Within the framework of the General Data Protection Regulation and for the sake of transparency, ENC would like to inform you about the use of your personal data and your rights concerning them.
What personal data about you is processed by ENC?
- Identification data: Name, First name ;
- Contact informations : email address ;
- Location data : IP address.
On what legal bases are your data being processed and what are the purposes being pursued by ENC ?
- Consent : names, first names and email address of visitor are only collected when they contact ENC via the online form.
ENC considers that, when a visitor contacts the company, he consents ENC in using his data to respond to him.
These data are not stored on the site but sent directly to the email address of the persons concerned.
These data will only be used to respond to the visitor’s request, such as in the case of a quote request, and will immediately be deleted if no action is taken.
- Processing is necessary for the legitimate interests of the company.
This site uses Google Analytics (see the specific tab dedicated to cookies) which collects the IP address of visitors in order to determine their country of origin. ENC uses this data for information purposes in order to improve its services.
Who has access to the personal data processed by ENC ?
- The director and the administrative manager of ENC.
- ENC providers, namely :
- Let’s cloud SRL as IT service provider
- OVHcloud as website host
- Visitor comments may be checked by an automated spam detection service.
Personal data protection measures.
- Messaging and website are hosted on a secure server. All communications are encrypted.
- View providor security measures.
- IP address : 11 months
- Messages: The time required to respond to the visitor’s request with a maximum of 3 months.
Individual rights under GDPR
- The right of access : in addition to knowing the previous information, everyone has the right to obtain a copy of their personal data processed by ENC.
- The right of rectification : the data subject has the right to rectify inaccurate or incomplete data, including by providing an additional declaration.
- The right to be forgotten : any data subject may require the company to erase personal data for which there is no longer any justified reason to process them. This right is not absolute and is subject to the restrictions specified by Articles 17 and 19 of the GDPR.
- The right to limit data processing: the data subject has the right to obtain the restriction of data processing as provided for in Articles 18 and 19 of the GDPR.
- The right of opposition : any individual may object to the processing of personal data concerning them “for reasons relating to their particular situation”. This right is nevertheless restricted by the conditions set out in Article 21 of the GDPR.
- The right to data portability : the data subject has the right to obtain their personal data in a structured, commonly used and machine-readable format in order to reuse them for other services.