Privacy Policy

The controller of the personal data processing is the

LAITA company - Registered office: 4 Rue Henri Becquerel 29806 BREST CEDEX 9 - Registered with the BREST Trade and Companies Register under number 380 656 439.

Tel: 02 98 42 54 25, email: communication@laita.fr

The information we collect is used to improve the services we provide. The data is as follows:

• Relating to your identity: surname, first name, title, postal and electronic addresses, phone number (landline and/or mobile);

• Relating to your work situation: company, position;

• Necessary for statistical purposes.

Please be aware that certain information is also collected and stored automatically when you access our services:

• When you browse our website and/or create an account on the site (IP addresses, login data, type and version of internet browser used, type and version of browser plugin, operating system and platform, information about your browsing activity on our site, cookies);

• When you contact us from a phone number;

• Certain types of personal data that we process may also originate from third-party partners, e.g. your profile on social media such as Facebook, LinkedIn, etc. See Section V below for details.

We process your personal data in order to carry out, deliver and improve the services we provide.

The processing may be for some or all of the following purposes:

1. TO COMPLY WITH OUR LEGAL OBLIGATIONS

In certain cases we have a legal obligation to collect and process your personal data.

2. TO ACCOMMODATE YOUR RIGHTS

We may process your personal data to fulfil any requests you make to exercise your rights. Please see Section VI of this Policy for your rights.

3. SHARING YOUR DATA

We do not sell your personal data. We only share it with third-party partners in certain specific circumstances. In this case, we only share your personal data where it is required by law, or transmit it to third-party partners (established within or outside the European Union) who provide us with services such as hosting our websites and sending emails. Please see Section V of this Policy for more information.

4. MANAGING AND IMPROVING OUR WEBSITE

When you visit our website, we collect information such as your IP address, location, time of visit, etc. to identify the habits of the people who use the site and improve their experience.

Your personal data is retained for the length of time necessary to fulfil the purpose for which it was required when it was collected.

We also retain personal data for the time needed to process or respond to complaints or requests for information.

Your personal data may also be stored for a longer period of time if required by the applicable laws, statutory limitation periods or CNIL (French National Information Science and Liberties Commission) recommendations, e.g.

• Connection logs: 1 year from last connection;

• Cookies: 13 months from when they are placed on your computer.

Your personal data may also be transferred to other companies within our Group which are located within the European Union. All our companies are required to observe the confidentiality and personal data protection practices outlined in this Policy. Your personal data may also be transferred to other companies established within or outside the European Union, based on contracts that include the standard clauses drawn up by the CNIL and stipulating the requirements to be met in respect of the transfer of personal data. See the table below for details:

[trouver une solution pour affichage tableau]

You have the following rights in respect of your personal data, which you may exercise by emailing us at communication@laita.fr or writing to us at Laïta – ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9.

To exercise your rights, note that the CNIL provides an email generator to help you formulate your request: https://www.cnil.fr/fr/modeles/courrier

If we cannot identify you definitively from the information you include in a request to exercise your rights, we may ask you for a copy of a valid identity document (ID card or passport) in the form of a GIF, JPG, PNG or PDF document.

1. RIGHT OF ACCESS AND COMMUNICATION OF DATA

You have the right to know if and how we process your personal data and to receive notification of this in an understandable format. However, in view of our obligations with respect to security and confidentiality when processing personal data, note that your request will only be processed if you provide us with proof of identity, specifically by supplying a copy of a valid identity document (electronically or a signed photocopy).Note that we are entitled to refuse any requests that are openly abusive (due to the number of requests or requests that are repetitive or systematic) and requests that infringe the rights of third parties.You can submit your request at the above address, using the CNIL template.

2. RIGHT TO RECTIFICATION OF DATA

You have the right to request rectification, updating, blocking or erasure of any personal data concerning you that may be inaccurate, erroneous, incomplete or obsolete. You can submit your request at the above address, using the CNIL template.

3. RIGHT TO OPPOSE

You have the right to oppose the processing of your personal data. You must justify any opposition with reasons pertaining to your particular situation, except in the case of processing for commercial prospecting purposes (including profiling, insofar as this is related to commercial prospecting), for which you do not need to justify your objection. If your opposition is not related to commercial prospecting purposes, therefore, we are entitled to refuse your request on the following grounds:

• you have already given us your consent; you may, however, withdraw your consent;

• there are compelling, legitimate reasons for processing your data;

• we are bound by a contract;

• we are under a legal obligation to process your data;

• the processing is necessary to protect your interests.

