Citeo, a public limited company with share capital of €499,444.50, registered with the Paris Trade and Companies Register under number 388 380 073, with its head office at 50 boulevard Haussmann, 75009 Paris, France, and REVIPAC, a non-profit association with its head office at 23-25 rue d’Aumale, 75009 Paris, France, respect your privacy and comply strictly with the regulations in force on the protection of personal data.
As such, in accordance with the applicable regulations on personal data and in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and French Law No 78-17 of 6 January 1978 on information technology, files and freedoms, as amended, you are informed that Citeo or REVIPAC may occasionally process your personal data in their capacity as data controllers, within the scope of their partnership and for CEREC management purposes. CITEO and REVIPAC shall jointly determine the purpose and the means of processing. They are deemed joint controllers as defined by the regulations.
This policy provides information on how Citeo and REVIPAC, as part of CEREC’s activity, gather and handle your personal data. It may be amended at any time, particularly as a result of changes to regulations and legislation.
The term “personal data” denotes any information relating to an identified or identifiable natural person.
When your data is collected, you will be informed which data are compulsory and which are optional. Data identified by an asterisk on the data collection form are compulsory. Failing this, executing your request could be restricted.
PROCESSING OF PERSONAL DATA
How your personal data are processed
Citeo and REVIPAC process data for the sole purposes of CEREC and for express, legitimate, defined purposes. Your data are collected for the periods specified in this Policy. It should nevertheless be noted that your data may be retained for longer periods where necessary to meet legal obligations or protect Citeo’s and REVIPAC’s interests. In such instances, your data will be retained for the period necessary to meet such legal obligations or until the expiry of the applicable limitation period.
Your personal data may be processed for the following purposes:
Using your metadata (cookies) – Citeo and REVIPAC collect login and browsing data such as IP addresses, browser types and settings, and login dates and times in order to:
– Detect, prevent or address fraudulent activities, abuse, security breaches, or any technical issues encountered by our teams (for example fraudulent access of the information system);
– Analyse Website traffic and gain an understanding of how the Website is being used and improve its performance (audience measurement cookies);
These metadata are collected when you consent to our cookie policy or as founded on our legitimate interest in securing the Website. These data are stored in aggregate form to ensure optimal Website operation, maintenance and security. They are solely intended for authorised data controllers and for technical suppliers of the Website and our partners issuing third-party cookies, where appropriate.
This information is retained for no more than 1 year. For further information on the use of cookies on the Website, please refer to the COOKIES section below.
Contacting CEREC – In order to respond to any questions or complaints sent to CEREC, Citeo and REVIPAC process information related to your requests and your identifying data.
Such processing is performed in pursuit of the legitimate interest of Citeo and REVIPAC in responding to various requests put by you to CEREC and helping you, where possible, to resolve any difficulties encountered. Citeo and REVIPAC will be unable to respond to your request on behalf of CEREC without this information.
Any personal data passed on are solely intended for authorised Citeo and REVIPAC staff and any subcontractors, particularly the technical suppliers of its Website.
Requests from marketers are forwarded to Citeo for processing and those from packaging manufacturers are forwarded to REVIPAC. These data may be shared between Citeo and REVIPAC for the sole purpose of proper CEREC management. This information is retained for the period of time required to respond to your requests.
Exercising your rights under the GDPR – in order to exercise your rights under the GDPR, you must provide your identifying data and a copy of your identity document.
Citeo and REVIPAC need these data to identify you and enable you to exercise your rights.
Such processing is performed to meet Citeo and REVIPAC’s legal obligation of responding to concerned parties’ requests to exercise their rights. Any personal data passed on are solely intended for authorised Citeo and REVIPAC staff and its subcontracting service providers, particularly the technical suppliers of its Website.
This information is retained for the period of time required to respond to your requests.
Exercising your rights
In accordance with the regulations, you may, under certain conditions, exercise the right of access, rectification, restriction, erasure, objection and/or portability with respect to all your data. Moreover, you are entitled to issue specific and general instructions concerning the storage, erasure and transfer of your data after death.
