Legal
& privacy

1 LEGAL INFORMATION :

SARL ARTALYS 8 rue Deyron 30000 Nîmes.
The publication director is Mr Sylvain Fournier, Managing Director of the company.

E-mail address: info@artalys-france.fr

Telephone: 04 66 63 85 79

Trade register number B 533 908 034
Intracommunity VAT number: FR71533908034

Hosting: Head Office: OVH – 2 Rue Kellermann – 59100 ROUBAIX – France – Telephone: 09 72 10 10 07

Graphic design and website concept:
Love My Name – Communication and branding agency – Nîmes

Integration: Love My Name

In accordance with the provisions of articles 39 and 40 of the French Data Protection Act of January 6, 1978, amended in 2004, the user has the right to access, rectify, update and delete any information concerning him or her. This right may be exercised by contacting info@artalys-france.fr, or by sending a letter to our address, specifying “Personal rights” in the subject line of the letter and enclosing a copy of proof of identity.

As before, you also have the right to give instructions on what to do with your data after your death. This means that, in accordance with the provisions of article 38 of the French Data Protection Act of January 6, 1978, amended in 2004, the user may also object, on legitimate grounds, to his or her data being processed, and without reason and at no cost, to his or her data being used for commercial prospecting purposes.

Users are informed that when they visit the www.defisystemes.fr website, a cookie may be automatically installed on their browser. The information collected on this site will be kept for a period of three years.

2 RGPD POLICY :

2.1 PREAMBLE

Within the framework of the use of the present website and associated services, the User, after his/her consent has been obtained to this effect (when accessing the website, a pop-up appears requesting consent), and in compliance with the provisions below, has certain of his/her personal data collected by ARTALYS.

Within the meaning of European regulations, personal data (hereinafter “personal data”) refers to any information likely to relate to an identified or identifiable natural person. The implementation of automated processing of personal data is governed in particular by Regulation (EU) No. 78-17 of the European Parliament and of the Council on the processing of personal data by automatic means.

2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the GDPR (General Data Protection Regulation).

ARTALYS undertakes to take all necessary measures to respect the confidentiality of the User’s personal data. Personal data is kept securely and is only accessible to our employees or service providers who need it and are required to keep it confidential.

The purpose of this Policy is to provide users with the information they need to understand the various processing operations we carry out in order to carry out our missions and provide them with the most appropriate services.

2.2 DEFINITIONS

Personal Data: any information relating to an identified or identifiable individual. User: refers to any natural person whose personal data is processed for purposes and by means defined by the data controller.

Controller: the natural or legal person who determines the purposes and means of processing.

Sub-Contractor: refers to the natural or legal person who processes personal data on behalf of the Data Controller.

Processing: any operation or set of operations, whether or not performed using automated processes, applied to personal data or sets of data.

Transfer: any communication, copy or movement of personal data intended for processing in a country outside the European Union.

Personal data breach: a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data transmitted, stored or otherwise processed.

2.3 WHAT IS THE SCOPE OF THE RGPD POLICY?

ARTALYS, as Data Controller, informs the Users of its website in a transparent manner about the processing of personal data that may be implemented.

2.4 WHAT PERSONAL DATA DOES ARTALYS PROCESS?

ARTALYS only collects and processes data that is strictly necessary for the purpose for which it is processed, in accordance with the principle of data minimization.

In particular, the ARTALYS website only uses cookies that are strictly necessary for navigation. However, personal data may be collected:

– When sending an application in response to a job offer or as a spontaneous application via the “Contact us” section of our website. This includes identification and contact data, as well as any other data provided at the applicant’s initiative as part of the application process,

– When requesting information on technical and commercial offers, or any other request via the “Contact” section of our website. This includes identification and contact data, as well as any other data provided at the User’s initiative.

2.5 WHO IS/ARE THE PERSON(S) RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

ARTALYS is responsible for processing your personal data.

2.6 FOR WHAT PURPOSES DOES ARTALYSRECEIVE YOUR PERSONAL DATA?

ARTALYS undertakes to collect only data that is strictly necessary to carry out the Processing and not to divert such data from the purpose for which it was initially collected.

Personal data may be processed for the following purposes: -Management of applications for recruitment purposes, collected via the “Contact us” section of our website (management of applications for job offers, internships/ternships, or unsolicited applications),

-Cookie management, such as improving website ergonomics,

-Management of requests for information, technical or commercial offers, or any other request via the “Contact” section of our website.

2.7 WHAT IS THE LEGAL BASIS FOR OUR PROCESSING?

The processing of personal data is based on the consent of the User wishing to use additional services via our website, such as the submission of applications, requests for information, … The User is informed that the provision of this data is not of a regulatory or contractual nature.

2.8 TO WHOM MAY YOUR PERSONAL DATA BE COMMUNICATED?

Personal data may be transmitted, depending on the processing concerned, to the following recipients: – Human resources and management functions, for the management of applications and information on candidates,

– Third-party agents, service providers, subcontractors and consultants (e.g. for IT maintenance or human resources support),

– To DEFI SYSTÈMES’ Subcontractors under a Subcontractor Agreement that requires the provider to comply with the principles of the RGPD, – To government authorities, courts and law enforcement, when necessary and to comply with applicable laws and regulations, – To any other party, in the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition related to all or part of our business, assets, or stock.

Your Personal Data will be communicated only to those who need to know it. We do not disclose your Personal Data to parties who are not authorized to process it.

No Personal Data is transferred outside the European Union.

2.9 HOW LONG IS YOUR PERSONAL DATA STORED?

The length of time your Personal Data is kept depends on the processing carried out. ARTALYS undertakes not to keep your Personal Data beyond the period necessary for the provision of the service, and therefore for your use of the ARTALYS website.

service, increased by the retention period imposed by the rules applicable to legal prescription.

