1 LEGAL INFORMATION :
SARL ARTALYS 78 rue John Mac Adam
Bâtiment Nimaxis – Arènes
30900 Nîmes
The publication director is Mr. Sylvain Fournier, Manager of the company.
Email address: info@artalys-france.fr
Telephone: 04 66 63 85 79
Trade and Companies Register number: B 533 908 034
Intra-community VAT No.: FR71533908034
Hosting: Registered Office: OVH — 2 Rue Kellermann — 59100 ROUBAIX — France — Telephone: 09 72 10 10 07
In accordance with the provisions of Articles 39 and 40 of the French “Data Protection” Act of January 6, 1978, as amended in 2004, the user has the right to access, rectify, update, and delete information concerning them, which they can exercise by contacting info@artalys-france.fr, or by mail to our address, specifying “Rights of individuals” in the subject line and attaching a copy of their proof of identity.
As before, you also have the right to give instructions on the fate of your data after your death. That is to say, in accordance with the provisions of Article 38 of the French “Data Protection” Act of January 6, 1978, as amended in 2004, the user may also object, for legitimate reasons, to their data being processed and, without reason and free of charge, to their data being used for direct marketing purposes.
The user is informed that during their visits to the Site, a cookie may be automatically installed on their browser software. The information collected on this site will be kept for a period of three years.
2 GDPR POLICY:
2.1 PREAMBLE
As part of the use of this website and associated services, the User, after their consent has been collected for this purpose (when accessing the website, a pop-up appears requesting consent), and in compliance with the provisions below, will have certain personal data collected by ARTALYS.
Within the meaning of European regulations, personal data (hereinafter “personal data”) refers to any information likely to relate to an identified or identifiable natural person. The implementation of automated processing of personal data is governed in particular by Regulation (EU) No. 78-17 of the European Parliament and of the Council on the processing of personal data by automatic means.
2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as GDPR (General Data Protection Regulation).
ARTALYS undertakes to take all necessary measures to respect the confidentiality of the User’s personal data. Personal data is kept securely and is only accessible to our employees or service providers who need it and who are bound to maintain its confidentiality.
This Policy is intended to provide the information necessary for the user to understand the various processing operations we carry out in order to fulfill our missions and provide them with the most suitable services.
2.2 DEFINITIONS
Personal Data: any information relating to an identified or identifiable natural person. User: refers to any natural person whose personal data is subject to processing, the purpose and means of which have been defined by the data controller.
Data Controller: natural or legal person who determines the purposes and means of the processing.
Data Processor: refers to the natural or legal person who processes personal data on behalf of the Data Controller.
Processing: any operation or set of operations performed or not using automated processes and applied to personal data or sets of personal data.
Transfer: any communication, copy, or movement of personal data intended to be processed in a country outside the European Union.
Personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data transmitted, stored, or otherwise processed, or unauthorized access to such data.
2.3 WHAT ARE THE SCOPES OF THE GDPR POLICY?
ARTALYS, as Data Controller, informs Users of its website in a transparent manner about the personal data processing likely to be implemented.
2.4 WHAT PERSONAL DATA IS PROCESSED BY ARTALYS?
ARTALYS ensures that it only collects and processes data strictly necessary for the purpose for which it is processed, following the principle of data minimization.
In particular, the ARTALYS website only uses cookies strictly necessary for navigation. On the other hand, personal data may be collected:
• When sending an application in response to a job offer or a spontaneous application via the “Join us” section of our website. This includes identification and contact data as well as any other data provided at the candidate’s initiative as part of their application,
• During a request for technical and commercial offer information, or any other request via the “Contact” section of our website. This includes identification and contact data as well as any other data provided at the User’s initiative.
2.5 WHO IS/ARE THE DATA CONTROLLER(S) OF YOUR PERSONAL DATA?
ARTALYS is responsible for processing your personal data.
