menu.close
fr
menu.word_1
menu.word_1
menu.word_2
fr
menu.open

Privacy policy

Scroll to explore

TABLE OF CONTENTS :

1. Objective and Scope of the Policy
2. Data Controller
3. Why do we collect your Personal Data and how ?
4. What Personal Data do we collect and how ?
5. Cookies
6. Do we share your Personal Data ?
7. Are your Personal Data transferred to Third Countries ?
8. How long do we keep your Personal Data ?
9. How do we ensure the security of your Personal Data ?
10. What are your rights ?
11. Update of this Policy

 

PRIVACY POLICY

1. Objective and Scope of the Policy

The company Ekstend Group (hereinafter, “the Company” or “Ekstend Group”) attaches the utmost importance and care to the protection of privacy and Personal Data, as well as to the compliance with the provisions of the applicable Law.

Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the Processing of Personal Data and on the free movement of such Data (hereinafter “GDPR”) states that Personal Data must be processed lawfully, fairly, and transparently. Thus, this privacy policy (hereinafter the “Policy”) aims to provide you with simple, clear information on the Processing of Personal Data about you, in the context of your browsing and operations carried out on our website.

2. Data controller

In the context of your activity on the website https://www.ekstend.io/ (hereinafter “the site”) we collect and use, Personal Data related to you, natural persons (hereinafter “Data Subject”).

For all Processing, the company Ekstend group SASU (419 639 034 RCS Marseille) – 396 rue Paradis – 13008 Marseille – France (hereinafter “EKSTEND Group”), determines the means and purposes of the Processing. Thus, we act as Data Controller, within the meaning of the GDPR.

3. Why do we collect your Personal Data and how ?

In the context of your activity and the services offered on the site, your Data are processed for the following purposes :

  • In the context of the execution of the contract or pre-contractual measures for the management of questions and contact requests, management of your application in the context of recruitment, but also for the management of customers and contracts that unite us and the management of subcontractors and contracts that unite us;
  • On the basis of your consent for our promotion (commercial prospecting), management of the newsletter, management of cookies requiring your consent;
  • On the basis of the legitimate interest for the establishment of statistics for the improvement of products and services, conducting satisfaction surveys and polls, management of pre-litigation and litigation;
  • In the context of the legal and regulatory obligations to which EKSTEND Group is subject, your Data may still be processed for the following purposes: fraud prevention, money laundering and terrorist financing prevention, accounting.

4. What Personal Data do we collect and how ?

By using our website and in the context of the purposes set out above, you transmit to us a certain number of information about you, some of which are of a nature to identify you (“Personal Data”). This is the case when you browse our site, when you fill in online contact forms, job applications or newsletter registration forms.

The nature and quality of the Personal Data collected about you vary depending on the relationships you have with EKSTEND Group, the main ones being :

  • Identification data (names, first names, dates of birth, etc.);
  • Contact data (email addresses, postal addresses, phone numbers, etc.);
  • Professional life data (name of the company, position in the company, etc.);
  • Data on interests as well as data on the degrees and experiences of job applicants;
  • Information relating to your navigation when you browse our website, therefore, some information relating to your navigation are collected, your IP address for maintenance and statistics purposes;
  • Data collected from Third Parties: Personal Data that you have agreed to share with us or on public social networks and/or that we may collect from other public data bases.

These data can also be enriched with information about you, namely information collected (i) during your exchanges with you, whether written, telephone or whether it is a physical interview and (ii) from professional social networks or from any public information source, when this information is useful in the management of our relationship.

The information collected by the Company and which are essential to respond to the aforementioned purposes are identified by an asterisk on the collection forms. If you do not fill in these mandatory fields, the Company may not be able to ensure the service concerned.

5. Cookies

A cookie is a small text file that is stored on your computer and allows you to move from one web page to another while retaining your browsing settings.

For its operation, some of the features of its site and the optimization of its services, the company EKSTEND Group uses cookies.

To learn more about cookie management, see the Cookie Policy.

6. Do we share your personal data ?

We ensure that only authorized persons can access these data. The company applies a strict authorization policy that allows the data it processes to be transmitted only to authorized persons.

In this context, your personal data are mainly communicated/accessible to the Information Systems Department, the Financial Department, the Legal Department and the Human Resources Department of the Company.

They are also transmitted for certain tasks related to the purposes, and within the limits of their respective missions and authorizations, to the following recipients :

  • Entities of Ekstend Group in the context of the outsourcing of an activity to another entity of the group;
  • Service providers and subcontractors to whom we call to carry out a set of operations and tasks, on our behalf, in particular :
    • Teamtailor, publisher of the software solution for recruitment
    • Gandhi for data hosting (server located in France)
    • Commercial partners only when you have expressly consented thereto through a checkbox present on our data collection forms;
    • Competent public authorities (judicial, supervisory, etc.), in the context of our legal and regulatory obligations;
    • Regulated professions (lawyers, bailiffs, etc.) who may intervene in the implementation of guarantees, collection or litigation;

When your data are communicated to our service providers and subcontractors, they are also, in accordance with our subcontracting management policy, asked not to use the data for purposes other than those initially planned. We take all necessary steps to ensure that these Third Parties preserve the confidentiality and security of your data. In any case, only the necessary data are provided.

We do not sell your data.

You can contact us for more information on these topics as well as a copy of the relevant documents.

7. Are your personal data transferred to third countries?

The company EKSTEND Group strives to keep personal data in France, or at least within the European Economic Area (EEA).

However, it is possible that the data we collect when you use our site may be transferred to other countries outside the European Economic Area.

