The COMPANY is a data controller within the meaning of EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data applicable since 25 May 2018 (RGPD), and of Law No. 78-17 of 6 January 1978 as amended by Law No. 2018-493 of 20 June 2018.
As such, it collects and processes personal data in accordance with this regulation, i.e. any information relating to an identified or identifiable natural person.
The term “the data subject” used in this document refers to any natural person whose personal data may be collected and processed by the COMPANY or its subcontractors.
The data is collected by the COMPANY, both during physical meetings and via exchanges by mail or e-mail or the forms on the website: www.faun-environnement.fr
In this respect, the COMPANY is likely to collect the following data (non-exhaustive list): Surname, first name, postal address, telephone number, e-mail address, profession, name of the employing company or local authority, Siret number, telephone number and postal address of the company or local authority.
All of this data is only collected for the following purposes: Management of customers and prospects with the aim of recording contact details in order to: respond to requests; execute contracts; communicate all useful information.
The legal grounds for the collection and processing are: consent; the execution of pre-contractual or contractual measures; the legitimate interest of the controller (Article 6.1 a), b) f) of the GDPR).
All the above information is in line with the COMPANY’s corporate purpose and the data thus collected in a fair and lawful manner is adequate, relevant and limited to what is necessary for the purposes sought.
The COMPANY does not collect or process sensitive data within the meaning of Article 9 of the GDPR.
It is specified that, where consent is required, the COMPANY shall only collect personal data from children under 15 years of age if joint consent is given by the minor concerned and the holder(s) of parental authority.
In view of the COMPANY’s obligation to keep personal data up to date, the client or prospective client is obliged to report any updates to his/her information so that the data collected remains up-to-date.
The COMPANY shall not be held liable if the client or prospect provides inaccurate information.
The personal data collected by the COMPANY shall be kept for the time necessary for their processing, and for a maximum of five years after the last exchange or contact with the person concerned.
This period is set because of the limitation period under common law in Article 2224 of the Civil Code.
Entering personal data in one of the forms on the COMPANY’s website implies the express consent of the person concerned to the processing of his/her personal data for each purpose sought under the heading in question.
The person concerned has the right to withdraw his/her consent at any time by writing an e-mail to the following address: firstname.lastname@example.org
He or she may also contact the COMPANY on +33 (0)4 75 81 66 00 (telephone) or +33 (0)4 75 81 66 38 (fax), or by post to the following address: 625, rue du Languedoc BP248 – 07502 Guilherand-Granges (France).
It is recalled that the withdrawal of consent by the person concerned does not call into question the lawfulness of the processing of personal data based on the consent given prior to such processing.
These means of communication may also be used to request rectification, erasure, limitation of processing, to object to processing on legitimate grounds, and to request the portability of one’s data when permitted by law.
The data subject shall also have the right, through one of the above means of communication, to define directives concerning the fate of his/her personal data after his/her death.
The exercise of the above rights by the data subject shall be completely free of charge, unless the request is manifestly unfounded or excessive, in particular because of its repetitive nature.
The COMPANY may entrust the data collected to subcontractors who must guarantee that they comply with the same obligations arising from the aforementioned regulations.
The categories of recipients and processors of personal data are as follows: Employees, Accounting Department; IT service providers, Transport service providers, Sales agents, or any other recipient authorised by FAUN.
Where personal data is stored, it is specified that this is done either on servers belonging to the COMPANY and located on its premises, or on servers belonging to or managed by its IT service provider and located in a Member State of the European Union.
The COMPANY does not disseminate personal data outside the European Union.
The COMPANY has implemented the structural and organisational measures necessary to ensure the security of processing and compliance with the provisions imposed by the regulations.
The data subject is informed that his or her rights under this article may be restricted to ensure: national security; national defence; public security; the prevention and detection of criminal offences; the investigation and prosecution of criminal offences or the execution of criminal penalties; the protection of the rights and freedoms of others.
In all cases, the person concerned has the right to lodge a complaint with the following supervisory authority: Commission Nationale Informatique et Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS Cedex 07. Tel: +33 22.214.171.124.22