Data Protection

I. Identity of the data controller and of the data protection officer

The person responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is: 

EXPLEO GROUP S.A.S., Registered Office: 3 Avenue des Prés, 78180 Montigny-le-Bretonneux, France 

A French company governed by French law 

Simplified joint stock company with capital of 242,397,967.00 euros – Registered on the Trade and Companies Register under number 831 178 785 RCS Versailles  

Phone: +33 130122500 

The designated data protection officer can be reached at: dpo@expleogroup.com 

II. Protection of your personal data

Data protection is very important to us. Accordingly, we process personal data only in compliance with applicable data protection and security laws. Our employees are committed to respecting confidentiality and secrecy. 

Our online offer is accessible without registration, i.e., without having to provide your personal data, and can in principle be used without providing your identity or manual entry of personal data. If you wish to order products or services or obtain information, we ask for certain personal information. The extent to which we process personal data is described in detail below. 

III. General information on the processing of personal data

1. Description of the processing of personal data

We use the IT systems of our websites and our social media pages to provide services to our customers, for whom we process the personal data described in more detail below. 

2. Legal grounds and purposes of the processing of personal data

2.1 Legal basis of processing 

Some of the processing we carry out are necessary: 

  • for the performance of pre-contractual and/or contractual obligations in accordance with Article 6(1)(b) GDPR; 
  • in order to enable us to comply with our legal obligations in accordance with Art. 6 (1) (c) GDPR; 
  • to respond to certain legitimate interests pursued by our company or by a third party, unless the interests and fundamental rights or freedoms of data subjects prevail over our interests, in accordance with the conditions of Article 6(1)(f) GDPR; 

In all other cases, where our processing is not based on any of the above criteria, we obtain the express consent of the data subject in accordance with Article 6(1)(a) GDPR. 

2.2 Purposes of processing 

In the context of pre-contractual and/or contractual obligations to which we are subject, we may process your personal data to: 

  • respond to any queries, questions or inquiries you may submit on our websites and social media pages; but also to 
  • allow you to connect to certain restricted parts of our websites and social media pages; 
  • manage your participation in the online context. 

We may also use the personal data you share with us, to: 

  • manage and improve our websites and social media pages and ensure their security; 
  • carry out customer satisfaction surveys; 
  • manage the forums in which you may participate; 
  • for recruitment purposes and its CV library when you submit a resume or application for an online job; and to directly inform you of new job opportunities if you have created an email alert; and  
  • anonymously, for statistical analysis and reporting purposes to assess, among other things, the frequency of visits to our websites and social media pages and the effectiveness of our recruitment process. 

These purposes are justified by our legitimate interest in ensuring that you make the most of your visit to our websites and social media pages and your interaction with us. 

Lastly, subject to your prior express consent, we may also use the personal data you provide to us for marketing purposes, and in particular to offer you personalised offers. 

3 Disclosure and sharing your personal data

3.1 With other group entities 

Expleo is an international organisation. Although the group has separate legal entities (for example, national subsidiaries) in many countries, our internal processes and infrastructure are international in scope and nature and are generally transnational. As a result, we inform you that we may share your personal data with other Expleo entities and transfer it to the countries where we have data centres or where we operate, including in countries outside the European Union (EU). These data transfers will benefit from the same level of protection as data that is processed within the EU and as such, if applicable, they may be subject to intra-group agreements for the transfer of personal data. For the purposes set out below, the terms “group entities” or “Expleo entities” mean any company within Expleo Group that is controlled directly or indirectly by 

Expleo Group S.A.S., Registered office: 3, Avenue des Prés 78180 Montigny les Bretonneux, France 

A French company governed by French law 

Simplified joint stock company with capital of 242,397,967.00 euros – Registered on the Trade and Companies Register under number 831 178 785 RCS Versailles  

3.2 Third Party Suppliers 

We also use third party suppliers and partners with whom we may share your personal data for the purposes set out above, except for marketing purposes. When we use these third parties, we ensure that they provide an adequate level of protection for the personal data they process on our behalf and, where such third parties are located outside the European Union, we enter into contracts with such third parties containing the standard contractual clauses adopted by the European Commission. You can obtain a copy of these EU Standard Terms by clicking here:https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en. 

