S4E is committed, within the framework of its activities and in accordance with the legislation in force in France (Law n° 78-017 of January 6, 1978 relating to data processing, files and freedoms (known as the Data Protection Act) and in Europe (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (RGPD), to ensure the protection, confidentiality and security of the Personal Data of the persons benefiting from S4E services and/or products.
To ensure their proper application, S4E has appointed a Data Protection Officer. A Data Protection Officer has been appointed for S4E by the Commission Nationale de l’Informatique et des Libertés (CNIL), whose contact is: DPO, S4E, 9 rue d’Estienne d’Orves 56100 Lorient- firstname.lastname@example.org.
Personal data: any information relating to an identified or identifiable natural person, directly or indirectly, by reference to an identification number or to one or more elements that are specific to him or her.
Processing of personal data: any operation or set of operations, whether or not carried out by automated means and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction, constitutes Processing of personal data
Consent of the data subject: any freely given, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or by a clear positive act, that personal data concerning him or her may be processed;
Processor: means the natural or legal person, public authority, department or other body which processes personal data on behalf of the controller
Recipient: means the natural or legal person, public authority, department or other body that receives personal data, whether or not it is a third party.
Site: refers to the building on which an energy production or consumption installation is located and whose Data is collected by the Software.
Partners: refers to all interested parties (customers, service providers, landowners, etc.)
2. THE COLLECTION OF PERSONAL DATA
2.1 General description
S4E does not collect Personal Data without informing the individuals concerned.
S4E collects Personal Data in order to provide the requested services and/or products to the data subjects, to meet their needs and to inform them of the use made of it.
S4E ensures that the Personal Data collected is relevant to the data subject.
S4E collects information submitted by data subjects automatically in connection with the use of the Web site itself. This information may include unique device identifiers, Internet Protocol (“IP”) addresses, browser characteristics, language preferences, operating system details and referring URLs, as well as the duration of visits to the website and the pages viewed. S4E may use tools, such as Cookies (see Cookies Policy), web beacons, embedded scripts, web server logs or other similar technologies to collect details about the services and devices used to access the S4E Website.
2.2 Customers and Prospects
With respect to Customers, S4E collects identification and contact data. In particular, S4E collects the latitude and longitude of the site in operation, the measurements of the energy devices, sensors or similar, collected on Site and any other type of technical or administrative data necessary for the supervision of the Site. Concerning Prospects, contact and identification data are collected by S4E, if applicable.
The sources of the data processed by S4E are the data you provide to us in the course of our business, as well as those generated by our partners.
2.3 Online Contact Form
During our various contacts, you may be asked to provide us with information about yourself, including names, emails, cell phones and messages.
The User is informed, at the time he/she fills in the data concerning him/her on the contact form, of the compulsory or optional nature of the answers by the presence of an asterisk (*). In the absence of information of a mandatory nature, the service requested involving the processing of such data cannot be implemented.
2.4 Newsletter management
In order to manage the Newsletter S4E may process the following categories of data: e-mail address, subscription date, statistics related to the newsletter service, connection data/cookie data.
The sources of data processed by S4E are the data you provide to us.
The data collected by S4E for the recruitment process are the following: identification data, contact data, professional life and other information on the CV.
The sources of data processed by S4E are the data you provide to us, as well as data provided by government agencies, and data generated in the course of our business with you.
3. PURPOSE OF THE PROCESSING
3.1 General description of purposes
When you visit the S4E website, you may provide us with some personal data in order to take advantage of the services and/or products offered by S4E or to apply for a job or make a spontaneous application.
The Processing of Personal Data is necessary for the sale, the execution of the EnergySoft service, the creation and access by customers and their partners to their accounts, and the supervision of the Site.
The collection of Personal Data allows S4E to provide the best possible follow-up to the persons concerned about their requests and services as well as to improve the functioning of the Site or the application used.
Finally, if you have expressly consented, your personal data may be used to send you news about the EnergySoft service.
Your personal data will not be further processed in a way incompatible with the purposes described below.
3.2.Purpose related to Customers and Prospects
Through this site, S4E collects and processes personal data of its Customers and Prospects to fulfill the purposes listed below: to deliver the requested services and products, to establish contracts in accordance with the applicable regulations, to follow up and manage its commercial relations and partnerships and to exchange with you, to identify customers, and if necessary to prospect or send relevant information to the User.
