Data Protection

1. Introduction

Expleo Group respects the privacy of its website’s visitors (“you”), and we are committed to protecting their personal data. We have drafted this privacy policy to enable you to gain a better understanding of who we are and what are our practices with respect to the collection, use, disclosure, and retention of personal data obtained in connection with your browsing of our website. 

Please take the time to read this privacy policy as it offers a guide on our practices in relation to data protection and will address any questions you may have in relation to the processing of your data. Please be aware that data protection laws can vary in different jurisdictions where Expleo Group operates, this policy endeavours to describe the practices implemented to encompass all these different requirements. Depending on your country, there might be situation in which stricter laws are applicable. For these situations, specific privacy practices in those locations have been adopted to satisfy those stricter requirements. 

This privacy policy may change over time to comply with legal requirements or to meet our changing needs. In case there is an important change, we will inform you in another appropriate way if it is required by law (for example, via email or a pop-up). 

2. Scope

This privacy policy applies to the processing of personal data in the general context of the browsing of our website. For additional information about our processing activities in connection with recruitment or our privacy notice that is outside the scope of this privacy policy, please see our dedicated pages. 

3. Identity of the Data Controllers and the contact details of the Data Protection Officer

Expleo Group is a global organisation. Although the group has separate legal entities in many countries (“Expleo entities”), our internal processes and infrastructure are international in scope and nature and are generally transnational. 

“Expleo entities” mean any company within Expleo Group that is controlled directly or indirectly by Expleo Group S.A.S., with the registered office: 3, Avenue des Prés 78180 Montigny les Bretonneux, France, a French company governed by French law, simplified joint stock company with capital of 242,397,967.00 euros - Registered on the Trade and Companies Register under number 831 178 785 RCS Versailles. 

At the time of the latest update of this privacy policy, Expleo entities operate in: Austria, Belgium, Canada, China, Egypt, France, Germany, Iberia, Ireland, India, Isle of Man, Israel, Italy, Mexico, Morocco, Netherlands, Nordics, Romania, Saudi Arabia, Singapore, South Africa, Switzerland, United Arab Emirates, United Kingdom, and United States (including operations under the brand Trissential), together with affiliates and subsidiaries of the Expleo Group, including Athos Aeronautique, Aerotec & Concept, Moorhouse Consulting, Silver Atena, Stirling Dynamics, UMS Consulting, and Vista International. 

The designated Group Data Protection Officer can be reached at: dpo@expleogroup.com. 

4. Your personal data processed, legal basis and purpose of processing when browsing the website

4.1 Data Processed

When you visit our websites and our social media pages, including www.expleo.com, the browser used on your device automatically sends information to the server of our websites and our social media pages. This information is temporarily stored in a log file. The following information will be collected without your intervention and stored until it is automatically deleted: 

• IP address of the calling computer; 
• Date and time of access; •Name and URL of the extracted file; 
• Access website (reference URL); 
• The browser used and, where applicable, the operating system of your computer.
• Log files contain IP addresses or other data that allow the connection to a user. 

4.2 Legal basis

The processing of this data is based on our legitimate interest to inform visitors regarding our offers and services. In this specific context, we do not use the data collected for the purpose of drawing conclusions about you. 

4.3 Purposes of processing

Temporary storage of the IP address by the system is necessary to allow the website to be made available to the user’s computer. To this end, the user’s IP address must be kept for the entire duration of the session. Retention in log files is used to ensure the functionality of the website. 

In addition, the data is used to optimise the website and ensure the security of our IT systems. No evaluation of the data for marketing purposes takes place within this specific framework. We use the data for the following purposes to: 

• Ensure a proper connection of the website; 
• Ensure comfortable use of our websites and social media pages; 
• Assess the security and stability of the system; 
• For other administrative purposes. 

In addition, we use cookies and analytics services when you visit our websites and social media pages. Further information in this respect can be found in the next section. 

4.4 Storage and sharing of your data

 The personal data collected for the provision of the website will be deleted or anonymised no later than seven days after the end of the corresponding session. Any additional storage is possible for cookies or analysis services are described in the next section. 

The collection of data for the provision of the website and the retention of data in log files are essential for the functioning of the website. There is no possible objection by the user. 

5. Your personal data processed, legal basis and purpose of processing when allowing cookies

5.1 Data processed

When you visit our website, cookies are installed, for example, to optimise response times or for the anonymous and statistical evaluation of the use of our websites and social media pages. Cookies are small text files that are stored on the users’ computers when they visit a website. They can be automatically recognised and read during the current visit or during the next visit. 

If you leave our websites and social media pages and access third-party pages, the home page of these third-party sites may also set cookies. We are not legally liable for third party cookies. For the use of these cookies by third parties and the information stored therein, please compare the data protection provisions put in place by these third parties and the following provisions. 

Among other things, cookies, analytics tools and plug-ins are used, and collect the following data: the name of the Internet service provider, the files requested, the IP address, access to individual pages, browser type, screen resolution, colour depth, operating system, search terms and reference pages from which you visited our web pages. 

