Privacy policy

Updated to 26 06 2024

This privacy policy is intended for you, the user of the website www.geolith.fr.

The purpose of this privacy policy is to tell you what data is processed and why, and what rights you have.

You will find the list of data processed in article 3 of this document.

Your data is processed by Geolith, the company that published the www.geolith.fr website.

Processing is based on Article 6 of the RGPD, in compliance with the purposes specified in article 5.

It is important to inform you of your rights, a list of which is presented in article 7.

To exercise your rights, simply send your request to contact@geolith.fr and we will get back to you as soon as possible.

We make every effort to ensure the security of your data.

The processing of personal data is governed by:

Law no. 78-17 of 6 January 1978 on data processing, data files and individual liberties (hereinafter referred to as the “Data Processing and Individual Liberties Law”);
By Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, which came into force on 25 May 2018 (hereinafter “RGPD”).

Article 1. Definitions

Controller: Body which, alone or jointly with others, determines the purposes and means of the processing (Article 4.7 RGPD).
Personal data: Any information relating to an identified or identifiable natural person, directly or indirectly (article 4.1 RGPD).
Sub-processor: Body which processes personal data on behalf of the controller (article 4.8 RGPD).
Processing of personal data: Any operation or set of operations which is performed upon personal data or sets of data, whether or not by automatic means, such as collection, recording, organisation, storage, erasure, etc. (article 4.2 RGPD).
User: Any person using the www.geolith.fr website.

Article 2. Identity of the data controller

Your data is processed by:

The company Geolith represented by Jean-Philippe Gibaud, 1 rue Jean Rostand, 91400 Orsay, France.

Article 3. Data processed

The data controller will be required to process various user data, such as:

Data required for contact forms:

Last name, First name
e-mail address
Company name

Data required for applications:

CV
Covering letter

Data collected automatically via cookies:

Cookies necessary for the operation of the site (e.g. WordPress cookies)
Statistical cookies activated only with the explicit consent of the user.

Article 4. Lawfulness of processing

Data processing is lawful insofar as:

They aim to comply with the legal obligations to which the data controller is subject (article 6.1 c RGPD) and/or ;
The user has consented to the processing of his/her data for one or more specific purposes (article 6.1 a RGPD) and/or ;
There is a legitimate interest pursued by the data controller (article 6.1 f GDPR).

Article 5. Purposes of processing

Your various data may be collected by Geolith for explicit, legitimate and specific purposes in order to ensure:

Managing requests for information, interviews, appointments, etc.
Evaluating applications and contacting candidates.
Monitoring and analysing site traffic in order to improve the user experience.

Article 6. Recipients of data

The persons who will have access to personal data are:

Authorised personnel within Geolith.
Service providers such as Google Analytics and Google Tag Manager for statistical analyses.
Possibly, third-party partners if this is necessary to respond to your request.

Article 7. Your rights

As data subjects, you have the following rights with regard to your personal data:

The right to access your data (article 15 RGPD) and if necessary the right to rectify it (article 16 RGPD) by correcting or completing it.
The right to object to one or more processing operations (article 21 GDPR).
The right to erasure, also known as the right to be forgotten (Article 17 GDPR).
The right to portability (article 20 GDPR).
The right to limit processing (article 18 GDPR).

You have the right to make a complaint to our services or to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the supervisory authority (article 77 RGPD).

To exercise one or more of your rights, please send your request to contact@geolith.fr. You will receive a reply as soon as possible.

Article 8: How long we keep your data

Geolith undertakes to ensure that the data collected is kept in a form that enables you to be identified for no longer than is necessary for the purposes for which the data is collected and processed.

Contact form data is kept for 24 months.
Application data is also kept for 24 months.
Statistical cookies are kept for a period of 18 months.

Article 9. Security

Geolith and any subcontractors undertake to implement all technical and organisational measures to ensure the security of our processing of personal data and the confidentiality of your data, in accordance with the French Data Protection Act and the RGPD. Data is stored on a secure server to which only Geolith has access.

Article 10. Transfer of data outside the European Union

Geolith undertakes not to transfer user data outside the European Union. In the event that Geolith should do so, it will inform users, indicating the measures taken to control this transfer and ensure that the confidentiality of their data is respected.

Article 11. Updating of this privacy policy

We may modify this policy from time to time. If we make substantial changes to the way we use your personal data, we will notify you by means of a notice visible on the site or by contacting you directly. If you do not agree to these changes, please do not continue to use the site.