The purpose of this privacy policy is to inform visitors or users of the website www.suez.com.
The purpose of this privacy policy (hereinafter the "Policy") is to inform visitors or users (hereinafter the "User") of the www.suezsmartsolutions. com (hereinafter the "Site") of the terms and conditions for the protection of their personal data in accordance with Law n°78-17 of 6 January 1978 relating to information technology, files and freedoms as amended by the Law of 20 June 2018, the Implementing Decree n°2019-536 of 29 May 2019 and Regulation n°2016-679 of 27 April 2016 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter collectively the "Regulation").
The procedures for collecting and processing information collected by means of cookies are set out in the "Cookies Declaration".
The conditions and procedures for processing data collected through the "Ethics and Vigilance" form are set out in the SUEZ Group's Ethical Information Statement.
The publisher of the Website is SUEZ Smart Solutions, Société par Actions Simplifiées - RCS Versailles no. B 433 466 570, having its registered office at 38 rue du Président Wilson 78230 Le Pecq (hereinafter referred to as "the Publisher" or "SUEZ Smart Solutions").
The Policy may be modified at any time by SUEZ Smart Solutions, in particular in order to comply with any regulatory, jurisprudential, editorial or technical changes. The User must refer to the latest version of the Policy before browsing.
This Privacy Policy is an integral part of the General Terms and Conditions of Use of the Website.
The person responsible for processing the User's personal data is, as the case may be, one of the following entities:
These entities are hereinafter referred to individually as "SUEZ Entities" and collectively as "SUEZ Entities".
The data controller will be the SUEZ Entity designated below, depending on the purpose of the request filled in the contact form:
Individual shareholders in France: SUEZ SA.
Individual shareholders in Belgium: SUEZ SA.
Analysts and institutional investors: SUEZ SA.
Human Resources (excluding applications): SUEZ Smart Solutions
Supplier relations: SUEZ Smart Solutions
Press: SUEZ Smart Solutions and SUEZ SA
Others: SUEZ SA or SUEZ Smart Solutions and the SUEZ Smart Solutions subsidiary responsible for processing the user's request or answering their question.
Any question, request or alert relating to ethics or human rights must be submitted via the "Ethics and Vigilance" form dedicated for this purpose. The identity of the data controller and the methods of processing the data collected by means of this form appear in the "Ethical Information Statement".
Any request relating to the exercise of Users' rights must be submitted to the DPO declared to the CNIL, at the public address: privacy.3s.france@suez.com.
As part of the operation of the Site, the Publisher may collect and process personal data in order to enable the User to access the functionalities and services offered by the Site (hereinafter the "Services").
1) What categories of data are collected?
All such data will be collectively referred to hereinafter as the "Data".
2) Why does the Publisher collect User Data?
The Data is collected for the following purposes:
The sections to be filled in in a mandatory manner within the contact form are identified by an asterisk. If you do not fill in these mandatory sections, SUEZ Smart Solutions will not be able to respond to your request.
3) What is the legal basis for the processing of User Data?
Data processing is only legal if it is based on one of the legal bases defined by the Regulations. In the context of the operation of the Site, the processing is based on the following legal bases:
4) Recipients of the collected Data
The Data collected through the contact form is intended for the internal services of the Entity responsible for processing in charge of responding to the User's request.
These may be, as the case may be, the "Investor Relations" department, "Human Resources", the "Communications" department, etc.
Internal recipients may also be subsidiaries of SUEZ Smart Solutions located in the European Union (EU) or outside the EU, it being understood that any transfer of Data outside the EU will be carried out under the terms of the article "Transfer of Data outside the European Union" below.
Each recipient subsidiary may, as the case may be, be a sub-contractor or be responsible for processing the Data communicated.
Data may also be transferred/used by third parties under the following conditions:
In accordance with the Regulations in force, the Data may be transmitted to the competent authorities upon request and in particular to public bodies, exclusively to meet legal obligations, judicial officers, judicial officers and bodies responsible for debt collection, as well as in the case of the search for the perpetrators of offences committed on the Internet.
The Data may be communicated or made accessible to the Publisher's subcontractors, suppliers and third party service providers (such as the Website host, IT and/or technical service providers of SUEZ Smart Solutions).
The User has the possibility to share the pages that interest him/her on social networks by clicking on share buttons.
The collection of information through social network share buttons is subject to the privacy policies of those third parties. We invite you to read the policies of these social networks to find out what use is made of your personal data.
In accordance with the Regulations, any User who is a natural person has the right to access, rectify, delete, limit and carry the Data concerning him/her.
The User also has the right to define general and specific guidelines defining the manner in which he or she intends to exercise his or her rights after his or her death.
For all processing carried out within the framework of the Site and only within this framework, regardless of the Entity responsible for the processing, the User may exercise his rights by writing to privacy.3s.france@suez.com.
In the event of any difficulty concerning the management of his or her Personal Data by the Publisher, the User may contact the SUEZ Smart Solutions Data Protection Delegate (email address: privacy.3s.france@suez.com ). If he or she is not satisfied with the DPO's response, he or she may file a complaint with the competent protection authority (in France: CNIL - 3, place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07).
The Publisher reminds that the User may, for legitimate reasons, oppose the processing of Data concerning him/her.
When the processing is based on consent, the User has the possibility of withdrawing his consent at any time by sending an email to privacy.3s.france@suez.com .
It is specified that if the User exercises some of the above rights, the Publisher may find itself unable to carry out the actions necessary to achieve the purposes described above, or the User may not be able to use all or part of the Services.
The Publisher has the obligation to keep the Data collected from Users up to date. It is therefore recommended that Users inform the Editor of any changes concerning them by sending an email to the following address: privacy.3s.france@suez.com .
User Data will not be retained beyond the time strictly necessary for the purposes set out herein and in accordance with the Regulations.
In this respect:
The Data collected in order to respond to User requests for information and questions are kept on an active basis for the calendar year of the User's request, then for a period of 5 years in interim storage.
The Data is kept in "intermediate archiving" to enable SUEZ Smart Solutions to defend itself in the context of any legal action or for the purposes of preventing and detecting criminal offences, with the aim of enabling the Data to be made available to the judicial authority.
At the end of the intermediate archiving period, the User Data will be definitively deleted.
In addition, the Publisher may keep Data permanently anonymised for the purpose of producing statistical studies. In no case do these studies allow Users to be identified, and only concern trends derived from their aggregated Data.
The Publisher takes adequate technical and organisational measures to ensure the security of the Data and to prohibit unauthorised access to or disclosure of User Data. However, the Publisher cannot guarantee the elimination of any risk of misappropriation, alteration, illicit reproduction or misuse of the Data.
The database created when a User sends a request via the contact form is strictly confidential. SUEZ Smart Solutions undertakes to take all useful precautions and appropriate organisational and technical measures to preserve the security, integrity and confidentiality of the Data and, in particular, to prevent it from being distorted, damaged or accessed by unauthorised third parties.
In the event of transfer of User Data to a SUEZ Smart Solutions subsidiary or to a third party located outside the European Union, SUEZ Smart Solutions ensures that the recipient country has been the subject of an adequacy decision by the European Commission (including in the context of the adoption of the Privacy Shield). If this is not the case, SUEZ Smart Solutions undertakes to ensure that the transfer is governed by the appropriate legal instruments, in particular the Standard Standard Contractual Clauses of the European Commission.
If the User wishes to obtain more information on the way in which SUEZ Smart Solutions protects its Data or wishes to obtain a copy of the legal instruments implemented, the User may request this from the following address: privacy.3s.france@suez.com.