Protection of personal data – GDPR

ERDIL has the utmost respect for the personal data we gather (spontaneous contacts, contractual users of ERDIL services, job applications, subscriptions to ERDIL newsletter, customer feedback, etc.) and therefore complies to the General Data Protection Regulation (GDPR), officially known as the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

In the following document, the terms “collection”, “consent”, “files”, “purpose”, “person”, “data controller”, “data processor” or “processing” are used as defined by the Article 4 of the GDPR.

ERDIL does not collect any personal data unless strictly necessary (principle of minimisation) for its processing and consistent with its purposes (e.g. operating online services of ERDIL or conduct of business communication). ERDIL provides individuals with access to all mandatory information as well as to their rights and asks for their consent (in conformity with the applicable legal basis).

Each file processed by ERDIL is stored in an up-to-date register with associated information: purpose, legal basis, consent, storage period (and annual purges), categories of individuals concerned, types of personal data, internal managers, users (only authorised ERDIL employees), main organisational and technical security rules, etc.

ERDIL does not transfer, subcontract, nor resell any personal data to other companies: ERDIL is the sole manager of the data for which it is responsible. All data is processed and hosted in Europe (France).

Personal data is only processed (collected, stored, consulted, used, corrected and deleted) by authorized ERDIL collaborators with the utmost respect for technical and organisational security rules.

Discover below all information about how we process the data used for:

Modalities of the business communication conducted by ERDIL

Purposes

When conducting its business communication, ERDIL may contact you for one (or several) of the following purposes:

  • The answering to the spontaneous requests (from partners, prospects, etc) that were received through the ERDIL website (with the help of the contact form) or through any other medium (social networks, e-mail, phone, etc.),
  • The sending of newsletters and information about ERDIL solutions, products, communication media as well as ERDIL-related news. This includes newsletters (ERDIL-related news, sent from 4 to 5 times a year), notifications of the publication of the Brèves de Verbatim (as well as the accompanying booklets), notifications of recently published ERDIL blog articles, etc. ;
    • The sending of invitations to the Customer Relationship events that are either organised or suggested by ERDIL (Panel discussions, closed workshops, Pépite Cafés, conferences, salons, etc.).
    • The request for interviews and/or participation to the various events organised by ERDIL on its website and its blog (Testimonials, customer interviews, articles on the topic of Customer Relationship, etc.).

Your subscription to the ERDIL news, communication and/or events may be cancelled at any time upon request. (If applicable, all your personal data will be deleted.)

People concerned

Are concerned by these purposes:

  • Clients of ERDIL (as well as users of ERDIL’s services)
  • Customer Relationship experts
  • Partners of ERDIL
  • Prospects

Legal Basis

The applicable legal basis is as follows:

  • Consent in case of market research performed by ERDIL and directed at its prospects
  • Contract in case of clients and partners

Type of personal data

When conducting its business communication, ERDIL may collect and store the undermentioned personal data:

  •  Surname
  • Given name
  • Name of current company
  • Phone numbers (landline and mobile phone)
  • E-mail address
  • Name of current position
  • Name of previous company or companies (exclusively in the case of a change of company and the consequent update of informations by the contact).

Recipients of collected data

The recipients of the data collected for the conduct of the ERDIL business communication are ERDIL collaborators who are part of the communication, marketing and business communication teams.

Personal data is neither shared with subcontractors, nor resold to third parties. Your personal data will never be subjected to any form of automated processing (be it AI-driven or with the help of an automated decision algorithm).

No personal data is shared outside Europe. The processing and hosting of personal data is carried out exclusively in France.

Storage period

The applicable storage period at ERDIL lasts for a minimum of three years (yearly purge). If aforementioned date does not apply, then the date of the first data collection applies instead. Revokals of consent, unsubscription requests and use of the right to erasure involves the use of an anonymised “do not send” list. The lifetime of each e-mail address present in this list is at a minimum of 3 years.

Your rights regarding the processing of personal data collected by ERDIL for the conduct of its business communication.

At any time, you may exercise the undermentioned rights:

  • Right to revoke consent. To exercise this right, please use the unsubscribe form
  • Right to erasure of data
  • Right to restriction of processing
  • Right of access by the data subject (see “Type of personal data” above)
  • Right to rectification (of your personal data)
  • To exercise your rights, please contact the ERDIL DPO. You may also lodge a complaint with the French Data Protection Authority.

To exercise your rights, please contact the ERDIL DPO. You may also lodge a complaint with the French Data Protection Authority.

People in charge of the data processing

The people at ERDIL in charge of these data processings are Séverine VIENNEY and Basile DELHAUTAL.

Website visits and statistical data

Purposes

ERDIL strives to adapt its websites, services and their content to their website visitors’ expectations.ERDIL also assesses the amount of website visits and consulted pages as well as the activity of website visitors. To do this, ERDIL uses the tool Matomo for measuring its website audience and statistics, without deploying any cookies. Matomo collects your public IP address in order to determine the location (country, and at best your locality) from where you have established connection. This public IP address is immediately anonymised. ERDIL can thus by no means identify a natural person this way.

People concerned:

Are concerned by these purposes:

  • Visitors of the websites
  • Users of ERDIL’s web-based services

Legal basis

The applicable legal basis is as follows:

  • Legitimate interest in case of the supervision and the audience assessment of the ERDIL website.

Type

In order to assess its audience and the amount of visits on its website, ERDIL may collect and store the undermentioned personal data:

  • Previously anonymised IP address
  • Identifier (only applies to the customer area users)
  • Location

Recipients of collected data

The recipients of the data collected for audience and website visits assessment are ERDIL collaborators who are part of the teams in charge of the ERDIL communication and of the exploitation of the ERDIL websites and web applications.

Personal data is neither shared with subcontractors, nor resold to third parties. Your personal data will never be subjected to any form of automated processing (be it AI-driven or with the help of an automated decision algorithm).

No personal data is shared outside Europe. The processing and hosting of personal data is carried out exclusively in France.

Storage period

The storage period of the data collected for audience assessment and the production of website/web applications-related statistics is as follows: log files are purged every 6 months; reports are purged every 24 months.

Your rights regarding the processing of personal data collected by ERDIL for audience assessment and the production of website/web applications-related statistics.

At any time, you may exercise the undermentioned rights:

  • Right to erasure
  • Right to restriction of processing
  • Right of access by the data subject (see “Type of personal data“)
  • Right to rectification (of your personal data)

To exercise your rights, please contact the ERDIL DPO. You may also lodge a complaint with the French Data Protection Authority.

People in charge of the data processing

The people at ERDIL in charge of the data processing are Séverine VIENNEY and Éric PRETET.

ERDIL DPO

You may contact the ERDIL DPO by either mail or e-mail in order to exercise your rights (access, rectification, erasure, restriction of processing, portability):

  • By e-mail: dpd.rgpd.01@erdil.fr
  • By mail:
    DPO ERDIL
    12, rue Émilie du Châtelet
    25 000 Besançon
    FRANCE