Privacy Policy
Introduction
Privacy protection represents a core commitment for Centolla, aligned with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable national data protection statutes. This policy explains our data collection and processing practices when you visit our Website. By using our Website, you acknowledge that your personal information will be processed in accordance with this Privacy Policy and any updates.
Data Collection
Centolla collects personal identification information directly provided by users, such as:
- Names
- Email addresses
- Locations
- Phone numbers
Additional data gathered through Website usage includes:
- Device identifiers
- Operating system versions
- Service usage patterns
- Location information derived from IP addresses
- Data from external sources (Google, LinkedIn, Lever, SharpSpring)
Data Collection Methods
Data collection occurs when users:
- Complete contact forms
- Send emails
- Share webpages on social media
- Request information or demos
- Download files
- Register online
- Complete surveys
- Use the Website via browser cookies
Data Usage Purposes
Personal data supports:
- Website administration and optimization
- Security measures
- Marketing communications via email or electronic means
- Customer service and technical support
- Research and development activities
- Legal compliance obligations
Legal Basis for Processing
Processing relies on:
- Contractual obligations
- User consent
- Legitimate organizational interests (IT security, website analysis, fraud prevention)
- Legal requirements or public interest
Data Storage and International Transfers
Personal data storage follows applicable protection laws. International transfers outside the European Economic Area (EEA) are protected through European Commission adequacy decisions or Standard Contractual Clauses adopted by the European Commission where the European Commission has not recognized adequate protection levels.
Data Recipients
Data sharing includes:
- Centolla group branches
- Financial and judicial authorities upon request
- External service providers
Data Retention
Data is retained for the duration of our business relationship and a maximum of 2 years after the end of this relationship. Prospects' form submissions remain for 2 years. Inactive data faces deletion in batches after 2 years of inactivity.
Marketing Communications
Users may opt-out of marketing communications at any time by contacting dpo@centolla.org.
Your Data Protection Rights
Under the GDPR, you have the following rights:
- Right of access: You can request a copy of your personal data
- Right to rectification: You can request correction of inaccurate data
- Right to erasure: You can request deletion of your data
- Right to restrict processing: You can request limitation of processing
- Right to object: You can object to processing of your data
- Right to data portability: You can request transfer of your data
Centolla responds within one month to requests directed to the Data Protection Officer.
Cookies
Centolla employs functionality, advertising, statistical, and targeting cookies to enhance user experience, remember preferences, analyze behavior, and personalize content. You can manage your cookie preferences through your browser settings.
External Websites
This Privacy Policy applies exclusively to Centolla's Website. Linked external sites operate under separate privacy policies, and Centolla is not responsible for their data practices.
Policy Updates
This Privacy Policy may be updated periodically. The last update was on September 12, 2019.
Contact Information
For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact our Data Protection Officer:
- Email: dpo@centolla.org
- Address: Centolla, 8 rue Marcel Sembat, 92120 Montrouge, France
If you are not satisfied with our response, you have the right to lodge a complaint with a competent data protection supervisory authority.