Privacy Policy
Preamble :
EMUNDUS undertakes to ensure that the processing of personal data carried out on www.emundus.fr complies with the General Data Protection Regulation (GDPR) and the Data Protection Act.
This data protection policy applies to data processing carried out via the website www.emundus.fr .
It informs you about the purposes of the processing carried out, the legal basis of the processing, the recipients of the data as well as their retention period, security measures, the possible existence of data transfers outside the European Union or taking of automated decisions, the use and management of cookies, your computer rights and freedoms and how to exercise them.
Who is responsible for data processing carried out by this website?
The person responsible for data processing carried out by the website www.emundus.fr is the company EMUNDUS SAS, located 10 passage du Drakkar – 17000 La Rochelle.
To find out more, see the legal notices.
Does this site collect personal data?
According to article 4.1 of the GDPR, personal data is any information that allows you to be identified either directly or indirectly. This site collects personal data via its various contact forms. Personal data is freely communicated to EMUNDUS by the persons concerned by consenting to the processing and by reading the information notice displayed under the various contact forms. The data collected is adequate, useful, necessary and limited to the strict minimum. This includes identification data (last name, first name), organization, postal address, telephone number, and connection data (email address).
What are the purposes of data collection?
The processing of personal data collected through the various contact forms on the website pursues the following purposes:
Why do we process your Personal Data? |
What data do we collect? |
For the contact form and to book your demonstration of the EMUNDUS platform | Your identification data such as: last name, first name, email address, postal address, your mobile and/or landline telephone number, organization |
To produce statistics for our website (traffic on the site, data necessary for the development of the site services, conversion rate, bounce rate) |
Google Analytics |
To respond to a quote request made via the “online quote request” form |
Your identification data such as: last name, first name, email address, postal address, your mobile and/or landline telephone number, organization |
What are the purposes of data collection?
The personal data collected through the various contact forms on the website pursue the following purposes:
- Respond to messages from website visitors.
- Improve services (Google Analytics Anonymized).
- Respond to client's needs.
- Establish a business relationship.
- Management of cookies under the conditions defined by the Cookie Use Policy
- Allow you to benefit from the demonstration service that we offer.
- Receive and process your requests relating to your rights under the GDPR and the Data Protection Act.
What is the legal basis for the processing carried out by this site?
The processing of your personal data by EMUNDUS is based:
- Or upon your consent for all cases where you entrust your personal data yourself. Your consent can be withdrawn at any time.
- Either on legitimate interests pursued by EMUNDUS.
- Or on compliance with a legal obligation, particularly in terms of exercising your rights under the GDPR and the Data Protection Act.
Who are the recipients of the data processed by this site?
Your personal data is primarily intended for EMUNDUS, publisher of the site and responsible for processing.
They are processed by the staff of the various departments concerned by your requests.
They are processed only for the purposes indicated above. The personal data concerning you are hosted in France and also with a subcontractor outside the European Union and in a secure manner.
The processor stores personal data on computer servers in a controlled, secure environment protected against unauthorized access, use or disclosure. They are never communicated to third parties for commercial purposes.
Is personal data transferred outside the European Union?
In the event of contractual transfer of personal data, EMUNDUS ensures that recipients comply with the General Regulations on the Protection of Personal Data. As such, EMUNDUS has made a contractual commitment (CCT) to the subcontractor.
EMUNDUS also monitors GDPR compliance of all data recipients.
How secure are the personal data processed by this site?
EMUNDUS undertakes to protect the personal data processed within the framework of this site, in compliance with the state of the art.
The indications below are the main security measures to protect your personal data:
- All pages of the EMUNDUS website are under the https protocol;
- Connection logging;
- User blocking when a hacking attempt is detected;
- The erasure of Personal Data is carried out at the request of the person concerned or at the end of the retention period;
- The data is stored on data servers respecting maximum technical security.
How long is the personal data processed by this site retained?
Personal data collected as part of a demonstration request or via the contact form are used by EMUNDUS and are kept for 25 months.
The supporting documents collected as part of the exercise of your rights are kept for the duration of the processing of your request (1 month maximum, following the requirements of the CNIL and the GDPR).
Does this site use cookies?
When viewing this site, cookies are placed on your computer, tablet or smartphone.
In practice, we use cookies to track audience measurements. The cookies used by EMUNDUS on this website are therefore audience measurement cookies.
You can accept or refuse cookies from the cookie information banner or manage cookie settings using the “Cookie management” menu at the bottom of the page. For more information on cookies, you can consult our cookie use policy or go to the CNIL website .
Can I object to these cookies?
Yes and in several ways. If you do not want this website to place cookies on your computer, you can block them:
- using a browser that, by default, refuses cookies;
- by adequately configuring your browser or installing an additional component on your browser, specifically designed for cookie management;
- by configuring your browser so that it transmits to the website your wish not to be “tracked” (“Do not track”).
This website respects your choice.
What are the rights of people affected by the processing carried out by this site?
Explanation of the data collected :
You can visit our website without having to identify yourself and provide personal information about yourself.
However, you can ask us to contact you using several specific forms:
- the contact form;
- the demonstration request form;
- the quote request form.
We collect the individual data that you provide to us in the context of these contacts, as well as in the emails that you send to us.
