Order-Hotline: 089 890 668-222
Below you will find our rules regarding the management, processing and storage of personal data submitted as part of our services.
So that you can fully interpret the information that will be communicated to you, Green City Energy France summarizes for you the essential concepts to understand.
2.1 What is personal data?
Personal data, within the meaning of Article 4 (1) of the GDPR, is any information relating to a natural person identified or identifiable by the combination of several pieces of information (identity elements, location elements, religious opinions, navigation history, …).
You are identified when you provide information such as your first and last name. In the absence of this information, you can be identified in particular when you provide:
- An identifier (e.g. nickname, IP address)
- Your contact details (e.g. email address, telephone number)
- An identification number (e.g. contact form number)
2.2 What is a treatment?
A processing of personal data is, within the meaning of Article 4 (2) of the GDPR, any operation or set of operations applied to personal data or sets of personal data, such as:
- The record
- The transmission
Remember that any action relating to your personal data constitutes processing of said data. The data controller is, within the meaning of Article 4 (7) of the GDPR, the person who determines, alone or jointly, the purposes of each processing and the means of the processing.
2.3 How do we collect your consent?
By registering for our services and/or filling out a contact form on our website, you agree and accept that we may collect, process, store and/or use the personal data transmitted, in accordance with the rules set out below. .
3. The processing of your personal data
3.1 Why does the company need to collect your data?
The main purpose of collecting your personal data is to provide you with an adequate, optimal, efficient and legal service. To this end, the data that Green City Energy France collects is necessary to enable it to meet the following purposes:
3.2 Regarding the website
- Contact management by e-mail, telephone and form
- Promoting the life of the establishment
Green City Energy France undertakes that your data will be processed in compliance with the aforementioned purposes as well as for purposes that are compatible with them.
In compliance with the principle of minimizing the data processed, laid down by the GDPR, Green City Energy France undertakes to ensure that the data collected is adequate, relevant and not excessive in relation to these purposes.
3.3 What data is collected by the company?
In general, when you communicate with Green City Energy France in any other way, the communication of your data is voluntary.
Green City Energy France automatically collects certain information about you when you access the website, in particular information about your browsing (see “IV – Cookies”).
Green City Energy France undertakes to ensure that this data is obtained and processed fairly.
When you register for our services, your personal data may be processed. Green City Energy France collects different types of personal data about you.
3.4 Data collected by our services as part of our main activity
When you visit our websites, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is stored during a permanent connection for communication between your Internet browser and our web server:
- Domain visited
- Date and time of request
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Internet browser and operating system used
- IP address of the requesting computer
- The amount of data transferred
We collect the listed data in order to ensure a smooth connection to the website and to enable comfortable use of our website by users. Additionally, the log file is used to assess system security and stability as well as for administrative purposes. The legal basis for the temporary storage of data or log files is Article 6(1) sentence 1 lit. f GDPR.
3.5 Who collects personal data?
Personal data is collected by the controller. Within Green City Energy France, this is the head of the department authorized to process data.
You can contact the GDPR relay within our company via the address: email@example.com
3.6 Legal bases for data processing
- Consent of the person concerned: Subject to having obtained your consent, Green City Energy France is authorized to collect and process your personal data.
- Execution of contractual relationship with Green City Energy France: Your data is necessary for the execution of a contract to which you have subscribed or to which you wish to subscribe. On this contractual legal basis, any refusal to communicate your personal data will prevent the conclusion and execution of the contract.
- Fulfill a legal obligation: Your data is necessary to fulfill a legal obligation such as applicable accounting rules for training management.
- Legitimate interest of the data controller: Green City Energy France may process your personal data for the purposes of pursuing its legitimate interest, for example to: carry out satisfaction surveys, manage unpaid bills and disputes, etc.
- Necessary for the performance of a public service mission
- Necessary to protect the vital interests of the data subject
3.7 What is the retention period for personal data?
Green City Energy France collects your personal data for the purposes relating to the performance of its contractual obligations. We keep this data in active databases, files or other types of documents for as long as you use our services.
