- Subsidiaries of ENGIE Group
In the context of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / ES (General Data Protection Regulation) and Low no. 18/2018 (About the protection of personal data), we are fulfilling the information obligation in connection with the processing of your personal data.
Please read the following information on how we process your personal data.
Who is the data controller for your personal data?
The data controller for your personal data is ENGIE Services and the other companies in The ENGIE Group as specified in the attached document.
The data controller has appointed a Responsible Person to supervise the processing of personal data, who can be contacted via e-mail at: firstname.lastname@example.org.
For what purposes do we process your personal data and what is the legal basis for such processing?
Processing under a contract and pre-contractual relations:
When offering the company’s services, goods and activities on our web pages, in the media and personal meetings, we use the personal data of contact persons – employees of legal or natural persons who have expressed an interest in cooperation and provided us with their contact data, in which case consent is not required, for the purposes of the contractual or pre-contractual relationship.
In connection with the management and operation of residential and non-residential facilities, we process personal data without consent, for the purposes of the contractual relationship and under applicable legislation.
Personal data provided via the contact form on our website are processed for the purpose of pre-contractual relations (e.g., a request for a quotation, a request for more detailed information on provided services, product information) and we are likewise entitled to process such information without consent.
Processing based on consent
A job candidate’s personal data included in their CV or personal profile sent by e-mail for the purposes of registration in our electronic database of job candidates can be processed only on the basis of voluntary consent. We obtain consent directly from the person concerned (the job candidate) or from third parties (e.g.,Profesia).
We send clients our free company newsletter to keep them up to date with our latest developments (direct marketing) only with their voluntary consent.
You can withdraw your consent for this processing of your personal data by clicking the unsubscribe link in the newsletter itself (disclaimer), or by sending a request to the e-mail address: email@example.com.
Who else has access to your personal data?
We use the services of external contractors, which can also process your personal data. These processors are companies that provide forwarding services, payroll processing, accounting services, occupational safety and health and fire protection, companies providing education and training for our employees, application providers, IT service providers and contractual partners that carry out commercial activities on our behalf. We verify that all our contractors comply with applicable legislation, maintain confidentiality, process your data only in the scope permitted by concluded contracts and provide adequate protection as demanded by the GDPR, international standards and other applicable regulations.
How long will your personal data be retained?
Your personal data will be stored for the duration of the contract and the statutory archiving period, for the period necessary to prove legal claims or for the time necessary to achieve its purpose.
Personal data provided by completing a contact form for purposes of pre-contractual relations or by sending a CV will be processed only for 1 year, after which the data will be deleted unless a contract is concluded.
We are entitled to process personal data obtained with your consent (address for our newsletter, photographs) until you withdraw consent.
What are the data subject’s rights in connection with personal data processing?
Right of access to personal data
You have the right to ask us for confirmation of whether or not we process your personal data.
Right to rectification of personal data:
You have the right to rectification of your personal data if they are inaccurate or incomplete.
Right to erasure (‘right to be forgotten’):
We are obliged to erase your personal data without undue delay if:
The data controller will not implement a request for deletion if processing is necessary:
Right to restriction of personal data processing
You have the right to require the restriction of processing your personal data where one of the following applies:
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed:
Right to data portability
You have the right to receive the personal data that you have provided to us and you have the right to transmit those data to another controller (e.g., when changing service provider). We are obliged to provide you with your data on request in a structured, commonly used and machine-readable format (e.g., XML or CSV).
Who can you contact about the processing of your personal data?
Our company has a designated responsible person. If you have any questions or complaints regarding the processing of your personal data or if you want to exercise any of your rights, write to us at: firstname.lastname@example.org. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your rights have been violated.