Privacy policy.
PREAMBLE.
Bruzzo Dubucq attaches the utmost importance to privacy and to the personal data collected from its Users.
The purpose of this privacy policy is to inform users (hereinafter “Users” or “You”) of the website www.bruzzodubucq.com (hereinafter the “Site”), published and operated by Bruzzo Dubucq, a société d'exercice libéral par actions simplifiée (professional simplified joint-stock company) registered with the AIX-EN-PROVENCE Trade and Companies Register (RCS) under number 878 193 010, whose registered office is at 520, avenue Henri Mauriat, 13100 AIX-EN-PROVENCE (hereinafter “Bruzzo Dubucq”), of the commitments made and measures taken to comply with the regulations on the protection of their personal data (hereinafter the “Privacy Policy”).
Through this Privacy Policy, Bruzzo Dubucq undertakes, as data controller, to make the commitments and implement the appropriate measures to ensure the protection, confidentiality and security of Users' personal data, and to ensure that all processing and collection of such data is carried out in compliance with the applicable provisions, in particular European Regulation 2016/679 of 27 April 2016 (“GDPR”) and French Law No. 78-17 of 6 January 1978, known as the “Data Protection Act” (Loi Informatique et Libertés).
This Privacy Policy may be amended or supplemented at any time by Bruzzo Dubucq in the course of operating the Site, in particular in order to comply with any legislative, regulatory, case-law or technological developments.
Article 1: Identity of the data controller and the DPO
For the processing and collection of data on the Site, the designated data controller is Bruzzo Dubucq. The data protection officer (“DPO”) is Mr Cédric Dubucq, whose contact details are set out below:
Email: cd@bruzzodubucq.com
Tel.: +33 (0) 6 03 06 12 90
Article 2: Personal data collected, purpose and legal basis for processing
Bruzzo Dubucq takes scrupulous care to collect and process its Users' personal data only on the strict condition that such data is relevant, adequate, not excessive and strictly necessary to achieve the purposes determined in advance.
Generally speaking, the User may visit the Site without providing any personal information. In any event, the User is under no obligation whatsoever to provide such information to Bruzzo Dubucq through the Site. However, if the User declines to do so, they may not be able to benefit from certain information or services they have requested.
The User expressly acknowledges that acceptance of the Privacy Policy also constitutes consent to the processing of their personal data as described herein, and in particular:
• Their email address;
• Their technical browsing information;
• Their identity data, telephone number, address, CV and cover letters.
The User's personal data collected directly (for example when submitting a question via the contact page or when submitting an application via the appropriate form) serves explicit, legitimate and specified purposes. It is used by Bruzzo Dubucq:
• Either for the purposes of managing its clients and its activities;
• Or for contact, communication, statistical, commercial and/or promotional purposes;
• Or to enrich the editorial content of its offering and of the Site and, where appropriate, to make adjustments to Users' needs;
• Or to process Users' job applications, respond to requests and enquiries, and send Bruzzo Dubucq newsletters.
The provision of personal data in this context is voluntary. If the User does not provide this personal data, they will not be able to benefit from the corresponding services through the Site.
Bruzzo Dubucq does not necessarily collect sensitive personal data through the operation of the Site. By voluntarily providing sensitive personal data to the Site (for example by submitting an online application), the User expressly consents to their personal data being used as described in this Privacy Policy.
Article 3: Data retention period
Your personal information is retained by Bruzzo Dubucq for the period corresponding to the purpose of collection. This period is understood to cover the entire duration of the contractual relationship established between Bruzzo Dubucq and the User, plus FIVE (5) years for relationship management and prospecting purposes, without prejudice to retention obligations or limitation periods.
Article 4: Users' rights
In accordance with the GDPR on the protection of personal data, You have a number of rights regarding your personal information, in particular:
Right of access: You have the right to request access to the personal data We hold about you and to obtain a copy of it. In order to comply with your request, We will ask You to prove your identity.
Right to rectification: if You find that any of the data We hold about you is inaccurate or out of date, You may contact us to request its rectification.
