DATA PROTECTION
1 – Any personal data collected by the Supplier will be recorded in a Customer file and used principally to ensure smooth relations with the Customer and to process orders. Access to this data is strictly limited to the Supplier’s employees who are authorised to process such data on account of their duties.
2 – Any data collected may, where applicable, be communicated to third parties contractually bound to the Supplier to carry out subcontracted tasks necessary for the Customer’s order, without the need for authorisation from the Customer. It is specified that, in the performance of their services, third parties have only limited access to data and have a contractual obligation to use such data in accordance with the applicable personal data protection laws.
3 – Except in the cases set out above, the Supplier agrees not to sell, rent, transfer or give access to third parties to the Customer’s data without the Customer’s consent, unless required to do so for a legitimate reason (legal obligation, combating fraud or misuse, exercise of the rights of defence, etc.).
4 – In accordance with applicable laws and regulations, in particular French Act No. 78-17 of 6 January 1978 on data processing, files and liberties, as amended, and with European Regulation No. 2016/679/EU of 27 April 2016 (applicable from 25 May 2018), the Customer has a right of access, rectification, portability, cancellation, restriction of processing and objection to the processing of his personal data, which he may exercise by contacting the Supplier.