- Why have we issued a notice on the protection of personal data?
The GERARD PERRIER INDUSTRIE Group (GPI) attaches great importance to respect for the privacy of individuals. This is why GPI and its subsidiaries undertake to manage and protect everyone’s personal data responsibly and in accordance with the applicable legislation.
The purpose of this notice on the protection of personal data is to inform you of the way in which the personal data collected by GPI and its subsidiaries is processed within the framework of General Regulation (EU) 2016/679 of 27th April 2016 on the Protection of Data and the amended French Data Protection Act of 6th January 1978.
This notice is intended to specifically explain to you which personal data is covered and the use that may be made of it.
- What is personal data?
Personal data means any information relating to a natural person who can be identified or is identifiable, directly or indirectly, by means of this data alone or in correlation with other data. Personal data is considered to be, for example, a surname, a first name, a postal or email address, a telephone number or even an IP address.
For more information on what personal data, processing personal data or the key principles of data protection are, please visit the CNIL website (www.cnil.fr).
- Who is the personal data controller?
Your personal data is processed by a legal person, GERARD PERRIER INDUSTRIE (GPI), SA with a board of directors and a supervisory board with capital of € 1,986,574, entered in the Lyon Trade & Companies Register with the no. 349 315 143, located at Airparc – 160 rue de Norvège – CS 50009 – 69125 Lyon Aéroport Saint-Exupéry. Therefore, GPI is the data controller, i.e. the body that determines the purposes and means of processing your personal data.
For personal data processed by subsidiaries of GPI, the contact details of data controllers are as follows:
- For ARDATEM:
ARDECHE APPLICATIONS TECHNIQUES D’ELECTRICITE ET DE MESURES, SAS au capital de 1 500 000 €, immatriculée au RCS d’Aubenas sous le n°339 809 527, sise 65 chemin d’Encros – 07700 Bourg-Saint-Andéol.
- For GERAL:
GERAL CONSTRUCTIONS ELECTRIQUES ET TRAVAUX INDUSTRIELS, SAS au capital de 1 500 000 €, immatriculée au RCS de Bourg-en-Bresse sous le n°546 720 040, sise ZI La Pélissière – 01300 Belley.
- For GROUPE GERARD PERRIER INDUSTRIE:
GROUPE GERARD PERRIER INDUSTRIE, GIE, immatriculé au RCS de Lyon sous le n°531 615 953, sis Airparc – 160 rue de Norvège – CS 50009 – 69125 Lyon Aéroport Saint-Exupéry.
- For IDEM INDUSTRIE:
IDEM INDUSTRIE, SAS au capital de 300 000 €, immatriculée au RCS de Metz sous le n°804 300 580, sise Route de Rombas – ZI Sainte-Agathe – 57140 Woippy.
- For SEIREL AUTOMATISMES:
SEIREL AUTOMATISMES, SAS au capital de 400 000 €, immatriculée au RCS de Lyon sous le n°333 336 485, sise 7 rue Galilée – 69800 Saint-Priest.
- For SERA:
SERA, SAS au capital de 500 000 €, immatriculée au RCS de Lyon sous le n°490 224 045, sise 60 ZAC du Crouloup – 69380 Chasselay.
- For SOTEB:
SOCIETE DE TRAVAUX ELECTRIQUES DU BUGEY, SAS au capital de 1 500 000 €, immatriculée au RCS de Lyon sous le n°546 720 079, sise Airparc – 160 rue de Norvège – CS 50009 – 69125 Lyon Aéroport Saint-Exupéry.
- For SOTEB NATIONAL ELEKTRO:
SOTEB NATIONAL ELEKTRO, SAS au capital de 350 000 €, immatriculée au RCS de Bourg-en-Bresse sous le n°337 505 259, sise 60 rue Clément Ader – 01630 Saint-Genis-Pouilly.
- For TECHNISONIC:
TECHNISONIC, SAS au capital de 75 000 €, immatriculée au RCS de Thionville sous le n°412 526 329, sise 45 route de Verdun – 57180 Terville.
- How do GERARD PERRIER INDUSTRIE and its subsidiaries manage and use their employees’ data?
GPI and its subsidiaries only collect, use and store their employees’ personal data (including for temporary personnel and trainees) where this is necessary, in particular for:
- Managing their employees’ careers, from recruitment to departure,
- Payroll processing,
- Updating this data,
- The protection of premises (sites and infrastructures), employees and company equipment by means of access control, video and electronic surveillance,
- Ensuring the compliance of processes with contractual or legal obligations.
