1. Home >
  2. PRIVACY POLICY

PRIVACY POLICY

I - Objectives of our privacy policy:

 

Confidentiality and security are of the utmost importance to Aerospace Valley. We make it available to you so that you have clear and transparent information on the processing carried out in the context of the services offered on our site. We ensure that our technical and organisational measures respect your rights relating to data protection. To this end, we comply with the regulations in force and in particular with the General Data Protection Regulation (hereinafter “GDPR”), which came into force on 25 May 2018, which completes the legislation on the protection of personal data.

Below you will find our rules regarding the management, processing and storage of personal data submitted in the context of our services.

 

II - Scope of application:

 

 

In order for you to fully understand the information you will be given, Aerospace Valley has summarised the essential concepts for you to understand.

What is personal data?

Personal data, in the sense of article 4 (1) of the RGPD, is any information relating to a natural person identified or identifiable by the combination of several pieces of information (identity details, location details, religious opinions, browsing history, etc.).

You are identified when you provide information such as your last name and first name. In the absence of this information, you can be identified when you provide:

  • An identifier (e.g. pseudo, IP address)
  • Your contact details (e.g. email address, telephone number)
  • An identification number (e.g. contact form number)

 

What is the management, processing?

 

A processing of personal data is, within the meaning of Article 4 (2) of the GDPR, any operation or set of operations which is performed upon personal data or sets of personal data, such as

  • Collection
  • Storage
  • Recording
  • Transmission
  • ...

Please note that any action relating to your personal data constitutes processing of such data.

The controller is, within the meaning of Article 4 (7) of the GDPR, the person who determines, alone or jointly, the purposes of each processing operation and the means of processing.

 

         Data controller and processor

The controller is, within the meaning of Article 4(7) of the GDPR, the person who alone or jointly determines the purposes of each processing operation and the means of processing.

The processor is, within the meaning of Article 4 § 8, the natural or legal person, public authority, department or other body which processes personal data on behalf of the controller.

In its capacity as publisher of the website, Aerospace Valley is acting here as a controller.

In its capacity as employer, Aerospace Valley is acting here as a data controller.

 

         The legal basis for data processing

Aerospace Valley collects your personal data for the purposes described in point 1 of this privacy policy. Aerospace Valley collects and processes your personal data only on one of the following legal grounds:

  • Consent of the data subject: subject to having obtained your consent, Aerospace Valley is authorised to collect and process your personal data.
  • Performance of a contractual relationship with Aerospace Valley: your data is necessary for the performance of a contract to which you have subscribed or to which you wish to subscribe, such as the subscription to our Newsletter.

On this contractual legal basis, any refusal to communicate your personal data will prevent the conclusion and execution of the contract.

  • Fulfilment of a legal obligation: your data is necessary to fulfil a legal obligation such as the rules applicable to the fight against fraud and/or terrorism.
  • Legitimate interest of the data controller: Aerospace Valley may process your personal data for the purpose of pursuing its legitimate interest, in particular to:

E.g.: to carry out statistics, to put members in touch with each other

 

How do we collect your consent?          

By registering for our services and/or filling in a contact form on our website, you agree and accept that we may collect, process, store and/or use the personal data transmitted, in accordance with the rules set out below.

By giving us your consent, you also retain your rights of access and communication, rectification, portability, as well as the right to erase or “forget” your personal data. You may withdraw your consent at any time. These rights are explained in the “Your rights” section of our privacy policy.

As an employer, the processing of personal data is carried out mainly on the contractual legal basis and on our legitimate interest from time to time. Therefore, the processing that Aerospace Valley implements does not require your consent.

However, we would like to draw your attention to the fact that Aerospace Valley cannot be held responsible for failure to fulfil its obligations as a data controller, and in particular in the event of violation or failure to obtain consent where necessary.

 

Who is this privacy policy aimed at?

This policy is intended for visitors to the Aerospace Valley website, its employees, members, prospects and partners. It attests to Aerospace Valley’s knowledge of its obligations as a data controller.

 

 

III - Processing of your personal data:

 

          Why does the organization need to collect your data?

