Data Category

TREATMENT MANAGER

Co-managers CTLpack Vitoria-Gasteiz. S.A.U./ CTLpack Group, S.L.U.

Postal address: C/Hermanos Lumiere 1, Parque Tecnológico de Álava, C.P. 01510 Miñano (Álava)

Email: lopd@ctlpack.com  Tel. 945 29 62 00

HOW DID WE OBTAIN YOUR DATA?

Obtaining of the interested party itself:  If you are already a customer, you have either facilitated them to us off or online on ordering our services in order to maintain the contractual relationship with you or, for example, if you have come to our offices or plant, you may have facilitated them to us when you accessed our facilities as a visitor. Similarly, your data may have been communicated to us by our sales network, following your providing of your data to any of our salespeople. The data categories we process are: identification data, postal or electronic mailing addresses, commercial information and financial data. We do not process specially protected data.

When you facilitate your personal data to us, you are guaranteeing that you are authorised to do so and that it is true, accurate and up-to-date, that it is not confidential and that it does not breach any contractual restriction or third-party rights and you commit yourself to refrain from impersonating other Users.

Automatically obtained on visiting our website: If you have provided us with the data through this website, you must be aware that we collect information, for example, when you access the site, when you register as a user, fill in any form with personal data or when you communicate with us directly by email.

When you visit our website data are sent from your browser to our server in order to optimise our services and improve your user experience, for example when you access the site or when you start using our Services through the services of third parties such as social networks or Google.  These data can be automatically gathered and stored by us or by third parties on our behalf. These data may include:

• the user’s IP address
• the time and date of the visit
• the URL of the site the user is coming from
• the pages visited on our website
• information about the browser used (browser type and version, operating system, etc.).

We may process and record these uses, sessions and related information either individually, with the help of third-party services or even by using cookies and other tracking technologies such as flash cookies and web analytics.

Our website has connectors to social networks, when you choose to interact with us through a social network, we cannot take responsibility for the privacy settings chosen by the user, the social network being able to report your IP address or which page you are visiting on our website and a cookie may be set to allow them to operate properly or for example when you name is included in the Likes that you give or in the comments you make in our page on the social network. If you do now want your personal data to be associated to these Likes or comments set your privacy settings to prevent it, giving a pseudonym to your data by, for example, setting yourself a nickname or alias that does not reveal your name and surname.

If you start the session on one of these social networks during your visit to our website, the social network can add this information to your profile and this information will be transferred to the social network. If you do not want this data transfer to be made, exit your social network session before you enter our websites or mobile apps, as it is not in our hands to influence this data collection and transfer through the social connectors.

If the user, through our official website on a social network, decides to publish and/or share texts, photos, videos and other kinds of information and/or contents, the former shall be the sole party responsible that such contents comply with the applicable legal framework. We remind you that you must respect the data of third parties, you must their privacy having special care in communicating or publishing their data of a personal nature. Only the rightful owner can authorise the processing of their personal data. The user may only publish on this page or on our official page on social networks, personal data, photographs and information or other content of which they are the owner and where the property belongs to them or with regards to which they have been granted the authorisation of third parties. If you facilitate or publish third party data, it is your responsibility to have their prior and express consent to use them, for communicating and publishing them it is your responsibility to inform them of the treatment of their data by us or their publication by you. The publication of third party data may infringe, in addition to the legislation on data protection, that relating to the right to honour, to intimacy or to the own image of the said third parties.

In any event, we may from both this website as well as from our pages on social networks, any content published by the user when we detect that the user has breached current legislation and that described in this privacy policy.

The Social Networks are no directly lodged in our Services. Your interactions with them are governed by their policies and not by ours. Read the privacy policies of these social networks for detailed information on the collection and transfer of personal data, your rights and on the settings of your privacy.

Communication by a third party of the data of the interested party: In the event where it is not the interested party concerned but a third party who provides us with the data on the former, your data may have been communicated, as applicable, by our sales or distributor network prior to the providing of your data to any of them.