3.3 Purpose of the contact form
Our website includes a contact form allowing electronic contact. If a user takes advantage of this possibility, the data provided will be transmitted to us in order to examine the request and, if necessary, to send commercial information.
The sources of the data processed by S4E are the data you provide to us.
3.4.Purpose related to the management of newsletter subscriptions
The purpose of the processing is to manage the sending of the S4E newsletter. It allows S4E to manage the subscriptions, the elaboration of statistics related to the service and the sending of commercial offers.
3.5. Purpose related to applications
Through the Website, S4E collects and processes personal data about applicants for the purposes listed below: to assess your suitability for the positions sought, to provide you with the information necessary to select you as a result of your unsolicited application or job offer, and to arrange an interview for a possible recruitment.
4. LEGAL BASIS FOR DATA PROCESSING
4.1 General description
Depending on the nature of the data collected, the purposes pursued, the categories of data concerned S4E relies on different legal bases mentioned in Article 6 of the GDPR.
4.2.Customers and Prospects
The legal basis for providing the requested services, establishing contracts for services, monitoring and managing its business relations and partnerships exchanged with the data subjects is Article 6(1)(b) of the GDPR.
The legal basis for the identification of potential customers is the legitimate interest mentioned in Article 6. paragraph 1, point f) of the GDPR.
Finally, for prospecting and/or sending relevant information to the User, the legal basis is the consent mentioned in Article 6 paragraph 1, point a) of the GDPR.
4.3 Contact form
The legal basis for the processing of data in case of consent of the User is Article 6, paragraph 1, point a) of the General Regulation on the Protection of Personal Data (RGPD). If as a result of sending the form a contract is concluded, the additional legal basis for processing is Article 6. paragraph 1, point b) of the RGPD.
4.4 Newsletter management
Pursuant to Article L.34-5 of the French Post and Electronic Communications Code, we will send you these solicitations subject to having obtained your prior consent: this is the case when you subscribe to a newsletter. By exception, in accordance with article 6.f) of the RGPD, we may send to our customers on the basis of our legitimate interest solicitations on products or services similar to those we already provide you.
The legal basis for some processing for the recruitment process is the legitimate interest mentioned in Article 6. paragraph 1, point f ) of the RGPD and for others the execution of the contract ( pre-contractual measures) mentioned in Article 6. paragraph 1, point b) of the RGPD.
5. DATA RETENTION PERIOD
5.1 General description
S4E keeps your personal data for no longer than is necessary for the purposes for which they are processed. Once this period has expired, your data will be deleted or archived in accordance with applicable legal rules.
5.2.Customers and Prospects
The data concerning you will be kept for the time necessary to achieve the purposes specified above. Data relating to Customer contacts are kept for a maximum of ten (10) years from the end of the business relationship, while data relating to prospects is kept for a maximum of three (3) years from the end of the business relationship.
Your Personal Data is deleted once the purpose of the processing has been fulfilled.
5.4 Newsletter Management
S4E keeps the data of prospective customers during the business relationship and for a period of three years after the end of the business relationship. It also keeps the data of non-customer prospects for a period of three years from the date of their collection or last contact from the prospect. If necessary, S4E deletes the data when the customer withdraws his or her consent via the unsubscribe link integrated in the newsletter.
Your data will be kept for the time necessary for the recruitment process. It is brought to your attention that the data of the candidates will be kept for a maximum of 24 months from the last contact with the unsuccessful candidate in the active database. And kept for a period of 5 years in intermediate database in case of litigation.
6. RECIPIENTS OF THE DATA COLLECTED
6.1 General description
S4E only communicates Personal Data to its subcontractors or support services at headquarters and ensures through contractual clauses that they respect strict conditions of confidentiality, use and protection of the Data.
6.2.Customers and Prospects
Your personal data may be communicated to certain partners or subcontractors for the purpose of analysis and realization of the service according to the interlocutor. In this respect, if necessary, a subcontractor of S4E, collects data from our Customers in order to simplify the follow-up, prioritization and resolution of their requests and to ensure a better quality and timely assistance.