The main purpose of collecting your personal data is to offer you an adequate, optimal, efficient and legal service. To this end, the data that Aerospace Valley collects is necessary to enable it to fulfil the following purposes:

  • Management of members
  • Administrative management of personnel
  • Accounting management
  • Management of work experience and internships
  • Management of occupational medicine
  • Management of staff representation
  • Management of prospects
  • Partnership management
  • Management of physical and digital access
  • General meeting management
  • Email, telephone and form contact management
  • Business travel management
  • Management of digital and telecom resources
  • Management of identification documents
  • Management of image rights
  • Management of teleworking
  • Management of a newsletter
  • Management of the press review
  • Management of suppliers
  • Communication management
  • Website management

Aerospace Valley undertakes to ensure that your data is processed in compliance with the above-mentioned purposes, as well as for purposes that are compatible with them.

In compliance with the principle of minimisation of processed data, established by the RGPD, Aerospace Valley undertakes to ensure that the data collected is adequate, relevant and not excessive in relation to these purposes.

You may ask Aerospace Valley to provide you with its register of processing operations in order to obtain more information, in particular concerning the nature of the data processed, their precise storage periods and the legal basis used to ensure their lawfulness. In order to inform you as well as possible, Aerospace Valley will have to establish, at the time of your request, the type of relationship which links you (website visitor, customer or former customer, partner or former partner, employee or former employee, etc.).

 

How long is the personal data kept?

 

Aerospace Valley will only store your data for as long as is necessary to fulfil the purposes for which it was collected, to carry out the contractual relationship, to comply with its legal obligations or to meet its legitimate interests.

Your personal information will be retained in accordance with the retention periods set out in the register of processing available on request at rgpd@aerospace-valley.com

Once the period has expired, the data will be archived, deleted or anonymised.

 

What rights do you have and how can you exercise them?

A person concerned by the processing of his or her personal data has rights:

  • Right to information:

Aerospace Valley must provide you with a certain amount of information if you request it.

E.g.: identity of the data controller, purposes, storage periods, etc.

Aerospace Valley undertakes to provide you with this information in a clear and precise manner.

  • Right of access and communication of all data concerning it

You can ask Aerospace Valley to access your data and obtain a copy of it when it is being processed. Aerospace Valley may ask you to identify yourself when there is reasonable doubt about your real identity or when the request concerns so-called “sensitive“ data.

  • Right of rectification:

You may obtain from Aerospace Valley the rectification of your data when it is erroneous or inaccurate. Aerospace Valley may ask you to identify yourself when there is reasonable doubt about your real identity or when the request concerns so-called “sensitive“ data.

  • Right to be forgotten:

You may ask Aerospace Valley to delete your personal data to the extent that it is necessary to fulfil its contractual or legal obligations. Aerospace Valley may ask you to identify yourself when there is reasonable doubt about your real identity or when the request concerns so-called “sensitive“ data.

  • Right to object:

You may object to processing when you are placed in a particular situation. Proof is required except for requests relating to commercial prospecting. Aerospace Valley may ask you to identify yourself when there is reasonable doubt as to your real identity or when the request relates to so-called “sensitive“ data.

  • Right to data portability:

You may retrieve from Aerospace Valley all data relating to you in a machine-readable format or request Aerospace Valley to transfer it to another organisation. Aerospace Valley may ask you to identify yourself where there is reasonable doubt as to your actual identity or where the request relates to so-called “sensitive“ data.

  • Right to limit processing:

You can ask Aerospace Valley to keep your data without using it. This means that your data will be frozen for a temporary period in cases where you exercise another right in parallel (e.g. contesting the accuracy of the data, objecting to the processing of your data, unlawfulness of the processing). Aerospace Valley may ask you to identify yourself when there is reasonable doubt about your real identity or when the request concerns so-called “sensitive“ data.

  • Right to humanisation (automated individual decisions):

Insofar as Aerospace Valley is required to take fully automated decisions concerning you, you have the possibility of asking us to call upon human intervention in the taking of the said decision. This right is granted to you outside of contractual requirements or when you have not waived it in an informed, explicit and unambiguous manner.

To exercise your rights, please contact the Aerospace Valley RGPD contact: rgpd@aerospace-valley.com

  • Right to lodge a complaint with the CNIL:

If you consider that Aerospace Valley’s data protection policy does not comply with European regulations or that your rights have not been respected, you may, at any time, lodge a complaint with the CNIL on the website www.cnil.fr

 

  1. Who does Aerospace Valley share your data with?

Aerospace Valley does not sell, trade or rent your personal data to third parties.

