us by any means,
- and job applicants
How do we collect your personal data?
The personal data we collect is the data you send us voluntarily and knowingly.
We collect personal data when:
- you visit our websites or fill in one of our online forms
- you contact our customer services or make an information request in any form
- you visit one of our sites in person
- you place an order
- you communicate with us through social networking sites, third-party applications or other similar technology
- you subscribe to our blog, newsletters or emails
- you visit our stand at a trade show
We may also collect information passed on to us by third parties, such as data relating to other websites we publish or coming from third-party companies (subcontractors, etc.).
What personal data do we collect?
In the course of its activities, Fichet Group may collect various personal data about you, such as your name, gender, job title, photograph, email address, home address and other contact details, information about your activities and other interests, our correspondence with you (including meeting notes), the products and services we have provided to you or which may be of interest to you, as well as financial and payment data.
When you use our websites, we collect certain standard information that your browser sends to our sites. This information includes technical data such as your IP address, browser type, operating system, language, time zone, access times, country and the page URL (referrer).
For what purposes do we process your personal data?
We process your personal data for the following purposes:
- to provide you with the information requested and the products and services ordered
- to process and perform your contracts
- to inform you of any changes to your services and provide you with information about similar products and services that may be of interest to you
- to inform you of market events and product launches
- to communicate with you and with third parties
- to administer our websites and improve our products and services
- to analyse the use of our websites
- to meet our legal and regulatory obligations, and
- to serve other business purposes such as negotiating, concluding and performing contracts, managing accounts and records, supporting corporate social responsibility activities, legal, regulatory and internal investigations, and debt management.
How long is your personal data kept?
The retention period for your personal data depends on the processing carried out.
We undertake not to keep your personal data beyond the period necessary to provide the service, and therefore for your use of the service, plus the retention period required by the applicable rules on statutory limitation.
Recruitment
When you apply for a position through our websites or by any other means, we collect additional, more specific personal data about you, such as your qualifications, professional experience, references and our interview notes. We may also ask you for other information such as your interests and the types of roles you are interested in. Any personal data you provide to Fichet Group as part of an application is processed in accordance with our recruitment practices.
The legal basis for Fichet Group's processing of your personal data: to comply with the privacy legislation in force, Fichet Group must specify the legal basis for processing your personal data. In line with the grounds detailed above for which we collect and use your personal data, the legal basis for Fichet Group's processing of your personal data is generally as follows:
- your consent
- performance of a contract between us and you or other parties
- the legitimate business interests of Fichet Group
- compliance with our legal obligations
Who do we share your personal data with?
We may disclose your personal data to third parties such as the authorities, our advisers, our IT providers, and third-party companies appointed by Fichet Group in order to respond to your service request; to protect any intellectual property rights relating to a product or service presented on our websites or available through them; to obtain legal or other advice; to respond to a legal request or meet a legal obligation; and to enforce the terms of use of our websites.
We may disclose your personal data to third parties in the event of the sale, acquisition or merger of a company or an asset, in particular to the potential seller or buyer.
As Fichet Group operates worldwide, we may share the personal data you provide to us with any Fichet Group company anywhere in the world. These companies are required to respect the confidentiality of your data and to use it only for the purposes set out in this policy.
We may choose to allow users to share comments, messages, testimonials or other information. Any such information you decide to submit to us may be made publicly visible, in which case it will be read, collected and used by those who access it.
Finally, we may share non-personal data with third parties not listed above. In such cases, we may aggregate or anonymise the information so that a third party cannot connect that data to you, your computer or your device. Aggregation means that we combine the non-personal data of a large number of people, so that it no longer relates to anyone in particular. Anonymisation means that we work to remove or alter certain details that could be used to link a piece of data to a person.
Transfer of personal data
Please note that anyone to whom Fichet Group may disclose your personal data under this policy may be located in a country other than your own, and that country may have less strict data protection legislation.
When we transfer your personal data abroad, we take the legally required measures to protect it and to ensure it is processed in accordance with this policy. If you reside in the European Economic Area or the United Kingdom, you may ask us for the list of safeguards we apply to protect your personal data and your privacy rights, using the contact form available on our website: https://www.fichetgroup.com/fr-fr/nous-contacter or via dpo.fichetgroup@dposystem.fr
Security
Fichet Group undertakes to take all measures to ensure the security and confidentiality of your personal data, in particular to prevent it from being damaged or erased, or from being accessed by unauthorised third parties. Only authorised people may access the data.
We continually improve our security procedures as technology evolves in order to maintain the highest level of protection. Our staff and those of our subcontractors who have access to personal data are contractually bound by a duty of confidentiality.
Organisational measures include restricting access to personal data to authorised people with a legitimate interest in knowing it.
In addition, in the event of a security incident affecting your personal data (destruction, loss, alteration or disclosure), we comply with the obligation to notify personal data breaches, in particular to the CNIL, the French data protection authority.
Your rights
You may at any time exercise the rights provided for by the applicable personal data regulations, subject to meeting the conditions and depending on the legal basis for the processing concerned:
- Right of access: you may obtain a copy of your personal data processed on the basis of your consent, the performance of a public interest task, a legal obligation, the performance of your contract or the legitimate interest of the data controller.