You may object to the processing of your personal data where processing is performed in pursuit of our legitimate interest. Citeo and REVIPAC will cease processing your data unless legitimate and pressing grounds prevail over the user’s interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Finally, where data are processed based on consent, you may withdraw your consent at any time.
CITEOhas been appointed the lead organisation for the contract, representing the interests of the Parties. The lead organisation is the contact point for any question relating to effective processing of personal data. In accordance with the General Data Protection Regulation of 27 April 2016 and with the French data protection law of 6 January 1978, you have the right of access, rectification, restriction, erasure with respect to information relating to you, you also have the right to data portability and the right to draw up instructions relating to the retention, erasure and communication of your personal data after your death.
Citeo’s data protection officer may be contacted with a view to exercising these rights by emailing dpd@citeo.com or sending a letter to the following address: Citeo – Délégué à la protection des données [Data Protection Officer], 50 boulevard Haussmann, 75009 Paris, accompanied by a copy of a signed identity document.
You may also refer any disputes to the CNIL (the French data protection authority).
Citeo and REVIPAC undertakings
Citeo and REVIPAC undertake to process personal data entrusted to it and/or collected by it in accordance with regulations, and in that regard, undertake to:
– Only collect and process personal data to meet objectives related to the purpose for which they are being collected;
– Only collect and process data for the time required to process them;
– Maintain the security, integrity and confidentiality of collected and processed personal data;
– Refrain from transferring personal data outside the territory of the European Union;
– Take all appropriate technical and organisational steps to protect personal data in light of the current state of knowledge, implementing costs, and the nature, scope, context and purposes of processing, as well as risks of variable degrees of probability and seriousness to the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.
You are hereby informed that, in accordance with the regulations in force, your data could be passed on to the competent authorities on request, specifically to public organisations, officers of the law, ministerial officials, debt recovery agencies, exclusively to meet legal obligations and to prosecute offences committed online.
COOKIES
What are cookies?
Cookies are text files that may be installed on your device (computer, tablet, phone, etc.) when you visit a website. Cookies are capable of identifying devices on which they are saved throughout their validity period or for as long as they are saved.
Cookies offer the benefit of facilitating your browsing and enabling Citeo to ensure secure browsing.
The cookies used on the Website are valid for a maximum of six months.
Strictly necessary cookies – Always on
We use strictly necessary cookies to help you browse the Website and use our services. These cookies are essential for the Website to function properly. They are always on and do not require your consent. You can configure your browser to block these cookies but this could cause some Website features to malfunction.
Our Website uses the following strictly necessary cookies:
– Language preferences: this cookie stores users’ language preferences when visiting the Website. This cookie does not collect any personal data.
– Contact form security: we use hCAPTCHA services to protect our forms against spam and phishing. These services are used to prevent bots from accessing our forms. Our contact forms would not work without these mandatory cookies. See the hCAPTCHA confidentiality policy at: https://www.hcaptcha.com/privacy
– Performance cookies (MATOMO): these measure the number of visits, the number of pages viewed and other user activity on the Website to analyse traffic and understand how the Website is being used to improve its operation, performance and ergonomics. For example, these cookies allow us to detect browsing issues and/or optimise the Website’s technical performance. These cookies give us anonymised viewing statistics and do not collect any of your personal data. The information collected is exclusively reserved to CITEO and REVIPAC and is not transmitted to third parties. For more information: https://fr.matomo.org/privacy-policy/ ]
– Video cookies (YOUTUBE): these cookies allow you to view our multimedia content directly on the Platform. We configure these cookies in such a way that we only use cookies that are strictly necessary to view our videos. Without these cookies, you would not be able to view our content. These cookies are valid for a maximum of six months.
Managing cookie use
With the exception of strictly necessary cookies, you can choose to accept or refuse cookies. You may also change your mind at any time by clicking on the cookies icon on all pages of the Website. We will retain your choices for six months.
Strictly necessary cookies used on the Website do not require user consent. However, users can configure their browsers to automatically erase or delete cookies while browsing. However, automatically rejecting cookies may affect the Website’s performance.
For further information on changing cookie settings, users should visit the website of the French data protection authority, CNIL or the following websites depending on their browser:
Chrome
Internet Explorer
Firefox
Opera
Safari