THIRD PARTY DATA

You must respect the privacy of third parties, especially with respect to disclosure of their data of a personal nature. Please remember that as a user you can only provide and consent to processing of your own personal data and not those of third parties. If you provide us with third-person data you are assigning their information and it is your responsibility to obtain the prior and express consent of the third parties involved to use and provide said data. You are also responsible for informing them that their data has been added to our files.

The provision of third-party data without consent, in addition to infringing the data protection regulations, may also breach the right to honour, privacy and self-image of said third parties. These rights are protected under Organic Law 1/1982 5 of May on civil protection of the right to honour, personal and family privacy and one’s own image.

WHAT DO WE PROCESS YOUR DATA FOR AND WHAT IS OUR LEGAL BASIS FOR DOING SO?

The data you provide us, as well as all the data generated during the development of the relationship we have with you, we can process them for different purposes and with different legitimate bases.

Purpose 1. To maintain contact and communication, manage the contractual or pre-contractual relationship and after-sales and warranty services.

Purpose 2. In the case of providing us with your curricular data or sending us your curriculum, to contact you and manage the selection processes that we carry out.

Legal basis: Contractual relationship or application of pre-contractual measures at the request of the data subject (art. 6.1. b RGPD).

Purpose 3. To send potential customers, through electronic communications, information about our activities, products and/or services similar to those requested.

Purpose 4. Installation of non-technical cookies.

Purpose 5. To participate in events, activities, promotions or contests that we organize.

Legal basis: Consent.

Purpose 6. Transfers derived from tax regulations.

Purpose 7. Management of the internal information system, if any. In the event that the complaint is not anonymous, the identification of the complainant will not be provided to the respondent.

Legal basis: Compliance with a legal regulation or obligation (tax and internal information system regulations).

Purpose 8. Manage access and control of visits to our facilities.

Purpose 9. To send to current clients, by means of electronic communications, information about our activities, products and/or services similar to those requested.

Purpose 10. Installation of technical cookies.

Purpose 11. Conducting opinion/satisfaction surveys.

Purpose 12. In the case of users of our website, or sender or recipient of an email: to manage those made online, and contact you.

Purpose 13. To communicate data to any of the companies that make up the CTLpack Group (currently, CTLpack Group, S.L.U.; CTLpack Vitoria-Gasteiz. S.A.U.; CTLpack Vichy SAS): for internal administrative purposes, including the processing of personal data of customers, suppliers or staff.

Legal basis: Legitimate interest

When the legitimacy is based on consent you may withdraw that consent at any time by sending us an e-mail to that effect to lopd@ctlpack.com. Such withdrawal does not condition the processing of your data for the other purposes described above.

If it is based on our legitimate interest the indicated treatment of your data we consider that it is proportionate and involves a minimal impact on your privacy, but always prevail over our legitimate interest, your interests, rights or freedoms, so if you do not want us to treat your data for these purposes please send us an e-mail to that effect to lopd@ctlpack.com and we will do so.

Specific information regarding legitimate interest as a legal basis, both for data communications within the CTLpack Group (currently, CTLpack Group, S.L.U.; CTLpack Vitoria-Gasteiz. S.A.U.; CTLpack Vichy SAS) for internal administrative purposes, as well as for sending, to clients of the companies of the group, information through electronic communications about activities, products and/or services of such companies.

We understand that this legitimate interest is foreseeable for the data subject, as it is expressly recognized in the RGPD and is aware that the aforementioned companies form a business group for the purposes of data protection, being the impact on data subjects very limited. We have a procedure for sending commercial communications, in accordance with data protection regulations, and a weighting analysis on this legitimate interest, of which you can request an extract. Therefore, we consider that the aforementioned data communications within the group are proportionate and have a minimal impact on privacy. In any case, your interests, rights or freedoms will always prevail over our interests, so if you do not want us to process your data for these purposes, please send us an e-mail to lopd@ctlpack.com.

