PERSONAL DATA

We are committed to ensuring that the collection and processing of your data from the www.sbii.fr website complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (DPA).

This Policy informs you about the way in which SBII, its subcontractors and its possible partners process your personal data.

This Policy applies in particular to customers and users of SBII offers and services. It may be supplemented by specific information brought to the user’s attention in relation to a particular offer or service.

COOKIES

A cookie is a small computer file, a tracer, which is deposited and read, for example, when you visit a website.
The use of these tools is subject to your consent if they are not strictly necessary for the operation of the website concerned.

FORMS AND TELE-SERVICES

Each form or Teleservice limits the collection of personal data to what is strictly necessary (data minimisation) and indicates in particular :

• what are the purposes of collecting this data (aims) ;
• if this data are obligatory or optional for the management of your request ;
• who will be able to see this data (only SBII in principle, unless it’s specified in the form that it will be passed on to a third party for the purpose of managing your request) ;
• your rights in terms of personal data protection and how to exercise them with the French DPA.

The personal data collected within the framework of the services offered on www.sbii.fr are processed according to secure protocols and enable SBII to manage the requests received in its computer applications.

WHAT ARE YOUR RIGHTS

Each individual has the right to access, rectify and delete his or her data. He can ask for the portability of the latter. He also has the right to object to the processing carried out or to request its limitation.

Also, he can issue directives on the conservation, the deletion or the communication of your personal data after your death.

Rule specific to telephone canvassing : any consumer can register free of charge on an opposition list called “Bloctel” in order to no longer be canvassed by telephone by a professional with whom he or she has no current contractual relationship. The consumer can register on the website www.bloctel.gouv.fr or by mail addressed to : Société Opposetel, Service Bloctel, 6, rue Nicolas Siret – 10000 Troyes.

HOW TO EXERCISE YOUR RIGHTS

You can exercise your rights and contact the Data Protection Officer at any time at the addresses below.

For any information or to exercise your rights regarding the processing of personal data managed by SBII, you can contact its Data Protection Officer (DPO) :

• by this form with a scan of you ID
• or by mail signed with a copy of an identity document to the following address :
  SAS SBII
  1 RUE CLAUDE CHAPPE – BP 20755 – 44481 CARQUEFOU CEDEX – FRANCE

If you don’t have an adequate return, you have the possibility of lodging a complaint with the French DPA, the supervisory authority in charge of compliance with obligations in terms of personal data in France.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

SBII processes personal data only for specified, explicit and legitimate purposes. SBII doesn’t process such data in a manner incompatible with these purposes. To this end, the purposes pursued by SBII are the following :

1.PROCESSING OF CONTACT FORM DATA

Collecting, transmitting and storing data to get in touch with the company

• Sending an email

2.CUSTOMER KNOWLEDGE AND WEBSITE AUDIENCE STATISTICS

SBII may use data to better understand our customer or for statistical purposes to analyse our website activity and improve the services we offer. We measure the number of pages viewed, the number of visits to the website, as well as the activity of visitors on the website and the frequency of their return.

3.SENDING MESSAGES BY EMAIL

Based on the information you have provided and if you haven’t objected, you may receive information and offers from us by email. We measure the opening rate of our email to adapt them to your needs.

WHAT DATA IS PROCESSED

SBII only processes data or a category of data if it’s strictly necessary for the purpose for which it was collected. You can find information on these purposes above.

SBII processes the following categories of data :

• Identity data : First name, Last name
• Contact data : Email, postal address, phone number
• Location data

WHO ARE THE RECIPIENTS OF YOUR DATA ?

The data collected is intended for the website’s internal departments and its subcontractors.

Finally, the processed data may be transmitted to the competent authorities, at their request, in the context of legal proceedings, in the context of legal investigations and requests for information from the authorities or in order to comply with other legal obligations.

IS YOUR DATA PROCESSED OUTSIDE THE EUROPE ?

The data collected may be processed outside the European Union. In this case, SBII takes the necessary steps with its subcontractors and partners to ensure an adequate level of protection of your data in full compliance with the applicable regulations.

If the subcontractors and partners concerned aren’t members of the Privacy Shield agreement in the case of transfers to the United States of America, or aren’t located in a country whose legislation is considered to offer adequate protection, they will have signed the European Commission’s “standard contractual clauses” or will be subject to binding internal rules approved by the authorities..

HOW IS YOUR DATA SECURED ?

SBII ensures that your data is processed in complete security and confidentiality, including when some operations are carried out by subcontractors. To this end, appropriate technical and organisational measures are put in place to prevent the loss, misuse, alteration and deletion of your personal data. These measures are adapted according to the level of sensitivity of the data processed and the level of risk presented by the processing or its implementation.

DATA RETENTION PERIOD

The administrative retention period (ARP) is the period of time during which archived documents, data or information must be kept in a state of being consulted and used, either by those who produced them or by archival services.

Below you will find the administrative retention periods (ARP) applicable to the main procedures managed by SBII. The ARP covers the retention period in the active database and in the internal archives.

CHANGES TO THE DATA PROTECTION POLICY

This Privacy Policy may be subject to change.