Privacy Policy
Data Protection
CALYP is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information in compliance with GDPR.
Preamble
Aware of the importance of ensuring data confidentiality, CALYP makes strong commitments regarding the protection of personal data. This Data Protection Policy aims to inform you about the commitments and practical measures taken by CALYP to ensure the respect of your personal data.
This Data Protection Policy may evolve according to the legal and regulatory context as well as opinions rendered by the French Data Protection Authority (CNIL) or the European Data Protection Board. This privacy policy presents how we process your personal data and the way in which we create, organise and implement our online and offline activities.
We attach the greatest importance to the respect of the privacy and individual data of our users. We are committed to respecting and making available the tools and simplified procedures allowing you to exercise your rights in accordance with the "Information Technology and Civil Liberties" Law No. 78-17 of 6 January 1978, as amended, and Regulation No. 2016/679, known as the General Data Protection Regulation (GDPR).
Data Collected and Purposes of Collection
The specific practices described in this privacy policy statement only concern the aforementioned website. If external links from other partner bodies or entities linked to CALYP are present on our website, we recommend that you examine their own privacy policy statements. We cannot be held responsible for their policies and content.
In general, you can browse our website without disclosing any personal information. The only personal data we collect and retain is that which you provide when you fill in the registration form. As part of the registration form, we may collect your:
- Last Name
- First Name
- Phone Number
- Postal Code
Your data is only used by CALYP to process your request.
In accordance with Article 5 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, we process personal data lawfully, fairly and in a transparent manner with regard to the data subject. We collect only data that is adequate, relevant and limited to what is necessary for the purposes of CALYP's missions.
Information on the Requirement to Provide Data
For contractual purposes and to carry out our mission, the transmission of certain of your personal data is a condition for the conclusion of the contract that will bind CALYP's services with its future clients.Data Retention
CALYP retains non-customer user data for prospecting purposes for a period of three years from their collection or last contact.
Data that you may transmit to us as a client within the framework of the Energy Savings Certificates financing scheme will be processed once by CALYP and its recipients (your installer partner specifically involved in your works and the National Centre for Energy Savings Certificates) in accordance with the decrees governing this scheme. Data will be retained in the active database for the duration necessary for the preparation of administrative files, then transferred within 6 months to an intermediate database with limited access for a period of 6 years from submission, as required by the National Centre for Energy Savings Certificates.
Data Transfers
For the services provided, your data is not transferred outside the European Union and adequate countries within the meaning of the GDPR, except for standard contractual clauses signed with our subcontractors located outside the European Union, in accordance with Articles 44 to 49 of said regulation.
In the case of financing through the Energy Savings Certificates scheme, and with your consent, your data is only transferred to our partners and subcontractors (installers, manufacturers) with whom we carry out financing offers linked to the Energy Savings Certificates scheme.
Security
CALYP ensures the security of your personal data by implementing enhanced data protection using physical and logical security measures.Your Rights
Under the Information Technology and Civil Liberties regulations, you have the following rights in relation to all data concerning you:
- Right of access -- obtain confirmation of whether your data is being processed
- Right of rectification -- correct inaccurate or incomplete data
- Right of erasure -- request deletion of your data
- Right to restriction of processing -- limit how your data is used
- Right to portability -- receive your data in a structured, machine-readable format
- Right to withdraw consent -- revoke previously given consent at any time
- Right to define post-mortem instructions -- specify what happens to your data after your death
These rights may be exercised by contacting the data protection officer:
- By email: contact [at] adelinetoniutti [dot] com
- By post: 153 Avenue Jean Lolive, 93500 PANTIN, France (accompanied by a copy of a signed identity document)
You may also file a complaint with a supervisory authority, the French Data Protection Authority (CNIL).
Right to Object
In accordance with the provisions of Article 21 of the General Data Protection Regulation (GDPR), Regulation EU No. 2016/679 of 27 April 2016, you have the right to object. You may at any time object to the processing of your data for commercial prospecting purposes by contacting us at contact [at] adelinetoniutti [dot] com.
If your objection request does not relate to commercial prospecting, your request must specify the reasons relating to your particular situation. CALYP may justify its refusal for the following reasons:
- There are legitimate and compelling grounds for processing the data, or the data is necessary for the establishment, exercise or defence of legal claims
- You have given consent -- you must then withdraw this consent and not object
- A contract binds you to CALYP
- A legal obligation requires us to process your data
- The processing is necessary to protect the vital interests of the data subject or another natural person