Personal data protection charter

As part of its activity, EXCO SAS is likely to collect personal data as defined by current regulations, and in particular the European Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data of April 27, 2016 (known as the RGPD) and Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms.

The purpose of this charter is to inform visitors to the site of the various processes implemented on the site. www.exco.fr

 

Data controller

The data controller is EXCO SAS, registered in the Paris Trade and Companies Register under number 443 895 974, represented by its Chairman, Mr Bruno Geeraert.

Contact: 01 58 05 22 90 ; rgpd@exco.fr

The EXCO Group's various entities also collect personal data in the course of their work, and are therefore responsible for processing it. Contact details for the various entities are available at the following address: www.exco.fr/cabinets/

 

Data collected, purposes, legal basis for processing

EXCO SAS operates a website at the following address www.exco.fr (hereinafter referred to as the Site) available to visitors, users and entities of the EXCO network. The database, located in Microsoft's Cloud Azur, is administered by Exco SAS.

 

Cookies

Internet users are informed that cookies may be installed on their terminals during visits to the Site.

A cookie is a file sent by the web server to the browser's cookie file on the user's hard disk.

EXCO SAS has set up a centralized solution for collecting consent to cookies, namely a tag manager, which centralizes the collection of consent and informs the Internet user of the purposes and duration of cookie storage.

You can set your browser to notify you of the presence of cookies and refuse them if you wish, as described at the following address: www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.

 

Contact form

When using the contact forms present on the Site, personal data is collected (surname, first name, e-mail address, etc.); EXCO SAS implements processing for the purpose of managing prospects, the legal basis of which is consent, or to respond to the visitor's request. The data collected is transmitted to the network entity responsible for the response. Data is kept for a maximum of 3 months by EXCO SAS; network entities may keep prospect data for a period of 3 years from the date of collection or last contact with the prospect.

 

Customer portal

EXCO SAS provides a link to access the customer area of each network entity. The entity concerned is responsible for processing the customer area.

The legal basis for the processing carried out in this customer area is the performance of the contract entered into with the customer and compliance with the legal obligations applicable to data controllers. The personal data collected is stored in accordance with the applicable legal periods.

 

Recruitment

EXCO SAS offers a recruitment area accessible at the following address: www.exco.flatchr.io/fr/company/exco/

Each user can create a personal space by filling in the mandatory fields marked with *.

The data communicated is shared with all EXCO network entities, each of which is a separate legal entity and acts as data controller.

Data can be modified and deleted directly by the candidate by logging into his/her personal space. Otherwise, data is destroyed 2 years after the last contact, unless the candidate agrees to a longer retention period.

 

Shelf life

Personal data collected during assignments entrusted to EXCO SAS network entities is kept for the duration of the contractual relationship. Beyond this period, the data is archived for the period during which the responsibility of each of the parties could be called into question, before final deletion of the data. Data is kept for the length of time required to comply with the statute of limitations stipulated in articles 2224 et seq. of the French Civil Code, and for the retention of accounting documents.

The data collected in connection with a request is kept for the time required to process the request.

Data collected on the recruitment platform is kept for a maximum of 2 years after the last contact, unless the candidate agrees to a longer retention period.

Data collected for commercial prospecting purposes is kept until consent is withdrawn, or deleted in the event of prolonged inactivity.

Cookies are stored for a maximum of 13 months.

 

Individual rights

All data subjects have the following rights with regard to their data:

• Right of access ;
• Right of rectification ;
• Right to erasure ;
• Right to object ;
• Right to withdraw consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of consent prior to its withdrawal;
• Right to data portability ;
• Right to limit processing ;
• The right to define instructions concerning the fate of one's personal data after death ;
• Right to lodge a complaint with a supervisory authority, such as the CNIL in France