3.3 Judicial, public and/or governmental authorities 

We may also be required – by law, legal proceedings, litigation and/or requests from public and government authorities in or outside your country of residence – to disclose your personal data to the authorities. We may also disclose your personal data if we believe it is necessary or appropriate for reasons of national security, law enforcement or other matters of public interest. 

We may also disclose personal information if we believe in good faith that it is reasonably necessary to protect our rights and exercise available remedies, enforce our terms and conditions, investigate fraud or protect our operations or users. 

4. Deletion of data and retention period

If the purpose for which the personal data is stored is invalidated for any reason, we will delete or block access to such data immediately. Personal data may be stored if permitted by law, regulation or any other rules applicable to the data controller, of national or European origin. The data is therefore erased or blocked at the end of a retention period prescribed by these provisions, unless the retention of the data is necessary for the performance of the contract or in the light of an overriding legitimate interest. 

In this respect, the personal data shall be kept for periods adapted to the purposes of the processing and in accordance with the legislation and regulations in force. For information only: 

  • Customer data is stored during the contractual relationship, in particular data relating to orders may be kept for ten (10) years after the termination of the business relationship for any reason whatsoever, in order to comply with the statutory accounting and tax obligations and requirements; 
  • The data of prospective individuals may be kept for up to three (3) years after the last contact from the prospect; 
  • Data of applicants for recruitment or CV library purposes may be retained for up to twelve (12) months after the last contact with the applicant. Only the formal agreement of the applicant allows for longer retention. 

Once these periods have expired, certain personal data may be subject to archiving for the purposes of accounting management or any disputes or requisitions, for a period not exceeding the legal provisions in these matters. 

5. Reorganisation of activities

Like other organisations, Expleo Group may from time to time reorganise its business activities at international level, whether by purchasing new companies or by selling or absorbing existing companies. Therefore, we may disclose personal data to potential or actual purchasers of parts of our business, or we may receive personal data from potential sellers. According to our practices, we seek appropriate protection of the confidentiality of personal data disclosed in this type of operation. 

IV. Collection of navigation information from the website

1. Description and scope of data processing

When you visit our websites and our social media pages, including www.expleo.com, the browser used on your device automatically sends information to the server of our websites and our social media pages. This information is temporarily stored in a log file. The following information will be collected without your intervention and stored until it is automatically deleted: 

  • IP address of the calling computer; 
  • Date and time of access; 
  • Name and URL of the extracted file; 
  • Access website (reference URL); 
  • The browser used and, where applicable, the operating system of your computer. 

Log files contain IP addresses or other data that allow the connection to a user. 

2. Purpose of data processing

Temporary storage of the IP address by the system is necessary to allow the website to be made available to the user’s computer. To this end, the user’s IP address must be kept for the entire duration of the session. Retention in log files is used to ensure the functionality of the website. In addition, the data is used to optimise the website and ensure the security of our IT systems. No evaluation of the data for marketing purposes takes place within this specific framework. In particular, we use the data for the following purposes: 

  • ensure a proper connection of the website; 
  • ensure comfortable use of our websites and social media pages; 
  • assess the security and stability of the system; 
  • for other administrative purposes. 

In addition, we use cookies and analytics services when you visit our websites and social media pages. Further information in this respect can be found in Section VII of this Privacy Policy. 

3. Legal basis for processing this data

The processing of this data is based on our legitimate interest as described in Art. 6(1)(f) GDPR. Our legitimate interest results from the data collection purposes described above. In this specific context, we do not use the data collected for the purpose of drawing conclusions about you. 

4. Storage period

The personal data collected for the provision of the website will be deleted or anonymised no later than seven (7) days after the end of the corresponding session. Any additional storage is possible for cookies or analysis services. Further information in this respect can be found in Section VII of this Privacy Policy. 

5. Objection and erasure of data

The collection of data for the provision of the website and the retention of data in log files are essential for the functioning of the website. There is therefore no possible objection by the user. 

V. Data processed and collected for recruitment purposes

1. Description and purpose of data processing

Expleo may process your personal data for the management of applications and the complete recruitment process (from sourcing to hiring) within Expleo under the conditions set out below (application, profile and recruitment). 

Our goal is to offer you the best opportunities within Expleo. 

