The website www.wefold.fr is a corporate website. Under no circumstances is it an e-commerce website.
The purpose of this Privacy Policy is to explain why and how the personal data you provide to us is processed, in accordance with French Data Protection Act No. 78-17 of January 6, 1978, as amended, and Regulation (EU) 2016/679 of April 27, 2016 (GDPR).
Definitions
A few preliminary definitions :
Personal data : data is considered personal when it enables you to be identified directly or indirectly.
Data Controller : the person responsible for managing your personal data.
Purposes : the reasons why we collect your data (for example, to answer a question, send a newsletter or review your application).
Legal basis : the legal grounds on which we rely to collect your data. This may include a legal obligation, the performance of a contract, or your consent to the use of your data.
Transfer : any transfer of personal data to another country. A transfer may take place through any communication, copy, transmission or disclosure of personal data over a network, including remote access to a database or transfer from one medium to another (for example, from a computer hard drive to a server).
Who is the Data Controller ?
The Data Controller is WEFOLD TOURS, a simplified joint-stock company with share capital of €6,600,000, whose registered office is located at 16, rue des Yvaudières, 37700 Saint-Pierre-Des-Corps, France, and which is registered with the Tours Trade and Companies Register under number 544 800 857.
What data is collected ?
In the contact form : surname, first name, email address, your company, telephone number (landline or mobile), address, postcode and city.
In the job application form : surname, first name, address, postcode and city, landline and mobile telephone number, fax number, email address, photo and CV.
Fields marked with an * are mandatory. If they are not completed, we may not be able to process your request properly. All other data is optional.
Why do we collect this data ?
| Data types | Purposes | Legal basis for processing |
|---|---|---|
| Surname, first name, email address, company, telephone number, address, postcode and city | – Respond to your request / – Manage our external and financial communication | Contract : the use of this data is necessary to respond to your request. Consent : by completing the form, you consent to the use of your data. |
| Surname, first name, address, postcode and city, landline and mobile telephone number, fax number, email address, photo and CV | – Review your application within Groupe Guillin | Contract : processing is necessary in order to take pre-contractual steps at your request. Consent : by applying, you consent to the review of your data. |
How long do we keep your data ?
| Data relating to the contact form | Data relating to the recruitment form | ||
|---|---|---|---|
| Successful recruitment | Unsuccessful recruitment | ||
| Retention in our active database | 3 years from your request | For the duration of the employment contract | 2 years from the last contact with the data subject |
| Archive | 5 years* | 5 years* | NO – the data is deleted |
*This data is archived for 5 years for evidential purposes, in accordance with the French Civil Code and Commercial Code, subject to the defence of legal rights.
Who has access to my data ?
Within the scope of their respective responsibilities and for the purposes described above, the following persons may have access to your data :
- Regarding data collected via the contact form and depending on the nature of your request: the marketing department, sales department, finance department of WEFOLD TOURS, and where necessary, the IT department and relevant departments within Groupe Guillin.
- Regarding data collected via the recruitment form: authorized personnel within the WEFOLD TOURS Human Resources department, Management, and the department responsible for recruitment.
- – For all data :
- Authorized personnel of our service providers, such as the hosting provider and website maintenance provider, acting on the instructions of the Data Controller
- Third parties where we receive a request from a judicial or public authority duly authorized by law.
What are my rights ?
In accordance with applicable regulations, you have several rights :
- the right to obtain information about and access your personal data,
- the right to rectify your data,
- the right to object to the processing of your data by withdrawing your consent,
- the right to erasure, meaning the deletion of your data,
- the right to data portability, meaning the right to receive a copy of your data in a structured, commonly used and machine-readable format,
- the right to object to profiling,
- the right to lodge a complaint with the CNIL at the following address : https://www.cnil.fr/fr/plaintes,
- the right to provide instructions regarding the handling of your data after your death.
You may exercise your rights by writing to :
Groupe Guillin
ZI Avenue du Maréchal de Lattre de Tassigny
25290 ORNANS France
or by sending an email to contactrgpd@groupeguillin.fr.
We will reply as soon as possible and no later than one month from receipt of your request.
Where there is reasonable doubt as to your identity, we may request proof of identity.
In such a case, a copy of your ID document will be kept for one year where the right of access or rectification is exercised, or for three years where the right to object is exercised, in accordance with the provisions of the French Criminal Code.
Is data transferred outside the European Union ?
Your data is not transferred outside the European Union.
Cookies and trackers
A cookie is a text file stored on your device (including a computer, tablet or mobile phone) when you browse a website. We use cookies for statistical purposes (Google Analytics). Cookies have a lifespan of 13 months. Information collected through cookies is retained for 25 months.
What level of protection is applied ?
We have implemented appropriate technical and organizational measures to ensure a level of security proportionate to the risk and to prevent your data from being altered, modified, damaged or accessed by unauthorized third parties. In this respect, our premises are secured and authorized personnel handling your personal data are trained on these matters and committed to the strictest confidentiality.
Changes to this policy
We reserve the right to amend this policy in order to comply with changes in applicable legislation.