Data Protection Policy
COLAS France[1] attaches the utmost importance to the protection of your personal data and commits to complying with the applicable regulations governing personal data processing, in particular:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, applicable from 25 May 2018;
- Law No. 78-17 of 6 January 1978 on information technology, files and freedoms, as amended.
The following information aims to detail which personal data are collected and how they are processed within the framework of the website www.colas.fr.
1. Who is responsible for processing my personal data?
The data controller is the company that determines the purposes and means of processing your personal data.
For the processing carried out on this site, the data controller is:
COLAS FRANCE
1, rue du Colonel Pierre Avia – 75015 PARIS
Registered with the Trade and Companies Register under number 329 338 883
2. Why is my personal data used and on what legal basis?
Any processing of personal data must, to be lawful, be based on one of the legal grounds provided by the GDPR.
Your personal data are collected for the purposes and under the legal bases detailed below:
- Purpose: Responding to information requests
Legal basis: Legitimate interests of Colas France - Purpose: Management of the website
Legal basis: Consent, when you accept the placement of certain cookies via the dedicated tool
Your data are not used for automated decision-making or profiling[3].
3. What data are collected and processed? Who are my data shared with?
The personal data processed on this website are as follows:
|
When are my personal data collected? |
What personal data of mine are collected? |
| When making a contact request (via email and/or contact form) |
|
| During your browsing on the Site |
|
We do not collect any sensitive personal data[2] concerning you.
4. Do you use a service provider (subcontractor) for processing my personal data?
For the Site, Colas France has engaged WIDE (designer, publisher) and ACQUIA (host).
5. Do you share my personal data with other entities?
Colas France may share your personal data with the Colas Group or a Colas Group subsidiary concerned with your information request.
Your personal data are neither shared nor sold to any third party.
6. How long are my data retained?
Personal data processed as part of a contact request are retained for the duration necessary to provide a response or resolve the request. After processing, the data will be archived for a period not exceeding legal limitation periods and/or applicable legal retention requirements. Once these periods have expired, the data will be destroyed.
7. What are my rights regarding my data?
You have the right to access your personal data in a readable format, object to its processing, have it corrected, or request its deletion. You also have the right to restrict the processing of your data and to define directives regarding the handling of your personal data in the event of your death.
Additionally, you can withdraw your consent to the processing of your data at any time when the processing is based on this legal ground.
The exercise of these rights depends on the legal basis of the processing concerned (see above).
For more information about your rights, please visit the CNIL website: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles.
8. Contacts
You can ask questions regarding the protection of personal data and exercise your rights via the following email address: dataprivacy@colas.com.
9. Filing a complaint with the CNIL
If, after contacting us, you believe that your “Informatique et Libertés” rights have not been respected, you can file a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr/fr/adresser-une-plainte
10. External Personal Data Protection Policy
Colas France also has a personal data protection policy regarding personal information that the Group processes in the context of contractual or pre-contractual business relationships with Colas and/or a Colas company.
This policy is presented in a question-and-answer format and is intended for external individuals who are neither employees nor job candidates of the Group.
It provides a concise overview of the personal data held by the Group concerning you and how it is used.
Download the external personal data protection policy
[1] “Colas” or the “Group” refers to Colas France as well as the companies or entities in which Colas France directly or indirectly holds more than 50% of the share capital.
[2] Sensitive or special categories of data include:
- Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data; biometric data used to uniquely identify a natural person; personal data concerning health; or personal data concerning a person’s sex life or sexual orientation; and
- Personal data relating to criminal convictions and offenses.
[3] Profiling refers to any form of automated processing of personal data consisting of using such data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict elements concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements of that natural person.