PRIVACY POLICY

Foreword

The text below is a translation of the the French “Politique de confidentialité” that applies to the www.astekgroup.fr website and its use. In any circumstances, should be any risk of confusion, the French version displayed on the site is the only one to be considered as valid and relevant.

Privacy policy

In 1978, France, ahead of the game, passed a law relating to computers, files and freedoms. In this context, long before Europe took hold of the subject, the Astek Group developed and developed solid convictions in terms of the protection of personal information.
Like any company, the Astek Group has the obligation to respect the minimum protection base offered by the public authorities at national and European level. With this in mind, we have been ensuring for many years that the information of our candidates, collaborators, partners and clients is processed in full compliance with our values ​​and in compliance with the General Data Protection Regulation (known by the acronym “GDPR”), which entered into force on May 25, 2018.

We are proud to carry out our mission on a daily basis with respect for everyone’s fundamental rights and freedoms, and it is in this civic and benevolent spirit that we are pleased to present to you our privacy policy, implemented throughout the Astek group. Because behind each data hides an identity and an existence of which companies are guardians.

Julien Gavaldon, Chairman of the Astek Group Management Board

The personal data we collect

During that processing, the nature, the retention period and the purpose of the personal data manipulated depend on the role of our interlocutors.

In any case, your personal data may be communicated internally to employees who have been strictly individually authorized to access it, to internal or external subcontractors, and if necessary to our partners as well as to state bodies. We request from them the upmost respect for your data and check that they take all the necessary care in the processing of your personal data by rigorously controlling their purposes established in accordance with our instructions.

YOU ARE APPLYING

As Data Controller, it is our responsibility to determine the purposes and means of processing.

Within the Astek Group, the collection of candidates’ personal data is for the sole purpose of allowing the recruitment department to assess your ability to hold the job offered by the company and to offer you the position that best suits you. Processing, on the other hand, takes the form of collection, storage, consultation, extraction, transfer and destruction.

Note that if you are unsuccessful, we will delete any personal data you have shared with us no later than two (2) years after the last contact with you.

YOU ARE AN EMPLOYEE (OR FORMER EMPLOYEE)

As Data Controller, it is our responsibility to determine the purposes and means of processing.
Within the Astek Group, the processing of this data allows the management of the organization of work, administrative personnel, career management and training.

Personal data is also used for the purpose of highlighting your skills in response to calls for tenders. Processing takes the form of collection, storage, consultation, retrieval, transfer and destruction.
Note that we will keep your personal data for the duration of your employment contract and then for a maximum of five (5) years at the end of the latter.

YOU ARE A THIRD PARTY

We are Data Controller when we collect all personal information, specific to each project and communicated by you.

As Data Controller, we process this data for the purposes of sending information on our progress, complying with the contractual and regulatory obligations in force, maintaining the relationships necessary for our business (commercial, maintenance, supply, etc.) , to maintain accessibility to the information system for the various users, to analyze an existing client product (software, platform, program, personal database, etc.) from which you wish to implement changes or to test a product developed or under development with us by receiving personal test data from you. Other purposes can also be identified but are specific to each project (for example the maintenance of software).

We will keep your personal data as long as our contractual and/or commercial relationship lasts. Then, we keep your personal data, unless otherwise stipulated in the contract, for a period of five (5) years after the end of our contractual relationship.

At the same time, we take on the quality of Subcontractor when, intervening on the customer site, we are brought within the framework of our mission, and only within this framework, to access and work on the personal data stored on the information system of the customer. We then act on written instructions from the customer: The purpose of the processing and the retention period are defined by him in his capacity as data controller. Under no circumstances may this personal data be used by our Group and we guarantee its destruction at the end of our intervention.

In this context, our employees are trained on the security measures to be implemented and are bound by the strictest confidentiality of the data which they could ensure the processing. We also ensure compliance with emergency procedures in the event of unauthorized destruction, loss, alteration or disclosure of personal data held by the Astek Group. These procedures make it possible to prevent personal data breaches but also to react appropriately and quickly in the event of an incident, in order to put an end to them and minimize their effects.

Your rights

We thus guarantee the effectiveness of the right of access, the right of information, the right of modification, the right of opposition, the right to be forgotten, the right to limit processing, the right to personal data portability, the implementation of which requires contacting our DPO whose email address is given below.

For more details on your rights, go to the CNIL website: https://cnil.fr