2.6 FOR WHAT PURPOSES DOES ARTALYS COLLECT YOUR PERSONAL DATA?
ARTALYS undertakes to collect only data strictly necessary to carry out the Processing and not to divert this data from the purpose for which it was initially collected.
Personal data may be processed for the following purposes: • Management of applications within the framework of recruitment, collected via the “Join us” section of our website (management of applications for a job offer, internship/work-study, or spontaneous),
• Management of cookies such as improving the ergonomics of the website,
• Management of requests for information, technical or commercial offers, or any other request via the “Contact” section of our website.
2.7 WHAT IS THE LEGAL BASIS FOR OUR PROCESSING?
The processing of personal data is based on the consent of the User wishing to use additional services via our website, such as submitting applications, requests for information, etc. The User is informed that the provision of this data is not of a regulatory or contractual nature.
2.8 TO WHOM CAN YOUR PERSONAL DATA BE COMMUNICATED?
Personal data may be transmitted, depending on the processing concerned, to the following recipients: • To functions related to human resources and management, for the management of applications and information relating to candidates,
– Third-party agents, service providers, subcontractors and consultants (e.g. for IT maintenance or human resources support),
• To Data Processors of ARTALYS FRANCE within the framework of a Data Processor agreement that requires the provider to comply with GDPR principles, • To government authorities, courts, and law enforcement agencies, when necessary and to comply with current laws and applicable regulations, • To any other party, in the event of reorganization, merger, sale, joint venture, assignment, transfer, or any other disposition related to all or part of our business, assets, or shares.
Your Personal Data is only communicated to those who need to know it. We do not disclose your Personal Data to parties who are not authorized to process it.
There is no Transfer of Personal Data outside the European Union.
2.9 FOR HOW LONG IS YOUR PERSONAL DATA KEPT?
The retention period of your Personal Data depends on the processing carried out. ARTALYS undertakes not to keep your Personal Data beyond the time necessary to provide the service, and therefore your use of the
service, increased by the retention period imposed by the applicable rules regarding legal prescription.
Type of data Duration Recruitment data 24 months Information request or quote 36 months Cookies 36 months.
2.10 HOW IS YOUR PERSONAL DATA PROTECTED?
ARTALYS undertakes to take all measures to ensure the security and confidentiality of your Personal Data and in particular to prevent it from being damaged, deleted, or accessed by unauthorized third parties.
Only authorized persons can access the data. Any personnel of Data Processors are always accompanied and supervised by an employee of ARTALYS and/or the Information Systems Department (ISD) when they access the data servers.
We are constantly improving our security procedures as technologies evolve to maintain a maximum level of protection. Our staff and that of our Data Processors having access to Personal Data are contractually subject to an obligation of confidentiality.
Organizational measures include limiting access to Personal Data to only authorized persons with a legitimate interest in knowing it.
Furthermore, in the event of a security incident affecting your Personal Data (destruction, loss, alteration, or disclosure), ARTALYS ensures compliance with the obligation to notify Personal Data breaches, in particular to the CNIL.