The data processed and collected 

In general, the information and personal data about you that Expleo is required to collect and process, are proportionate to the situation and profile of the position, and limited to the data necessary to assess the suitability of your professional skills with the profile of open positions. 

This data includes: 

  • Identification data/Civil status: Title, Last name, First name, postal address and/or email address, telephone number; 
  • Professional life data: education, training, awards, diplomas, professional experience, skills, professional qualities, Curriculum Vitae, cover letter; 
  • Personal data: family situation, hobbies, leisure, category of driving licence, geographical mobility, availability time; 
  • Economic and financial information: income, gross salary, salary expectations; 
  • Connection data: IP address, log, pages visited. 

In no case is Expleo researching or collecting so-called sensitive data (racial or ethnic origin, political, philosophical or religious opinion, health or sex life). 

Creation of an email alert to inform you of the new available job offers 

You have the opportunity to create an alert on our Websites and social media pages to be aware of future business opportunities available within Expleo. For do purpose, you will complete a form with the following data: 

  • Identification data/Civil status: Last name, first name, email address 
  • Data related to the position(s) sought: key words, function, level of experience, type of contract, location, business line.

2. Purpose of data processing

Expleo collects, stores, uses and processes the personal data you enter, only in the context of managing its recruitment process and CV library, as well as to inform you directly of new job opportunities if you have created an email alert on your space. 

The same data may also be processed anonymously for statistical and reporting purposes to assess the frequency of consultation of our website and the effectiveness of our recruitment process. 

The recruitment process can be initiated in different ways: 

  • Sourcing from our recruitment teams; 
  • Application for a specific offer (open position); 
  • Unsolicited application; 
  • Recommendation from your network. 

In any case, regardless of the path used to apply, you agree that your profile is integrated into our CV library and is visible and accessible by all Expleo recruiters. 

Sourcing from our recruitment team 

As part of our sourcing activities, Expleo recruitment teams may be required to collect profiles in CV libraries or jobboards such as Monster, … and Social Networks. 

Application for a specific job 

In response to a job offer published on our websites, you can apply by choosing to communicate your LinkedIn profile, by downloading your CV or by completing the form manually. 

If you apply for a job offer, you will make your personal data available to Expleo. 

Unsolicited application 

To submit your unsolicited application, you can open an account on our recruitment website in order to upload your CV, to apply via your LinkedIn profile or to manually complete a form. 

If you submit your unsolicited application, you will make your personal data available to Expleo. 

Finalisation of the recruitment process: hiring 

If you are hired by Expleo, your personal data may be used in the context of the employer/employee relationship under the conditions provided by the laws and regulations in force. Such data will be transferred from the recruitment system to the relevant Personnel Administration Department. 

Recipients of data 

In all cases, the recruitment process takes place between, on the one hand, the Human Resources departments (particularly recruitment officers) and, on the other hand, the Business Unit Managers for whom the positions are open. All of these contact persons may belong to different Expleo entities. 

In this way, your data may be transferred and used within Expleo in Europe but also, where applicable, worldwide. 

Your personal data may also be disclosed to service providers with whom Expleo works. These providers (iCIMS, SourceBreaker, IKM, Talentsoft, Jobijoba, Monday, Data Driven, CodinGame, Predictive Index) will have access to your data to the extent strictly necessary for their tasks and undertake not to use your data for any purpose other than that requested by Expleo in accordance with this privacy policy. As these providers act only as subcontractors of Expleo, they will not under any circumstances share this information with third parties and will not use it for any other purpose. 

Your data may be passed on to public bodies or public authorities only if required by law. 

3. Legal basis for processing this data

The processing of this data is based on our legitimate interest as described in Art. 6(1)(f) GDPR. Our legitimate interest results from the data collection purposes described above. 

Furthermore, by applying to Expleo, you acknowledge and declare that you have read and accepted this Privacy Policy. You agree that your data will be collected, stored, used and processed by Expleo for the purposes and under the conditions set out above (application, profile and recruitment). By providing your contact information, you agree that Expleo may contact you for recruitment purposes. 

4. Retention period

We keep your personal data used as part of our recruitment process and CV library for the period necessary to manage your application and to the extent permitted by law. 

