INFORMATION NOTICE FOR OUR CUSTOMERS, SUPPLIERS, SERVICE PROVIDERS AND PROSPECTS
1. WHY A PERSONAL DATA PROTECTION NOTICE?
GERAL, like the GERARD PERRIER INDUSTRIE group to which it belongs, attaches great importance to respecting individuals’ privacy. For this reason, GERAL is committed to managing and protecting everyone’s personal data responsibly and in compliance with the applicable legislation in force.
The purpose of this personal data protection notice is to inform you about how the personal data collected by GERAL is processed in accordance with the General Data Protection Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and the amended French Data Protection Act of January 6, 1978.
This notice aims in particular to explain which personal data is concerned and how it may be used.
2. WHAT IS PERSONAL DATA?
Personal data means any information relating to an identified or identifiable natural person, either directly or indirectly, by that data alone or in combination with other data. Examples of personal data include a surname, first name, postal or email address, telephone number, or an IP address.
For more information about what constitutes personal data, the processing of personal data, or the main principles of data protection, you can consult the CNIL website (www.cnil.fr
).
3. WHO IS THE DATA CONTROLLER?
Your personal data is processed by a legal entity: GERAL CONSTRUCTIONS ELECTRIQUES ET TRAVAUX INDUSTRIELS (GERAL), a simplified joint-stock company (SAS) with a share capital of €1,500,000, registered with the Bourg-en-Bresse Trade and Companies Register under number 546 720 040, located at ZI La Pélissière – 01300 Belley, France.
GERAL is therefore the data controller, meaning the entity that determines the purposes and means of processing your personal data.
4. HOW DOES GERAL USE YOUR PERSONAL DATA?
GERAL collects your data for the following purposes:
Management of contractual relationships (customers, service providers, suppliers);
Management of commercial relationships with prospects and partners;
Sending invitations to events related to your professional activity;
Protection of premises, property, and individuals through access control, video surveillance, and IT activity logs;
Processing forms available on the GERAL website (newsletter subscriptions, event registrations, contact requests, etc.).
This data is collected on the basis of contractual obligations or legitimate interest.
The personal data collected includes in particular:
Identification data: surname, first name
Professional information: telephone number, email address, job position, company contact details
Data collected as part of your interactions with companies within the group
5. WHO HAS ACCESS TO YOUR PERSONAL DATA?
The personal data collected is accessible only to a limited number of authorized internal personnel within GERAL or the GERARD PERRIER INDUSTRIE group to which it belongs.
In exceptional cases, the data may be transmitted to subcontractors that guarantee a level of data protection comparable to that provided by GERAL.
6. HOW LONG IS YOUR PERSONAL DATA KEPT?
Personal data is retained for the time necessary to achieve the purposes of the data processing and to fulfill the contractual commitments that bind us.
As part of our relationships with customers, suppliers, and service providers, data is generally retained for 5 years after the end of the contract. However, your data may be retained for a longer period in order to comply with specific legal obligations or applicable statutory limitation periods.
As part of our relationships with prospects, unless you object, your data may be retained and processed for 3 years following your last contact so that we may contact you again.
Any personal data whose retention period has expired will be destroyed.
7. WHAT RIGHTS DO YOU HAVE REGARDING YOUR PERSONAL DATA?
In accordance with the GDPR, you have several rights:
Right of access: you may request information about the processing of your personal data and obtain a copy of that data.
Right to rectification: you may request the correction of inaccurate or incomplete personal data.
Right to erasure: you have the right to request the deletion of your personal data when one of the grounds provided for by the regulations applies.
Right to object: you have the right to object at any time to the processing of your data.
Right to data portability: you have the right to obtain the personal data concerning you in a usable format.
Right to restriction of processing: you may request that GERAL suspend the processing of your personal data when one of the grounds provided for by the regulations applies.
8. HOW CAN YOU EXERCISE YOUR RIGHTS?
You may exercise your rights by contacting our Data Protection Officer (DPO), providing proof of your identity, via:
Email: dpo@gerard-perrier.com
Postal mail:
GERARD PERRIER INDUSTRIE
Data Protection Officer
Airparc Lyon St Exupéry Airport
160 rue de Norvège – CS 50009
69125 Colombier Saugnieu – France
You may also request at any time to stop receiving commercial communications from us by clicking the unsubscribe link included in the email or by simply indicating this in reply to the relevant email.
GERAL pays the greatest attention to the protection of personal data. However, if you believe that the processing of your data infringes your rights or that your request has not been satisfied, you have the right to lodge a complaint with the French Data Protection Authority (CNIL).
9. MODIFICATION OF THE PERSONAL DATA PROTECTION NOTICE
GERAL reserves the right to modify or, more generally, update the provisions of this Information Notice at any time and without prior notice. You are therefore invited to consult it regularly.
