NATIONAL COMPANY UNION
I – Objectives of our Privacy Policy:
Confidentiality and security are of the utmost importance to the National Companion Union (NCU). We make it available to you so that you have clear and transparent information on the treatments implemented as part of the services offered on our site.
We ensure that our technical and organizational measures respect your data protection rights. To this end, we comply with the regulations in force and in particular with the General Data Protection Regulation (hereinafter referred to as the Data Protection Regulation). « GDPR »), which entered into force on 25 May 2018, complements personal data protection legislation.
Below you will find our rules concerning the management, processing and storage of personal data submitted as part of our services.
II – Scope:
What is a personal data?
Personal data, within the meaning of Article 4(1) of the GDPR, is any information relating to a natural person identified or identifiable by the grouping of several information (identity elements, location elements, religious opinions, navigation history, etc.).
You are identified when you provide information such as your surname and first name. In the absence of this information, you may be identified when providing:
- An identifier (e.g., nickname, IP address)
- Your contact information (e.g. e-mail address, telephone number)
- An identification number (e.g. contact form number)
What is a treatment?
A processing of personal data shall, within the meaning of Article 4(2) of the GDPR, be any operation or set of operations applied to personal data or sets of data, such as:
- Collection
- Storage
- Registration
- Transmission
- …
Keep in mind that any action relating to your personal data constitutes a processing of the said data.
The controller is, within the meaning of Article 4(7) GDPR, the person who determines, alone or jointly, the purposes of each treatment and the means of treatment.
How do we collect your consent?
By registering for our services and/or filling in a contact form on our website, you agree and agree that we may collect, process, store and/or use the personal data transmitted in accordance with the following rules.
By giving us your consent, you also retain your rights of access and communication, rectification, portability, and the right to delete or « Right to be forgotten » your personal data. These rights are explained in the section « the rights you have » our privacy policy.
III – Processing your personal data:
Why does our association need to collect your data?
The main objective of collecting your personal data is to provide you with an adequate, optimal, efficient and legal service. To this end, the data collected by the Union Compagnonnique Nationale are necessary to enable it to fulfil the following purposes:
Concerning the website:
- Managing contacts by e-mail, telephone and form
- Promotion of the life of the establishment
As regards the operation of the establishment:
- Administrative staff management
- Registration management
- Event Management
- Management of requests to the Data Protection Officer
- Accounting management
- Reception management
- Communication and social media management
- Subscription management
- Vendor management
- General resources management
- Management of statistical studies
- Management of the Board of Directors
- Recruitment management
The National Companion Union undertakes to ensure that your data is processed in accordance with the above purposes and for purposes compatible with them.
In accordance with the principle of minimisation of the data processed, laid down by the GDPR, the National Companion Union undertakes to ensure that the data collected are adequate, relevant and not excessive in relation to these purposes.
What data is collected by our association?
In general, when you exchange with the National Companion Union in any other way, the communication of your data is voluntary.
The National Companion Union automatically collects certain information about you when you access the website, in particular information about your navigation (see « IV – Cookies »).
The National Companion Union undertakes to ensure that these data are obtained and processed fairly.
When you register for our services, your personal data can be processed. The National Companion Union collects different types of personal data concerning you.
Data collected or disseminated via the website
Contact management by e-mail, telephone and form:
- Identity
- Subject matter
- Postal address
- Email address
- Contact details
Promotion of the life of the establishment
- Images
- Videos
Data collected by our services as part of our main activity
Administrative management of staff
- Name
- First name
- Photography
- Gender
- Date and place of birth
- Nationality
- Professional contact details
- Qualifications and diplomas
- Function
- Identification
- Professional agenda
- Internal identification number
- Driving licence
- Emergency contact person
- Entitlements
- Labour contract data: salary, tax rate
- Computer yearbook, connection data
- Personal RIB
- Order of transfer
- Social security No
- Marital status
Telework management
- Identification of staff
- Self-assessment form data
- Staff home information
- Wishes formulated by teleworking staff
- Employment contract data
- Technical data on the place of telework and the technical tools used
Accounting management
- Identity
- Contact details
- Date and place of birth
- Employment contract data
- RIB, check heels and blue card print
- Social security number
Managing requests to the DPO
- Identification data
- Contact details
- Data on the applicant recorded in the processing
Vendor management
- Identification data
- Contact details
- Financial data (nature of purchases and expenditures)
- Justification
- Follow-up of the service performed
- Administrative monitoring of contracts
- RIB professionals, cheques, money orders
Managing partnerships
- Identity and contact details
- Project monitoring
- Statistics
Communication and social media management
- Default data on platforms (Name, first name, nickname, photo(s))
- Publications, messages exchanged, data made public
- Platform usage data
Personnel recruitment management
- Contact details, personal information, photo
- Vocational qualifications and diplomas
- Professional experience
- Remuneration
- RQTH (potentially)
Who collects personal data?