The personal data collected about you is used solely by our organisation. However, within the framework of our activity, Aerospace Valley may call upon subcontractors who may receive communication of your personal data. Where applicable, Aerospace Valley ensures that all its subcontractors comply with the requirements of the RGPD and case law.

 Our main subcontractors are :

  • OVH
  • EVENIUM
  • EASYQUORUM
  • DASSAULT SYSTEMES/ITEROP
  • FULLSAVE
  • ORANGE
  • OODRIVE
  • COEXEL
  • SMYLER
  • ALUMN FORCE
  • DDO
  • CISCO
  • DRAG & SURVEY
  • GOTO
  • SARBACANE
  • VERYWELL
  • CAPLASER

 

In addition, Aerospace Valley does not disclose your personal data to third parties unless:

  • You request or authorise its disclosure;
  • Aerospace Valley is compelled to do so by a governmental or regulatory authority, in response to a court order, subpoena, or similar governmental or judicial request, or to establish or defend a legal claim;
  • The third party is acting as an agent or partner of Aerospace Valley in performing the services. 

You can find out more about Aerospace Valley’s subcontractors by contacting its Data Protection Officer at the following address: rgpd@aerospace-valley.com

 

IV – Cookies :

 

During your visit, Aerospace Valley may place a “cookie” on your computer. A cookie records information about your computer’s browsing on our site (the pages consulted, the date and time of consultation, etc.) which Aerospace Valley can read the next time you visit without being able to identify you directly.

Example of use: The information provided in a questionnaire will not be asked again.

The cookies used on the site are the following:

  • Session cookies necessary for the proper functioning of the website.
  • Cookies deposited: Youtube

Some of our cookies allow our site to function optimally. These “functional” cookies cannot therefore be opposed or deleted.

For all other types of cookies, you can oppose them and delete them via the information banner displayed when you first visit our website.

The purpose of cookies is to ensure that the functions of our site correspond to you and that it is as efficient as possible. We would like to inform you that setting them may modify your conditions of access to our site and, consequently, limit its performance.

 

 

 

V - Our commitment to respect the integrity and confidentiality of your personal data:

 

The security of our hosting servers

The hosting servers on which Aerospace Valley processes and stores your data are exclusively located within the European Union and meet a level of security in line with the type of data.

In accordance with the General Data Protection Regulation, an impact analysis is carried out on sensitive data processing in order to determine our capacity to process this data in complete security.

             Measures implemented to meet our commitment

As part of its services, Aerospace Valley attaches the utmost importance to the security and integrity of its customers’ personal data.

Thus, and in accordance with the RGPD, Aerospace Valley undertakes to take all necessary precautions to preserve the security of your data and in particular to protect it against any accidental or illicit destruction, accidental loss, alteration, distribution or unauthorised access, as well as against any other form of illicit processing or communication to unauthorised persons.

Furthermore, in order to prevent unauthorised access, and to ensure the accuracy and proper use of your data, Aerospace Valley has put in place appropriate digital, physical and managerial procedures to safeguard and preserve the data collected through its services.

However, no one can consider themselves completely safe from malicious intent.

That is why, in the event of a security breach that presents a high risk to the integrity or confidentiality of your data, Aerospace Valley undertakes to inform you within a reasonable time and to take all possible measures to neutralise the intrusion and minimise its impact. In the event that you suffer damage as a result of the exploitation of a security breach by a third party, Aerospace Valley undertakes to provide you with all the necessary assistance so that you can assert your rights.

You should bear in mind that any person exploiting a security breach is liable to criminal sanctions and that Aerospace Valley will take all measures, including filing a complaint and/or taking legal action, to preserve the data, its rights and to limit the impact as much as possible.

 

VI - Changes to our Privacy Policy:

 

 

Aerospace Valley reserves the right to change this Privacy Policy at any time, particularly in response to changes in applicable laws and regulations.

Notice of any such changes will be posted on our website. This notification will include a link to the amended privacy policy for a reasonable period of time. We may also communicate about the change in any other means of information that we deem useful and appropriate.