The protection of your privacy and Personal Data is an important concern to which each Gravotech entity (also known as, “Gravotech”, or “we” or “us”) pays special attention. The company Gravotech Marking is the data controller of your personal data.
Gravotech is committed to protecting the rights of individuals in compliance with the General Data Protection Regulation (reference EU2016/679) (the “GDPR”) and with the local applicable rules.
What is Personal Data?
Personal Data means any information relating to an identified or identifiable data subject (you).
What Personal Data do we use?
While visiting our Website and during our business relationship, Gravotech may collect and process:
What can be the purposes of your Personal Data processing?
If consent is mandatory to proceed, Gravotech will require your consent before collecting your Personal Data and you will be informed about the purpose of such processing on a case by case basis.
Your Personal Data may only be used for specified purposes such as:
Should Gravotech need to process your Personal Data for a new processing, you will be prior informed.
What is the basis for processing of your Personal Data?
The legal basis for the processing of your Personal Data are:
Who will receive your Personal Data?
We (Gravotech Marking and its affiliated companies), our distributors (as joint controllers), our data processor that hosts the Website (Microsoft Ireland Operations Ltd.) and our data processor in charge of communication (SendinBlue) will receive your Personal Data, on a need-to-know basis, for the purposes defined hereabove.
Will your Personal Data be transferred to a third country/region outside the European Union?
We may transfer, on a need-to know basis, your Personal Data within Gravotech Group and to related third parties (including data processor). These companies may be located outside the European Union. This transfer is subject to appropriate safeguards and through the legal framework of our agreements with affiliates or with such third parties.
For how long will your Personal Data be stored?
We process and store your Personal Data as long as it is required to meet our business relationship or statutory obligations. If your Personal Data is no longer required for the performance of our obligations, this will be erased on a regular basis unless further processing is necessary, for instance, for preserving particular evidence under the GDPR, or in the context of legal statutes of limitation.
Unless you use your right to object, the human resources department in charge of the recruitment process will retain your Personal Data for a maximum period of twelve months following collection.
We and our data processors use technical and organizational security measures in order to protect the data we have under our control against accidental or intentional manipulation, loss, destruction and against access by unauthorized persons.
What are your rights and how to exercise them?
You may at any time exercise your rights:
To this effect, please contact Gravotech either by email at the following address: firstname.lastname@example.org or by writing to the address below, enclosing a copy of an appropriate document evidencing your identity.
466, rue des Mercières
Can I ask for assistance to the competent authorities?
In case of dispute or for any question, you have the possibility to lodge a claim with your national Data Protection Authority, such as the CNIL in France.