PERSONAL DATA PROTECTION POLICY

UPDATED ON 26 NOVEMBER 2020

PURPOSE OF THIS POLICY

This policy explains how the Paprec Group protects the personal data processed on the www.paprec.com website.

It also describes how the Paprec Group processes the personal data of users (hereinafter the "User(s)") during their use of the www.paprec.com website.

This Policy may be modified, supplemented or updated, mainly to comply with any changes to legislation, regulations, judicial interpretation or technology. However, the Personal Data of Users will always be processed in accordance with the policy in force at the time of its collection, unless otherwise provided by a mandatory legal provision that is retroactive.

IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLERS

Paprec Group S.A.S. with a share capital of €124,269,550.00, whose registered office is located at 7 Rue du Docteur Lancereaux, 75008 Paris, France, registered in the Paris Trade and Companies Register under number 572 221 034 and with EU VAT number FR 74 489 455 360.

Whether acting as a data controller or a data processor, the Paprec Group takes the appropriate measures to ensure the protection and confidentiality of the Personal Data it holds or processes in compliance with the provisions of the French Data Protection Act and the GDPR.

DATA COLLECTION

All data about Users is collected directly from Users by the Paprec Group.

The Paprec Group undertakes to obtain the consent of Users and/or to allow them to object to the use of their data for certain purposes, whenever necessary.

When browsing www.paprec.com, Users are informed of the purposes for which their data is collected via the various online data collection forms and through this Data Protection Policy.

WHY IS DATA COLLECTED ?

The data of Users of the Website is mainly processed for human resources purposes, press relations and to address requests.

TYPES OF DATA COLLECTED

The Paprec Group may process all or some of the following types of data:

• Surname (and maiden name) and forename,
• Title
• Telephone number, email address, postal address
• Image, profile (when linked through social media)

USE OF DATA

The Paprec Group processes the Personal Data provided by Users through:

• the completed contact form;
• subscriptions to alerts about Paprec Group publications;
• the management of their applications for jobs advertised on the Website.

The Paprec Group takes all steps to protect the security and confidentiality of the Personal Data of Users.

NON-DISCLOSURE OF PERSONAL DATA

The Personal Data of Users will not be transferred to other traders or advertisers.

The Personal Data of Users may be processed by the subsidiaries of the Paprec Group, in full compliance with the principle set out above and solely to produce statistics, primarily about the use of the Website.

Nevertheless, in accordance with the Regulations in force, personal data may be transferred to the competent authorities on request and, in particular, to public bodies, but solely to fulfil legal obligations.

RETENTION PERIOD FOR PERSONAL DATA

Personal Data is retained for a period of five (5) years (calendar years) from the date of receipt.

Personal Data is systematically destroyed at the end of that period.

USERS' RIGHTS

Whenever the Paprec Group processes Personal Data, it takes all reasonable steps to ensure the accuracy and relevance of the Personal Data for the purposes for which it is processed.

In accordance with the EU regulations in force, Users of the Website have the following rights:

• a right of access and a right to rectification, updating and completeness for their data
• a right to block or erase their personal data if it is inaccurate, incomplete, ambiguous or out of date or if it is collected, used, communicated or stored unlawfully
• a right to withdraw consent at any time
• a right to restrict the processing of their data
• a right to object to the processing of their data

If Users wish to find out more about how the Paprec Group uses their Personal Data, ask it to rectify their Personal Data or object to its processing, they should send a written request to the Paprec Group at the following address: Paprec, DPO, 7 Rue du Docteur Lancereaux, 75008 Paris, France or email it to: donneespersonnelles@paprec.com.

In such a case, Users must specify the Personal Data to be corrected, updated or deleted by the Paprec Group and provide accurate proof of their identity via a copy of an identity document (identity card or passport) or any other documents proving their identity.

Requests for the deletion of Personal Data are subject to the obligations imposed on the Paprec Group by law, in particular with regard to document retention and archiving.

SECURITY

The Paprec Group implements all technical and organisational measures to protect the security of personal data processing and the confidentiality of Personal Data. In this respect, the Paprec Group takes all appropriate steps, based on the nature of the data and the risks associated with its processing, to protect the security of the data and, in particular, prevent any distortion or damage or access by unauthorised third parties (physical protection of premises, authentication procedures with personal, secure access processes using confidential usernames and passwords, connection logs and encryption of certain types of data etc.).

The Personal Data of Users may be processed by the data processors used by the Paprec Group, in fully secure, confidential conditions. The Paprec Group's data processors may not in turn transfer it to unauthorised third parties.

COOKIES

Users are informed that a cookie may be automatically installed in their browser when visiting the Website.

Cookies cannot be used to identify Users but are used to record information about their browsing activities on the Website. Users may modify their browser settings to be notified of any new cookies and may then disable them.

Nevertheless, some browsing options on the Website will only work with cookies.

Users may block cookies in the settings of their browser.

CONTACT US

Any questions or complaints about Paprec's compliance with this Policy or any recommendations or comments designed to improve the quality of this Policy should be emailed to "donneespersonnelles@paprec.com".