Privacy Policy
Through the present Privacy Policy, LACOUR GROUP and its subsidiaries (hereinafter “we”), we are committed, in compliance with the applicable European and French legislation, and in particular the European Regulation (UE) No. 2016/679 of 26 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the modified Law No. 78-17 of 6 January 1978 on the Information technologies, data files and individual liberties, to protecting your personal data collected through our Website.
In this context, the present Privacy Policy is designed to inform you about the terms and conditions in which, as the processing manager, we are collecting your personal data on our Website, processing them and protecting them, as well as your rights in this regard and the way you can contact us.
For any additional information on the protection of personal data, we invite you to consult the website of the French Data Protection Authority (hereinafter “CNIL”) accessible at the following address: https://www.cnil.fr/.
We draw your attention to the fact that our Privacy Policy may change depending on the legal and regulatory context, the doctrine of the CNIL, but also the processing of personal data carried out on our Website. In addition, the aim of this Privacy Policy is to expose you the general scope of processing. Where appropriate, we will inform you of the specificities of a processing before any treatment of your personal data.
PREAMBULE
I. SCOPE OF PROTECTION
The regulation on the protection of personal data aims to natural persons only. In other words, it does not cover the data of legal persons. However, if the data processed concerns representatives or staff of a legal entity, then the processing of such data will fall within the scope of this privacy policy.
II. PRINCIPLE OF CONSENT TO DATA PROCESSING
In accordance with the selected legal basis, we are committed to obtaining your consent prior to any treatment. As such, we will inform you of the purpose(s) of the treatment. Your consent will then apply only for the purposes mentioned.
On this basis, you will have the possibility to accept, by a clear positive act, the processing and may, in the event that you have accepted it, revoke your consent at any time by addressing your request to dpo@groupe-lacour.fr. In such a case, the removal of your consent will not have retroactive effect. Consequently, the processing previously carried out will keep their licit character.
We inform you that in some situations, without your consent, we will not be able the receive or to process your request. As illustration, if you complete the unsolicited application form without giving your consent for the processing of your data by checking the dedicated box, we will not receive your application.
In the event that the processing is necessary for the performance of a contract to which you are party or the performance of pre-contractual measures taken at your request, your prior consent will not be necessary. This is also the case when the processing is based on a legal or regulatory requirement, or our legitimate interest.
PART 1: NATURE OF DATA PROCESSED AND CONTEXT OF TREATMENT
I. Nature of personal data
Through our Website, we are likely to process the following personal data:
We are committed to collecting the minimum personal data, which is strictly necessary for the processing concerned. Some information is essential to the processing of your request and/or the functioning of the service provided. Otherwise, your request / the service can not be processed / provided. The mandatory information will be materialized with an asterisk.
In addition, we draw your attention to the need to only send us the personal data strictly necessary for processing, and not to communicate to us any so-called “sensitive” personal data.
Your username and password (LACOUR Account);
The content of your user space (photos or videos in particular);
Your last name, first name, email address, phone;
Your curriculum vitae, cover letter, and any other document you send to us, as well as its content.
II. Collecting context
We are likely to collect your personal data, through forms on our Website, and more generally through the interactivity established between you and our Website.
We are committed to deliver you, prior to collecting, a set of information related to treatment. This is materialized by a hypertext link contained in the collecting form and referring directly to this Privacy Policy. In the presence of specificities linked to the processing, additional information will also be communicated to you.
In addition, we undertake to mention, directly on the form and separately to the information collected, the identity of the data controller, the purposes and the legal basis of the treatment, the mandatory or optional nature of the answers, as well as the existence of your rights. Clarification will also be provided on the data retention period.
PART 2: PURPOSES OF PERSONAL DATA PROCESSING
Your personal data are processed by our empowered teams for the following purposes only:
We remind you that this Privacy Policy has a general purpose. During each collection, you will be explicitly specified the purposes of the envisaged processing.
Remember your personal data in order to avoid having to enter them again during your visit (LACOUR Account);
Ensure, improve, test and control the effectiveness of our Website;
Develop and test new features;
Diagnose and solve technical problems;
Ensure the processing of your application file as part of a response to an offer of employment or a spontaneous application;
Ensure the processing of your request issued from the contact form.
PART 3: STORAGE AND SECURITY OF PERSONAL DATA
I. Storage
We hereby confirm that your personal data is stored and, on a broader level, processed in France, and is therefore not intended to be transferred outside the European Union. They are accessible exclusively to the staff of our Group, limited in number and specifically authorized, in accordance with the principle of least privilege.