Our websites and social media pages may use the following categories of cookies: 

• Strictly necessary cookies: These are cookies that allow the proper functioning of the website visited, such as browsing the website and accessing the secure areas of our website.
• Performance cookies: These cookies make it possible to track the actions of an internet user on a website by collecting and reporting information anonymously. When the statistics are anonymous, the consent of the user is not required. 
• Functional cookies: These cookies are necessary to provide you with our content or externals’ content or functionalities, such as sharing on social media or external platforms that provides video services. Be aware that not allowing such cookies might disable some functionalities. 
• Targeting cookies: Most of these cookies are owned by third parties, are installed on your computer during browsing to collect information that can identify you as a consumer, which then allows to set up more accurate and targeted marketing during your future web browsing and optimise the use of advertising space by adapting content displayed to the profile of each user. 

The first two categories are necessary for the operation of the features of our websites and optimise your user experience. Cookies that are not strictly necessary or performance related will only be installed after your explicit consent. Some cookies may transmit data to third parties who may be within or outside the EU or the EEA. 

5.2 Legal basis

The cookies, plugins and tracking measures indicated give rise to processing justified by our legitimate interest when they are strictly necessary or for performance measurement. 

For cookies, plugins and tracking measures related to Functional or targeting cookies, the legal basis is your consent. 

5.3 Purposes of processing

We process and use the resulting data to improve the performance of our websites and our social media pages, to increase the usability of websites and for other optimisation purposes. 

The analysis necessary for marketing and optimisation purposes generally does not allow us to identify your personal information, except when you have given your consent. 

Cookies allow us, among other things, to tailor our websites and social media pages to your wishes, to establish connections between different visits to our websites and our social media pages or to keep your password in the browser so that you do not have to enter it again each time.

We also use cookies for advertising to target groups. We also allow data providers or other automatic data collection tools to use our cookies to help us deliver our own content and ads, as well as to measure the effectiveness of our advertising efforts. 

For strictly Technical cookies, the storage of the IP address by the system is necessary to allow the website to be made available to the user’s computer. To this end, the user’s IP address must be kept for the entire duration of the session. Retention in log files is used to ensure the functionality of the website. 

5.4 Storage and sharing of your data

Some of the cookies we use are deleted at the end of the browsing session, i.e. when your browser is closed (Session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (Persistent cookies). The retention period is shown in the overview of the cookie configuration of your web browser and in the description below. In any case, cookies are deleted within a maximum period of two years from their installation on your browser. In the alternative, the general principles of retention described above apply. 

When you first log into our websites and social media pages, you will be expressly asked to accept the website cookies. Your consent is valid for a maximum period of 13 months. You can reconsider your decision to accept the deposit of cookies on your device at any time by changing the settings of your internet browser. 

If you do not want us to use cookies, you can configure your Internet browser to delete cookies from your hard drive, block all cookies or be notified before a cookie is stored, so that you can decide on a case-by-case basis whether you accept this cookie. Each browser differs in the way it manages the cookie settings. However, we draw your attention to the fact that, in this case, the features of this website may not function properly or not be fully available or exploited. 

6. Cookies identification

Strictly Necessary Cookies

Performance Cookies

Functional Cookies

Targeting Cookies

7. Your rights

• Right of access: You have the right to obtain information about your personal data which we process. In particular, you can obtain information on the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the retention period, the right to rectification, erasure, restriction of processing or opposition, the existence of a right to lodge a complaint, the origin of the data, if the data has not been collected from us, as well as the existence of automated decision-making, including by establishing profiles and, where appropriate, meaningful information about such data. 
• Right of rectification: You have the right to request the rectification of inaccurate or incomplete personal data. 
• Right to erasure: You have the right to request the erasure of the personal data we retain, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the performance of a legal obligation, for reasons of public interest or to assert, exercise or defend our rights. 
• Right to restriction of processing: You have the right to request the restriction of the processing of your personal data, if you contest the accuracy of the data, if the processing is unlawful, if we no longer need the data or if you object to the processing. 
• Right to data portability: You have the right to receive personal data you have provided us with in a structured, commonly used and machine-readable format, or to request its transfer to another data controller. 
• Right to withdraw consent to data processing: You have the right to withdraw your consent to the processing of your personal data at any time. Consequently, in such a case, we will not be able to continue the processing of data based on this consent. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to such withdrawal. If you wish to make use of your right of withdrawal, simply inform us by all known means of communication, by e-mailing dpo@expleogroup.com 
• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority.
• Right to object: If the processing of your personal data is based on legitimate interests, you have the right to object to the processing of your personal data. If you wish to make use of your right to object, simply send a corresponding notification by e-mail to dpo@expleogroup.com 
• Right not to be subject to automated decisions taken on an individual basis: including profiling. You have the right not to be subject to a decision based solely on automated processing - including profiling - which will have a legal effect or similarly affect you. 

8. Data Security

When you visit our websites and our social media pages, we use the widely used (Secure Socket Layer method (SSL)), in combination with the highest level of encryption supported by your browser. The fact that an individual page of our websites or social media page is transmitted in encrypted form may be recognised by the fact that the browser’s address line switches from “http://” to “https://” and includes the closed lock icon in the browser line. 

We also take appropriate technical and organisational security measures such as restricted access to your data, to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so. 

9. How to contact us

We hope that we can resolve any query or concern you raise about processing of your data. If you have any question, please use our dedicated form.