Ecocert will make sure that the personal data it collects from its Website users when they are using the present Website or when they contact Ecocert by phone, email or via the contact form available on the Website, are processed in accordance with the General Regulations on Data Protection (GDPR) and the French Data Protection Law.
PREAMBLE
This personal data protection policy related to the use of the Website is intended to describe:
Ecocert has also developed a specific policy regarding the protection of the personal data of its partners, including (prospective) clients. This policy is available upon request.
1/ TYPES OF PERSONAL DATA AND SOURCES
Ecocert will make sure to only collect and process data which are strictly necessary for the purpose pursued (minimization of data).
When accessing and using the Website, or when contacting Ecocert by phone, email or via the form available on the Website, Ecocert may have access to the following data:
2/ PURPOSES AND LAWFULNESS OF PROCESSING PERSONAL DATA
The treatments implemented by Ecocert respond to an explicit, legitimate and determined purpose.
Your data are processed by Ecocert for the following purposes:
3/ HOW LONG DO WE STORE YOUR PERSONAL DATA?
Ecocert stores your data as long as necessary to fulfill the objective pursued at the time of their collection. In case Ecocert would need your personal data for any other purpose than the one for which they were originally collected, Ecocert will inform you and, if necessary, ask you for your prior consent.
4/ TRANSFER OF YOUR DATA OUTSIDE THE EU
Ecocert will transfer your personal data to entities of the Ecocert Group or to subcontracting companies located outside the European Union only in case this is necessary in order to process your request.
5/ YOUR RIGHTS RELATING TO YOUR PERSONAL DATA AND THE APPLICABLE PROCEDURE
Pursuant to the General Data Protection Regulation, you have the right to access, rectify, erase and restrict processing of your personal data. You also have a right to portability of your personal data and a right to define the fate of your data after your death. You can exercise these rights by contacting our Data Protection Officer (DPO):
All requests must be accompanied by a valid proof of identity.
If you are unable to exercise your rights by following the procedure described above and you consider that the processing of your personal data constitutes a violation of the regulations, you may lodge a complaint with the French Commission Nationale de l’Informatique et des Libertés; either via a form available on its website www.cnil.fr , or by post to the address available on the website www.cnil.fr.