Source: https://expleogroup.com/data-protection/
Timestamp: 2019-04-26 08:22:03+00:00

Document:
Data protection is very important to us. Accordingly, we process personal data only in accordance with the legal provisions for data protection and data security. Our employees are committed by us to confidentiality and secrecy. Our online offer is accessible without registration, i.e. without providing your personal data and can in principle be used without disclosing your identity or manually entering personal data. If you would like to order products or services or to obtain information, we ask for your personal information. The extent to which we process personal data is described in detail below.
These purposes are justified by our legitimate interest to make sure that you enjoy the experience when visiting our website and interacting with us. Finally, subject to your prior express consent, we may also use the personal data you share with us for marketing purposes and in particular to provide you with personalised offers. If processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR serves as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f GDPR serves as legal basis for processing.
Expleo Group is a global organisation. Whilst we have distinct legal entities of the group (e.g., country subsidiaries) in many parts of the world, our internal processes and infrastructure are international in scope and nature and generally cross-country borders. Accordingly, you should be aware that we may share your personal data with other entities of Expleo Group and transfer it to countries in the world where we have data centres or otherwise do business, including those located outside the European Union (EU). Such data transfers will benefit from the same level of protection. For the purposes set out below, entities of the group or entities of Expleo means any company within Expleo Group which is controlled directly or indirectly by Expleo Group S.A.S.
We may also be required – by law, legal process, litigation, and/or requests from public and governmental authorities within or outside your country of residence— to disclose your personal data. We may also disclose your personal data if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate. We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.
Like many organisations, Expleo Group may reorganise its business operations around the world from time to time, whether by buying new businesses or selling or merging existing businesses. This may involve us disclosing personal data to prospective or actual purchasers of parts of our business, or receiving personal data from potential sellers. It is our practice to seek appropriate confidentiality protection for personal data disclosed in these types of transactions.
Contact form We use a form on our website where you can contact us. We collect the following personal data: name, address, e-mail address, company, industry, position, telephone number, country, your message to us.
Order form Our training website contains order forms that you can fill out to request information, products or services. We collect the following personal data: number of participants, name, company, job title, e-mail address, telephone, postal address, text of the message.
Newsletter Assuming you have a separate agreement, we will also use the personal data stored by us to inform you about our products, services and events. On the website a form for the registration to our newsletter is provided, through which we collect the necessary personal data (name, e-mail address). We will only send you information by electronic means if you have expressly given your consent in writing or in the Double-Opt-In procedure.
During and after the webinar, statistics are transmitted to Expleo. If you participate in a webinar, ask or answer a question during the webinar, in addition to your credentials we will receive information about the duration of the course, interest in the webinar, the question asked, or answer to further customer support or to enhance the user experience. Optionally, you can edit documents and forms together with your contact person. An encrypted connection is established between you and the organizer of the webinar. The audio or video information transmitted during this session will not be recorded by us. By clicking on “Join” you confirm that you too will not be recording or making a screenshot of this session. You can end the session at any time by simply closing the browser window or exiting the program or app. If your contact person terminates the session, your session participation will be automatically terminated.
The personal data collected will be stored for as long as necessary for the purposes described.. As far as the data are subject to legal storage obligations under local legal requirements, they must be kept for six or ten years. Incidentally, the general storage principles described above apply.
When requesting content from our online offering, cookies are set for example to optimise communication times or for the anonymous, statistical evaluation of the use of our website. Cookies are small text files that are stored on the user’s computer when visiting a website. They can be automatically recognized and read during a current or next visit. If you leave our site and access third pages, the landing page may also set cookies. We are not legally responsible for the cookies. For the use of these cookies by third parties and the information stored therein, please compare the local privacy statements and the following statements.
Cookies, analysis tools and plug-ins are used, among other things. the name of the Internet service provider, requested files, IP address, access to individual pages, browser type, screen resolution, color depth, operating system, search terms and reference pages from which you have accessed our web pages. In the following, we also describe in detail which cookies, analysis tools and plug-ins we use, which data is processed and how you can deactivate the analysis tools.
You can prevent the installation of cookies by setting the browser software accordingly (see below). We point out, however, that in this case not all features of this website may be fully exploited. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on ( https://tools.google.com/dlpage/gaoptout?hl=de ).
We use third-party providers who advertise for us on the Internet. These third parties will identify your IP address and collect information about your visit to our website, which may also result in our advertisements being displayed when you visit other websites. This information is collected by means of a pixel tag (also called cookie and action tag). The information is not personal to us because it does not include your name, address, email address or other personal information. However, it may trace your IP address, which is widely considered a personal date.
If your personal data is based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR are processed, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or that you have an opposition directed against direct mail. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation. If you would like to make use of your right to object, a corresponding notification via all known communication channels, in particular also by e-mail, is sufficient to info@expleogroup.com. After exercising your right to object, we will not further process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing of the assertion, exercise or defense of Legal claims serves. This does not apply if the processing is for direct marketing purposes. Then we will not process your personal data for this purpose.
However, these decisions must not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests. With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and Contesting the decision is one.
When visiting our websites, we use the widely used SSL (Secure Socket Layer) method in combination with the highest encryption level supported by your browser. Whether an individual page of our website is transmitted in encrypted form can be recognized by the fact that the address line of the browser changes from “http: //” to “https: //” and to the closed representation of the key or lock symbol in the browser line. We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. The security measures described are based on Art. 6 para. 1 sentence 1 lit. f, Art. 32 GDPR. The data processed thereby is used for security purposes to safeguard our legitimate interests and the interests of third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR required.

References: Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 9
 Art. 9
 Art. 6
 Art. 32
 Art. 6