Personal data
The Centre Technique des Industries Aérauliques et Thermiques (hereinafter referred to as "CETIAT”) has adopted this personal data management and protection policy to ensure a suitable level of protection of personal data concerning natural persons in accordance with Law No. 78-17 of January 6, 1978 amended, known as the French Data Protection Act, and the European General Data Protection Regulation No. 2016/679 of 25 May 2016, known as GDPR.
For further information on personal data protection, please consult the website of the French Data Protection Authority, CNIL, accessible at the following address: www.cnil.fr.
This privacy policy concerns the personal data of the following natural persons:
Some Personal Data are mandatory and others optional, as indicated in the collection forms.
The Personal Data collected are necessary to communicate and process the request submitted by the Data Subject to CETIAT or to process and track their order, depending on the form used.
These Personal Data are stored by CETIAT for however long it takes to process the request or order. They are then archived for the applicable purposes and for the mandatory period to meet accounting obligations incumbent on CETIAT for all orders and, more generally, to handle any disputes involving a Co-contractor or a Prospect.
The collection of such data is therefore subject to the consent provided by the Data Subject.
1.2. CETIAT uses cookies on its Sites to ensure the correct operation of the site well as for audience measurements and statistical analysis.
Full information about cookies and how to refuse them can be found here.
1.3. When registering to receive a CETIAT publication (newsletters, intelligence updates etc.), the registered Data Subject's email address is collected and stored until they unsubscribe.
It is possible to unsubscribe from these publications at any time, using the link in the email sent.
After unsubscribing, the email address will be deleted by CETIAT unless it is kept for other purposes, especially if it is the contact email address of a CETIAT Co-contractor.
The legal basis for this treatment is the user’s consent.
2. Personal Data of natural persons - Co-contractors or employees of a Co-contractor
CETIAT collects the first and last names, occupation, name of employer and work email address or phone number of natural persons employed by its Co-contractors and, where applicable, the bank details of natural-person Co-contractors (in particular trainers and natural persons participating in training on a personal basis).
These Personal Data may be collected either directly from the Data Subject or through the relevant Co-contractor.
The Personal Data collected are necessary for the conclusion and execution of contracts between CETIAT and its Co-contractors by the Data Subject, for the management and monitoring of contractual relationships between CETIAT and its Co-contractors and for the transmission of commercial information concerning CETIAT services to Co-contractors.
These Personal Data are kept by CETIAT for the request processing period and, where applicable, the execution of the contract and monitoring of the contractual relationship. They shall then be archived for the time needed to cover any disputes involving a Co-contractor and for the purposes of such disputes.
The legal basis for this data processing is the legitimate interest of CETIAT and the Co-contractor concerned.
3. Personal Data of natural persons employed by Prospects
CETIAT collects the full name, occupation, name of employer and work email address or phone number of the natural persons employed by its Prospects.
These Personal Data are collected by CETIAT directly from the Data Subject at the time a contact request is made by the Data Subject.
The Personal Data collected are required to answer requests for information on behalf of the Prospect and to forward information and commercial requests concerning CETIAT services intended for the Prospect.
These Personal Data are stored by CETIAT for a period of five years from their collection by CETIAT or the last contact made by the Prospect.
The legal basis for this processing is the legitimate interest of CETIAT.
4. Personal Data of Participants in training
CETIAT collects the full name, occupation, name of employer, work email address or phone number and professional qualifications of people attending training courses.
These Personal Data may be collected either directly from the Participant or through the Co-contractor.
If their Personal Data are collected indirectly, CETIAT shall inform the Participant on the first communication and no later than one month after the date of collection.
The Personal Data collected are required for the organisation and execution of the training, issuing a training certificate and a satisfaction survey to the participants and transmitting commercial information concerning CETIAT services to Co-contractors.
These Personal Data are stored by CETIAT for the duration of the training session and, where applicable, while the contractual relationship with the Co-contractor is monitored. They shall then be archived for the time needed to cover any disputes involving a Participant in training or a Co-contractor and for the purposes of such disputes.
The legal basis for this data processing is the legitimate interest of CETIAT and the Co-contractor concerned.
5.Candidate Personal Data
Personal Data relating to candidates is subject to a separate Privacy Policy accessible on the recruitment website: www.talentdetection.com.
