RGPD CHARTER

Preamble

The Personal Data Protection Regulation came into force on May 25, 2018, in the European Union.
The RGPD strengthens the rights of individuals with regard to their personal data and aims to consolidate data protection laws across Europe, regardless of the place of processing. You can rest assured that Layher is committed to complying with the requirements of the RGPD and for all of its services.

The Charter applies to all personal data processed by Layher France acting as data controller in the context of services and products provided to customers.

This general data protection policy summarizes the information provided to data subjects for all purposes, without prejudice to information brought directly to their attention at the time of any collection of personal data concerning them.

It explains what data we may collect about you, how we use this data, with whom we may share it and what measures we take to ensure its confidentiality and security.

All individuals whose data you send to us are informed, in particular through this Charter, of their rights relating to the collection and processing of their data.

Definition

Personal data: any information relating to an identified or identifiable natural person, such as surname, first name, identifier or any other identifying feature.

Processing of personal data: any operation performed on personal data, such as collection, recording, organization, storage, modification, retrieval, consultation, use, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Data controller: the legal entity which, alone or jointly with others, determines the purposes and means of data processing.

Subcontractor (for the purposes of this Charter): the legal entity that processes personal data on behalf of the data controller.

The persons concerned by the data processing that we carry out are :

• Any visitor to our websites
• Our customers, their employees, and/or customers and/or suppliers, and/or partners, and/or service providers
• Our prospects
• Candidates for our job offers

We understand the importance of protecting the privacy of minors. Our websites and services are not designed for minors and are not intended for them.

Data collected by Layher

Layher cannot be held responsible for the inaccuracy of personal data provided by the above-mentioned persons.

The data we collect or hold about you may come from a variety of sources. Some may have been collected directly from you or other persons. We only collect data that is adequate, relevant and strictly necessary for the purposes for which it is processed, in compliance with applicable regulations. The data we hold and process concerning you may come from :

• from you directly;
• an intermediary acting on your behalf (business introducer, etc.);
• from a publicly accessible source;
• of our IT systems;
• other companies or public institutions.

For example, the data you provide may concern :

• information relating to your identity, such as your name, gender, etc.
• your contact details such as postal address, e-mail address, telephone numbers;
• information you provide to us by filling in forms or by communicating with us, whether by telephone, e-mail or any other means of online communication, or by responding to questionnaires or satisfaction surveys;

The data we collect or generate may concern in particular:

• information relating to our business relationship (financial and tax situation) or our employment relationship (CV and covering letter);
• any information contained in customer documentation or forms you may complete as a prospect;
• any information of a commercial nature, such as details of products or services from which you benefit;
• all bank details, RIB (IBAN, BIC…)
• all economic and financial information (income, tax situation)
• data collected through cookies

How Layher uses your data

We will only use your personal data if you have given your consent or if such use is based on one of the legal grounds provided by law:

• the protection of our legitimate interests;
• the execution of a quotation or a contract entered into or a commitment under which you and/or we are bound;
• compliance with a legal or regulatory obligation;
• preserving the public interest

We may use your data to provide you with any products or services and for other purposes such as:

• authenticate yourself or confirm your address;
• understand how your company works and how to use your services;
• execute your instructions (commands…);
• improve the quality of our products, contracts, commercial relations and services.

We may use automated decision support systems, for example when preparing a commercial offer.

Recipients of personal data

Your personal data may be communicated only to authorized Layher personnel and, where applicable, to specific partners and subcontractors.

Data retention time

Consequently, where personal data is no longer used to achieve the stated purpose but is still of interest to an administrative or judicial authority, such data will be retained to meet a legal or regulatory obligation.

For as long as your personal data is held, we take all necessary steps to ensure its confidentiality and security, so as to prevent damage, deletion or access by unauthorized third parties.

Your rights

In application of the Regulations, you have the right to access, rectify and, if necessary, delete your personal data as collected by Layher, as well as the right to request the restriction of the processing of your personal data or to withdraw express consent previously given.

You also benefit, within the limits of the Regulations, from a right to give instructions on the fate of your data after your death and a right to the portability of the data you have provided to us.

You also have the right to object, on legitimate grounds, to your data being processed and, without giving any reason, at any time and free of charge, to your data being used for commercial canvassing purposes, including profiling for the purpose of commercial canvassing.

You are reminded that your right to oppose, limit or delete data may be limited when the personal data collected is strictly necessary for the performance of the contract to which you are a party, or when Layher is required to collect or retain your data in order to comply with a legal obligation.

If you are not satisfied with your dealings with Layher, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL).

You can also exercise your rights by writing to our Data Protection Officer at the following addresses:

• By e-mail: marketing@layher.fr
• By post: LAYHER S.A.S.
  Délégué A La Protection
  Z.A.C. “Le Parc du Bel Air”
  17/19 avenue Joseph Paxton
  77164 Ferrières-en-Brie