In the event of such a transfer, we guarantee that it will be carried out to a country that ensures an adequate level of protection, that is, a level of protection equivalent to that required by European Regulations.

If certain third parties are located in countries whose regulations do not necessarily offer the same level of protection as that of the Member States of the European Union, we will ensure that these transfers are carried out in accordance with the provisions imposed by French regulations (such as the establishment of contractual clauses adopted by the European Commission).

You can contact us for more information on these topics as well as a copy of the relevant documents.

8. How long do we keep your personal data?

We keep your data in accordance with the data protection regulations and according to the statutory prescription periods in accordance with the company’s data reference.

The retention periods vary depending on several factors, such as :

  • The needs of the company’s activities;
  • Contractual requirements;
  • Legal obligations;
  • Recommendations from the supervisory authorities.

For example, the retention periods for your data are as follows :

  • Data related to commercial prospecting are kept for three years from the last commercial contact;
  • Data related to contract management are kept for the duration of the contractual relationship plus the prescription (generally, the prescription is 5 years)
  • Data related to recruitment management are kept for a period of 24 months.

You can contact us for more information on these topics as well as a copy of the relevant documents.

9. How do we ensure the security of your personal data ?

EKSTEND Group is committed to protecting the personal data that we collect or process against loss, destruction, alteration, unauthorized access, or disclosure.

To this end, we implement all appropriate technical and organizational measures, according to the nature of the data and the risks involved in their processing. These measures must help to preserve the security and confidentiality of your personal data. They may include practices such as :

  • Limited access to personal data by authorized persons, due to their functions;
  • Pseudonymization or encryption;
  • Physical and/or logical security measures (secure access, authentication process, backup copies, software, etc.).

In addition, our practices and policies, and/or physical and/or logical security measures (secure access, authentication process, backup copies, software, etc.) are regularly checked and updated if necessary.

10. What are your rights ?

The General Data Protection Regulation (GDPR) provides individuals with a number of rights that they can exercise. These rights include:

a) Right to information : You have the right to receive clear, precise, and complete information about the use of your personal data by EKSTEND Group. Any collection of personal data must be accompanied by information on:

    • The data controller and the objectives of the collection of these data (purposes);
    • The legal basis for the processing of data;
    • The mandatory or optional nature of the collection of data for the management of your request and the reminder of the categories of data processed;
    • The source of the data (when data other than those provided via the online service are used to process your request);
    • The categories of data subjects;
    • The recipients of the data (generally the CNIL in principle, except for precision when a transmission to a third party is necessary);
    • The retention period for the data;
    • The security measures (general description);
    • The existence of any transfers of data outside the European Union or automated decision-making;
    • Your data protection rights and how to exercise them with the CNIL.

b) Right of access : You have the right to obtain a copy of your personal data.

c) Right of rectification : You have the right to have your personal data rectified if they are inaccurate or outdated and/or to complete them if they are incomplete.

d) Right to erasure : You have the right to request the deletion of your personal data, unless EKSTEND Group has a legitimate interest in retaining them. In the event of a request for deletion of your data, the Company may in fact legitimately retain them in the form of intermediate archiving, and this for the duration necessary to satisfy its legal, accounting, and tax obligations.

e) Right to object : You have the right to request to exercise your right of objection for reasons related to your particular situation.

f) Right to withdraw your consent : You have the right to withdraw your consent to the processing of your data, at any time, when the processing requires your consent.

g) Right to restriction of processing : You have the right to request the restriction of the processing of your personal data, (i) if you contest the accuracy of your data for the duration allowing us to verify the accuracy of these last, (ii) if you consider that we process your data unlawfully and that you require a limitation of their use rather than an erasure, (iii) if we no longer need your data for the purposes mentioned above but that these are still necessary for the establishment, exercise or defence of your rights in court, (iv) in case of exercise of your right of opposition during the verification period relating to whether the legitimate grounds that we pursue prevail over yours.

h) Right to data portability : You have the right to exercise your right to data portability, which gives you the right to obtain a copy of your data or to transfer them to a third party in a structured and commonly used format and readable by a machine.

i) Right not to be subject to automated decision-making : You have the right not to be subject to a decision based solely on automated processing and producing legal effects concerning you or significantly affecting you unless you exercise the additional guarantees offered in this regard.

j) Right to define post-mortem directives : You also have the right to formulate guidelines regarding the conservation, deletion and communication of your personal data after death.

To this end, EKSTEND Group has implemented a data subject rights management procedure in accordance with the requirements of the applicable legislation. This procedure establishes:

  • The standards to be met to ensure transparent information of the Concerned Persons;
  • The legal requirements that must be met;
  • The authorized means to submit a request for each right, according to the category of Concerned Persons;
  • The operational processes to handle these requests in accordance with the aforementioned requirements;

These rights can be exercised, at any time, by email at the address privacy@ekstend.io and by postal mail at the following postal address: Ekstend group – Privacy – 396 rue Paradis – 13008 Marseille France.

When you send us a request to exercise a Right, you are asked to specify as much as possible the scope of the request, the type of right exercised, the Processing of Personal Data concerned, and any other useful element, in order to facilitate the review of your request. In addition, in case of reasonable doubt, you may be asked to prove your identity.

You also have the right to contact the National Commission for Informatics and Liberties (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, with any complaint related to the way EKSTEND Group collects and processes your data.

  • Updating of this Policy

This Policy may be regularly updated to take into account changes in the Regulation relating to Personal Data.

Last update 08/11/2022

fr
Découvrir