The maximum retention period of your personal data, in order to allow us to contact you and offer you other positions that may be of interest to you, will be twelve (12) months after the last contact with you or from your last connection on our website. Beyond this period, we will ask you to obtain your consent to extend the retention of your personal data. In case of refusal or absence of reply until this deadline, your data will be deleted. 

5. Access, objection, rectification and erasure of data

You have a right of access to your personal information in order to supplement, modify, rectify or object to its processing for legitimate reasons, as described in paragraph VIII below. In case of objection, access to our services will be compromised. 

If you wish to exercise your rights, you have several options: 

  • You can delete your account directly on our career site. 
  • You can write to us at the following address (by providing proof of your identity and specifying the subject of your request): dpo@expleogroup.com 

VI. Forms on the website, newsletters, information

1. Description and purpose of data processing

All personal data collected through forms on our website are provided voluntarily by the user. 

Contact form

We make available on our website a form that you can use to contact us. We collect the following personal data: name, address, email address, company, industry, post, telephone number, country, message for us. 

Purchase Order

Our training website contains purchase orders that you can fill in to request information, or order products or services. We collect the following personal data: number of participants, name, company, job title, email address, telephone, postal address, text of the message.

Newsletters

In the event that you have given us your separate specific consent, we will also use the personal data we have stored to inform you about our products, services and events. On the website, you will find a registration form for our newsletter, through which we collect the necessary personal data (name, email address). We will send you information electronically only if you have given us your express consent in writing or as part of the Double-Opt-In procedure. 

Webinar with GoToWebinar

A webinar is comparable to in-person seminar and takes place on the Internet, assisted by computer and software. You can participate in a webinar if you are already connected via our webinar page. The following data is required: name, email address, company, function, telephone. 

To organize webinars on the Internet, Expleo uses LogMeIn Inc.’s software solution, GoToWebinar. LogMeIn, Inc. is responsible for this service and the associated data processing. LogMeIn’s privacy policy is available here. For the delivery of the webinar, following the order, we will submit your login or customer information to LogMeIn, Inc. 

During and after the webinar, statistics will be sent to Expleo if you participate in a webinar, ask or answer a question during the webinar; in addition to your identification data, we will receive information about the course duration, the interest in the webinar, the question asked or the answer to additional customer support or regarding the improvement of the user experience. Optionally, you have the option to change documents and forms with your contact person. 

An encrypted connection is established between you and the webinar organiser. We do not record audio or video information transmitted during this session. By clicking “Join”, you confirm that you will not save or make any screenshots of this session. 

You can terminate the session at any time by simply closing the browser window or leaving the programme or application. If your contact person terminates the session, your participation in the session will automatically be interrupted. 

2. Purpose of data processing

We process personal data in order to process your enquiries, provide you with the services you need, issue invoices, ensure compliance with laws and regulations and enforce our rights. 

3. Legal basis for data processing

The legal basis for such processing is either the collection of your consent, when you use a form, attend a webinar or provide information, or the performance of contractual obligations, in accordance with the rules set out in Article 6(1)(a) and (b) of the GDPR.

4. Retention period

The personal data collected will be stored for as long as necessary by the purposes indicated. If data is subject to legal retention obligations in accordance with local legal requirements, it must be kept for six or ten years. In the alternative, the general principles of retention described above apply.

5. Objection and erasure of data

If the data is subject to legal retention obligations in accordance with legal requirements, the user has no right to object. You can revoke your consent to the sending of newsletters or information at any time, either by clicking on the unsubscribe link in individual mailings, or informally by sending an e-mail to dpo@expleogroup.com. This provision is without prejudice, in all other respects, to the rights of the data subjects described below. 

VII. Cookies, Plugins and Web Analytics

1. Description and purpose of data processing

What are cookies?

When you visit our online offer, cookies are installed, for example, to optimise response times or for the anonymous and statistical evaluation of the use of our websites and social media pages. Cookies are small text files that are stored on the users’ computers when they visit a website. They can be automatically recognised and read during the current visit or during the next visit. 

If you leave our websites and social media pages and access third-party pages, the home page of these third-party sites may also set cookies. We are not legally liable for third party cookies. For the use of these cookies by third parties and the information stored therein, please compare the data protection provisions put in place by these third parties and the following provisions. 

What data is processed?