Right to erasure: You have the right to request that your data be deleted from our systems. Unless We have a legitimate reason to continue processing or retaining it, We will do our best to comply with your request.
Right to data portability: under certain conditions, You have the right to receive all the personal data You have provided to Us in a structured format, and also to require us to transmit it to another controller where technically feasible.
Right to restriction of processing: You have the right to restrict the processing of your data if: You contest the accuracy of your personal data, until We have taken sufficient steps to correct or confirm its accuracy; We no longer need your personal data for the purposes of processing, but You need it to establish, exercise or defend legal claims; or You have objected to processing on grounds relating to your legitimate interests, pending verification of whether our compelling legitimate grounds for continuing processing override those interests.
Right to object to processing on grounds of legitimate interests.
Right to withdraw your consent at any time. For example, if You no longer wish to receive electronic marketing communications that You previously received, you may change the settings in your client area, use the “unsubscribe” link provided in our emails or contact us directly.
You may exercise these rights by contacting the data controller or the DPO designated by Bruzzo Dubucq:
By post: Cabinet Bruzzo Dubucq, 520, avenue Henri Mauriat, 13100 Aix-en-Provence
By email (data controller): cabinet@bruzzodubucq.com
By email (DPO): cd@bruzzodubucq.com
In the event of refusal or failure by Bruzzo Dubucq to respond within THIRTY (30) days of receipt of the request, the User is also informed that they have the right to lodge a complaint with the French data protection authority (Commission Nationale de l'Informatique et des Libertés, CNIL), either:
Via the following URL: www.cnil.fr;
By post (3 place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07).
Article 5: Security (Site and data)
The Site is provided “as is” and “as available” without warranty of any kind. Access to and use of the Site are at the User's own risk.
Risks for the User.
It is the User's responsibility to take all appropriate measures to protect their own data and/or software stored on their telephone and/or computer equipment against any damage, malfunction, virus, hacking, etc. (non-exhaustive list).
By using the Site, the User assumes all the negative consequences that it may cause.
Risks relating to the internet.
The technical performance of the mobile internet requires processing time in order to respond to, consult, query or transfer services.
The User declares that they are aware of and accept the limitations and issues of the internet, for which Bruzzo Dubucq, as operator of the Site, cannot be held liable (non-exhaustive list):
• The characteristics and limitations of the internet and, in particular, the functional characteristics and technical performance of the internet;
• Problems relating to connection to and/or access to the internet and/or websites;
• Problems relating to the availability and congestion of networks;
• Problems relating to network failure or saturation;
• Problems relating to transit times, access to information posted online, and response times for displaying, consulting, querying or otherwise transferring data;
• Risks of interruption;
• The lack of protection of certain data against possible misappropriation or hacking;
• The risks of contamination by any viruses circulating on said networks.
Bruzzo Dubucq undertakes to do everything in its power to protect its Users' personal data against any loss, destruction, alteration, or unauthorised access or disclosure. To this end, Bruzzo Dubucq implements appropriate technical and organisational measures, having regard to the nature of the data and the risks involved in its processing, to preserve the security and confidentiality of your personal data.
These measures may include practices such as limiting access to data to departmental staff, contractual safeguards when using an external service provider, privacy impact assessments, regular reviews of our practices and procedures, and physical and/or logical security measures (secure access, authentication process, backup copies, antivirus software, firewall, etc.).
Bruzzo Dubucq reserves the right to retain certain data in order to demonstrate, where necessary, the full performance of its contractual or legal obligations. The data thus retained will be limited to what is strictly necessary for the operation of the service.
Article 6: Contact
For any request for information concerning the personal data protection policy, the User may write to the data controller or the DPO of Bruzzo Dubucq at one of the following addresses:
By post: Bruzzo Dubucq, 520, avenue Henri Mauriat, 13100 Aix-en-Provence;
By email: cabinet@bruzzodubucq.com
By email (DPO): cd@bruzzodubucq.com