This Privacy Policy applies to all personal data processing performed
by LEBRONZE ALLOYS (hereinafter referred to as the “Data Controller”),
in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and with French Law n°78-17 of 6th January 1978 on Data Protection and Freedom of Information, known as the Data Protection Act (as amended by Law n°2018-493 of 20th June 2018 on personal data protection (1) and by any subsequent laws),
subject to the following terms and conditions:
1. Data processing
1.1. Data Controller
The Data Controller is:
LEBRONZE ALLOYS, a simplified joint-stock company, incorporated according to the Laws of France, with a share capital of 12 472 176.30 EUR, registered in the Trade and Companies Register of Châlons-en-Champagne under number 572 196 129, whose head office is located at Voie de Châlons, Route départementale 977, 51600 Suippes (France), represented by Mr. Michel Dumont, Chairman,
Owner of the brand Steriall® and the http://www.steriall.com/ website (hereinafter referred to as the "Website").
The contact details for the Data Controller are:
Postal address: LEBRONZE ALLOYS, Service RGPD, 68, rue Pierre Charron, 75008 PARIS, France,
E-mail address: rgpd@lebronze-alloys.com
1.2. Data processing purposes
Contact form: Data are processed in order to respond to requests for information, orders for manufactured Steriall® brand products sold by LEBRONZE ALLOYS, and offers for sales of products to LEBRONZE ALLOYS.
Direct marketing: Data are processed in order to send newsletters and targeted information about new products, trade fairs etc. likely to be of interest to the data subject.
Purchase Order: Data are processed in order to perform purchase orders for Steriall® brand products and the management of the relationship with those who have placed the order.
1.3. Legal basis for the processing
Contact form: The legal basis for the data processing is the consent of the data subject.
Direct marketing: The legal basis for the data processing is the consent of the data subject.
Purchase Order: The legal basis for the data processing is the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. It is based on Article 6, § 1, b) of the GDPR.
2. Processed data
2.1. Categories of data
Contact form:
- Surname,
- First name,
- E-mail,
- Telephone number,
- Company / Organization,
- Subject,
- Message,
- Attachment.
Direct marketing:
- E-mail,
Purchase Order:
- Surname,
- First name,
- E-mail,
- Billing postal address,
- Delivery postal address,
- Payment terms,
- Payment information.
2.2. Data source
All data are collected directly from the data subject.
2.3. Mandatory data collection
All data are mandatory, unless stated otherwise. Mandatory data are marked with an asterisk and/or comment.
Contact form: No response will be given to requests for information unless the data are supplied. If no data are supplied, the data subject will not receive a response.
Direct marketing: No marketing will be sent unless the data are supplied. If no data are supplied, the data subject will not receive marketing.
Purchase Order: No purchase order will be performed unless the data are supplied. If no data are supplied, the data subject will not be able to place a purchase order for Steriall® brand products.
2.4. Automated decision-making
The data processing will not involve any automated decision-making.
3. Data subjects
Contact form: The data subjects are persons who request information via the contact form available on the Websitehttp://www.steriall.com/.
Direct marketing: The data subjects are persons who consent to receive marketing via the Websitehttp://www.steriall.com/by ticking the relevant box in the contact form mentioned above.
Purchase Order: The data subjects are persons whoplace purchase orders for Steriall® brand products.
4. Data recipients
4.1. Categories of recipients
Contact form: All or some of the data may be sent to employees of the Data Controller, in particular those working for its Sales and Marketing Departments, depending on their needs.
Direct marketing: All or some of the data may be sent to employees of the Data Controller, in particular those working for its Sales and Marketing Departments, depending on their needs.
Purchase Order: All or some of the data may be sent to employees of the Data Controller, in particular those working for its Sales and Accounting Departments, depending on their needs.
4.2. Transfers of data outside the EU
All data processing: No data will be transferred outside the European Union.
5. Data storage duration
Contact form: Data will be stored for three (3) years from the date of last contact with LEBRONZE ALLOYS or until the data subject withdraws their consent (by sending an e-mail to the contact details in Point 6.2), subject to any subsequent actions taken (e.g. contract signed, order placed, etc.).
Direct marketing: Data will be stored for three (3) years from the date of last contact with LEBRONZE ALLOYS or until the data subject withdraws their consent (by sending an e-mail to the contact details in Point 6.2 or clicking the “unsubscribe” link in the mail-out).
Purchase Order: The data will be stored for as long as necessary to perform the purchase order, plus five (5) years.
6. Rights of data subjects
6.1. Information about the rights of data subjects
Data subjects whose personal data are collected have the following rights:
- Right of access,
- Right to rectification,
- Right to erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to withdraw consent at any time,
- Right to data portability.
6.2. How to exercise these rights
Data subjects may exercise their rights by writing to:
LEBRONZE ALLOYS
Service RGPD
68, rue Pierre Charron
75008 PARIS
France
rgpd@lebronze-alloys.com
6.3. Supervisory Authority Complaints
If the data subject is not satisfied with the response received from the LEBRONZE ALLOYS GDPR Department, he or she mayfile a complaint with the French Data Protection Authority, the CNIL, at https://www.cnil.fr/fr/webform/adresser-une-plainte.