2.11 WHAT ARE YOUR RIGHTS OVER YOUR PERSONAL DATA?
You have the right at any time to exercise with ARTALYS the rights provided for by the current regulations applicable to Personal Data, subject to meeting the conditions and according to the basis of the processing of the data concerned:
• Right of access: you can ask what Personal Data is being Processed by ARTALYS based on your consent,
– Right of rectification: you may update or rectify your Personal Data processed by ARTALYS based on your consent,
• Right to object: you can express your wish that your Personal Data no longer be subject to Processing in the event that the Processing is based on your consent (withdrawal of consent) or on contractual performance (contract waiver clause) as well as in the case of Processing carried out in the legitimate interest of ARTALYS. On the other hand, you cannot object to Processing carried out within the framework of a legal obligation incumbent on ARTALYS or the performance of a public service mission which presents compelling and legitimate reasons prevailing over your rights and freedoms,
• Right to erasure: you can request the deletion of your Personal Data, subject to the legal retention period, in the event that the Processing is based on your consent (withdrawal of consent) or on contractual performance (contract waiver clause) as well as in the case of Processing carried out in the legitimate interest of ARTALYS. On the other hand, you cannot request the erasure of data from Processing carried out within the framework of a legal obligation or the performance of a public service mission incumbent on ARTALYS,
• Right to restriction: you can request the suspension of the Processing of your Personal Data based on your consent, legal obligation, contractual performance, or the legitimate interest of ARTALYS if you have a request for rectification, erasure, or objection in progress or if you consider the Processing unlawful but ARTALYS objects to the erasure of your Personal Data,
• Right to portability: you can ask ARTALYS to recover your Personal Data in order to have it only if the Processing is based on your consent or the performance of a contract. You cannot benefit from the right to portability in the event that the Processing is carried out within the framework of a legal obligation, the performance of a public service mission, or the legitimate interest of ARTALYS.
2.12 HOW TO EXERCISE YOUR RIGHTS OVER YOUR PERSONAL DATA?
Requests relating to the exercise of your rights should be sent to the registered office, at the address specified in the legal notices, for the attention of the Data Protection Officer. Any request that is not exercised in a framework that allows for no doubt about the identity of the applicant must be accompanied by a copy of a proof of identity.
ARTALYS undertakes to respond to your requests to exercise your rights as soon as possible and at the latest within one month from receipt of your request and to the extent that the exercise of these rights does not harm the performance of the contract or compliance with legal and regulatory obligations. If necessary, this period could be extended by two months in the event of complexity and/or a large number of requests.
You can contact our Data Protection Officer as follows: Postal Address: ARTALYS — 8 rue Deyron — 30000 Nîmes Email: con.fr Furthermore, you retain the possibility of filing a complaint with the CNIL by sending your requests to the site: www.cnil.fr/fr.plaintes/internet/
2.13 APPLICABLE LAW
The privacy policy is subject to French law and constitutes the entire agreement between ARTALYS and the User. In the event of a conflict regarding the validity, interpretation, and/or application of the policy, it will be subject to the jurisdiction of the courts of Nîmes.
3 INTELLECTUAL PROPERTY
The elements constituting the Site, developed by ARTALYS or on its behalf (hereinafter “the Content”), are protected by applicable legislation regarding copyright, trademark law, design and model law, and unfair competition.
The Content includes, but is not limited to, the general structure, the graphic charter (including colors, fonts, and the graphic organization of screens), as well as all information and elements included, available, or accessible on and/or through the Site, such as, in particular, texts, articles, photographs, illustrations, images, brands and logos, data, databases, and any sound element (such as voices, music, or sound effects) and fixed or animated visual elements (such as graphic animations or audiovisual sequences), specific software developments, and downloadable programs.
The Content is the exclusive property of ARTALYS, its technical service providers, or any other third party having authorized ARTALYS to use it.
The mention of links or brands, names, services, domain names, and names of companies other than ARTALYS does not imply the existence of any association between ARTALYS and these companies, products or services, brands, names, or denominations in question.
Any representation, modification, reproduction or distortion, in whole or in part, of all or part of the Site or its Content, by any process whatsoever and on any medium whatsoever, is prohibited and constitutes an infringement of intellectual property rights.
Any use of all or part of the Content must be expressly and previously authorized in writing by ARTALYS, by making a written request to info@artalys-france.fr
In any event, and subject to the foregoing, in the event of reproduction, representation, distribution, and/or exploitation of all or part of the Content, the source (the Site and ARTALYS), as well as, where applicable, the name of the author, must be clearly indicated.
Any person not complying with the applicable legal provisions is guilty of the offence of counterfeiting and is liable to the penal sanctions provided for by law, notwithstanding any other recourse by ARTALYS. The fact that ARTALYS does not initiate proceedings upon becoming aware of unauthorized use does not constitute acceptance of said use and waiver of prosecution.