Personal Data may also be transmitted to the co-organisers of events organised by CETIAT and to external providers involved in the processing concerned (training organisations, trainers, mailing service providers etc.).
The Personal Data collected may also be transmitted by CETIAT to the duly authorised judicial or administrative authorities, pursuant to a legal or regulatory obligation or a decision of an administrative or judicial authority.
CETIAT will never forward Personal Data to a third party for commercial purposes.
You may exercise your rights, subject to providing proof of identity, by writing to us at CETIAT, 25 Avenue des Arts, BP 52042, 69603 VILLEURBANNE Cedex FRANCE, or by e-mail to info_rgpd@cetiat.fr.
You also have the right to file a complaint with the French Data Protection Authority, CNIL.
The website www.cetiat.fr uses third party services. These features use cookies set by these services. The site offers a function enabling you to manage your cookie preferences.
For further information on personal data protection, please consult the website of the French Data Protection Authority, CNIL, accessible at the following address: www.cnil.fr.
This privacy policy concerns the personal data of the following natural persons:
- employees or representatives of CETIAT customers, suppliers, member organisations or partners,
- participants in CETIAT training,
- and, in general, any natural person outside CETIAT.
Definitions
For the purposes of this privacy policy, the words listed below will take the following definitions when initialled with capital letters.- Candidate: refers to a natural person applying for employment at CETIAT, either via our recruitment page using the TalentDetection software, or directly by post, electronically or through a third party mandated by CETIAT for this purpose (recruitment firms, professional social media, employment search websites etc.).
- Co-contractor: any legal person under private or public law or any natural person, acting in a professional capacity, who has concluded a contract with CETIAT, including customers, suppliers, service providers, subcontractors, natural persons who sign a training agreement with CETIAT directly and on their own behalf etc.
- Personal Data: any information relating to an identified or identifiable natural person (hereinafter referred to as the "Data Subject”).
- Prospect: any natural or legal person who is potentially a future client of CETIAT.
- Service(s): all the services offered by CETIAT.
- Sites: the institutional websites published by CETIAT.
- Participant: any natural person enrolled in CETIAT training.
Identity of the Data controller
Personal Data are collected and processed by the Centre Technique des Industries Aérauliques et Thermiques (CETIAT), 25 Avenue des Arts, BP 52042, 69603 VILLEURBANNE Cedex (FRANCE), SIRET No.775 686 967 00024.Personal Data collected and processed by CETIAT
1. Personal Data collected on CETIAT Sites
1.1. If a natural person requests information, registers for an event or places an online order with CETIAT, CETIAT collects their last name, first name, occupation, name of employer, work phone and work e-mail address.Some Personal Data are mandatory and others optional, as indicated in the collection forms.
The Personal Data collected are necessary to communicate and process the request submitted by the Data Subject to CETIAT or to process and track their order, depending on the form used.
These Personal Data are stored by CETIAT for however long it takes to process the request or order. They are then archived for the applicable purposes and for the mandatory period to meet accounting obligations incumbent on CETIAT for all orders and, more generally, to handle any disputes involving a Co-contractor or a Prospect.
The collection of such data is therefore subject to the consent provided by the Data Subject.
1.2. CETIAT uses cookies on its Sites to ensure the correct operation of the site well as for audience measurements and statistical analysis.
Full information about cookies and how to refuse them can be found here.
1.3. When registering to receive a CETIAT publication (newsletters, intelligence updates etc.), the registered Data Subject's email address is collected and stored until they unsubscribe.
It is possible to unsubscribe from these publications at any time, using the link in the email sent.
After unsubscribing, the email address will be deleted by CETIAT unless it is kept for other purposes, especially if it is the contact email address of a CETIAT Co-contractor.
The legal basis for this treatment is the user’s consent.
2. Personal Data of natural persons - Co-contractors or employees of a Co-contractor
CETIAT collects the first and last names, occupation, name of employer and work email address or phone number of natural persons employed by its Co-contractors and, where applicable, the bank details of natural-person Co-contractors (in particular trainers and natural persons participating in training on a personal basis).
These Personal Data may be collected either directly from the Data Subject or through the relevant Co-contractor.