Implementation of your rights :
In accordance with the General Regulations on the Protection of Personal Data (GDPR) which came into force on May 25, 2018 and Law No. 78-17 of January 6, 1978 as amended relating to computing, files and freedoms, you have the following rights:
Rights you have |
Utility |
Permission to access |
Right to know if we hold Personal Data about you and to obtain a copy, as well as, in particular, the following information: The purpose of the processing, the categories of Personal Data processed, the categories of recipients of the data, the retention period when possible (or the criteria used to determine this duration), the rights from which you benefit. |
Right to erasure (right to be forgotten) |
Right to obtain the deletion of your Personal Data in the cases provided for by the GDPR (article 17), in particular: When the data we process is no longer necessary for us; when you object to commercial prospecting and request deletion in addition to stopping the processing; when the processing is unlawful. |
Right to object |
This right applies when we process your data in order to pursue one of our legitimate interests, such as advertising on your social media pages. If you request an objection, we will analyze the reasons relating to your particular situation and determine whether we have a legitimate and compelling reason to continue processing your data. Otherwise, we will cease the processing concerned. |
Right to object to commercial prospecting |
In the event of opposition to commercial prospecting, we will simply cease processing the Data concerned. |
Withdrawal of consent |
When the processing of your Personal Data is based on your consent, withdrawing your consent prevents us from continuing to process the data in question. |
Right to rectification and right to limitation |
You may request the updating or rectification of any Personal Data that you consider to be inaccurate or obsolete. You can also request that the processing be suspended, with the exception of the retention of Personal Data when: - you contest the accuracy of the data (this limitation lasts for the duration of our verification of this possible inaccuracy); - the processing is unlawful and you prefer to obtain restriction of the processing rather than erasure of the data; - we no longer need the data but you consider that they are still necessary for the establishment, exercise or defense of legal rights; - you have made a request for opposition due to your particular situation and this limitation is obtained during the time of verification of the balance of interests between our legitimate interests and your rights and freedoms. When processing has been limited, your Data can only be processed with your consent or for the exercise, establishment and defense of legal rights. |
Right to portability |
You have the right to receive the Personal Data that you have provided directly to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data or request that we transmit it to another controller. This right only applies to processing based on the consent of the person, or on the execution of the contract and which is carried out using an automated process. |
Fate of Data in the event of death
In accordance with the provisions of article 85 of the Data Protection Act, we inform you that, as a natural person:
- You have the right to define with us guidelines relating to the conservation, erasure and communication of your Personal Data after your death;
- You may modify or revoke these directives from us at any time;
- You may designate a person responsible for carrying out these directives, who will have authority after your death, to read these directives and to request their implementation from us.
- You are also informed that in the absence of transmission to EMUNDUS of specific instructions on the fate of your Personal Data, your heirs will be able to exercise after your death the rights relating to the conservation, erasure and communication of your Personal Data to the extent necessary for the organization and settlement of your estate as well as for EMUNDUS to take your death into account.
You also have (where applicable) the right to formulate general or specific instructions relating to the conservation, erasure and communication of your personal data after your death or right to be forgotten.
How can I exercise my rights provided for by the GDPR and the Data Protection Act?
Your requests can be formulated in different ways:
- By email by writing to: rgpd[@]emundus.fr;
- In person by presenting yourself at the EMUNDUS reception, located 10 passage du Drakkar – 17000 La Rochelle;
- By post by writing to EMUNDUS located at 10 passage du Drakkar – 17000 La Rochelle;
- Through an agent who will use one of the above channels to make the request.
Please make each of your requests using one of the means above, attaching a copy of an identity document.
For an access right request:
Please specify in your request which data or processing operations it concerns.
Your data will be sent to you electronically or by post, by registered mail with acknowledgment of receipt.
EMUNDUS may require payment of a reasonable fee based on administrative costs for any additional copies requested (article 15.3 of the GDPR).
In the event of manifestly unfounded or excessive requests, EMUNDUS may require payment of reasonable fees which take into account the administrative costs incurred in providing the information or refuse to comply with these requests (article 12.5 of the GDPR).
To request a right of rectification:
If you consider that information concerning you is incorrect and should be corrected, please indicate precisely the inaccurate or incomplete data concerning you, and provide all information allowing it to be corrected or completed (article 15 of the GDPR).
To request the right to erasure:
Please indicate precisely the data concerning you which you request to be erased, and the reasons for your request (article 17 of the GDPR).
Please note : this right is not absolute, EMUNDUS may be obliged to keep information about you, particularly in the context of managing the commercial relationship (invoice management, litigation management) and in the framework of documentation and provision of proof relating to the exercise of your rights.
For a request for restriction of processing:
Please indicate precisely the data concerning you for which you request the restriction of processing, and the reasons for your request.
Please note : this right is not absolute, EMUNDUS may decide to continue processing your data (article 18.3 of the GDPR). The limitation, if implemented, may result in the suspension of services provided by EMUNDUS (access to work and deliverables, receipt of information, etc.). These implications will be described to you in the letter acknowledging receipt of your request for limitation of processing.
For a right of opposition request:
Please indicate precisely the processing of data concerning you to which you wish to object, and the reasons for your request.
Please note: this right is not absolute. Please indicate precisely the processing for which you object to the management of your personal data, and the reasons for your request (article 21 of the GDPR).
To request a right to portability:
Each user can at any time request data portability in order to recover the personal data that EMUNDUS has collected about them in the context of processing based on consent and on the basis of a contract.
If you wish the data to be transmitted to another data controller in a standard format, please specify this and indicate the contact details of this other data controller.
How to contact the DPO?
You can contact the EMUNDUS DPO electronically at the following address: rgpd[@]emundus.fr or by post by sending your letter to the following address: EMUNDUS – Data Protection Officer – 10 passage du Drakkar – 17000 La Rochelle.
You can make a request to the CNIL at the following address:
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Updated December 2023.