1/ JOB APPLICATION OR INTERNSHIP REQUEST

Your CV, cover letter and any other documents or data provided for a job application (whether spontaneous or not) are collected by CONCEPT ALU (who is the data controller) in order to assess the suitability of a professional profile for a possible position to be filled. Only Management, the department heads concerned and the staff in charge of recruitment are authorised to have access to the data communicated. We retain your personal data only for the period necessary for the purposes set out in this policy or in accordance with the provisions of applicable law. The legal grounds for the use and processing of your personal data are based on your consent or legitimate interest as a job seeker or our legitimate interest as a recruiter. We wish to note that, in rare cases, we sometimes transfer CVs to institutional partners or other similar, related or complementary activities. We would also like to note that we may enrich our candidate database with public information, temping agencies or recruitment firms.

2/ CUSTOMER AND PROSPECTS

We collect personal data, such as names, contact details or any other information necessary for the performance of our contractual obligations towards a particular person or their company. This data may be provided exclusively to CONCEPT ALU, third parties or professionals, for the purpose of processing an order, including preparation for delivery, invoicing or responding to a request for information.

3/ DATASETS PROVIDED BY OUR CUSTOMERS, DATA COLLECTED BY OUR CUSTOMERS VIA OUR TOOLS, WEB HOSTING

We also collect personal data from people visiting our physical sites, registered offices, websites and from customer satisfaction surveys. This data may also be sent to CONCEPT ALU via polling surveys carried out. In this case, your personal data will not be used for commercial purposes.

4/ DATA FROM LISTED OR POTENTIAL SUPPLIERS

We collect personal data from suppliers (including service providers) and other stakeholders. These generally include the name of the person concerned, their contact details and any other information necessary for the performance of our contractual obligations towards you or your employer.

5/ NEWSLETTERS, INVITATIONS AND ATTENDANCE AT EVENTS ORGANISED BY CONCEPT ALU

Our customers and professional contacts (suppliers, institutions, partners, elected representatives, etc.) may receive our informative or commercial communications by email, telephone or letter. Therefore, a newsletter or invitation system, or even a system for attendance at events, may be set up by CONCEPT ALU who is the data controller. You can notify contact@conceptalu.com that you no longer wish to receive our communications. The purpose of this registration, which contains personal data (surname, first name, address, job, telephone, email, etc.), is the distribution of news or even commercial offers or the organisational and promotional management of events. Only Management and the relevant internal or outsourced operational staff are authorised to have access to the data communicated or registered. We wish to note that, in rare cases, we may enrich our invitation data with public information (e.g. from the trade register) and transfer data to outsourced event organisation companies. The retention period for personal data is set at three years after inactivity of the relationship with visitors or subscribers. The legal basis for the use and processing of personal data is the consent of the relevant parties, our legitimate interest as a company or the legitimate interest of the individual concerned.

6/ NEWSLETTERS, INVITATIONS AND ATTENDANCE AT EVENTS ORGANISED BY OUR CUSTOMERS

Subject to having received your prior consent and insofar as this is required, we use your personal data for the purpose of informing you of our business news or the release of new products and services. Should you refuse this type of use of your personal data, you may unsubscribe at any time, easily and free of charge, by clicking on the link at the bottom of our communications or by contacting us by email or letter. When you choose to unsubscribe from our mailing lists and provided that your personal data is not used for other purposes as described in this document, we will delete your personal data within two months.

7/ SECURE IT ARCHITECTURE

Our data and our customers’ data are mainly hosted in France on our secure premises and outsourced data centres (sometimes outside the EU but certified by Privacy Shield as well as ISO 27001 in some cases). In terms of certified Privacy Shield tools that transfer data outside the EU, we should note in particular the use of Mailchimp®, Gmail®, Gdrive®, Trello® and Sarbacane®.

8/ YOUR RIGHTS

We inform you that any type of information about our contacts (customers, suppliers, partners, etc.) may be transferred to partners for the purposes of resolving disputes or to supervisory bodies (outsourced lawyer, judicial representative, outsourced debt collection agency, outsourced accounting firm, auditor, institutions, etc.). Pursuant to European laws and the law of 6 January 1978 (relating to information technology, data files and civil liberties), you have the right to access, rectify, restrict, transfer and erase your personal data as well as the right to object to its processing for legitimate reasons. You can exercise all these rights by sending an email to contact@conceptalu.com or sending a letter to Service DPO, Parc Ekho 3, 2 rue Floriane 85500 Les Herbiers, FRANCE. You also have the right to withdraw your consent at any time and to lodge a complaint with the French Data Protection Authority (CNIL). You can do so via its website www.cnil.fr.