Privacy policy

In the course of its activities, ACSEP is required to process personal data.

All operations involving this data are carried out in compliance with applicable regulations, including French Law No. 78-17 “Informatique, Fichiers et Libertés” of 6 January 1978 as amended, and the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”).
This policy aims to inform you about:

• The personal data collected by ACSEP and the reasons for this collection
• How this personal data is used
• The rights individuals have regarding their personal data

I. Personal data collected by ACSEP and reasons for collection

Personal data is collected, used, protected, stored and deleted by ACSEP, acting as data controller, whose contact details are:
ACSEP, 380 avenue Archimède, 13857 Aix-en-Provence, France.

ACSEP collects and retains personal data on the legal bases of legitimate professional interest, or when such information is voluntarily provided through contract or consent.

The categories of personal data include, depending on processing activities:

• Personal identification data (civil status, identity, identification data including digital data, images, etc.)
• Professional data (e.g. CV, professional status, education, distinctions, diplomas, etc.)
• Connection data (IP addresses, logs, login identifiers, etc.), particularly for website visitors or users connecting to ACSEP Wi-Fi access points

The personal data processing activities carried out by ACSEP include:

• Managing information requests and newsletters
• Managing job applications
• Managing relationships with clients, prospects, suppliers and partners
• Organising promotional events (trade fairs, exhibitions)
• Managing connection data for website improvement and statistical purposes

ACSEP collects personal data fairly and transparently.
ACSEP does not collect personal data without informing the individuals concerned. Furthermore, ACSEP does not process sensitive data (Articles 9 and 10 of the GDPR), except in specific cases required for its operations (e.g. proof of foreign worker status) or to comply with legal obligations.
When ACSEP collects personal information, it informs the data subject at the time of collection.

II. How personal data is used

ACSEP uses personal data for explicit and legitimate purposes. The purposes and legal bases of processing are:

• Responding to information requests and managing newsletters (legitimate interest)
• Managing job applications (contractual basis)
• Managing relationships with clients, prospects, suppliers and partners (contractual basis and legitimate interest for prospects and partners)
• Organising promotional events (legitimate interest)
• Managing connection data for statistical purposes (legitimate interest)

ACSEP ensures the confidentiality of personal data entrusted to it by respecting data protection principles (data minimisation, data security, no transfer outside the European Union without legal safeguards) and only shares personal data with authorised personnel.

ACSEP complies with personal data retention periods. Data is stored only for as long as required by law or necessary for the purpose for which it was collected:

• Information requests: 2 years
• Job applications: 3 years
• Client, prospect, supplier and partner relationships: duration of the contractual relationship and 3 years for prospects
• Promotional events: 3 years
• Connection data for statistical purposes: 13 months

ACSEP commits to deleting data once these periods expire. Exceptionally, data may be archived for handling ongoing claims or disputes.

III. Your rights regarding personal data

ACSEP informs you that you may exercise your rights of access, deletion, communication, rectification, objection on legitimate grounds, and restriction of processing.
Clients and prospects may exercise their rights by contacting ACSEP by mail at:

Data protection officer
ACSEP
380 avenue Archimède
13857 Aix-en-Provence Cedex 3, France
Email: rgpd@ACSEP.com

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL):

CNIL
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07

Website: https://www.cnil.fr