The personal data collected includes specifically:
- Civil status, identity: surname, usual name, first name, sex, date of birth, place of birth, social security number, photo-identity, address, telephone no., emergency telephone no., nationality, email address. For foreign employees: type of residence permit, validity date, residence permit no.,
- Personal life: marital status, children and dependants, mutual scheme, level of qualifications, diplomas/certificates/degrees,
- Information relating to the employment contract and pay: nature of the contract, start date, years of service, status, level/scale/coefficient or position/coefficient, job description, working hours, salaries/wages, bonuses, income tax rate, bank details, holidays and time off in lieu, hours worked,
- Information relating to the employment relationship: accreditations, technical qualifications, skills, education/training, disciplinary measures, release date, business trips, medical leave (illness, maternity, paternity), workplace accidents, occupational diseases, medical examination by the company doctor, exposure monitoring.
5. How do GERARD PERRIER INDUSTRIE and its subsidiaries use the personal data for people other than its employees?
GPI and its subsidiaries only collect, use and store the personal data for people who not group employees where this is necessary, in particular for:
- Updating the files for job applicants, clients, suppliers, shareholders and investors, as well as for improving relations with these groups,
- Optimising internal processes and the proper provision of services, deliveries of goods and services,
- The protection of premises (sites and infrastructures), employees and company equipment by means of access control, video and electronic surveillance,
- Processing forms appearing on the GPI Group’s websites (newsletter subscriptions, event registrations, contact requests, applications or responses to job advertisements, etc.),
- Fulfilling contractual or legal obligations.
The personal data collected includes specifically:
- Civil status, identity: surname, usual name, first name, sex, address, telephone no., email address,
- Professional information: position, company, professional email address, telephone number.
- Who has access to your personal data?
The personal data collected is only accessible to a limited number of people belonging to the GPI Group’s internal departments, who are specially trained for this purpose, based on the purpose of data processing and demonstrated need and only in clearly defined cases. In exceptional cases, personal data may be passed on to subcontractors guaranteeing a level of data protection comparable to that of GPI.
- For how long is your personal data stored?
Personal data is stored for the period necessary to achieve the purpose of data processing and contractual obligations, in accordance with the legal storage periods.
All personal data, the storage of which is no longer necessary, will be deleted and securely disposed of.
- What rights do you have in relation to your personal data?
In accordance with the applicable regulation and under the conditions defined therein, at any time, you can exercise your:
- Right of access: you can request information from GPI regarding the processing to which your personal data is subjected and a copy of the aforementioned data.
- Right to rectification: you can require the rectification of inaccurate personal data where the personal data stored by GPI is incorrect or incomplete.
- Right to erasure: you have the right to obtain from GPI the erasure of your personal data where one of the grounds set out in the regulation applies (the data is no longer necessary, withdrawal of your consent for the processing based on the latter, etc.).
- Right to object: you have the right to object to the processing of your data, at any time.
- Right to personal data portability: you have the right to receive the personal data relating to you in a usable format.
- Right to restriction of processing: you can require GPI to suspend processing of your personal data where one of the grounds set out in the regulation applies (the accuracy of your personal data is contested, etc.).
- Under the conditions defined by the regulation, you also have a right to define the general or specific directives relating to the fate of your personal data after your death.
- Where your personal data is processed with your consent, you can withdraw your consent at any time. However, you are informed that processing commencing prior to this withdrawal shall remain valid.
- How can you exercise your rights?
You can exercise your rights by contacting our Data Protection Officer, with proof of your identity, by:
- Email at the address donneespersonnelles(at)gerard-perrier.com
- Sending a letter addressed to GERARD PERRIER INDUSTRIE – DPO – Airparc – 160 rue de Norvège – CS 50009 – 69125 Lyon Aéroport Saint-Exupéry
You can, at any time, submit a request to stop receiving communications from GPI and its subsidiaries, by clicking on the unsubscribe link in the email or by simply stating this in response to the email in question.
GPI pays the greatest attention to the protection of personal data. Nevertheless, should you believe its processing infringes your rights or that your request has not been fulfilled, you have the option of submitting a complaint to the Commission nationale de l’informatique et des libertés (CNIL) (the French Data Protection Authority).
- Which cookies are used on the GERARD PERRIER INDUSTRIE Group’s websites?
When browsing the GPI Group’s websites, cookies are used to improve the interactivity as well as the functionality of websites.
When you visit the website for the first time, a banner informs you of the presence of these cookies and asks you to make a choice. They are only stored if you accept them or when you continue browsing by visiting a second page of the website. You can be notified of and configure cookies in your browser to accept or refuse them at any time.
The personal data collected by these cookies relates to the IP address of the person visiting the website for the Google Analytics monitoring tool.
The personal data collected by means of cookies is stored for a period of thirteen (13) months from the date of your first visit to the website.
- Amending the notice on the protection of personal data
GPI reserves the right to amend or, more generally, to update the provisions of this notice at any time, without prior notice. You are, therefore, encouraged to consult it regularly.