Personal data shall be collected by the controller.
Within the National Companion Union, he is the head of the department authorized to process data (Accounting, Human Resources, Administration...).
You can contact the GDPR relay within our association via the address :
politiquedeconfidentialites@lecompagnonnage.com
The legal basis for data processing
The National Companion Union collects your personal data for the purposes described in point 1 of this Privacy Policy. The National Companion Union collects and processes your personal data only when this is based on one of the following legal bases:
- Consent of the data subject: Subject to your consent, the National Companion Union is authorized to collect and process your personal data.
Performance of contractual relationship with the National Companion Union: your data are necessary for the performance of a contract to which you have subscribed or to which you wish to subscribe.
On this contractual legal basis, any refusal to disclose your personal data will prevent the conclusion and performance of the contract.
- Completing a legal obligation: your data are necessary to fulfil a legal obligation such as the applicable accounting rules for the management of training.
- Legitimate interest of the controller: the National Companion Union may process your personal data for the purpose of pursuing its legitimate interest in:
Ex: conduct satisfaction surveys, organize competition games, manage unpaid claims and litigation. - Required for the performance of a public service mission
- Necessary to safeguard the vital interests of the data subject
How long is the retention period for personal data?
The National Companion Union collects your personal data for the purposes of fulfilling its contractual obligations. We keep this data in active databases, files or other document types, as long as you use our services.
The National Companion Union stores your data only for the time necessary for the pursuit of the purposes for which it is collected, the performance of the contractual relationship or the fulfilment of its legal obligations.
Once the duration is exceeded, the data must be archived, deleted or anonymized.
Below you will find a non-exhaustive table summarizing the storage periods we are implementing for your personal data.
Purpose of treatment | Shelf life | Reference text |
Contract or agreement concluded in the context of a commercial relationship | 5 years | Art. L.110-4 Commercial Code |
Bank documents (bank account, cheque stub...) | 5 years | Art. L.110-4 Commercial Code |
Electronic contract from 120 € | 10 years (from delivery/performance) | Art. L134-2 of the Consumer Code |
Commercial correspondence: order, delivery or receipt form. | 10 years | Art. L123-22 of the Commercial Code |
Customer and/or supplier invoices | 10 years (from delivery/performance) | Art. L123-22 of the Commercial Code |
Management of orders, deliveries, billing and client accounts | 10 years | Art. L123-22 of the Commercial Code |
Client File Management | Client data are retained during the time of the business relationship. However, they may be retained for commercial exploration for a maximum period of 3 years from the breakdown of the commercial relationship | Simplified Standard No. 48 |
Establishment and management of a prospect file | 3 years from collection by the controller or last contact from the prospect | Simplified Standard No. 48 |
Managing a newsletter (Newsletter) | Until the data subject unsubscribes | Article 6-5 of Law No 78-17 as amended |
Retention of credit card numbers | Bank card data are deleted once payment has been made. However, we can keep them in intermediate archiving for an evidentiary purpose in case of possible dispute of the transaction. If necessary, the data will be kept for a maximum of 13 months, extending to 15 months to take into account the possible use of a deferred debit payment card. | Proceedings No 03-034 of 19 June 2003 adopting a recommendation on the storage and use of the bank card number in the distance selling sector Article L 133-24 of the Monetary and Financial Code. |
What rights do you have and how do you exercise them?
A person concerned with the processing of his personal data has rights:
- Right to information:
The National Companion Union must provide you with a number of information if you so request. Ex: identity of the controller, purposes, ...,
The National Companion Union undertakes to convey its information to you in a clear and precise way. - Right of access and communication of all data relating to it
You can ask the National Companion Union to have access to your data and obtain a copy of it when they are processed. - Right of correction:
You can obtain from the National Companion Union the correction of your data when these are incorrect or inaccurate. The National Companion Union may ask you to identify yourself with it when the request relates to so-called « sensitive » - Right to be forgotten
You can ask the National Companion Union that it delete all the data you hold concerning it, within the limits of the data necessary to fulfil its contractual or legal obligations. - Right of opposition
You may object to treatment when you are in a particular situation. Evidence is required outside of commercial prospecting applications. - Right to data portability:
You can retrieve from the Union Compagnonnique Nationale all the data concerning you in a format readable and understandable by the machine or ask the Union Compagnonnique Nationale to transmit them to another organization. - Right to limitation of treatment:
You can ask the National Companion Union to keep your data without using it. These are therefore frozen for a temporary period in cases where you exercise another right in parallel (e.g. contest the accuracy of the data, oppose the processing of its data, unlawful processing). - Right to complain to CNIL:
If you consider that the association's data protection policy is not in accordance with European regulations or that your rights are not respected, you may at any time lodge a complaint with the CNIL at www.cnil.fr - Right to humanisation (automated individual decisions):
To the extent that the association is required to make completely automated decisions concerning you, you have the opportunity to ask us to use a human intervention in making the decision. This right is granted to you outside the contractual requirements or when you have not waived it in an enlightened, explicit and unambiguous manner.
