Privacy Policy

Introduction

This document aims to inform you about the conditions under which ORIAL company undertakes to process your personal data as the data controller.

It is important that you read and keep this information notice so that you know how and why ORIAL processes your data and what your rights are in this regard.

In this case, ORIAL commits to comply with the following provisions: (hereinafter referred to as the “Personal Data Provisions”)

  • Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms,
  • The General Data Protection Regulation 2016/679 of April 27, 2016 (hereinafter “GDPR”).

 

Collected Data

Personal Data Collected by ORIAL in the Context of Carrying out its Missions

When necessary for the performance of its mission, ORIAL may collect the following personal data concerning you:

  • Personal identification data: name, title, private and professional address, telephone numbers, immigration status,
  • Personal details: age, gender, date and place of birth, marital status and nationality, physical description,
  • Family situation: number of children, marital status,
  • Identification data issued by public services: ID card number, passport, driving license, pension, registration plate,
  • Tax and financial data: tax number, tax status, bank account numbers,
  • Information relating to education, professional activity and employment (e.g., level of education, employment, position and affiliation (including the existence of a political or trade union function), employer’s name, remuneration methods),
  • Data relating to interactions between the client and the firm: interview reports, emails,
  • Data relating to the processing of emails and communications addressed to you, such as the date, time of receipt of emails, their opening, as well as information concerning your interactions with the transmitted content.

Sensitive Data

ORIAL does not collect any sensitive data except to the extent required by legal and regulatory provisions or where it is necessary for the performance of the assigned mission:

  • National Register Number,
  • Data revealing trade union and/or political affiliations,
  • Judicial data concerning judicial measures,
  • Data concerning vulnerable categories: children.

It will be specified that the data referred to above are not systematically collected by ORIAL. The data collected varies according to the missions assigned to it.

Personal Data Collected by ORIAL through its Website

When using the website orial.fr, the following may be collected: the URL of the links through which the user accessed the orial.fr site, the user’s Internet service provider and the user’s Internet Protocol (IP) address.

Through its website, ORIAL may also receive job applications. For this purpose, the following information will be collected: name, surname, professional email address, telephone number and Curriculum Vitae. Finally, ORIAL may collect, through its contact forms or event registration forms, the following data: Name, surname, address and email address.

 

What Processing is Carried out on your Data

The processing of personal data implemented has the following legal basis:

The legitimate interest pursued by ORIAL when ORIAL pursues the following purposes:

  • prospecting and animation,
  • management of its relationship with you,
  • organization, registration and invitation to its events,
  • the transmission of information relating to legal news,
  • improving its services and customer relations,
  • the transmission of satisfaction surveys,
  • recruitment.

 

The execution of pre-contractual measures or the contract when ORIAL implements processing for the purpose of:

  • the execution and monitoring of the mission entrusted to them,
  • the management of their client relationship including any newsletter transmission,
  • the collection of fees.

 

Compliance with legal and regulatory obligations when ORIAL implements processing for the purpose of:

  • the prevention of money laundering and terrorist financing and the fight against corruption,
  • billing,
  • accounting and provision of necessary software,
  • all declarations related to the entrusted mission.

In the event that your personal data would be processed for different purposes, ORIAL will inform you, and when required by law, ORIAL will obtain your prior consent.

 

Transfer of Personal Data

ORIAL does not transfer any personal data to foreign countries (outside the European Union). If ORIAL is required to transfer data to a third country or an international organization, under the law of the Union or the Member State to which it is subject, ORIAL will inform you before processing.

 

Duration of Personal Data Retention

Personal data is retained throughout the duration of our contractual relationship, following the details referred to in the title of the mission in question and/or in compliance with legal provisions and/or recommendations issued by the CNIL regarding all data collected as part of a recruitment offer or prospect data.

 

Your Rights

Under the conditions defined by the Data Protection Act and the General Data Protection Regulation, you have the right to access, rectify, limit, port, and erase data concerning you.

You also have the right to object at any time, for reasons relating to your particular situation, to processing of personal data having ORIAL’s legitimate interest as a legal basis, as well as the right to object to commercial prospecting.

You also have the right to define general and specific guidelines defining how you intend the rights mentioned above to be exercised after your death by email to the following address (to the attention of the Quality Service): informatique-libertes@orial.fr or through the form: www.orial.fr/donnees-personnelles-rgpd

Finally, you have the right to lodge a complaint with a supervisory authority.

 

Transmission of Data to Third Parties

The collected data may be transmitted to ORIAL’s partners for processing mentioned in the engagement letter (statutory auditor, chartered accountant, lawyer, banker, partners, financing organization, professional declarative platforms and social organizations…).

The data collected by ORIAL following an application on its website is shared with other recruiters, partners of ORIAL.

The data collected via contact forms or event registration forms is intended for ORIAL’s communication service and recorded on a computerized file on secure servers.

ORIAL may also use subcontractors to conduct specific processing activities. In this case, ORIAL undertakes to ensure that its service providers offer sufficient guarantees regarding the implementation of appropriate technical and organizational measures and meet the requirements of the European data protection regulation.

ORIAL commits not to transmit your data to commercial or advertising actors: None of your personal information will be published without your knowledge, exchanged, transferred, assigned or sold on any medium to third parties (other than those mentioned above).

Only the hypothesis of the purchase of ORIAL and its rights would allow the transmission of said information to the potential buyer who would in turn be bound by the same obligation of data retention and modification towards you.

 

Safety

ORIAL will take all useful precautions to preserve the security and confidentiality of your data and, in particular, prevent it from being distorted, damaged, or accessed by unauthorized third parties.

The collected data is stored on secure servers, hosted within the European Union.

 

Links and Use of other Sites

The ORIAL website may provide links to Internet sites of which ORIAL is a member.

It will be specified that ORIAL exercises no control over the content of these sites nor their practices regarding personal data protection.

Thus, ORIAL declines all responsibility concerning the processing of your data by these third parties.

 

Applicable Law

This personal data protection policy is subject to French law.