Green City Energy France only stores your data for the time necessary to pursue the purposes for which they are collected, to perform the contractual relationship or to comply with its legal obligations.
Once the duration has expired, the data must be archived, deleted or anonymised.
You will find, below, a non-exhaustive table summarizing the retention periods that we implement for your personal data.
Purpose of processing: Storage period (Reference text)
- Contract or agreement concluded within the framework of a commercial relationship: 5 years (art. L.110-4 Commercial Code)
- Bank documents (bank statement, check stub, etc.): 5 years (art. L.110-4 Commercial Code)
- Contract concluded electronically from €120: 10 years (from delivery/service) (art. L134-2 of the Consumer Code)
- Commercial correspondence: order, delivery or receipt form: 10 years (art. L123-22 of the Commercial Code)
- Customer and/or supplier invoices: 10 years (from the end of the accounting year) (art. L123-22 of the Commercial Code)
- Management of orders, deliveries, invoicing and customer accounts. : 10 years (art. L123-22 of the Commercial Code)
- Customer file management: Customer data is kept for the duration of the commercial relationship. However, they may be kept for commercial prospecting purposes for a maximum period of three (3) years from the termination of the commercial relationship (Simplified Standard No. 48)
- Creation and management of a file of prospects: 3 years from their collection by the data controller or the last contact from the prospect (Simplified standard no. 48)
- Management of a newsletter (Newsletter): Until the person concerned unsubscribes (Article 6-5° of law n°78-17 as amended)
- Retention of bank card numbers: Data relating to bank cards are deleted once payment has been made. : However, we can keep them in intermediate archiving for the purpose of proof in the event of any dispute over the transaction. If necessary, the data will be kept for a maximum period of 13 months, extendable to 15 months in order to take into account the possible use of a deferred debit payment card. (Deliberation No. 03-034 of June 19, 2003 adopting a recommendation relating to the storage and use of the bank card number in the distance selling sector Article L 133-24 of the Monetary and Financial Code.)
3.8 What rights do you have and how do you exercise them?
A person concerned by the processing of his personal data has rights:
- Right to information: Green City Energy France must provide you with certain information if you request it. Ex: identity of the data controller, purposes, etc. Green City Energy France undertakes to provide you with this information in a clear and precise manner.
- Right of access and communication of all data concerning you: You can ask Green City Energy France to have access to your data and to obtain a copy of it when it is being processed.
- Right of rectification: You can obtain from Green City Energy France the rectification of your data when they are erroneous or inaccurate. Green City Energy France may ask you to identify yourself to it when the request relates to so-called “sensitive” data.
- Right to be forgotten: You can ask Green City Energy France to delete all the data you hold concerning it, within the limit of the data it needs to fulfill its contractual or legal obligations.
- Right of opposition: You can object to processing when you are placed in a particular situation. Proof is required apart from requests relating to commercial prospecting.
- Right to data portability: You can retrieve from Green City Energy France all the data concerning you in a machine-readable and understandable format or ask Green City Energy France to transmit it to another organization.
- Right to limitation of processing: You can ask Green City Energy France to keep your data without using it. These are therefore frozen for a temporary period in cases where you exercise another right in parallel (eg contesting the accuracy of the data, opposing the processing of your data, unlawfulness of the processing).
- Right to lodge a complaint with the CNIL: If you consider that the company’s data protection policy does not comply with European regulations or that your rights are not respected, you can, at any time, file a complaint with the CNIL on the website. www.cnil.fr
- Right to humanization (automated individual decisions): Insofar as Green City Energy France is required to make fully automated decisions concerning you, you have the possibility of asking us to call for human intervention in the making of said decision. . This right is granted to you outside the contractual requirements or when you have not waived it in an informed, explicit and unequivocal manner.
To exercise your rights, contact the GDPR relay of Green City Energy France: firstname.lastname@example.org
3.9 With whom does Green City Energy France share its data?
Under no circumstances does Green City Energy France sell, exchange or rent your personal data to third parties.
The personal data collected about you is used only by our company. However, as part of our activity, Green City Energy France may call on subcontractors who may receive communication of your personal data. Where applicable, Green City Energy France ensures the compliance of all its subcontractors in compliance with the requirements set by the GDPR and by case law.