- Right to rectification: you may update your personal data or have your personal data corrected where it is processed on the basis of your consent, the performance of a public interest task, a legal obligation, the performance of your contract or the legitimate interest of the data controller.
- Right to object: you may state that you no longer wish your personal data to be processed where the processing is based on your consent (you withdraw your consent) or on performance of a contract (contractual waiver clause), as well as where processing is carried out in the legitimate interest of the data controller. However, you cannot object to processing carried out under a legal obligation incumbent on the data controller, or in the performance of a public interest task where compelling legitimate grounds override your rights and freedoms.
- Right to erasure: you may request the deletion of your personal data, subject to statutory retention periods, where the processing is based on your consent (you withdraw your consent) or on performance of a contract (contractual waiver clause), as well as where processing is carried out in the legitimate interest of the data controller. However, you cannot request the erasure of data processed under a legal obligation or in the performance of a public interest task incumbent on the data controller;
- Right to restriction: you may request the suspension of the processing of your personal data based on your consent, a legal obligation, performance of a contract or the legitimate interest of the data controller if you have a pending request for rectification, erasure or objection, or if you consider the processing unlawful but the data controller opposes the erasure of your data;
- Right to portability: you may ask the data controller to retrieve your personal data so that you can use it, only where the processing is based on your consent or on performance of a contract. You cannot benefit from the right to portability where processing is carried out under a legal obligation, in the performance of a public interest task or in the legitimate interest of the data controller.
When your personal data is collected, you are given the email address to which you should send your request to exercise your rights.
Any request not made in a context that leaves no doubt as to the identity of the applicant must be accompanied by a copy of proof of identity.
We undertake to respond to your requests to exercise your rights as quickly as possible and at the latest within one month of receiving your request, and insofar as exercising these rights does not interfere with the performance of the contract or with compliance with legal and regulatory obligations. Where necessary, this period may be extended by two months in the event of complexity and/or a large number of requests.
We comply with our obligations regarding the protection, security and confidentiality of users' personal data and have appointed a Data Protection Officer.
You can contact our Data Protection Officer at the following address: dpo.fichetgroup@dposystem.fr
You also retain the option of lodging a complaint with the CNIL, the French data protection authority, by submitting your request on the website: www.cnil.fr/fr/plaintes
Questions and complaints
If you have a problem or a complaint about Fichet Group's use of your personal data, please start by contacting us in writing at the address given in the “Contact” section of our website: https://www.fichetgroup.com/fr-fr/nous-contacter or by email at dpo.fichetgroup@dposystem.fr
If you are not satisfied with how Fichet Group has handled your question or complaint, you may bring the matter to the attention of your national data protection authority.
Changes to this policy
We reserve the right to amend or adjust this privacy policy at any time by publishing a revised version on our website. It is your responsibility to read this policy each time you submit information to us or place an order.
Cookies
A cookie is a small data file that a website you visit may write to your hard drive. A cookie file may contain information (such as the user ID) that the website can use to track your preferences and the pages you have visited. A cookie cannot contain any personal data other than that which you have provided yourself. A cookie cannot read data from your hard drive or read cookie files created by other websites.
Fichet Group uses cookies to track users' browsing patterns and to improve the usability of its websites.
Users can set their browser to be notified when a cookie is received and to accept or reject it. Users can also refuse all cookies by disabling the “Cookies” function in their browser. However, the use of cookies is necessary to enable all the features of Fichet Group's websites.
On your first visit to a Fichet Group website, a banner is displayed to indicate the use of cookies by that website.
If you consent, these cookies are kept for a maximum of 13 months. After that period, your consent will be requested again.
You can withdraw your consent at any time.
Social media features
Fichetgroup.com includes social media features, such as share or follow buttons. These features may collect your IP address, track which pages of our sites you visit, and may also set a cookie to allow the feature to work properly.
Social media features are either hosted by a third party or hosted directly on our websites. This privacy policy does not apply to these features. Your interactions with them are governed by the privacy policy and other terms of the companies providing them.
Your feedback
We attach great importance to your views on our various policies. To share your comments on this policy, please contact us at info.fr@fichetgroup.com
Last updated on 01/06/2021
Glossary
Data Controller : the person or persons responsible for determining the purposes of the data processing and the means allocated to it.
Data protection authority: the supervisory authority responsible for matters relating to privacy and personal data protection in the territory where Fichet Group or one of the Fichet Group companies operates.
European Economic Area (EEA): the European Economic Area comprises all the member states of the European Union plus Iceland, Liechtenstein and Norway.
Personal Data: information relating to an identified or identifiable person, for example data concerning Fichet Group employees, its external service providers, its applicants, the employees of its providers or suppliers, its clients, the patients using Fichet Group products and the users of our website or our service centres. This data includes the name, postal address, email address, application file and user account details of the person concerned, as well as the related correspondence. Personal data may also include information relating to internet browsing (e.g. data associated with a particular cookie) and IP addresses, where these can be associated with a specific individual.
Processing: any activity relating to personal data, in particular the collection of data, its storage, access to the data, its combination with other data, its transmission to a third party or its deletion.