The purpose of this privacy policy is to inform you and present how your personal data is collected in our capacity as data controller when you use the website www.cis-integratedservices.com, in application of the General Data Protection Regulation (EU Regulation No. 2016/679 of April 27, 2016, known as the RGPD) and the French Data Protection Act No. 78-06 of January 6, 1978.
1. Identity and contact details of the data controller
The company responsible for processing your personal data is CIS – Catering International & Services- 40, avenue de Hambourg – 13008 Marseille.
2. Description of processing
CIS collects and processes personal data when using the contact form.
Data collected: Surname, first name, e-mail address, postal address, subject and content of message.
Purposes: to receive and process messages sent via the contact form and to create a contact file.
Legal basis: Legitimate interests of CIS in the context of its commercial activity.
Retention period: 3 years from last contact or until objection.
If you fail to provide the data identified as compulsory, you will not be able to request information from CIS.
3. Data recipients
In compliance with the purposes set out above and if necessary, the personal data of the interlocutors may be communicated:
– Internally to CIS authorized personnel, in particular the sales department;
– Externally to service providers acting as subcontractors on the instructions of CIS, i.e. IT service providers (hosting, messaging) and, from time to time, service providers in charge of commercial or communication activities.
– Externally to recipients acting independently as data processors, i.e. CIS subsidiaries concerned, banks, advisers, consultants and auditors.
Your data may be transferred outside the European Union, in particular to CIS subsidiaries involved and by certain subcontractors. In this case, CIS takes the necessary measures with the recipients to guarantee an adequate level of protection of your data in full compliance with the applicable regulations. Details of these measures are available on request.
4. Interlocutors’ rights to their personal data
Interlocutors have the following rights with regard to their personal data:
– Right of access: to obtain confirmation as to whether their personal data is being processed, as well as a certain amount of information on the processing carried out;
– Right of rectification: to obtain rectification of personal data that is inaccurate or incomplete;
– Right to erasure (“right to be forgotten”): to obtain the erasure of personal data when it is no longer required for the purposes for which it was collected, or in the event of opposition to the processing of personal data. The right to erasure is not enforceable in the cases provided for in Article 17.3 of the RGPD. In particular, this right is not available while a contract is being performed, nor in the case of archiving for the establishment, exercise or defense of a legal claim ;
– Right to limitation of processing: to obtain a limitation of the processing of personal data, in particular in the event of a dispute as to the accuracy of the data, when the data retention period has expired but the person whose data is being processed still needs to retain the personal data in order to establish, exercise or defend a legal claim;
– Right to portability: to obtain communication of personal data communicated in a readable format;
– Right to object: object at any time, on grounds relating to his or her personal situation, to the processing of his or her personal data based on legitimate interests, unless there are compelling reasons for the data controller to do so;
– Right to withdraw consent: to withdraw consent for data processing based on consent, the withdrawal of consent being applicable for the future.
– Right to file a complaint: file a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés) if the person whose data is processed considers that the processing carried out constitutes a violation of his/her personal data;
– The right to define instructions regarding the fate of personal data after death.
These rights may be exercised at any time with CIS by sending an e-mail to: privacy@cis-catering.com or by writing to the following postal address: Catering International & Services – DPO – 40C, avenue de Hambourg – 13008 Marseille.