Personal data protection

 

Preamble

ENGIE Solutions is committed to respecting privacy and protecting the personal data collected and processed while you browse our Site.

ENGIE Solutions undertakes to comply with applicable regulations on personal data protection and, in particular, the General Data Protection Regulation (EU Regulation 2016/679) and "Data Protection Act" of 6 January 1978, as amended.

More specifically, ENGIE Solutions collects only data that is strictly necessary and does so in a fair and transparent manner for specific, express and legitimate purposes. It does not reuse the data for purposes incompatible with those initially stated. The Company has technical and organizational measures in place to ensure data accuracy, updating, rectification and erasure. Finally, ENGIE Solutions undertakes to respect the retention periods for the personal data collected and obligations regarding cross-border transfers of personal data, where applicable.

 

1. Identity of the controller

In connection with the use of the services accessible on its Website (www.engie-solutions.com) (hereinafter the "Site"), ENGIE Energie Services, trading under the name "ENGIE Solutions" ("we", "our"), a public limited company with a capital of €698,555,072.00, filed with the Nanterre Trade and Companies Register under number 552 046 955, with registered office at 1 place Samuel de Champlain - Faubourg de l'Arche 92930 Paris La Défense - Cedex, acting as controller, may collect and process your personal data. Consequently, the Company guarantees its compliance with applicable regulations on the personal data protection.

In accordance with the creation of the "ENGIE Solutions" brand, this Site is designed to provide an interface for the various entities within the ENGIE Solutions perimeter. These entities may receive personal data for processing compatible with the original purposes for which your data were collected.

 

2. Means of data collection

When you browse our Site, you may provide us with your personal data in various ways.

Cookies are also a means of collecting certain data about you. For more details in this regard, please refer to our Cookies notice.

 

3. Purposes of the data processing and legal basis

Depending on each case, ENGIE Solutions processes your data mainly for the following purposes:

  • Management of requests for information and/or contact;
  • Sales management and marketing;
  • Customer relations management and follow-up in general;
  • Site optimization.

You are reminded of why we process your data when it is collected.

The legal basis for the processing operations described in this data protection notice depends on the type of personal data collected and the context in which it is collected. Accordingly, ENGIE Solutions can process your data because you have consented to the processing and/or we have legitimate interest and/or we are complying with a legal obligation and/or within the framework of a contractual obligation.

 

4. Data minimization

Through each form on the site, ENGIE Solutions collects only the personal data strictly necessary for the purposes for which it is processed.

Accordingly, we collect data corresponding to several categories, including:

  • Identity data (surname, first name, e-mail address)
  • Professional data (professional contact details, functions, entity to which you belong)
  • Browsing data (date, time, IP address, page viewed, browser used, etc.)

Required information is indicated on the forms by an asterisk.
 

5. Data recipients and disclosure

The data processed is intended and disclosed only to authorized recipients determined in accordance with the purposes of the processing in the Company, to other entities in the ENGIE Group that use the ENGIE Solutions brand or to third parties working to achieve the purposes for which the data is collected.

In some cases, ENGIE Solutions may disclose the data to authorized third parties not directly involved in the processing, for example:

  • In fulfilment of a legal obligation;
  • To protect and defend our property rights;
  • To prevent harmful content on the Site;
  • To ensure the safety of Site users or the public in general.

 

6. Limitation of retention of data

The Company keeps your data only for as long as necessary for the purposes for which it was collected.

The period for the retention of data is divided into three phases: active storage accessible only to persons duly authorized for the purpose for which the data was collected; intermediate storage for a limited period of time in accordance with applicable legal obligations; and erasure, which consists of the permanent deletion of the data.

You will be reminded of the limitation of retention of data when it is collected.

 

7. Data security

ENGIE Solutions is committed to the security of your personal data. Consequently, the Company takes all suitable technical and organizational measures to ensure a level of security appropriate to the risks, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing.

 

8. Subcontracting

ENGIE Solutions may use service providers and other third parties to provide, maintain, improve, analyse and secure the use of the Site. The said service providers may have access to your personal data exclusively for tasks corresponding to the purposes of the processing. The Company warrants that service providers have the necessary guarantees for the tasks assigned to them to ensure the protection of your data. 

 

9. Data transfer

If necessary, your personal data may be processed in a territory outside the European Union.

ENGIE Solutions takes all necessary measures to protect the processing of your data and makes sure that no transfer is made to a country or entity that does not provide sufficient guarantees. For example, by proceeding on a case-by-case basis and ensuring that each recipient signs contractual clauses based on the example given by the European Commission or any other mechanism provided for in the GDPR when the European Commission considers that the recipient does not provide an adequate level of protection.

 

10. Your data rights

In accordance with the Data Protection Act of 6 January 1978 and European Regulation 2016/679 of 27 April 2016, you have the right of and the right to rectification, erasure, restriction of processing and portability regarding your personal data.

You also have the right to object to the processing of your personal data for reasons related to your particular situation.

Finally, you have the right to define general and specific directives as to how you would like your rights to be exercised after your death.

To exercise your rights, simply complete the rights form with your request (available here) or write to us by post to ENGIE Solutions, Data Privacy Manager, Tour T1 – 1 place Samuel de Champlain – 92930 Paris La Défense – Cedex – France.

In both cases, you will be asked for proof of identity.

We will do our best to reply as soon as possible and no later than one month of receiving your request. We reserve the right to extend this period to three months if your request is particularly complex.

Finally, you also have the right to lodge a complaint with the competent supervisory authority, i.e. the Commission Nationale Informatique et Libertés (CNIL).