The Personal Data collected are necessary for the conclusion and execution of contracts between CETIAT and its Co-contractors by the Data Subject, for the management and monitoring of contractual relationships between CETIAT and its Co-contractors and for the transmission of commercial information concerning CETIAT services to Co-contractors.
These Personal Data are kept by CETIAT for the request processing period and, where applicable, the execution of the contract and monitoring of the contractual relationship. They shall then be archived for the time needed to cover any disputes involving a Co-contractor and for the purposes of such disputes.
The legal basis for this data processing is the legitimate interest of CETIAT and the Co-contractor concerned.
3. Personal Data of natural persons employed by Prospects
CETIAT collects the full name, occupation, name of employer and work email address or phone number of the natural persons employed by its Prospects.
These Personal Data are collected by CETIAT directly from the Data Subject at the time a contact request is made by the Data Subject.
The Personal Data collected are required to answer requests for information on behalf of the Prospect and to forward information and commercial requests concerning CETIAT services intended for the Prospect.
These Personal Data are stored by CETIAT for a period of five years from their collection by CETIAT or the last contact made by the Prospect.
The legal basis for this processing is the legitimate interest of CETIAT.
4. Personal Data of Participants in training
CETIAT collects the full name, occupation, name of employer, work email address or phone number and professional qualifications of people attending training courses.
These Personal Data may be collected either directly from the Participant or through the Co-contractor.
If their Personal Data are collected indirectly, CETIAT shall inform the Participant on the first communication and no later than one month after the date of collection.
The Personal Data collected are required for the organisation and execution of the training, issuing a training certificate and a satisfaction survey to the participants and transmitting commercial information concerning CETIAT services to Co-contractors.
These Personal Data are stored by CETIAT for the duration of the training session and, where applicable, while the contractual relationship with the Co-contractor is monitored. They shall then be archived for the time needed to cover any disputes involving a Participant in training or a Co-contractor and for the purposes of such disputes.
The legal basis for this data processing is the legitimate interest of CETIAT and the Co-contractor concerned.
5.Candidate Personal Data
Personal Data relating to candidates is subject to a separate Privacy Policy accessible on the recruitment website: www.talentdetection.com.
Recipients of Personal Data
The Personal Data collected are accessible to CETIAT employees in internal departments responsible for their processing.Personal Data may also be transmitted to the co-organisers of events organised by CETIAT and to external providers involved in the processing concerned (training organisations, trainers, mailing service providers etc.).
The Personal Data collected may also be transmitted by CETIAT to the duly authorised judicial or administrative authorities, pursuant to a legal or regulatory obligation or a decision of an administrative or judicial authority.
CETIAT will never forward Personal Data to a third party for commercial purposes.
Personal Data protection
CETIAT shall deploy all appropriate physical, technical and organisational measures to restrict access to Personal Data and to ensure a level of security appropriate to the needs, risks, costs and purposes of processing Personal Data, in particular:- measures to ensure the continued confidentiality, integrity, availability and security of Personal Data processing systems and services,
- measures to restore the availability of and access to Personal Data within an appropriate time frame in the event of a physical or technical incident,
- procedures for regular testing, analysis and evaluation of the effectiveness of technical and organisational measures to ensure the safety of data processing.
Transfer outside the European Union
CETIAT does not transfer Personal Data outside the European Union. However, it is possible that the Personal Data processed by CETIAT may be communicated to external subcontractors and service providers who may transfer the Data outside the European Union, to countries which may enforce Personal Data protection regulations that provide a lesser degree of protection than those in force in your country of residence. In this regard, CETIAT will ensure that Personal Data are transferred in a secure framework, either to countries with an "adequate” degree of protection according to the French Data Protection Authority, CNIL, or to entities (affiliated companies or second-degree subcontractors) that have signed the standard data protection agreements of the European Commission.Your rights
In accordance with the law, you have a right to access, rectify, delete and oppose the use of your data on legitimate grounds.You may exercise your rights, subject to providing proof of identity, by writing to us at CETIAT, 25 Avenue des Arts, BP 52042, 69603 VILLEURBANNE Cedex FRANCE, or by e-mail to info_rgpd@cetiat.fr.
You also have the right to file a complaint with the French Data Protection Authority, CNIL.
The website www.cetiat.fr uses third party services. These features use cookies set by these services. The site offers a function enabling you to manage your cookie preferences.