PRIVACY POLICY

Purpose of the privacy policy
The purpose of this Privacy Policy is to inform visitors to the noblessa site about the use of their personal data.

What is noblessa's role? 

In managing our website, we act as a data controller. As such, we decide why (purposes) and how (means) your data is used.

How is your personal data collected? 

We collect the Personal Data that you communicate to us directly via forms.
Some of your data is also collected automatically, using cookies. To find out more, see our cookies policy.

For what purposes and for how long do we use your personal data?

The table below summarises the purposes for which noblessa may use your personal data. 

Name of processing Purpose Legal basis(s) Data concerned Retention period
Site forms (contact, catalogue download, making an appointment, requesting a quote, etc.) To process your request and provide you with the information or services requested. Legitimate interest: to manage interactions with the public (customers and prospects) and to enable us to respond to requests made to us. 
Identity and contact data;

Data relating to professional life.

3 years from the last contact in the active database; and

Archiving for a period of 5 years.

Recruitment To consider and manage applications. 
Pre-contractual measures;

Consent to keep CVs in a library (CVthèque).

All information contained in the CV, in particular : 

- Identity and contact details; 

- Data relating to professional life; 

- Data relating to personal life. 

3 months after the last contact or up to 2 years with consent.
Depositing cookies (for more information, please consult the site's cookie policy) 
To ensure the operation of the website and its security;

To obtain statistics;

To offer personalised advertising.

For functional cookies: legitimate interest in offering online content, ensuring the smooth running of the site and making it secure;

Optional cookies: consent.

Browsing data ;

Data identifying the equipment used to browse the site.

Tracer lifetime: 13 months; and

Data retention: maximum 25 months.

Management of rights requests Receiving, responding to and documenting rights requests. Legal obligation: RGPD. Identity and contact data. 
Duration required to process the request; and

Archiving for a period of 5 years.

Who are your personal data intended for? 

Within noblessa (internal recipients)

Your personal data is processed by authorised noblessa staff members.

Outside noblessa (external recipients)

Several categories of third parties listed below are likely to have access to your Personal Data. Only Personal Information that is strictly necessary is transmitted to them.

Our IT service providers are involved in the hosting and maintenance of the website.
Our marketing service providers (marketing agency and referencing management) and cookie deposit tools.
We ensure that, with regard to Personal Data, these sub-contractors contractually undertake to implement a level of protection equivalent to ours and in compliance with the Regulations.

Noblessa undertakes not to pass on your Personal Data to third parties unless :

You have given your prior consent to the sharing of your Personal Data with third parties,
The sharing of your Personal Data with this third party is necessary for the provision of the products or services requested,
A competent judicial or administrative authority requires that the Data be transmitted to it.

Transfers outside the EU

We endeavour to keep your Personal Data within the European Union, however some of the services we use involve potential transfers. As we are concerned about the security and confidentiality of your Data, we inform you that when your Data is transferred outside the EU, we ensure that it is transferred to :

Either to a country recognised by the European Commission as providing an adequate level of protection;
Or to a country that does not offer an adequate level of protection but whose transfer is permitted, in particular by being governed by the European Commission's standard contractual clauses, which the CNIL has recognised as providing an adequate level of protection for the privacy and fundamental rights of individuals.

What are your rights concerning your personal data?

a) Right of access
You may request and obtain information about the personal data we hold about you.

b) Right of rectification
You have the right to request the correction of inaccurate or incomplete personal data.

c) Right to erasure
Also known as the "right to be forgotten", this allows you to request the deletion of your personal data unless the data is to be retained:

To comply with a legal obligation,
to establish, exercise or defend legal claims.

d) Right to limit processing
This right allows you to request that the use of your personal data be restricted in certain circumstances:

You have requested that your data be rectified, in which case processing may be limited for the time required to carry out the necessary checks;
The processing is unlawful and you object to the deletion of your data;
The data controller no longer needs your data, but it is necessary for you to establish, exercise or defend a legal claim;
You have objected to the processing and we check whether the legitimate reasons being pursued override your reasons.

e) Right to data portability
You may receive your personal data in a structured and machine-readable format, and have it transferred to another organisation.

f) Right to object
You have the right to object to the processing of your personal data on legitimate grounds, unless there are compelling legitimate grounds for further processing.

Some of the processing of your personal data is subject to your consent. You may withdraw your consent at any time.

g) Right to make a complaint to the CNIL
You also have the right to lodge a complaint with the CNIL, the supervisory authority (www.cnil.fr).

How to exercise your rights 

a) How to exercise your rights 
You can send your requests by the following means:

noblessa,17 AV DE STRASBOURG 68350 BRUNSTATT-DIDENHEIM
by clicking on this link

b) Response time 
Noblessa has a period of one month from receipt of your request to reply. This period may be extended by two months due to the complexity of your request and the number of requests made to us, in which case you will be informed.

Changes to the policy
This privacy policy may be updated from time to time.

Date of last update: 05/02/2024.