We keep your personal data for the time strictly necessary for the operations for which they were collected and in compliance with the regulations in force.
Thus, your personal data processed under a contract or contractual measures will be kept for the duration of our contractual relationship. Similarly, as part of a processing based on your consent, the duration of storage of the data will not exceed the time strictly necessary for the use for which the consent was given.
At the end of this period, your personal data will be destroyed, unless legal or regulatory provisions or conflicting legitimate interests.
II. Security
We are committed to respecting the principle of data protection from the design stage and by default. Also, our teams ensure that our Website integrate the principles established in particular by the GDPR.
In this context, your personal data are processed in a way that ensure their security, confidentiality, integrity and availability.
Furthermore, we have taken technical and organizational measures to prevent unauthorized access to your personal data and the equipment used for their processing, the unauthorized use of your personal data and this equipment, as well as their destruction or accidental damage. These measures are regularly reviewed and updated.
We undertake not to rent or sell your personal data to third parties. In addition, we also inform you that we do not use any subcontractor for the creation, hosting and maintenance of our Website.
In the event of a required violation of your personal data, we will notify the said violation to the CNIL. If applicable, we will also inform you of the violation based on the results of the analysis carried out and in accordance with applicable regulations.
Finally, we draw your attention to the fact that all our Staff has signed a specific confidentiality agreement and has been made aware of the requirements of the GDPR.
PART 4: YOUR RIGHTS
We undertake to guarantee and respect your rights to your personal data; namely the right of access, rectification, deletion and portability of data, the right of limitation and opposition to the processing of data, as well as the right to define your directives relating to the fate of your personal data after your death.
In order to exercise your rights, you must send us a letter specifying the nature of the right you intend to exercise and the context in which your data were collected (application, contact form, application registration…). This letter must mention the address to which the reply must be sent.
Your request should be sent, at your convenience, to:
We are committed to taking appropriate measures to provide you with any requested information as soon as possible and at the latest within one month, and to communicate in a concise, transparent and understandable manner. In case of impossibility to accede to your request, we will inform you.
Furthermore, you also have the right to make a complaint with the CNIL, if the response provided within one month does not give you satisfaction.
If you wish to obtain more information regarding the processing of your personal data, you also have the option of sending us a postal or electronic mail to the address specified above.
Our Mailing address: LACOUR GROUP, Data Protection Officer, 1 Avenue Henri Debord, CS 40071, 18230 SAINT-DOULCHARD
Our Email address: dpo@groupe-lacour.fr
PART 5: INFORMATION RELATING TO THE CONTROLLER
Your personal data are collected and processed by LACOUR GROUP (and, where applicable, its subsidiaries):
For any additional information regarding our Personal Data Policy, you can contact the data protection officer at the postal and/or electronic address mentioned above.
Located: 1 Avenue Henri Debord, 18230 Saint-Doulchard (France);
Registration number at the Bourges RCS: 922 560 743;
Legal representative of the controller: LACOUR HOLDING, President, itself represented by Angelo MAÏDA, President;
Contact information for the data protection officer: dpo@groupe-lacour.fr
PART 6: INFORMATION RELATING TO THE PROCESSING OF YOUR PERSONAL DATA IN THE CONTEXT OF RECRUITMENT
As part of your application, you have sent us information and documents containing personal data within the meaning of General Data Protection Regulations. As such, we would like to inform you that we will, in our capacity as data controller, process your Personal Data in order to study and process your application.
In addition, following analysis of your file, we may invite you to an interview during which additional personal data may be collected, particularly through tests and professional situation tests. This collection allows us, as part of our recruitment procedure, to assess the suitability between your profile and the position offered. We insist on the indispensable nature of this data. Otherwise, your application cannot be fully processed.
The recipients of your personal data are the Human Resources department of LACOUR GROUP, and the department manager(s) of LACOUR GROUP and/or its subsidiaries, whom you may have met.
We draw your attention to the fact that the retention period of your personal data varies depending on the outcome of your application:
As part of these processing operations, we undertake not to transfer your personal data outside the European Union.
We remind you that you can exercise your rights in accordance with Part 4 of this Personal Data Policy.
If your application is not accepted, your personal data will be kept in our CV library for a period of two years from our last exchange;
If your application is successful, your personal data may be kept for the entire duration of your employment contract and possibly beyond on the basis of legal and regulatory obligations and/or our legitimate interests.