You can submit your request at the above address, using the CNIL template.

4. RIGHT TO ERASURE

You have the right to request the erasure of your personal data with the minimum delay. Note that in rare cases we may not be able to grant a request for erasure due to a legal obligation (e.g. to observe the retention period for an invoice, in which case the related data must be retained for 10 years).You can submit your request at the above address, using the CNIL template.

5. RIGHT TO RESTRICT

You have the right to request restriction of processing. You can submit your request at the above address, using the CNIL template.

6. RIGHT TO PORTABILITY

You have the right to portability of your personal data, i.e. to receive the personal data you have supplied in a structured, commonly-used and machine-readable format, and to transmit it to another controller. Note that this right can only be granted where your data is processed electronically (data processed in hard copy is therefore excluded) and based on your prior consent or the fulfilment of a contract concluded between us.To exercise this right, please contact us either by filling in our online form, by emailing us at communication@laita.fr or by writing to us at Laïta – ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9.

7. DIGITAL WILL

You have the right to provide us with specific instructions regarding the fate of your personal data after your death in terms of its retention, erasure and communication in the context of the processing we carry out. These instructions can be submitted either by filling in our online contact form or by writing to us at Laïta – ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9.You can change your instructions at any time. In the absence of instructions or a declaration to the contrary, the heirs of a deceased person may exercise the rights of the deceased person.

8. RESPONSE TIME

We undertake to respond to requests for access, rectification and opposition and any other additional requests for information in the shortest possible time, not exceeding ONE (1) month from the time we receive it. However, we may extend this period by two additional months depending on the number and complexity of the request(s). In this event, you will be informed of the delayed response time within one month of your request.

9. RIGHT TO CONTACT THE COMPETENT SUPERVISORY AUTHORITY

If you experience difficulties, you have the right to complain to the CNIL: https://www.cnil.fr/fr/plaintes

10. WITHDRAWAL OF CONSENT

You also have the right to withdraw your consent to the processing of your personal data based on procurement of your consent. For example, if you have not given your consent to receiving publicity messages electronically, you can unsubscribe from these mailings at any time by clicking on the unsubscribe link at the bottom of any publicity message you receive. You can also delete your user account at any time without giving a reason, either directly online or by contacting our customer services department. For other types of consent withdrawal, please contact us either by filling in our online form, by emailing us at communication@laita.fr or by writing to us at Laïta – ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9.

We undertake to implement the appropriate technical and organisational measures to ensure your personal data is adequately protected. These measures may include, among others:

• pseudonymisation and encryption of data;

• devices to guarantee the confidentiality, integrity, availability and long-term durability of the service and processing systems;

• devices to re-establish the availability of and access to data as soon as possible in the event of a physical or technical incident;

• a procedure for the regular testing, analysis and evaluation of the technical and organisational measures designed to ensure the security of processing.

In the interests of security, we ask you to keep your password secret and not disclose it to anyone. You are responsible for any transgression resulting from a failure on your part to safeguard the confidentiality of the password you have chosen to access your personal account.

Contact details for our data protection officer: dpo@laita.fr

Third-party social media that place interactive modules on our website may use cookies or other trackers to collect information about your use of our website.

Social media buttons allow you to share content from our website with other people, post an opinion on it or notify other people that you have visited the website. This is done by clicking on the ‘like’ or ‘share’ buttons provided by Facebook and Twitter. The social network that provides the button may identify you when you click on it. The way the third party uses this information depends on the privacy policy posted by the social network on its website. We recommend that you read their privacy policy carefully. Third parties may use cookies or other means of tracking for their own purposes by linking data about your use of our website to the personal information they hold on you. In addition, we may obtain analytics data from these social networks. The information helps us to gauge the effectiveness of our content and the advertisements we post on social media.

Note that most internet browsers have a simple procedure for rejecting this technology.

Any person under the age of fifteen (15) wishing to apply for a placement with us must ensure that those who hold parental authority over them are aware of and agree to it.

Last updated: 11/08/2022