Privacy policy

Edikio by Evolis undertakes to respect the protection of privacy and to make every effort to ensure that the processing of personal data carried out complies with the General Data Protection Regulation (GDPR).

Purpose of the policy

This privacy policy informs you about the way in which any personal data collected is processed, whether when you subscribe to our services, when they are implemented or when you browse our website www.evolis.com (hereinafter referred to as "the Site") or any other of the Group's websites. It also reminds you of your data protection rights and how to exercise them. The present privacy policy may be supplemented by additional elements when you subscribe to one of our services. Evolis is therefore responsible for your personal data in its capacity as data controller.

Collecting data

We collect several types of personal data about you:

• The data you communicate to us, in particular when requesting information, registering for a newsletter, applying for a job or subscribing to any other service. The information required by Evolis to process your request is marked with an asterisk.
• Data generated as a result of your use of the Website and our Services, including cookies
• Data transmitted by third-party sources (Evolis Group subsidiaries, business partners, service providers)

These data are mainly :

• Contact data, such as name, e-mail address, postal address, profession and telephone number;
• Site connection data, such as user name and password;
• Data transmitted when applying for a job

Cookie management

Some of our web pages use "cookies". Cookies are small text files that can be read by a Web server of the Edikio by EVOLIS domain that placed the cookie on your hard drive.
A "cookie" is a small text file that can be used, for example, to collect information about website activity.

Types and purposes of cookies collected :

Our Site uses two types of cookies:

• Functional cookies. Each cookie is assigned an identifier that enables the sender to identify the terminal in which it is stored for the duration of the cookie's validity or recording period.
• Audience measurement cookies. These cookies make it possible to compile statistics on site traffic and to detect navigation problems in order to monitor and improve the quality of our services. We only collect and store information relating to site traffic via an analytical solution, in an anonymous manner.

Evolis uses the services offered by the American company Google Inc. The data collected via cookies is transmitted and stored by Google Inc. Google Inc. is a member of the Safe Harbor agreement and therefore ensures an adequate level of protection for personal data (Decision 2000/520/EC of 26-7-2000).
The Google Analytics service is used to count visitors and identify how they use the site. These cookies are deposited and read on the user's terminal equipment as soon as the user accesses a website using the "Google Analytics" service.
Cookies can be set directly via your Internet browser and, depending on the type of browser used, can be systematically refused during browsing or authorized on a case-by-case basis.
When browsing our site, you can choose whether or not to allow cookies to be deposited on your computer. If you choose not to use cookies, you may not be able to use certain functions on the site. You can refuse cookies at any time by clicking on this link.

Data usage

EVOLIS processes data for an explicit, legitimate and specific purpose, based on the performance of a contract, compliance with a legal obligation, consent or legitimate interest.
Depending on our relationship with you, we may use your personal data to :
- Managing customer relations ;
- Manage orders and provide technical support;
- Responding to your requests ;
- Follow your applications ;
- Improve and develop new products and services;
- Communicate about our company and our products;
- To facilitate and improve navigation on the Site;
- To comply with our legal obligations, resolve any disputes and enforce our contracts.

Where the processing of personal data is based on your consent, you have the right to withdraw your consent at any time.

Data sharing

Edikio by EVOLIS may be required to provide certain data to public authorities upon request, or as part of its legal and regulatory obligations. In such cases, only the information specifically requested will be communicated.
Edikio by EVOLIS may communicate your personal data to its commercial partners, technical service providers or group subsidiaries, whose intervention is strictly necessary to achieve one of the aforementioned purposes. Edikio by EVOLIS ensures that these third parties process your data in such a way as to guarantee its integrity, confidentiality and security.
Your data will not be transferred for purposes other than those described in this Policy, except with your express permission, which may be withdrawn at any time.

International data transfers

Edikio by EVOLIS may transfer your data internationally. In this eventuality, we ensure that transfers are made with the utmost respect for your rights.
This means that transfers outside the EU can only take place if these strict conditions are met:

• if the European Commission has issued an adequacy decision, recognizing the country's level of personal data protection as equivalent to that provided by EU legislation,
•  if the level of protection has not been recognized as equivalent by the European Commission, we rely either on a derogation applicable to the situation (explicit consent, necessary for the performance of a contract, etc.), or on the implementation of one of the appropriate guarantees to ensure the protection of your personal data (standard contractual clauses approved by the European Commission, binding corporate rules).

Data retention

Edikio by EVOLIS undertakes to ensure that the data collected is kept in a form that enables your identification for no longer than is necessary for the purposes for which the data is collected and processed.
This data may also be kept for the purpose of complying with a legal obligation or to demonstrate proof of a right or contract.

Data security

Edikio by EVOLIS implements appropriate technical and organizational measures, with regard to the nature of the data and the risks involved in processing them, to preserve the security and confidentiality of your personal data and, in particular, to prevent them from being distorted, damaged or accessed by unauthorized third parties.
These measures may include practices such as limited access to data by personnel authorized to access it by virtue of their functions, contractual guarantees in the event of recourse to an external service provider, privacy impact assessments, regular reviews of our privacy practices and policies and/or physical and/or logical security measures (secure access, authentication procedures, back-up copies, antivirus software, firewalls, etc.).

Your rights

In accordance with the Data Protection Act and the RGPD, you have the following rights:
- Right of access (article 15 RGPD) and rectification (article 16 RGPD)
- Right to erasure of your personal data (Article 17 RGPD
- Right to withdraw your consent at any time (article 13-2c RGPD)
- Right to limit the processing of your data (Article 18 RGPD)
- Right to object to the processing of your data (Article 21 RGPD)
- Right to portability of the data you have provided to us, where your data is subject to automated processing based on your consent or on a contract (Article 20 RGPD)
- Right to lodge a complaint with the CNIL (article 77 RGPD)

These rights may be exercised by sending a request by e-mail to dataprotection@evolis.com, or by post to EVOLIS, 14 avenue de 49070 Beaucouzé, indicating your contact details (surname, first name, address and a copy of a signed identity document).
To find out more about your rights, you can also visit the website of the Commission Nationale de l'Informatique et des Libertés (French Data Protection Authority) at http://cnil.fr.

Contact details for the Data Protection Officer (DPO)

If you have any queries about this policy, or if you wish to obtain information or exercise your rights concerning the processing of personal data managed by Edikio by EVOLIS, please contact our Data Protection Officer (dataprotection@evolis.com), enclosing a copy of proof of identity with your request.

Changes to this policy

Edikio by EVOLIS may modify its data protection policy from time to time. We will ensure that you are informed of such changes, in particular by means of a special notice on our Site.