Last updated: September 2023
Definitions
"Personal Data": any information relating to an identified or identifiable natural person as defined by Regulation (EU) 2016/679 of April 27, 2016 and any subsequent equivalent regulations.
"Applicable Data Protection Laws" or "Applicable Laws": means Law n°78-17 of January 6, 1978 relating to data processing, files and freedoms as amended by Law n°2004-801 of August 6, 2004 relating to the computerized processing of personal data, by Law for a Digital Republic n°2016-1321 of October 8, 2016, as well as the European General Data Protection Regulation (EU) 2016/679 and Law n°2018-493 of June 20, 2018 relating to the protection of personal data and any subsequent equivalent regulations, and/or any applicable law or applicable and current regulations relating to Data protection.
"Third Country": means any country outside the European Union which does not have adequate legislation concerning the processing of Personal Data as decided by the European Commission.
"Processing Manager or CATU": means the company ETABLISSEMENTS CATU, RCS NANTERRE 552 035 826, 10 avenue Jean Jaurès. 92220 Bagneux.
"Processing": any operation or set of operations carried out or not using automated processes and applied to data or data sets of Personal Data, such as, for example, the collection, recording, organization, structuring, storage, communication by transmission, dissemination, extraction, consultation of Personal Data and defined by Regulation (EU) 2016/679 of April 27, 2016 and any subsequent equivalent regulations.
"Subcontractor": refers to the third party that processes Personal Data on behalf of the Data Controller.
"User": refers to the natural person whose Personal Data is collected for processing hereunder.
This privacy policy (hereinafter the "Policy") applies to the Processing carried out by CATU on the website accessible at the following address: www.catuelec.com (hereinafter the "Site").
CATU undertakes to comply with Applicable Data Protection Laws.
Personal Data is processed lawfully, fairly and transparently.
The Personal Data collected is adequate, relevant and limited to what is strictly necessary for the Purposes of Processing.
CATU collects the User's Personal Data in order to :
The User is hereby informed that CATU collects and processes his or her Personal Data and in particular :
CATU will retain Personal Data for as long as is necessary for the purposes for which it was collected and processed. Personal Data is subsequently archived for the purposes and retention periods set out below:
CATU processes Personal Data on a precisely identified legal basis, namely :
CATU is committed to :
CATU shall under no circumstances be liable for any security incidents related to the use of the Internet, in particular in the event of loss, alteration, destruction, disclosure or unauthorized access to the User's data or information.
The User accepts that Personal Data concerning him/her collected by the Data Controller may be transmitted to Subcontractors with whom he/she has a contractual relationship for the sole purpose of carrying out the aforementioned Purposes provided that these third-party recipients of Personal Data are subject to regulations guaranteeing an appropriate and adequate level of protection as defined by EU Regulation 2016/679.
In the event of the transfer of all or part of the Personal Data subject to Processing to a Third Country, i.e. one located outside the European Union or which does not present a level of protection recognized as adequate within the meaning of the Applicable Law, or to an international organization, the Data Controller undertakes to provide the appropriate safeguards provided within the Applicable Law and to have them respected by its Subcontractors.
Under no circumstances will the Data Controller sell, rent or use the personal data it receives other than for the Purposes specified. The Data Controller will only disclose Personal Data to third parties for the purposes of fulfilling the Purposes and to third parties acting as Subcontractors under the conditions set out herein.
The following rights are guaranteed by the Data Controller to the User: right of access, rectification, deletion and opposition, right to data processing limitation, right to data portability, right not to be the subject of an automated individual decision (including profiling).
The User may obtain a copy of his or her Personal Data upon written request to the Data Controller.
By sending a written request, and at any time, the User may obtain a correction or deletion of his Personal Data, within the limits of the rights of the Data Controller.
All requests must be sent to CATU in writing to the following address: dpo@sicamegroup.com
If the User believes that CATU has not respected his or her rights with regard to the protection of Personal Data, he or she may lodge a complaint with the CNIL.
CATU regularly updates this Policy, which remains available on the Site at all times.