The provision of the requested data is mandatory because it is essential to formalize and / or maintain the contractual or pre-contractual relationship and meet the legal obligations arising therefrom; if you do not provide them, we can not provide the service derived from that relationship.

RETENTION PERIOD

We shall retain the personal information that you provide insofar as you do not request its deletion. Even after this has been requested, we shall keep them for the necessary time and limiting their processing, solely to complying with the legal/contractual obligations we are subject to and/or during the legal periods set for the expiry of any liability on our part and/or for the exercising or defence of claims derived from the relationship maintained with the interested party.

TARGET

Nous vous informons que les données que vous fournissez pourront être communiquées à des tiers pour la réalisation de finalités directement liées aux fonctions légitimes du cédant et du cessionnaire comme :

1. Aux sociétés de transport en charge de la logistique d’expédition et de livraison de nos marchandises.
2. À l'une des sociétés qui composent le Groupe CTLpack (actuellement CTLpack Group, S.L.U.; CTLpack Vitoria-Gasteiz. S.A.U.; CTLpack Vichy SAS) à des fins administratives internes et pour gérer les processus de contact et de sélection du personnel effectués au sein du groupe d'entreprises, au cas où vous nous auriez fourni votre CV.
3. Aux entités bancaires pour la gestion des encaissements et des paiements.
4. Aux entités ou organismes auxquels il existe une obligation légale de communiquer des données (Administration Fiscale, …).

INTERNATIONAL TRANSFERS

Par principe, les données traités par la société CTLPACK VICHY SAS ne sont pas transférées en dehors de l’Union Européenne et sont stockées sur des serveurs hébergés en France.

Certaines données sont transférées à l’intérieur du groupe CTLpack, notamment les données financières, mais restent à l’intérieure de l’Union Européenne.

De manière très exceptionnelle, certaines données seront transférées aux Etats Unis, mais dans pareil cas, il sera conclu un contrat intégrant les clauses contractuelles types.

Dans le cas où un prestataire technique ou sous-traitant traite des données pour le compte de la société CTLPACK VICHY SAS, cette dernière s’assurera que :

• Soit ce dernier ne transfère aucune donnée en dehors de l’Union Européenne
• Soit le transfert s’opère auprès d’un pays ayant fait l’objet d’une décision d’adéquation
• Soit le transfert s’opère après avoir mis en œuvre des garanties appropriées telles que :
  • Mise en place de règles d’entreprise contraignantes
  • Mise en place de clauses types de protection des données.

Les sociétés éditrices tiers sont responsables de leurs propres transferts de données.

DROIT DES UTILISATEURS/CLIENTS

Conformément aux Dispositions relatives aux Données Personnelles, l’Utilisateur ou le Client dispose de plusieurs droits concernant ses données :

• Le droit d’’accès à ses données à caractère personnel,
• Le droit de rectification ou effacement de celles-ci,
• Le droit de limiter le traitement,
• Le droit de s’opposer au traitement,
• Le droit à la portabilité des données, dans les conditions et dans les limites prévues par le RGPD,
• Le droit de retirer son consentement à tout moment (uniquement lorsque le traitement est fondé sur son consentement). Ce retrait de consentement n’aura d’effet que pour l’avenir à partir du moment où la licéité de la demande sera réceptionnée et validée par CTLPACK VICHY SAS.
• Le droit de définir des directives générales et particulières précisant la manière dont l’Utilisateur entend que soient exercés ses droits après son décès,
• Le droit d’introduire une réclamation auprès de la CNIL https://www.cnil.fr/fr/plaintes

Aucune décision automatisée n’est prise à partir des informations de l’Utilisateur ou le Client (type profilage).

Il sera rappelé que lorsque les données sont collectées pour l’exécution d’un contrat et/ou des mesures précontractuelles, ces dernières sont obligatoires. Tout défaut d’information entrainerait l’exclusion du droit pour lequel les données sont collectées.

Pour exercer ces droits ou pour tout renseignement complémentaire, vous pouvez contacter le référent données personnelles dont les coordonnées figurent en tête des présentes.