Privacy

The purpose of this privacy policy is to inform users of the Centre EPÉU website about how their personal data is collected, used and protected, in accordance with the General Data Protection Regulation (GDPR) and applicable French law.

1. Data controller

The personal data collected on the Centre EPÉU website is processed under the responsibility of the operating company:

PONGH – Société par actions simplifiée (SAS)
Operator of the Centre EPÉU
1 Allée du Parc
11300 Saint-Martin-de-Villereglan – France

Contact email: info@cepeu.fr

2. Personal data collected

The Centre EPÉU collects only the data strictly necessary for its activities.

The data that may be collected includes in particular:

• surname and first name,
• email address,
• telephone number,
• information provided in the contact or appointment forms,
• information required for registration for a training course, a teaching or a programme.

The Centre EPÉU collects no medical data, nor any data falling within the special categories within the meaning of the GDPR.

3. Purposes of data collection

Personal data is collected for the following purposes:

• handling contact requests,
• administrative management of registrations and appointments,
• organisation of the training courses, teachings and programmes offered,
• communication of information relating to the activities of the Centre EPÉU,
• compliance with legal and regulatory obligations.

The data is never used for external commercial purposes or sold to third parties.

4. Legal basis for processing

The processing of personal data is based on:

• the explicit consent of the person concerned,
• the performance of a contractual or pre-contractual relationship,
• and compliance with the applicable legal obligations.

5. Recipients of the data

Personal data is intended exclusively for:

• the administrative office of the Centre EPÉU,
• the authorised persons within the company PONGH.

No personal data is transmitted to third parties, except where required by law or regulation.

In the context of interventions in companies, no individual identifying data is communicated to the employer.

6. Confidentiality and security of the data

The Centre EPÉU implements appropriate technical and organisational measures in order to guarantee:

• the confidentiality of the data,
• its integrity,
• and its security.

Access to the data is strictly limited to authorised persons, within the scope of their duties.

7. Data retention period

Personal data is retained:

• for the time necessary to handle the request or to perform the service,
• then archived in accordance with the applicable legal obligations,
• or deleted at the end of the statutory retention periods.

8. Rights of the persons concerned

In accordance with the GDPR, every person has the following rights:

• right of access to their personal data,
• right to rectification,
• right to erasure (within the legal limits),
• right to restriction of processing,
• right to object,
• right to portability of their data.

These rights may be exercised by sending a written request to: info@cepeu.fr

Proof of identity may be requested in order to guarantee the security of the data.

9. Cookies and trackers

The Centre EPÉU website may use cookies that are strictly necessary for its operation.

No advertising tracking or profiling cookie is used without the user’s explicit consent.

Users can configure their browser to refuse or delete cookies.

10. Forms and remote exchanges

Information transmitted via:

• contact forms,
• appointment forms,
• email exchanges,
• or videoconferencing tools,

is processed exclusively within the scope of the purposes described in this policy.

No data arising from these exchanges is used for any other purpose.

11. Changes to the privacy policy

The Centre EPÉU reserves the right to amend this privacy policy in order to ensure its compliance with changes in legislation.

The version in force is the one published on the website at the time of consultation.

12. Complaints

In the event of disagreement concerning the processing of their personal data, users have the right to lodge a complaint with the competent authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)
www.cnil.fr

Summary

The Centre EPÉU undertakes to process personal data in a manner that is confidential, responsible and compliant with the regulations in force, in strict respect of individuals and their freedom.