DATA PROTECTION POLICY
= DATA COLLECTED ON THE INTERNATIONAL WEB PORTAL =
The General Data Protection Regulation sets out a framework for the collection and processing of personal data designed to strengthen the rights and freedoms of individuals.
In the course of its activities, Stimulus collects, processes and archives personal data.
This notice describes the data processed by Stimulus in connection with the use of the "Contact Us" tab on the Stimulus International Web Portal, in accordance with the laws and regulations applicable in France. It covers the principles relating to the processing of personal data, the roles and responsibilities of data protection stakeholders and the rights of the persons.
Stimulus is committed to respecting the rules for protecting the privacy of users of its services, including its International Web Portal. All processing of personal data implemented as part of the web portal complies with the regulations applicable to the protection of personal data and in particular with the provisions of the French Data Protection Act of 6 January 1978 as amended and the General Data Protection Regulation (EU Regulation 2016/679) referred to as the "GDPR".
To ensure that these rules are properly applied, Stimulus has appointed a Data Protection Officer. The firm also implements appropriate internal procedures to raise awareness among its employees and ensure compliance with all these rules within its organisation.
Contact-Us form
In order to contact the person who has made a “Contact-Us” request, Stimulus collects:
- Full name or Pseudo
- Email address
- Telephone number
If the person logged in before their "Contact Us" request
- The name of the company by which they identified themselves
- The country that the person has chosen from the list proposed on the portal
The legal basis for this processing is the consent of the person sending the Contact Us form.
Only Stimulus employees in charge of international operations receive the information communicated, in an encrypted attachment. Depending on the request, this information may be passed on to a local service provider to organise support for the person.
The information collected is saved and kept for a period of 13 months from receipt.
Your rights
The European Data Protection Regulation provides a series of rights to which employees and beneficiaries using Stimulus International Web Portal are entitled. These rights are listed below:
- Right to access: The Data Subject has the right to obtain from the Data Controller confirmation as to whether or not personal data relating to him or her are being processed and, where they are, access to such personal data.
- Right of rectification: The Data Subject has the right to obtain from the Data Controller, as soon as possible, the rectification of inaccurate personal data concerning him or her. Given the purposes of the processing, the Data Subject has the right to have incomplete personal data completed, including by providing a supplementary declaration.
- Right to erasure: The Data Subject has the right to obtain from the Data Controller the erasure, as soon as possible, of personal data relating to him or her and the Data Controller has an obligation to erase such personal data as soon as possible
- Right to limit processing: The Data Subject has the right to obtain from the Data Controller the restriction of processing where any of the following apply:
a) the accuracy of the personal data is contested by the Data Subject, for a period allowing the Data Controller to verify the accuracy of the personal data;
b) the processing is unlawful and the Data Subject objects to the erasure of the data and demands instead that its use be restricted; or
c) the Data Controller no longer needs the personal data for the purposes of the processing operation, but the data is still necessary for the Data Subject to establish, exercise or defend legal claims; or
d) the Data Subject has objected to the processing pursuant to Article 21(1) of the GDPR, during the verification as to whether the legitimate grounds pursued by the Data Controller override those of the data subject.
- Right to data portability: Data subjects have the right to receive personal data relating to them that they have provided to a Data Controller, in a structured, commonly used and machine-readable format, and have the right to transmit that data to another Data Controller without being hindered by the Data Controller to whom the personal data has been communicated.
- Right to object: The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.
To exercise these rights, please send an e-mail to dpo@humanandwork.com. We undertake to process your request within 30 days of receipt.
