Privacy Policy
Preamble :
EMUNDUS is committed to ensuring that the processing of personal data carried out on www.emundus.fr complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
This data protection policy applies to the processing of data carried out via the website www.emundus.fr .
It informs you about the purposes of the processing carried out, the legal basis for the processing, the recipients of the data as well as their retention period, the security measures, the possible existence of data transfers outside the European Union or automated decision-making, the use and management of cookies, your data protection rights and how to exercise them.
Who is responsible for the data processing carried out by this website?
The data controller for the website www.emundus.fr is EMUNDUS SAS, located at 10 passage du Drakkar – 17000 La Rochelle, France.
For more information, please see the legal notice.
Does this site collect personal data?
According to Article 4.1 of the GDPR, personal data is any information that allows you to be identified, either directly or indirectly. This website collects personal data through its various contact forms. Personal data is freely provided to EMUNDUS by the individuals concerned, who consent to its processing and acknowledge the information notice displayed below the various contact forms. The data collected is adequate, relevant, necessary, and limited to the strict minimum. This includes identification data (surname, first name), organization, postal address, telephone number, and connection data (email address).
What are the purposes of data collection?
The processing of personal data collected through the various contact forms on the website pursues the following purposes:
| Why do we process your personal data? |
What data do we collect? |
| To fill out the contact form and to book your EMUNDUS platform demonstration | Your identification data such as: name, surname, email address, postal address, your mobile and/or landline telephone number, organization |
|
To compile statistics on our website (website traffic, data needed for website development and services, conversion rate, bounce rate) |
Google Analytics |
|
To respond to a quote request made via the "online quote request" form |
Your identification data such as: name, surname, email address, postal address, your mobile and/or landline telephone number, organization |
What are the purposes of data collection?
The personal data collected through the various contact forms on the website serves the following purposes:
- Responding to messages from website visitors.
- Improve services (Anonymized Google Analytics).
- To meet customer needs.
- Establish a business relationship.
- Cookie management is governed by the terms and conditions set out in the Cookie Policy.
- To allow you to benefit from the demonstration service we offer.
- To receive and process your requests relating to your rights under the GDPR and the French Data Protection Act.
What is the legal basis for the processing carried out by this site?
The processing of your personal data by EMUNDUS is based on:
- Either on your consent for all cases where you yourself provide your personal data. Your consent can be withdrawn at any time.
- Either on legitimate interests pursued by EMUNDUS.
- Either on compliance with a legal obligation, particularly regarding the exercise of your rights under the GDPR and the French Data Protection Act.
Who are the recipients of the data processed by this site?
Your personal data is primarily intended for EMUNDUS, the website publisher and data controller.
They are processed by staff from the various departments involved in your requests.
They are processed solely for the purposes indicated above. Your personal data is hosted in France and also securely with a subcontractor outside the European Union.
The subcontractor stores personal data on computer servers in a controlled, secure environment protected against unauthorized access, use, or disclosure. This data is never shared with third parties for commercial purposes.
Is personal data transferred outside the European Union?
In the event of a contractual transfer of personal data, EMUNDUS ensures that the recipients comply with the General Data Protection Regulation (GDPR). To this end, EMUNDUS has entered into a contractual agreement (CBA) with the data processor.
EMUNDUS also monitors GDPR compliance of all data recipients.
How is the personal data processed by this site secured?
EMUNDUS is committed to protecting personal data processed within the framework of this site, in accordance with best practices.
The following are the main security measures to protect your personal data:
- All pages of the EMUNDUS website are under the https protocol;
- Connection logging;
- User blocking when a hacking attempt is detected;
- The erasure of Personal Data is carried out at the request of the person concerned or at the expiry of the retention period;
- The data is stored on data servers that meet the highest technical security standards.
How long is the personal data processed by this site kept for?
The personal data collected in connection with a demonstration request or via the contact form is used by EMUNDUS and is kept for 25 months.
The supporting documents collected in the context of exercising your rights are kept for the duration of the processing of your request (1 month maximum, in accordance with the requirements of the CNIL and the GDPR).
Does this site use cookies?
When you visit this site, cookies are placed on your computer, tablet or smartphone.
In practice, we use cookies to track audience measurements. The cookies used by EMUNDUS on this website are therefore audience measurement cookies.
You can accept or refuse cookies via the cookie banner or manage your cookie settings using the "Manage cookies" menu at the bottom of the page. For more information about cookies, please see our cookie policy or visit the CNIL website .
Can I object to these cookies?
Yes, and in several ways. If you do not want this website to place cookies on your computer, you can block them:
- by using a browser that, by default, rejects cookies;
- by properly configuring your browser or by installing an additional component on your browser, specifically designed for cookie management;
- by configuring your browser to transmit to the website your wish not to be tracked (“Do not track”).
This website respects your choice.
What are the rights of individuals whose data is processed by this website?
Explanation of the data collected :
You can visit our website without having to disclose your identity or provide any personal information about yourself.
However, you can ask us to contact you again using several specific forms:
- the contact form;
- the demonstration request form;
- the quote request form.
We collect the individual data that you provide to us during these contacts, as well as in the emails that you send us.