Among other things, cookies, analytics tools and plug-ins are used, and collect the following data: the name of the Internet service provider, the files requested, the IP address, access to individual pages, browser type, screen resolution, colour depth, operating system, search terms and reference pages from which you visited our web pages.

Categories of cookies used:

Our websites and social media pages may use the following categories of cookies: 

Technical optimisation cookies: 
These are cookies that allow the proper functioning of the website visited, such as browsing the website and accessing the secure areas of our website. Our websites and social media pages cannot function properly without these cookies. Therefore, they do not require consent from the user. If you do not wish to use these specific cookies, you should therefore change your browser settings. 

Preference cookies: 
The preference cookies allow our websites and social media pages to retain information or choices you make in order to personalise content for you (e.g. saving the language choice or region). 

Statistical cookies: 
Statistical cookies make it possible to track the actions of an Internet user on a website by collecting and reporting information anonymously. When the statistics are anonymous, the consent of the user is not required. 

Marketing cookies: 
Marketing cookies, most of which are owned by third parties, are installed on your computer during browsing to collect information that can identify you as a consumer, which then allows to set up more accurate and targeted marketing during your future web browsing and optimise the use of advertising space by adapting content displayed to the profile of each user. 

The first three categories are necessary for the operation of the features of our websites and our social media pages or are used to optimise your user experience. Cookies that are not strictly necessary will only be installed after your explicit consent. 

Some cookies may transmit data to third parties who may be within or outside the EU or the EEA. 

2. Purpose of data processing

We process and use the resulting data in order to improve the marketing of our websites and our social media pages, to increase the usability of websites and for other optimisation purposes. The analysis necessary for marketing and optimisation purposes generally does not allow us to identify your personal information. In particular, no name, address, telephone number or other data directly relevant to a person is recorded. The analysis only provides aggregated data, such as the number of visitors and the number of pages viewed. However, we draw your attention to the fact that, according to a widespread opinion, dynamic IP addresses and associated usage data are considered personal data. 

Cookies allow us, among other things, to tailor our websites and social media pages to your wishes, to establish connections between different visits to our websites and our social media pages or to keep your password in the browser so that you do not have to enter it again each time. 

We also use cookies for advertising to target groups. We also allow data providers or other automatic data collection tools to use our cookies to help us deliver our own content and ads, as well as to measure the effectiveness of our advertising efforts. These cookies may provide anonymous or other data, linked to data that you have provided to us and which we transmit to data providers in hashed form, which is unreadable for the human eye. For registered users, the data collected on our websites is not anonymous. We use this information and other information we know or obtain about you, such as: for example, your content preferences, services and advertisements tailored to your needs. 

We do not share any information with these advertisers or other third parties that directly identify you. Advertisers and other third parties (such as ad networks, advertising agencies and any other service provider they may mandate) may only assume that users who interact with, or click on, personalised ads or content belong to the audience for which the advertisement or content is intended. 

3. Legal basis for data processing

The cookies, plugins and tracking measures indicated give rise to processing justified by our legitimate interest, in accordance with Art. 6 (1) (f) GDPR. The data processed for the purposes indicated promotes the preservation, in the context of a weighting of interests in relation to the legitimate interests of our company and of third parties, in particular regarding the promotional approach of our customers, and are therefore necessary in accordance with the principle of proportionality. 

4. Retention period

Some of the cookies we use are deleted at the end of the browsing session, i.e. when your browser is closed (session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies). The retention period is shown in the overview of the cookie configuration of your web browser. In any case, cookies are deleted within a maximum period of 2 years from their installation on your browser. In the alternative, the general principles of retention described above apply. 

5. Objection and erasure of data

Cookies strictly necessary for the proper functioning of the website do not require consent from the user. However, cookies that are not strictly necessary will only be installed after your explicit consent. 

When you first log into our websites and social media pages, you will be expressly asked to accept the website cookies. Your consent is valid for a maximum period of 13 months. You can reconsider your decision to accept the deposit of cookies on your device at any time by changing the settings of your internet browser. 

If you do not want us to use cookies, you can configure your Internet browser to delete cookies from your hard drive, block all cookies or be notified before a cookie is stored, so that you can decide on a case-by-case basis whether you accept this cookie. Each browser differs in the way it manages the cookie settings. However, we draw your attention to the fact that, in this case, the features of this website may not function properly or not be fully available or exploited. 