Our subcontractors are:
- Design and implementation: Satellytes Digital Consulting GmbH, www.satellytes.com
- Hosting: Leitwelt GmbH, www.leitwelt.com
- Consulting for digital analytics and data-driven marketing: Feld M GmbH, www.feld-m.de/en/
- Specialized recruitment site: INDEED, Link
In addition, Green City Energy France does not disclose your personal data to third parties, except if:
- You request it or authorize its disclosure;
- Green City Energy France is compelled to do so by a governmental authority or a regulatory body, in the event of a judicial requisition, subpoena or any other similar governmental or judicial request, or to establish or defend a legal claim;
- The third party acts as an agent or partner of Green City Energy France in the execution of the services.
During your visit, Green City Energy France may place a “cookie” on your computer. A “cookie” is used to record information relating to your computer’s navigation on our site (the pages consulted, the date and time of consultation, etc.) that Green City Energy France will be able to read during your next visit without however, be able to identify you directly.
Example of usefulness: The information provided in a questionnaire will not be requested from you again.
4.1 When using our website, cookies are stored on your computer. Cookies are small text files that are saved on your hard drive depending on the browser you are using and through which the service placing the cookie receives certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer generally more user-friendly and effective.
4.2 The cookies used on the site are as follows:
- Session cookies necessary for the proper functioning of the website.
- Transient cookies
- Persistent cookies
Transient cookies are automatically deleted when you close the browser. These include session cookies. These store a so-called session ID, which makes it possible to assign different requests from your browser to the common session. Your computer can thus be recognized when you return to our site. Session cookies are deleted when you log out or close your browser.
You can configure your browser settings according to your preferences and, for example, refuse the acceptance of third-party cookies or all cookies. “Third-party cookies” are cookies placed by a third party, and therefore not by the website you are on. We draw your attention to the fact that by deactivating cookies you may not be able to use all the functions of this website.
4.3 Some of our cookies allow our site to function optimally. These “functional” cookies cannot therefore be the subject of a request for opposition or deletion.
For any other type of cookies, you can oppose them and delete them via the informative banner displayed during the initial consultation of our website.
Cookies having the particular objective of ensuring that the functionalities of our site correspond to you and that the latter is as efficient as possible, we would like to inform you that their setting is likely to modify your conditions of access to our site and, by therefore limit its performance.
5. Our commitment to respect the integrity and confidentiality of your personal data:
5.1 The security of our hosting servers
The hosting servers on which Green City Energy France processes and stores your data are exclusively located within the European Union and meet a level of security in accordance with the typology of the latter.
In accordance with the General Data Protection Regulations, an impact analysis is carried out on sensitive processing in order to determine our ability to process this data in complete security.
5.2 The measures implemented to respect our commitment
As part of its services, Green City Energy France attaches the utmost importance to the security and integrity of its customers’ personal data.
Thus, and in accordance with the GDPR, Green City Energy France undertakes to take all necessary precautions to preserve the security of your data and in particular to protect them against any accidental or unlawful destruction, accidental loss, alteration, unauthorized distribution or access, as well as against any other form of unlawful processing or communication to unauthorized persons.
In addition, in order to avoid any unauthorized access, and to guarantee the accuracy and proper use of your data, Green City Energy France has implemented appropriate digital, physical and managerial procedures with a view to safeguarding and preserving the data collected through its services.
Despite everything, no one can consider themselves to be completely immune to malevolence.
This is why, in the event that a security breach presents a high risk for the integrity or confidentiality of your data, Green City Energy France undertakes to inform you thereof within a reasonable time and to take all possible measures. to neutralize the intrusion and minimize its impact. In the event that you suffer damage due to the exploitation of a security breach by a third party, Green City Energy France undertakes to provide you with all the necessary assistance so that you can assert your rights.
It should be borne in mind that anyone exploiting a security breach is liable to criminal sanctions and that Green City Energy France will take all measures, including by filing a complaint and/or legal action, to preserve the data, its rights and those of its beneficiaries and/or patient and to limit its impact as much as possible.