To exercise your rights, contact the National Companion Union:
politiquedeconfidentialites@lecompagnonnage.com
1. With whom does the National Companion Union share its data?
Under no circumstances does the National Companion Union sell, exchange or rent your personal data to third parties.
The personal data collected about you are used only by our association.
However, as part of our activity, the Union Compagnonnique Nationale can call on subcontractors who can receive communication of your personal data. Where appropriate, the National Companion Union shall ensure that all its subcontractors comply with the requirements laid down by the GDPR and the case law.
In addition, the National Companion Union shall not disclose your personal data to third parties, unless:
- You apply or authorize disclosure;
- The National Companion Union is obliged to do so by a government authority or a regulatory body, in the event of a judicial requisition, a summons to appear or any other similar governmental or judicial request, or to establish or defend a legal claim;
- The third party acts as agent or partner of the Union Compagnonnique Nationale in the performance of services or for tasks entrusted to it (accountant, bailiff, lawyer...)
IV – Cookies:
During your visit, the National Companion Union can implement a « cookie » on your computer. One « cookie » allows us to store information about your computer's browsing on our website (pages consulted, date and time of consultation, etc.) which the National Companion Union will be able to read during your next visit without being able to identify you directly.
Example of utility: The information provided in a questionnaire will not be requested again.
The cookies used on the site are:
- Session cookies necessary for the proper functioning of the website.
- Recapcha, Google maps and Google analytics
Some of our cookies allow our website to function optimally. These cookies « functional » therefore cannot be the subject of an application for opposition or for deletion.
For any other type of cookies, you can object and delete them via the information banner displayed during the initial visit to our website.
With the aim of ensuring that the functionality of our website is as efficient as possible, we would like to inform you that their settings may change your conditions of access to our site and therefore limit its performance.
V – Our commitment to respect the integrity and confidentiality of your personal data:
Security of our hosting servers
The hosting servers on which the National Companion Union processes and stores your data are exclusively located within the European Union and meet a level of security consistent with the typology of the latter.
In accordance with the General Data Protection Regulation an impact analysis is carried out on sensitive processing in order to determine our ability to perform the processing of this data safely.
Measures implemented to meet our commitment
As part of its services, the National Companion Union attaches the utmost importance to the security and integrity of its customers' personal data.
Thus, and in accordance with the GDPR, the National Companion Union undertakes to take all necessary precautions to safeguard the security of your data and in particular to protect them from accidental or unlawful destruction, accidental loss, alteration, dissemination or unauthorized access, as well as against any other form of unlawful processing or communication to unauthorized persons.
Furthermore, in order to avoid unauthorized access, and to ensure the accuracy and proper use of your data, the National Companion Union has put in place appropriate numerical, physical and supervisory procedures to safeguard and preserve the data collected through its services.
Nevertheless, no one can consider himself completely immune from malice.
Therefore, if a security breach poses a high risk to the integrity or confidentiality of your data, the National Companion Union undertakes to inform you within a reasonable time and to take all possible measures to neutralize the intrusion and minimize its impacts. In the event that you suffer damage as a result of the operation of a security breach by a third party, the National Companion Union undertakes to provide you with all necessary assistance so that you can assert your rights.
It should be borne in mind that any person operating a security breach is subject to criminal sanctions and that the National Companion Union will take all measures, including through the filing of a complaint and/or legal action, to preserve the data, its rights and those of its beneficiaries and/or patients and to limit its impact to the maximum extent.
VI – Modification of our Privacy Policy:
The National Companion Union reserves the right to change this Privacy Policy at any time, in particular in application of changes to existing laws and regulations.
Changes will be notified on our website. This notification will include a link to the amended Privacy Policy for a reasonable period of time. We will also be able to communicate this change by any other means of information that we consider useful and timely.