Ergosanté places importance on the protection of the privacy of those who provide us with personal data.

Our privacy policy describes how and why we process your personal data and provides you with information about your rights.

Who is the data controller of your personal data ?

The Data Controller is the company Ergosanté, a public limited company with a board of directors and a share capital of 237,294.90 euros, with its registered office at 28 ZA de Labahou - 30140 ANDUZE, France, and registered with the Nîmes Trade and Companies Register under the number 79064885100026.

Email address: dpo@ergosante.fr
Phone number: 08 05 69 06 91

What personal data of yours do we process ?

The collected personal data may include:

• First name and last name
• Function
• Postal address
• Email address
• Phone number(s)
• Company name

The personal data collected by Ergosanté, especially if you are:

• Ergosanté client
• Business partner or correspondent
• candidate for a job or an internship
• website visitor hapo.eu

are processed for the following purposes:

• the day-to-day management of your files
• the management of your information requests, quotes, appointments, etc.
• the management of your applications
• the management of your subscriptions to our newsletter, workshops, or organized training sessions

On what legal basis do we process your personal data ?

Ergosanté ensures that its processing of personal data is lawful and justified by a valid legal basis, such as the consent of the individual concerned, the necessity related to the execution of a contract to which the individual is a party, or the legitimate interests of Ergosanté.

How long do we retain your personal data ?

Ergosanté retains your personal data only for the duration necessary for the operations for which they were collected, in compliance with the applicable legislation and taking into account the statutory retention periods.

Do we perform profiling with your personal data ?

Ergosanté does not make automated decisions, including profiling, based on your personal data.

What are your rights and how can you exercise them ?

As soon as the processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before this withdrawal.

In accordance with the General Data Protection Regulation No. 2016/679 of April 27, 2016, you have the following rights:

• Right of access: the right to be informed and to request access to the personal data we process ;
• Right to rectification: the right to ask us to modify or update your personal data when they are inaccurate or incomplete ;
• Right to erasure: the right to request that we permanently delete your personal data ;
• Right to restriction: the right to request us to temporarily or permanently stop processing all or part of your personal data ;
• Right to object:
  • the right to refuse at any time the processing of your personal data for personal reasons ;
  • the right to refuse the processing of your personal data for direct marketing purposes ;
• Right to data portability: the right to request a copy of your personal data in electronic format and the right to transmit this personal data for use by a third-party service ;
• Right not to be subject to automated decision-making: the right not to be subject to a decision based solely on automated decision-making, including profiling, in cases where the decision would have a legal effect on you or produce a similarly significant effect.

You also have the right to file a complaint with the CNIL. https://www.cnil.fr/. .

To exercise your rights with Ergosanté, you can send a letter to Ergosanté, 28 ZA de Labahou - 30140 ANDUZE or an email to dpo@ergosante.fr.

What security measures have we implemented to protect your personal data ?

We have implemented appropriate technical and organizational security measures to protect your personal data against any unauthorized use, accidental partial or total loss, or destruction.

Data privacy:

Ethics is inherent to our profession, and among the key principles is confidentiality: we are committed to upholding this ethical principle, which is the foundation of our profession and our working method.

As a result,

• we systematically sign confidentiality agreements with our subcontractors, partners of Ergosanté ;
• We have incorporated the appropriate confidentiality clauses into our employees' employment contracts.

Data security:

Ergosanté's standards are strict and ensure the highest security of the data we process:

• Ultra-secure connection to Extranet and internet tools (site hapo.eu) ;
• Extranet: by username and confidential password: the data that passes through the site hapo.eu are encrypted before being sent over the internet ;
• Ultra-secure accommodations: a secure Data Center + a server hosted in a monitored facility with protected access in France ;
• Data backup: Automatic on a separate server also located in France - Implementation of a Business Continuity Plan.

Anti-intrusion security:

• Additions of security levels on routers - Procedure for blocking the service when there is a suspicion of intrusion.

Who else can have access to your personal data ?

We transmit personal information to our affiliated companies and other trusted companies or individuals who process it on our behalf, according to our instructions, in accordance with this Privacy Policy and in compliance with any other appropriate security and confidentiality measures.

Are your personal data transferred outside the European Union ?

Your personal data processed by or on behalf of Ergosanté may be transferred and processed by third parties located outside the European Union. In this case, Ergosanté ensures that the transfer of your personal data is carried out in accordance with applicable law and, in particular, that the destination territory has been subject to an adequacy decision by the European Union Commission.

Update of this privacy policy

Update date: December 2024

Cookies

A cookie is a small text file placed on your computer, mobile phone, or other device when you visit a website. The cookie helps the website providers recognize your device the next time you visit their website. There are other similar technologies such as pixel tags (transparent graphic images placed on a web page or in an email, which indicate that a page or email has been viewed), web bugs (similar to pixel tags), and web storage, which are used in desktop software or mobile devices. There are also technologies such as mobile device identifiers and SDK integrations to help companies recognize your device when you return to an app or otherwise use a service.