Implementation of your rights :
In accordance with the General Data Protection Regulation (GDPR) which came into force on May 25, 2018 and Law No. 78-17 of January 6, 1978 as amended relating to information technology, data files and civil liberties, you have the following rights:
|
Rights you have |
Utility |
|
Right of access |
The right to know if we hold Personal Data about you and to obtain a copy of it, including, in particular, the following information: The purpose of the processing, the categories of Personal Data processed, the categories of recipients of the data, the retention period where possible (or the criteria used to determine this period), and your rights. |
|
Right to erasure (right to be forgotten) |
Right to obtain the erasure of your Personal Data in the cases provided for by the GDPR (Article 17), in particular: When the data we process is no longer necessary for us; when you object to marketing and request deletion in addition to the cessation of processing; when the processing is unlawful. |
|
Right to object |
This right applies when we process your data to pursue one of our legitimate interests, such as advertising on your social media pages. If you object to this processing, we will analyze the reasons relating to your particular situation and determine whether we have a legitimate and compelling reason to continue processing your data. If not, we will cease the processing in question. |
|
Right to object to commercial prospecting |
If you object to marketing communications, we will simply cease processing the relevant Data. |
|
Withdrawal of consent |
When the processing of your Personal Data is based on your consent, withdrawing your consent prevents us from continuing to process the data in question. |
|
Right to rectification and right to limitation |
You can request the updating or correction of any Personal Data that you deem inaccurate or outdated. You can also request that processing be suspended, with the exception of the retention of Personal Data, when: - you dispute the accuracy of the data (this limitation lasts for the duration of our verification of this possible inaccuracy); - the processing is unlawful and you would prefer to obtain restriction of processing rather than erasure of data; - we no longer need the data but you consider it still necessary for the establishment, exercise or defense of legal rights; - You have submitted an objection request due to your particular situation and this limitation is granted while the balance of interests between our legitimate interests and your rights and freedoms is being verified. When processing has been restricted, your Data can only be processed with your consent or for the exercise, establishment and defense of legal rights. |
|
Right to portability |
You have the right to receive the Personal Data that you have directly provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data or to request that we transmit it to another data controller. This right only applies to processing based on the consent of the person, or on the performance of the contract and which is carried out using an automated process. |
Data fate in case of death
In accordance with the provisions of Article 85 of the French Data Protection Act (Loi Informatique et Libertés), we inform you that, as a natural person:
- You have the right to define with us guidelines regarding the retention, erasure and communication of your Personal Data after your death;
- You may modify or revoke these instructions with us at any time;
- You may designate a person responsible for carrying out these directives, who will be entitled, after your death, to review said directives and request their implementation from us.
- You are also informed that, in the absence of specific instructions given to EMUNDUS regarding the fate of your Personal Data, your heirs may exercise, after your death, the rights relating to the retention, erasure and communication of your Personal Data to the extent necessary for the organization and settlement of your estate and for EMUNDUS to take into account your death.
You also have (where applicable) the right to make general or specific instructions regarding the retention, erasure and communication of your personal data after your death or right to be forgotten.
How can I exercise my rights under the GDPR and the French Data Protection Act?
Your requests can be formulated in different ways:
- By email by writing to: rgpd[@]emundus.fr;
- In person by presenting yourself at the reception of EMUNDUS, located at 10 passage du Drakkar – 17000 La Rochelle;
- By post, writing to EMUNDUS located at 10 passage du Drakkar – 17000 La Rochelle;
- Through an agent who will use one of the above channels to make the request.
Please submit each of your requests using one of the methods above, attaching a copy of your identity document.
To request access rights:
Please specify in your request which data or processing operations it relates to.
Your data will be transmitted to you electronically or by registered mail with acknowledgement of receipt.
EMUNDUS may require payment of reasonable fees based on administrative costs for any additional copies requested (Article 15.3 of the GDPR).
In the event of manifestly unfounded or excessive requests, EMUNDUS may require payment of reasonable fees which take into account the administrative costs incurred in providing the information or refuse to act on such requests (Article 12.5 of the GDPR).
To request a right of rectification:
If you believe that information concerning you is incorrect and should be rectified, please specify the inaccurate or incomplete data concerning you, and provide all information enabling it to be corrected or completed (Article 15 of the GDPR).
To request the right to erasure:
Please specify precisely which data concerning you you are requesting to be erased, and the reasons for your request (Article 17 of the GDPR).
Note : this right is not absolute, EMUNDUS may be obliged to keep information about you, in particular in the context of managing the business relationship (managing invoices, managing disputes) and in the context of documenting and providing evidence relating to the exercise of your rights.
For a request to limit processing:
Please specify precisely the data concerning you for which you are requesting restriction of processing, and the reasons for your request.
Please note : this right is not absolute; EMUNDUS may decide to continue processing your data (Article 18.3 of the GDPR). If implemented, this restriction may result in the suspension of services provided by EMUNDUS (access to work and deliverables, receipt of information, etc.). These consequences will be described in the letter acknowledging receipt of your request to restrict processing.
To request a right of objection:
Please specify precisely which processing of your personal data you wish to object to, and the reasons for your request.
Please note: this right is not absolute. Please specify precisely the processing activity to which you object, and the reasons for your request (Article 21 of the GDPR).
To request the right to data portability:
Each user can at any time request data portability in order to retrieve the personal data that EMUNDUS has collected about them in the context of processing based on consent and on the basis of a contract.
If you wish the data to be transmitted to another data controller in a standard format, please specify this and provide the contact details of that other data controller.
How to contact the DPO?
You can contact the DPO of EMUNDUS electronically at the following address: rgpd[@]emundus.fr or by post by sending your letter to the following address: EMUNDUS – Data Protection Officer – 10 passage du Drakkar – 17000 La Rochelle.
You can submit a request to the CNIL at the following address:
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Updated in December 2023.
- Views: 4271