Information relating to business contact forms

The purpose for which the data is processed is, depending on the nature of the message, specified in the digital campaigns:

• Aim no.1: Promoting our commercial offers in response to the primary interests of business clients or prospective clients;
• Aim no.2: Connecting business clients or prospective clients with our sales teams.

The legal basis of the processing is the legitimate interest pursued by SUEZ.

The data subjects concerned by the data collection are clients and prospective clients within the context of their business activity.

The categories of personal data directly collected by SUEZ are as follows:

• Identification data (e.g. last name, first name, email address, telephone number, etc.);
• Additional business data (e.g. details of activity, company, name of company representative, country, etc.).

Data may be transferred outside the European Union. In the event that data is transferred outside the European Union, SUEZ ensures that the recipient country is covered by an adequacy decision determined by the European Commission or that we have adopted the European Commission’s Standard Contractual Clauses.

The personal data collected will be stored:

• The personal data of prospective clients is retained in an active database for three years from the last contact with the User (e.g. a request for documentation or a click on a hypertext link contained in an email). At the end of this three-year period, the User will again make contact with the prospective client in order to establish whether it wishes to continue receiving solicitations of business. In the absence of any explicit, affirmative response from the User, the data will be retained in temporary archives for five years.
• Personal data relating to clients is retained throughout the entire contractual relationship. The data is then retained in an active database for three years from the end of the contractual relationship, then for five years in temporary archives.

The data is deleted automatically after the temporary archiving.

In accordance with applicable laws and regulations on personal data, you have the right to access your data, to rectify it, to restrict its processing and to have it erased.
You can exercise your rights:

• using the dedicated online form by clicking here
• or in writing to SUEZ - Group Digital Communications Department - Tour CB21 – 16 place de l’Iris - 92040 Paris La Défense Cedex, France, stating your full name and address, together with the reason: “Digital Campaign”.

If you experience any difficulties with managing your personal data, you can contact the registered Data Protection Officer by email to [email protected] stating the reason: “Group communications digital campaign”.

If you are not satisfied with the response from the DPO, you can file a complaint in writing to the French data protection authority, the Commission Nationale Informatique et Libertés, at 3 place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France or online at: https://www.cnil.fr/en/home.

For further information, you can also visit the following website: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles.

SUEZ undertakes to implement all technical and organisational measures to ensure the security of our processing of personal data and the confidentiality of your data, in accordance with the French Data Protection Act (Loi informatique et Libertés) and the EU General Data Protection Regulation (GDPR) and with French Law No. 2018-133 of 26 February 2018 “containing various provisions for adapting to European Union law in relation to security”.