Privacy policy customers and suppliers

Last updated on: 26/07/2022

The data that make it possible to identify a natural person indirectly or directly, such as their surname, given name or their professional email address, is personal data (hereinafter “Personal Data”).

In France and within the European Union, the use of Personal Data is governed by numerous statutory texts, including the famous General Data Protection Regulation –or GDPR –in order to ensure the protection of natural persons and guarantee them various rights.

LENGOW takes compliance with the regulations on Personal Data particularly seriously. Indeed, in the context of its various activities, LENGOW (located at 6rue René Viviani 44000Nantes) is required to collect and process the Personal Data of employees and/or directors of its customers and suppliers, as data controller. LENGOW ensures that the principles laid down in the GDPR are complied with, such as:

• The lawfulness, fairness and transparency of the processing;
• The limitation the purposes of data processing;
• Accuracy and minimisation of data;
• The limitation of data retention;
• The security and confidentiality of data;

In order to comply with its obligation of transparency and the right to information of individuals, LENGOW (hereinafter “we”) has drafted this privacy policy for the employees and/or directors of its customers and suppliers (hereinafter “you”). The aim of this policy is to inform you about the use that will be made of your data (I) as well as your rights (II).

USE OF YOUR DATA

Why do we use your personal data and how long do we keep it?

In order to simplify the presentation of the characteristics of the processing carried out, we present in the table below the reasons why we process your data (purposes), our justifications for the processing (legal bases), as well as the period during which we use it (retention periods).

What categories of personal data do we use?

In order to carry out the processing described above, the data we collect is limited to professional information only collected as part of the monitoring of our commercial relations, such as:

• Your given name and surname
• The name of your company, your department and the position you hold;
• Your business contact data (telephone number, e-mail address).

To whom do we transfer your data?

Your Personal Data is transferred within our various Commercial, Marketing and Accounting departments to the people authorised to process it only. It is also sent to our service providers, acting in our name and on our behalf, such as our customer relationship management solution, electronic signature, our hosting and outsourcing service provider. We ensure that they provide the necessary guarantees to respect the security and confidentiality of your data.

We may also need to transfer your data to the authorised authorities which, as part of their missions, would request it and if the law requires us to do so.

Is your data transferred outside the European Union?

Our processing of Personal Data is mainly carried out in Europe.

However, LENGOW may transfer Personal Data to a third country outside the European Union. In the event that such a transfer is made to a country the level of protection of which is not considered adequate by the European authorities, we undertake to subject the transfer concerned to appropriate guarantees in accordance with the applicable legislation.

For example, we make sure that companies importing your data sign data processing contracts based on standard contractual clauses validated by the European Commission in force, to which additional measures may be added, or that they have adhered to a code of conduct or a certification mechanism.

You can request more information on the safeguards put in place by sending us an email at the address indicated under the section How to exercise your rights? below.

YOUR RIGHTS

What are your rights?

In accordance with the regulations in force, you have the right to access your Personal Data, as well as, if applicable, to request its rectification or erasure (rights of access, rectification and erasure of data).

You may also object to or request the restriction of the processing of your data (rights of objection and restriction of processing).

In certain circumstances, you may also request that the data you have provided be transferred to you in a structured, commonly used and machine-readable format (right to portability).

You also have the option of defining general or specific instructions on the fate of your Personal Data after your death and registering it with a trusted third party certified by the CNIL or the data controller concerned.

If you feel that we are not respecting your rights, you can lodge a complaint directly with the CNIL’s departments.

How to exercise your rights?

To exercise these rights, you can send a request by post to the following address: dpo@lengow.com

We will process your request to exercise the right as soon as possible and under the best possible conditions.