NOTICE ON THE PROTECTION OF PERSONAL DATA SERA

Why have we issued a notice on the protection of personal data?

SERA, like the GERARD PERRIER INDUSTRIE group to which it belongs,attaches great importance to respect for the privacy of individuals. This is why SERAundertakes to manage and protect everyone’s personal data responsibly and in accordance with the applicable legislation.

The purpose of this notice on the protection of personal data is to inform you of the way in which the personal data collected by SERA is processed within the framework of General Regulation (EU) 2016/679 of 27th April 2016 on the Protection of Data and the amended French Data Protection Act of 6th January 1978.

This notice is intended to specifically explain to you which personal data is covered and the use that may be made of it.

What is personal data?

Personal data means any information relating to a natural person who can be identified or is identifiable, directly or indirectly, by means of this data alone or in correlation with other data. Personal data is considered to be, for example, a surname, a first name, a postal or email address, a telephone number or even an IP address.

For more information on what personal data, processing personal data or the key principles of data protection are, please visit the CNIL website (www.cnil.fr).

Who is the personal data controller?

Your personal data is processed by a legal person, SERA, simplified joint-stock company (French SAS) with capital of 500 000 €, entered in the Lyon Trade & Companies Register with the no. 490 224 045, located at 60 ZAC du Crouloup 69380 Chasselay. Therefore, SERA is the data controller, i.e. the body that determines the purposes and means of processing your personal data.

How does SERA manage and use their employees’ data?

SERA only collects, uses and stores their employees’ personal data (including for temporary personnel and trainees) where this is necessary, in particular for:

Managing their employees’ careers, from recruitment to departure,
Payroll processing,
Updating this data,
The protection of premises (sites and infrastructures), employees and company equipment by means of access control, video and electronic surveillance,
Ensuring the compliance of processes with contractual or legal obligations.

The personal data collected includes specifically:

Civil status, identity: surname, usual name, first name, sex, date of birth, place of birth, social security number, photo-identity, address, telephone no., emergency telephone no., nationality, email address. For foreign employees: type of residence permit, validity date, residence permit no.,
Personal life: marital status, children and dependants, mutual scheme, level of qualifications, diplomas/certificates/degrees,
Information relating to the employment contract and pay: nature of the contract, start date, years of service, status, level/scale/coefficient or position/coefficient, job description, working hours, salaries/wages, bonuses, income tax rate, bank details, holidays and time off in lieu, hours worked,
Information relating to the employment relationship: accreditations, technical qualifications, skills, education/training, disciplinary measures, release date, business trips, medical leave (illness, maternity, paternity), workplace accidents, occupational diseases, medical examination by the company doctor, exposure monitoring.

How does SERA use the personal data of people other than its employees?

SERA only collects, uses and stores the personal data for people who not group employees where this is necessary, in particular for:

Updating the files for job applicants, clients, suppliers, shareholders and investors, as well as for improving relations with these groups,
Optimising internal processes and the proper provision of services, deliveries of goods and services,
The protection of premises (sites and infrastructures), employees and company equipment by means of access control, video and electronic surveillance,
Processing forms appearing on the SERA’s website (newsletter subscriptions, event registrations, contact requests, applications or responses to job advertisements, etc.),
Fulfilling contractual or legal obligations.

The personal data collected includes specifically:

Civil status, identity: surname, usual name, first name, sex, address, telephone no., email address,
Professional information: position, company, professional email address, telephone number.

Who has access to your personal data?

The personal data collected is only accessible to a limited number of people belonging to SERA or the GPI Group’s internal departments, who are specially trained for this purpose, based on the purpose of data processing and demonstrated need and only in clearly defined cases. In exceptional cases, personal data may be passed on to subcontractors guaranteeing a level of data protection comparable to that of SERA.

For how long is your personal data stored?

Personal data is stored for the period necessary to achieve the purpose of data processing and contractual obligations, in accordance with the legal storage periods.

All personal data, the storage of which is no longer necessary, will be deleted and securely disposed of.

What rights do you have in relation to your personal data?

In accordance with the applicable regulation and under the conditions defined therein, at any time, you can exercise your:

Right of access: you can request information from SERA regarding the processing to which your personal data is subjected and a copy of the aforementioned data.
Right to rectification: you can require the rectification of inaccurate personal data where the personal data stored by SERA is incorrect or incomplete.
Right to erasure: you have the right to obtain from SERA the erasure of your personal data where one of the grounds set out in the regulation applies (the data is no longer necessary, withdrawal of your consent for the processing based on the latter, etc.).
Right to object: you have the right to object to the processing of your data, at any time.
Right to personal data portability: you have the right to receive the personal data relating to you in a usable format.
Right to restriction of processing: you can require SERA to suspend processing of your personal data where one of the grounds set out in the regulation applies (the accuracy of your personal data is contested, etc.).
Under the conditions defined by the regulation, you also have a right to define the general or specific directives relating to the fate of your personal data after your death.
Where your personal data is processed with your consent, you can withdraw your consent at any time. However, you are informed that processing commencing prior to this withdrawal shall remain valid.

How can you exercise your rights?

You can exercise your rights by contacting our Data Protection Officer, with proof of your identity, by:

Email at the address donneespersonnelles(at)gerard-perrier.com
Sending a letter addressed to GERARD PERRIER INDUSTRIE – DPO – Airparc – 160 rue de Norvège – CS 50009 – 69125 Lyon Aéroport Saint-Exupéry

You can, at any time, submit a request to stop receiving communications from SERA, by clicking on the unsubscribe link in the email or by simply stating this in response to the email in question.

SERA pays the greatest attention to the protection of personal data. Nevertheless, should you believe its processing infringes your rights or that your request has not been fulfilled, you have the option of submitting a complaint to the Commission nationale de l’informatique et des libertés (CNIL) (the French Data Protection Authority).

Which cookies are used on the SOTEB’s website?

When browsing the SERA’s website, cookies are used to improve the interactivity as well as the functionality of websites.

When you visit the website for the first time, a banner informs you of the presence of these cookies and asks you to make a choice. They are only stored if you accept them or when you continue browsing by visiting a second page of the website. You can be notified of and configure cookies in your browser to accept or refuse them at any time.

The personal data collected by these cookies relates to the IP address of the person visiting the website for the Google Analytics monitoring tool.

The personal data collected by means of cookies is stored for a period of thirteen (13) months from the date of your first visit to the website.

Amending the notice on the protection of personal data

SERA reserves the right to amend or, more generally, to update the provisions of this notice at any time, without prior notice. You are, therefore, encouraged to consult it regularly.