Gerflor commits to ensure the protection of the data obtained as part of its activities and to comply with the applicable laws and regulations to the Personal Data Processing.
In this context, Gerflor complies particularly to the European Regulation n°2016/679 on the personal data protection of April 27th, 2017, to the law computing and freedoms of January 6th, 1978.
The main subject of this Policy is to ensure the establishment by Gerflor of appropriate governance structures, of control as well as methods and procedures to ensure compliance with the applicable laws and regulations regarding the Personal Data protection.
MANAGER OF DATA PROCESSING
The manager for your personal data processing is Gerflor, a simplified joint-stock company under French law with a capital of 1.932.385 euros, registered with the Lyon Trade and Companies Register under the number 726 580 152, whose head office is located : 50, cours de la République, 69627 Villeurbanne Cedex – France Phone : +33 (0)4 72 65 10 00 – E-mail : email@example.com
COLLECT AND USES OF PERSONAL DATA
Gerflor will be able to use these collected data for the following purposes:
For customer service: Gerflor processes your personal data in order to provide a customer support, especially for answer your questions. For contests and other promotions: with your consent (when required), Gerflor will be able to use your personal data for contact your by email, SMS, phone or letter concerning the products and services that might interest you (marketing communications, promotions, etc.). For the use of statistical studies: Gerflor will be able to process your personal data for statistical purposes (marketing studies, satisfaction surveys, etc.), For administrative purposes linked with security and the Gerflor systems access, platforms, secure websites or applications, For all other legitimate business purposes.
DISCLOSURE/COMMUNICATION OF YOUR PERSONAL DATA
Gerflor will be able to disclose your personal data to any entity in the Gerflor Group and, where appropriate, to subcontractors, located in and out the Europe Economic Area (“EEA“), for performing certain tasks related to the objectives described above. The collected data will not be sold, rented or disclosed to other third parties. Gerflor may be constrained to disclose your personal data in order to comply with any law or regulation in force or to answer any request from judicial and administrative authorities.
SECURITY OF THE COLLECTED PERSONAL DATA
Gerflor ensure your data is treated securely and confidentially and take the necessary technical and organizational measures to avoid improper or accidental disclosure, use, access, loss, alteration and deletion of your personal data.
Gerflor implements secure data systems that comply with the standards in force. Only Gerflor or its subcontractors who need to access your personal data in order to execute a task or a specific function for the purposes set out herein are authorized to access such data. Moreover, all the Gerflor employees and its subcontractors are linked by confidentiality commitments.
Assuming a transfer of your personal data to a country outside the Europe Economic Area, rules ensuring the protection and security of this data have been put in place, such as :
A personal data transfer to a Gerflor entity or Gerflor subcontractor located in a country offering an adequate level of protection by a decision of the European Comission. A data transfer framed by the standard contractual clauses established by the European Commission.
DURATION OF CONSERVATION
Gerflor undertakes to keep your personal data for the strictly necessary period for the treatments described above, within the limits set by law and in accordance with its legal and regulatory obligations.
RIGHT OF ACCESS TO YOUR PERSONAL DATA
In accordance with the applicable legislation, you have a right of access, rectify, delete and oppose, for legitimate reasons, the processing of data concerning you, that you can exercise in sending an email to DPO@gerflor.com or by letter to the following address : Gerflor France – DPO – 50, cours de la République – 69627 Villeurbanne Cedex - France In accordance with the regulations in force, your request must be signed and along by a photocopy of an identity document bearing your signature and must specify the address to which the answer must be sent.