In accordance with the General Data Protection Regulation and the ‘Data Protection Act’ of 6 January 1978 in its latest version, the purpose of this document is to inform you of all the processing carried out when using the services provided on the ECLAIRION website, accessible at the link: https://eclairion.com/ (hereinafter the ‘Site’).
WHO IS THE DATA CONTROLLER?
The data controller is the company ECLAIRION PARIS SUD, a simplified joint-stock company [société par Actions simplifiée] with a share capital of 10,000 euros, registered in the Paris Trade and Companies Register under number 920 382 850, whose registered office is located at 2 RUE DE LA LIBERATION – 91680 BRUYERES-LE-CHATEL, whose Intracommunity VAT number is FR09920382850, and whose email is dpo@eclairion.com.
WHAT PERSONAL DATA IS PROCESSED?
The personal data processed concerns the following categories of data:
data relating to your identity (surname, first name, postal address, email address, and telephone number);
connection data (IP address, connection logs, cookies, pages viewed, etc.).
If your personal data is collected through a form, you will be informed of the mandatory nature of the information by an asterisk (*) or any other indication near the fields concerned. In the absence of a response from you, the processing cannot take place, and your request will not be fulfilled.
Only personal data that is strictly necessary for the purposes described below will be collected.
This Site uses the Matomo Analytics tool to collect statistical information.
FOR WHAT PURPOSES IS YOUR PERSONAL DATA PROCESSED, AND HOW LONG IS IT RETAINED?
Your personal data is processed subject to different legal bases according to the purposes pursued, as detailed below. Thus, the said legal bases on which the processing may be carried out are as follows:
the data subject gives his/her free, specific, informed, and unambiguous consent to the processing of the personal data for one or more of the purposes described below;
compliance with one or more legal obligations incumbent on the data controller.
In addition, your personal data is retained only for the period strictly necessary for the fulfilment of the purposes for which it is processed, as described below. This period may be increased for the exercise or defence of the data controller’s legal rights.
PURPOSES AND SECONDARY PURPOSES
LEGAL BASIS
DATA RETENTION PERIODS
WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?
Your personal data is only processed by HPC France. No sub-processor or other company will have access to your personal data.
IS YOUR DATA TRANSFERRED OUTSIDE OF THE EUROPEAN UNION?
The data collected on this Site is processed exclusively by HPC France, and is not transferred outside of the European Union.
WHAT ARE YOUR RIGHTS CONCERNING YOUR PERSONAL DATA?
You have the following rights over your personal data:
Right of access: you may at any time obtain a copy of your personal data, as well as information about the nature, origin and use of your personal data, and the identity or categories of any recipients thereof.
Right to rectification: you may request that any inaccurate or incomplete data concerning you be modified or supplemented.
Right to erasure: you may request the erasure of your personal data, in particular if it is no longer necessary for the processing carried out, unless there are legal obligations incumbent on the data controller to retain this data, or if it is necessary for the establishment, exercise or defence of legal claims.
Right to the restriction of one or more processing operations of your personal data: you may request that your personal data be temporarily made inaccessible in order to limit its future processing in the following situations:
if you dispute the accuracy of your personal data, for a period enabling the data controller to verify the accuracy of your personal data;
if you consider that the processing is unlawful, and you object to the erasure of your personal data;
if your personal data no longer has any reason to be retained, but you wish it to be retained for the exercise or defence of your legal rights;
if you have objected to the processing, during the verification of whether the legitimate grounds pursued by the data controller prevail over your own.
Right to portability: you may request the communication of personal data concerning you that you have provided to the data controller and that has been processed by automated means, in a structured and commonly used format. This right can only be exercised if the processing is based on your consent, or on the execution of a contract or pre-contractual measures.
Right of objection: you may object at any time, for reasons relating to your particular situation, to the processing of your personal data based on the legitimate interests of the data controller, unless there are legitimate and compelling reasons for the processing that prevail over your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
In this regard, you have the right to object to your data being processed for commercial prospecting purposes, including if this processing takes the form of profiling.
Right to set guidelines in the event of death: you may give instructions relating to the retention, erasure and communication of your personal data. In the event of death, your personal data will be deleted in principle, unless legal and regulatory obligations and/or statutory limitation periods require it to be retained.
Right to withdraw consent: you may withdraw your consent to the processing of your personal data based solely on said consent at any time.
HOW CAN YOU EXERCISE YOUR RIGHTS?
You can make any request relating to the exercise of your rights concerning your personal data by contacting:
either by email, to the address indicated: dpo@eclairion.com
or by mail, to the postal address: Eclairion Paris Sud, 2 RUE DE LA LIBERATION – 91680 BRUYERES-LE-CHATEL.
The exercise of one of these rights may be refused if your request does not meet the conditions set by the regulations. In such circumstances, you will be duly informed.
HOW CAN YOU FILE A COMPLAINT WITH THE CNIL?
If you consider that the processing of your personal data does not comply with the legal and regulatory provisions, you can submit a complaint to the French data protection authority, ‘Commission Nationale de l’Informatique et des Libertés’ (CNIL), at the following address: 3 place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
