Privacy policy

The purpose of this privacy policy (hereinafter the ‘Policy’) is to inform visitors or users (hereinafter the ‘User’) of the www.suez.com/en/sigrenea (hereinafter the ‘Site’) on the methods used to protect their personal data in accordance with Law No. 78-17 of 6 January 1978 relating to data processing, files and freedoms as amended by the law of 20 June 2018, the implementing Decree application No. 2019-536 of 29 May 2019 and Regulation No. 2016-679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter collectively referred to as the ‘Regulations’).

The methods of collecting and processing information gathered by means of cookies are set out in the Cookie Statement. 
Any questions, requests or alerts relating to ethics or human rights should be submitted via the ‘Ethics and Vigilance’ form provided for this purpose. The identity of the data controller and the methods of processing the data collected by means of this form are set out in the Ethics Information Notice.
All applications or requests relating to a job vacancy should be sent to [email protected] .
The data controller is SIGRENEA, a simplified joint-stock company (SAS) registered with the Trade and Companies Register (RCS) under number 513922948, with its registered office at 1 avenue du Champ de Mars, 45100 ORLEANS (hereinafter referred to as the ‘data controller’ or ‘Sigrenea’). Sigrenea, a company of the SUEZ Group, falls within the scope of the commitments made by the SUEZ Group.
The Policy may be modified at any time by Sigrenea, in particular in order to comply with any regulatory, jurisprudential, editorial or technical developments. The User must refer to the latest version of the Policy before browsing.
This Privacy Policy forms an integral part of the General Terms and Conditions of Use of the Website.

The controller of the User's personal data is, as the case may be, the following entity: Sigrenea, Simplified Joint Stock Company - RCS No. 513922948, having its registered office at 1 avenue du champ de mars 45100 ORLEANS.

In the context of the operation of the Site, the Data Controller may collect and process personal data in order to allow the User to access the functionalities and services offered by the Site (hereinafter the ‘Services’): management of requests for additional information, management of requests for communication, etc.

1) What are the categories of data collected?

• Contact details: these are the mandatory details that the User provides when filling in the contact form(s), namely: surname, first name, email address.
• Data published voluntarily by the User: refers to the personal information that the User voluntarily communicates to the Controller by filling in the free text fields provided for this purpose in the contact form(s), namely ‘Subject of the request’ and ‘Message’. The Data Controller strongly recommends that the User avoid communicating any personal data via these text fields or, in any case, limit this communication to what is strictly necessary for processing the User's request (hereinafter ‘Published Data’).
• Data collected through cookies: refers to the data and information collected by cookies, whether or not necessary for the operation of the site. For more information regarding this data, please visit the dedicated page: Cookie Policy.

All of this data will be collectively referred to hereinafter as the ‘Data’.

2) Why does the Data Controller collect User Data?
The Data is collected for the following purposes:

• To process the User's request for information or question and communicate effectively with him/her in the following areas: press relations, relations with suppliers, or to answer any other question from the User.
• The fields that must be completed in the contact form are marked with an asterisk. If these mandatory fields are not completed, Sigrenea will not be able to respond to your request.

3) What is the legal basis for the processing of User Data?
The processing of Data is only lawful if it is based on one of the legal bases defined by the Regulations. In the context of the operation of the Site, the processing is based on the following legal bases:

• If the User is a professional (supplier, customer, prospect, etc.): the contract or the execution of pre-contractual measures taken at the request of the person concerned.
  For all other users: Sigrenea's legitimate interest in responding to any other request for additional information.
• If the User is a candidate for a job offer, the address [email protected] is made available to him/her to submit his/her application.

The Sigrenea website is not intended to deal with any other requests from private individuals.

4) Recipients of the Data collected
The Data collected via the contact form is intended for the various Sigrenea internal departments responsible for responding to the User's request, and where applicable to the appropriate departments within the SUEZ Group. 
Internal recipients may also be third parties of Sigrenea located in the European Union (EU) or outside the EU, it being understood that any transfer of Data outside the EU will be carried out under the conditions of the article ‘Transfer of Data outside the European Union’ below.
Each third-party recipient may, depending on the case, be a subcontractor or controller of the Data communicated.
The Data may also be transferred/used by third parties under the following conditions:

• Data transferred to authorities and/or public bodies: in accordance with the Regulations in force, the Data may be transmitted to the competent authorities upon request and in particular to public bodies, exclusively to meet legal obligations, court officers, ministerial officers and organisations responsible for debt collection, as well as in the case of the search for perpetrators of offences committed on the internet.
• Data communicated to third parties: the Data may be made accessible to subcontractors, suppliers and third-party service providers of the Data Controller (such as the Site host, Sigrenea's IT and/or technical service providers)

Personal data is kept for 2 years from the last contact with the User. At the end of this 2-year period, Sigrenea may contact the User again. In the absence of a positive and explicit response from the User, the data will be deleted.

For more information on cookies, please visit the dedicated page: Cookie Statement.

The Data Controller takes appropriate technical and organisational measures to ensure the security of the Data and to prevent unauthorised access to or disclosure of the User's Data. However, the Data Controller cannot guarantee the elimination of any risk of misuse, alteration, unlawful reproduction or unauthorised use of the Data.

The database created when a User sends a request via the contact form is strictly confidential. Sigrenea undertakes to take all necessary precautions and appropriate organisational and technical measures to preserve the security, integrity and confidentiality of the Data and, in particular, to prevent it from being distorted or damaged or accessed by unauthorised third parties.

In the event of transfer of User Data to a third party located outside the European Union, Sigrenea shall ensure that the recipient country has been the subject of an adequacy decision by the European Commission. Otherwise, Sigrenea undertakes to supervise the transfer by means of the appropriate legal instruments, in particular the Standard Contractual Clauses of the European Commission.

n accordance with the Regulations, any User who is a natural person has the right to access, rectify, oppose, delete, limit and transfer the Data concerning him/her.
The User also has the right to define general and specific guidelines defining how he/she intends his/her rights to be exercised after his/her death.

Firstly, for processing that concerns him, the User may exercise his rights by contacting Sigrenea by writing to [email protected]

In case of difficulty concerning the management of your personal data, you can contact the Data Protection Officer (DPO) by email [email protected].
If you are not satisfied with the response from the Data Protection Officer, you can lodge a complaint by post with the Commission Nationale Informatique et Libertés, 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 or online (https://www.cnil.fr/).