Privacy policy
Version updated on 01/12/2024
Our privacy policy applies to you as a user of our website: https://www.becouze-talents.com
Our company attaches great importance to protecting and respecting your privacy.
The purpose of this policy is to inform you, in accordance with:
- Regulation 2016-679 of 27 April 2016 on the protection of individuals (hereinafter referred to as the “General Data Protection Regulation” or GDPR),
- French law no. 78-17 of 6 January 1978 as amended, known as the Loi Informatique et Libertés (hereinafter referred to as LIL),
about the data we collect, the data we share and how we protect it, as well as the rights you have over your personal data. We act in our capacity as data controller.
ARTICLE 1: DeFINITIONS
Below we define the main terms used in our privacy policy (definitions taken from the GDPR):
CONSENT: “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.”
RECIPIENT: “natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.”
DATA: “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”
CONTROLLER: “natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.”
PROCESSOR: “natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.”
The processor is accountable to the controller and acts on its instructions.
PROCESSING: “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.”
USER: any natural person who consults our website.
ARTICLE 2: DATA COLLECTED AND LEGAL BASIS
As part of the services offered by the company, you are required to send us information. This data includes in particular technical transaction data, data relating to the assignment entrusted to us and data relating to your browsing on our site. We take care to collect only the data necessary for the purposes pursued (minimisation of data collection) and we do not use your data for any other purpose except with your consent or if authorised or required by our professional standards.
Our company uses the data we collect in order to:
- Perform contracts and monitor the contractual relationship. The processing is based on the performance of the contract.
- Carry out commercial prospecting operations. This processing is based on our legitimate interests.
- Manage the accounts and meet our legal and tax obligations. This processing is based on a legal obligation.
- Respond to your requests for information and contact by e-mail. This processing is based on your consent.
- Send you the newsletter. This processing is based on your consent.
- Manage our website and carry out internal technical operations to resolve problems. This processing is based on our legitimate interests (ensuring the security of our site and improving its features).
- Measure and manage audience. This processing is based on your consent.
- Manage your requests to exercise your rights. This processing is based on a legal obligation.
When the data is collected, you will be informed whether your answers are mandatory or optional.
ARTICLE 3: DATA RECIPIENTS
Only the authorised persons or organisations listed below will have access to your data.
Data transferred to public authorities and/or bodies
Your data may be passed on to the competent authorities on request.
Data shared internally
The data collected is used and processed by authorised staff in the company’s various departments depending on the service to be provided.
ARTICLE 4: PROCESSORS
We ensure that our processors comply with their legal obligations, and that they act only on our behalf and in accordance with our instructions. We take care to ensure that the processors we work with are reliable.
ARTICLE 5: DATA RETENTION PERIOD
Your data will not be kept longer than is strictly necessary for the purposes set out in the policy, in accordance with the applicable laws and regulations.
In this respect, the data used to carry out the assignments you entrust to us is kept for the duration of the contractual relationship, then archived in accordance with the statute of limitations.
If you request to exercise your rights, we will keep your request for 1 year.
As part of the management of newsletter subscriptions and contact, we keep your data for 3 years.
The policy for storing cookies is defined in our cookie management policy.
ARTICLE 6: TRANSFER OF YOUR DATA
We work mainly with partners based in France or Europe. However, in the event of an assignment requiring international collaboration (outside the EU), we undertake to transfer your data in a secure and legal manner:
- Or by transferring the data to a recipient located in a country that has received an adequacy decision from the European Commission certifying that it has an adequate level of protection,
- Or by the prior signature between the parties of European Standard Contractual Clauses which have been approved by the European Commission as ensuring an adequate level of protection for your data,
- Or by using internal Binding Corporate Rules validated by the competent data protection authorities,
- Or by using all the appropriate safeguards referred to in Article 46 of the Regulation.
The CROWE network is an association to which BECOUZE belongs independently.
ARTICLE 7: PROTECTION OF YOUR DATA
If we use a processor, we ensure that the latter complies with its obligations in terms of security before communicating your data. We may also, from time to time and if we deem it appropriate, carry out on-site audits to check compliance with these obligations.
By signing a contract, our company and our processors jointly undertake to take all appropriate technical and organisational measures to guarantee the protection of your data against any unauthorised access or modification, disclosure, loss or destruction of your data.
ARTICLE 8: YOUR RIGHTS WITH REGARD TO YOUR DATA
In accordance with the LIL and the GDPR, you have the following rights:
Right of access by the data subject: “the data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data…”.
Right to rectification: “the data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.”
Right to erasure (“right to be forgotten”): “the data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay…”.
Please note that this right only applies in certain cases, and is therefore not an absolute right.
Right to restriction of processing: in certain cases and in accordance with the GDPR, you have the right to obtain restriction of processing on your data.
Right to data portability: “the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided…” where the processing of your data is based on your consent, on a contract or is carried out by automated means.
Right to object to processing: you have the right to object at any time on grounds relating to your particular situation to the processing of your data for the purposes of our legitimate interest, a public interest assignment, commercial prospecting, scientific or historical research or statistics. Please note that this right is not absolute and that we may refuse your request for legal or legitimate reasons.
Right to withdraw your consent at any time: the data subject may “withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.”
Right to lodge a complaint with a supervisory authority: “without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.”
Right to give instructions concerning the use of your data after your death: you have the right to give us instructions concerning the use of your data after your death.
To exercise this right, please contact us at the following address: dpo@crowe-becouze.fr or by post at the following address: DPO BECOUZE 1 rue de Buffon 49100 ANGERS.
Please note that we may require proof of your identity in order to exercise this right. You can also consult the CNIL website at the following address: https://www.cnil.fr/.
ARTICLE 9: MODIFICATION OF THIS POLICY
This policy may be amended to take account of changes in regulations, case law, editorial content or technical developments. We will then change the “last updated” date. Where necessary, we will inform you and/or seek your agreement. We advise you to check this page regularly for any changes or updates to our policy.
ARTICLE 10: DPO CONTACT DETAILS
If you have any questions about this policy or any requests relating to your data, you can contact us by sending an e-mail at: dpo@crowe-becouze.fr or by post at the following address: DPO BECOUZE 1 rue de Buffon 49100 ANGERS.