In this privacy policy, we explain what we do with the data we obtain about you via https://www.exotec.com/en-gb/. You should read this notice carefully. We comply with the requirements imposed by privacy legislation during our processing. This means, among other things, that:
- We clearly state the purposes for which we process personal data,
- We aim to limit the personal data we collect to those personal data necessary for legitimate purposes only,
- We first ask for your explicit consent to process your personal data in cases requiring your consent,
- We take appropriate security measures to protect your personal data and we request the same from the parties processing personal data for us,
- We respect your right to access, correct or delete your personal data upon request.
1. Purpose, data and retention period
We may collect or receive personal information for a certain number of reasons related to our business activities, including the following:
| Purpose | Data processed | Legal basis | Retention period |
| Contact – By phone, post, email and/or web forms | Surname, given name, email address, telephone number, location data, professional or employment-related information | Exotec’s legitimate interest | 2 years from the last contact |
| Subscription to the newsletter | Email address, language, country | Exotec’s legitimate interest | Until cancellation of the subscription |
| Compilation and analysis of statistics for website improvement | IP address, activity information including but not limited to browsing history, search history and information regarding a consumer’s interaction with a website, app or internet advertisement | Consent | 13 months |
| Management of clients/prospects | Surname, given name, email address, telephone number, job title, company, country | Performance of the agreement Legitimate interest | 3 years after the end of the commercial relationship or the last contact |
| Supplier management | Surname, given name, email address, telephone number, job title | Legitimate interest Legal obligation | 10 years for accounting and financial reasons |
2. Sharing with other parties
We only share these data with processors and with other third parties for which consent must be obtained.
Name: Exotec.com
Country: France
Purpose: Functional cookies
Name: WordPress
Country:
Purpose : Functional cookies
Name: YouTube
Country: Ireland
Purpose: Advertising cookies
Name: Google Analytics
Country: Ireland
Purpose: Statistics cookies
Name: Google
Country: Ireland
Purpose: Advertising cookies
Name: Bing
Country: Ireland
Purpose: Advertising cookies
Name: LinkedIn
Country: Ireland
Purpose: Advertising
Name: Pardot / Salesforce
Country: European Union
Purpose: Data cookies
Name: ZoomInfo
Country: United States
Purpose: Data
Some recipients of personal data are located outside the European Union. These third countries may be recognised by the European Commission as providing an adequate level of protection for personal data or may not be the subject of any adequacy decision.
In any case, appropriate safeguards are put in place to regulate these transfers of data outside the European Union, in accordance with the provisions of the General Data Protection Regulation and, in particular, standard contractual clauses (SCC) or binding corporate rules (BCR).
3. Cookies
Our website uses cookies. For more information on cookies, please see our Cookie Policy.
4. Security
We are committed to keeping personal data safe. We take appropriate security measures to limit abuse and unauthorised access to personal data. This ensures that only the necessary people have access to your data, that access to data is protected and that our security measures are regularly reviewed.
The security measures we use are:
- TLS/SSL
- Physical security measures for systems containing personal data.
- Security software
- Content Security Policy
- Permissions Policy
5. Third-party websites
This privacy notice does not apply to third-party websites connected via links on our website. We cannot guarantee that these third parties handle your personal data reliably or securely. We advise you to read the privacy statements of these websites carefully before using them.
6. Changes made to this privacy notice
We reserve the right to amend this privacy notice. You are advised to consult this privacy notice on a regular basis in order to be aware of any possible changes. In addition, we will actively inform you where possible.
7. Rights over your data
If you have any questions or would like to know what personal data we hold about you, you can contact us using the information below. You have the following rights:
- You have the right to know why your personal data are needed, what will happen to them and how long they will be kept.
- Right of access: you have the right to access your personal data that we process.
- Right of rectification: you have the right at any time to complete, correct or have your personal data deleted or blocked.
- If you give us your consent for the processing of your data, you have the right to withdraw this consent and have your personal data deleted.
- Right to transfer your data: you have the right to ask the controller for all your personal data and to transfer all data to another controller.
- Right to object: you can object to the processing of your data, unless we can demonstrate that there is a legitimate reason for such processing.
8. Conditions for the exercise of your rights
To exercise your rights or to ask any questions about the processing of your data, please contact: dpo.rgpd@exotec.com
Be sure to always clearly indicate your identity.
If, after contacting us, you feel that your data protection rights have not been respected, you may submit a complaint to the data protection authority.
9. Data Protection Officer (DPO)
We have appointed a Data Protection Officer (DPO) via the French data protection authority (CNIL). If you have any questions or requests regarding this privacy notice or for the Data Protection Officer, you can contact him/her at dpo.rgpd@exotec.com
Policy last updated on: 28/11/2023