VIII. Rights of the data subject

The GDPR gives you the following rights: 

1. Right of access

You have the right to obtain information about your personal data, which we process in accordance with Article 15 of the GDPR. 

In particular, you can obtain information on the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the right to rectification, erasure, restriction of processing or opposition, the existence of a right to lodge a complaint, the origin of the data, if the data has not been collected from us, as well as the existence of automated decision-making, including by establishing profiles and, where appropriate, meaningful information about such data. 

2. Right of rectification

In accordance with Article 16 of the GDPR, you have the right to request the rectification of inaccurate or incomplete personal data that we keep. 

3. Right to erasure

You have the right, in accordance with Article 17 of the GDPR, to request the erasure of the personal data we retain, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the performance of a legal obligation, for reasons of public interest or to assert, exercise or defend our rights. 

4. Right to restriction of processing

You have the right, in accordance with Article 18 of the GDPR, to request the restriction of the processing of your personal data, if you contest the accuracy of the data, if the processing is unlawful, but you refuse to delete it, if we no longer need the data, but you are obliged to assert, exercise or defend your rights or if you object to the processing in accordance with Article 21 of the GDPR.

5. Right to data portability

You have the right, in accordance with Article 20 of the GDPR, to receive personal data concerning him or her provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another data controller. 

6. Right to withdraw consent to data processing

In accordance with Art. 7 (3) of the GDPR, you have the right to withdraw your consent to the processing of your personal data at any time. Consequently, in such a case, we will not be able to continue the processing of data based on this consent. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to such withdrawal. 

If you wish to make use of your right of withdrawal, simply inform us by all known means of communication, in particular by e-mail dpo@expleogroup.com 

7. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a general rule, you may contact the supervisory authority of your place of residence, your usual place of work or our registered office.

8. Right to object

If the processing of your personal data is based on legitimate interests within the meaning of Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, provided that this is justified by your particular situation or you have objected to mailing. In the latter case, you have a general right to object, which we implement without reference to any particular situation. 

If you wish to make use of your right to object, simply send a corresponding notification via all known communication channels, including by e-mail, to dpo@expleogroup.com 

After the exercise of your right to object, we will not process your personal data for these purposes unless we can demonstrate that there are compelling legitimate grounds for processing affecting your interests, rights and freedoms, or if processing is necessary for the purposes of claiming, exercising or defending rights. This does not apply if the processing is carried out for direct marketing purposes. In this case, we will not process your personal data for this purpose. 

9. Automated decisions taken on an individual basis, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which will have a legal effect or similarly affect you. This provision does not apply if the decision: 

  • is necessary for the conclusion or performance of a contract between you and the data controller, 
  • is authorised by European Union or Member State law to which the controller is subject, and where such law contains appropriate measures to safeguard your rights and freedoms and legitimate interests, or 
  • with your express consent. 

However, such decisions should not be based on special categories of personal data within the meaning of Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and reasonable measures have been taken to protect your rights and freedoms and your legitimate interests. 

With regard to the cases referred to in paragraphs 1 and 3, the data controller shall take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to seek the intervention of a person from the controller, to express his or her own position and to challenge the decision. 

IX. Data security

When you visit our websites and our social media pages, we use the widely used SSL method (Secure Socket Layer), in combination with the highest level of encryption supported by your browser. The fact that an individual page of our websites or social media page is transmitted in encrypted form may be recognised by the fact that the browser’s address line switches from “http://” to “https://” and includes the closed lock icon in the browser line. 

We also take appropriate technical and organisational security measures such as restricted access to your data, to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. 

The security measures described are based on Article 6(1)(f) and Article 32 of the GDPR. The processed data is used for security purposes to safeguard our legitimate interests and the interests of third parties in accordance with Article 6 (1) (f) of the GDPR.

X. Updating and amending this data protection declaration

This Privacy Policy has been updated in April 2022 and is currently in force. 

Due to the subsequent evolution of our websites and social media pages and our offers or as a result of changes to legal or regulatory requirements, it may be necessary to amend this Privacy Policy. The current version of the Privacy Policy is available at any time on our websites and our social media pages and may be consulted and printed by you.