6.3.Online contact form
Your personal data will be communicated only to those people within S4E who are involved in the processing of your data.
6.4. Newsletter Management
Your personal data is only used by the communication/marketing department and service providers.
Your personal data is only used by persons involved in the recruitment process.
7. SECURITY OF PERSONAL DATA COLLECTED
Security measures are implemented in accordance with the CNIL Information Systems Security Policy (PSSI). As such, S4E implements security measures appropriate to the sensitivity of the Personal Data to protect it from malicious intrusion, loss, alteration or disclosure to unauthorized parties. S4E guarantees the security of the information exchanged during transactions or payment acts. S4E grants access authorizations to its information system only to those persons who need them to perform their function.
S4E makes its employees aware of the protection of Personal Data made available to them in the course of their duties and ensures that they respect the rules in force. S4E requires its service providers and/or subcontractors to comply with its security principles.
8. EXERCISE OF THE RIGHTS OF THE PERSONS CONCERNED BY THE PROCESSING
8.1 General provision
The persons concerned by the collection of Personal Data have a right of access to the Data, of rectification or erasure, of limitation of the Processing as well as a right to oppose the Processing.
The data subjects are however informed that in case of use of their right to erase the said Personal Data, to object or to limit the Processing, the collected Personal Data are, where applicable, necessary for the performance of the service provided by S4E, so that in case of use of their right to erase the said Personal Data, to object or to limit the Processing before the end of the contractual relationship, the service cannot be performed.
8.2 Right of access
Any person may request the Data Processor if Personal Data concerning him or her is being processed. If so, the data subject may obtain a copy of the Personal Data being Processed as well as the information mentioned in Article 15 of the GDPR.
8.3 Right of rectification
Any person whose Personal Data is subject to Processing has the right to obtain rectification of Personal Data concerning him or her that is inaccurate. In view of the purposes of the Processing, the data subject has the right to have incomplete Personal Data completed, including by providing an additional declaration.
8.4 Right to erasure
Any person whose Personal Data is subject to Processing has the right to obtain from the controller the erasure of such Data in the cases listed in Article 17 paragraph 1 of the GDPR. However, the controller may refuse to erase the Data in the cases listed in Article 17 paragraph 3 of the GDPR.
8.5 Right to limitation
Any person whose Personal Data is processed may request the controller to limit the Processing in the cases listed in Article 18 of the GDPR.
8.6 Right to object
Any person whose Personal Data is subject to Processing has the right to object to such Processing under the conditions set forth in Article 21 of the GDPR.
8.7. Modalities for exercising one’s rights
S4E’s Data Protection Officer (DPO) is your contact for any request to exercise your rights regarding this Processing.
You can contact him/her by sending an email to: email@example.com or by mail:
The Data Protection Officer
Rue Estienne d’Orves
Bat Océan Développement
S4E will respond to the person who has made use of one of the above-mentioned rights within one (1) month from the receipt of the request. This period may nevertheless be extended by two (2) months, taking into account the complexity and number of requests. In this case, S4E will inform the person concerned of the extension within one (1) month of receipt of the request.
Where the data subject makes the request in electronic form, the information will be provided electronically where possible and unless the data subject requests otherwise.
If the controller refuses to comply with the data subject’s request for information, the controller shall state the reasons for the refusal.
The data subject also has the right to lodge a complaint with the Commission Nationale Informatique et Libertés (CNIL). For more information, the person concerned is invited to consult the CNIL website or to contact them: Commission Nationale de l’Informatique et des Libertés – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07 / Telephone: +33 (0)1 53 73 22 22).
9. TRANSFER OUTSIDE THE EU
We do not transfer personal data outside the European territory.
Please note: this data protection policy does not apply to third-party sites or applications whose activities or data exchanged with us we cannot control, especially when sharing content on social networks. You are advised to read the privacy policies of these third party sites or applications before sharing your information.
10. THIRD PARTY WEBSITES
S4E takes measures to limit intrusive actions by third parties (spam…) and informs about electronic attacks (phishing, viruses, information theft…).
11. UPDATING OF THE POLICY
– the introduction of new services or technologies
– changes in the legislative and regulatory framework
In the interest of transparency, S4E invites you to consult this page as often as you wish to learn about any changes.