Type of data Duration Recruitment data 24 months Request for information or quotation 36 months Cookies 36 months.

2.10 HOW IS YOUR PERSONAL DATA PROTECTED?

ARTALYS undertakes to take all measures to ensure the security and confidentiality of your Personal Data and in particular to prevent it from being damaged, deleted or accessed by unauthorized third parties.

Only authorized personnel may access data. Subcontractors’ personnel, if any, are always accompanied and supervised by an ARTALYS and/or DSI employee when accessing the data servers.

We are constantly improving our security procedures as technologies evolve, in order to maintain a maximum level of protection. Our staff and those of our subcontractors who have access to Personal Data are contractually bound by an obligation of confidentiality.

Organizational measures include limiting access to Personal Data to authorized persons with a legitimate interest in knowing it.

Furthermore, in the event of a security incident affecting your Personal Data (destruction, loss, alteration or disclosure), ARTALYS ensures that it complies with the obligation to notify violations of Personal Data, in particular to the CNIL.

2.11 WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

At any time, you have the right to exercise with ARTALYS the rights provided for by the applicable regulations in force concerning Personal Data, subject to fulfilling the conditions and depending on the basis for the processing of the data concerned:

– Right of access: you can ask which Personal Data are processed by ARTALYS based on your personal data.

consent,

– Right of rectification: you may update or rectify your Personal Data processed by ARTALYS based on your consent,

– Right to object: you may express your wish that your Personal Data no longer be Processed in cases where Processing is based on your consent (withdrawal of consent) or on contractual performance (contractual waiver clause) as well as in the case of Processing carried out in ARTALYS’s legitimate interest. On the other hand, you may not object to Processing carried out in the context of a legal obligation incumbent on ARTALYS or the performance of a public service mission which presents compelling and legitimate reasons overriding your rights and freedoms,

– Right to deletion: you may request the deletion of your Personal Data, subject to the legal retention period, in the event that the Processing is based on your consent (withdrawal of consent) or on contractual performance (contractual waiver clause) as well as in the case of Processing carried out in ARTALYS’s legitimate interests. On the other hand, you may not request the deletion of data from a Processing carried out as part of a legal obligation or the performance of a public service mission incumbent on ARTALYS,

– Right to limitation: you may request the suspension of the Processing of your Personal Data based on your consent, legal obligation, contractual performance or the legitimate interest of ARTALYS if you have a pending request for rectification, erasure or objection or if you consider the Processing unlawful but ARTALYS objects to the erasure of your Personal Data,

– Right to portability: you may ask ARTALYS to retrieve your Personal Data in order to dispose of it only if the Processing is based on your consent or the performance of a contract. You may not benefit from the right to portability if the Processing is carried out within the framework of a legal obligation, the performance of a public service mission or the legitimate interest of ARTALYS.

2.12 HOW TO EXERCISE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

Requests relating to the exercise of your rights should be addressed to the head office, at the address specified in the legal notice, for the attention of the Data Protection Officer. All requests that are not made in a manner that leaves no doubt as to the identity of the person making the request must be accompanied by a copy of a proof of identity.

ARTALYS undertakes to respond to your requests to exercise your rights as quickly as possible, and at the latest within one month of receipt of your request, and insofar as the exercise of these rights does not hinder the performance of the contract or compliance with legal and regulatory obligations. If necessary, this period may be extended by two months in the event of complexity and/or a large number of requests.

You can contact our Data Protection Officer as follows: Postal address: ARTALYS – 8 rue Deyron – 30000 Nîmes Email: con.fr In addition, you may lodge a complaint with the CNIL by sending your requests to: www.cnil.fr/fr.plaintes/internet/

2.13 APPLICABLE LAW

The Privacy Policy is governed by French law and constitutes the entire agreement between ARTALYS and the User. In the event of any dispute concerning the validity, interpretation and/or application of the policy, it shall be subject to the jurisdiction of the courts of Nimes.

3 INTELLECTUAL PROPERTY

The elements making up the Site, developed by ARTALYS or on its behalf (hereinafter referred to as “the Content”), are protected by applicable legislation in terms of copyright, trademark law, design law and unfair competition.

The Content includes, but is not limited to, the general structure, the graphic charter (including colors, fonts and the graphic organization of screens), as well as all information and elements included, available or accessible on and/or through the Site, such as, in particular, texts, articles, photographs, illustrations, images, trademarks and logos, data, databases and all sound elements (such as voices, music or sound effects) and fixed or animated visual elements (such as graphic animations or audiovisual sequences), specific software developments and downloadable programs.

The Content is the exclusive property of ARTALYS, its technical service providers or any other third party having authorized ARTALYS to use it.

The mention of links or trademarks, names, services, domain names and names of companies other than ARTALYS in no way implies the existence of any association between ARTALYS and these companies, products or services, trademarks, names or names in question.

Any representation, modification, reproduction or distortion, in whole or in part, of all or part of the Site or its Content, by any process whatsoever and on any medium whatsoever, is prohibited and constitutes an infringement of intellectual property rights.

Any use of all or part of the Content must be expressly authorized in writing by ARTALYS, by sending a written request to defi@defisystemes.fr.

In any event, and subject to the foregoing, in the event of reproduction, representation, distribution and/or exploitation of all or part of the Content, the source (the Site and ARTALYS) must be clearly indicated, as well as, where applicable, the name of the author.

Any person not complying with the applicable legal provisions is guilty of the offence of counterfeiting and is liable to the penal sanctions provided for by law, notwithstanding any other recourse by ARTALYS. The fact that ARTALYS does not initiate proceedings upon becoming aware of unauthorized use does not constitute acceptance of said use and waiver of prosecution.

Copyright © Artalys. 2024