Privacy Policy

The purpose of this privacy policy (hereinafter the "Policy") is to inform visitors or users  (hereinafter the "User") of the website www.sarpi.remediation.veolia.com (hereinafter the "Site") of the  terms and conditions for the protection of their personal data in accordance with Law n°78-17 of January 6, 1978 relating to data processing, files and frwww.sarpi.veolia.comeedoms as modified by the Law of June 20, 2018, with the implementing Decree N°2019-536 of May 29, 2019 and  Regulation No. 2016-679 of 27 April 2016 on the protection of individuals with regard to the  processing of personal data and on the free movement of such data (hereinafter collectively the "Regulation"). 

The publisher of the Site is the company, VEOLIA ENVIRONNEMENT SA registered  with the commercial register of Nanterre, under the number 403 210 032 , having its registered office Environnement  whose registered office is at 21 rue de la Boétie, 78008 Paris, France (hereinafter "the Publisher" or "Veolia"). 

The terms and conditions for processing data collected through forms are included in the Information Notice of the form(s). 

The Policy may be modified at any time by Veolia, in particular in order to comply with any  regulatory, legal, editorial or technical developments. 

This Privacy Policy is an integral part of the Terms and Conditions of Use of the Site. 

The methods of collecting and processing information collected by means of cookies are set  out in the "Cookies Policy" (https://www.sarpi.remediation.veolia.com/en-en/cookie-policy).

Identification of the controller

The controller of the User's personal data is, as the case may be, the following entity or  entities:

• the company Veolia Environnement SA 
• the company SARP Industries (hereinafter “SARPI”)
• The SARP Industries entity responsible for processing the User's request or answering their question, depending on the subject of the request entered in the contact form.

Description of the processing activities 

Within the framework of the operation of the Site, the Publisher may collect and process  personal data in order to allow the User to access the features and services offered by the  Site (hereinafter the "Services"). 

1) What categories of data are collected?

• Contact data: refers to the compulsory data that the User fills in when filling in the  contact form(s), namely: surname, first name, email address, company name,  telephone number, address, postcode, town, country of residence.
• Data voluntarily published by the User: refers to the personal information that the  User voluntarily communicates to the Editor by filling in the free text zones provided  for this purpose in the contact form(s), namely "Subject of the request" and  "Message". The Publisher strongly recommends to the User to avoid any  communication of personal data via these text boxes or in any case to limit this  communication to what is strictly necessary to process the User's request (hereafter  "Published Data"). 

All such data is hereinafter collectively referred to as the "Data". 

2) Why does the Publisher collect User Data? 

The Data are collected through the contact form in order to answer the questions of the  Users concerning the following main topics 

1. Collecting requests for information from target audiences (clients, stakeholders, candidates)
2. To process the User's request for information or question and to communicate effectively with the User in the following areas: Human Resources, Sales and Communication.
3. To send communications to the User in relation to the main interests previously  expressed by the User. 

The mandatory fields in the contact form are marked with an asterisk. SARPI will not be able  to respond to your request if you do not fill in these mandatory sections. 

3) What is the legal basis for the processing of User Data? 

Data processing is only lawful if it is based on one of the legal bases defined by the  Regulations. In the context of the operation of the Site, the processing is based on the  following legal bases:

• If the User is a professional prospect wishing to receive information or formulate  requests on the activities and services offered by SARPI in relation to specific needs  previously expressed, or if the User is already a SARPI customer : SARPI's legitimate  interest.
• If the User is a prospect (professional), the Publisher collects his consent by means  of a checkbox before sending any global information via commercial  communications.
• If the User is a candidate (or potential candidate): SARPI's legitimate interest in responding to the candidate/potential candidate's request.
• If the User is a supplier: the contract or the execution of pre-contractual measures  taken at the request of the data subject.
• If the User is a stakeholder: consent collected by means of a checkbox. 

4) Recipients of the Data collected 

The Data collected through the contact form is intended for the internal services of the entity  responsible for processing in order to respond to the User's request. 

This may include, for example, the "Sales" department, the "Human Resources" department,  and the "Communication" department. 

Internal recipients may also be Veolia Group entities located in the European Union (EU) or  outside the EU, it being understood that any transfer of Data outside the EU will be carried  out under the conditions of the article "Transfer of Data outside the European Union"  below. 

Each recipient subsidiary may, as the case may be, be a subcontractor or a processor of the  Data provided. 

The Data may also be transferred/used by third parties under the following conditions:

• Data transferred to public authorities and/or bodies
  In accordance with the Regulations in force, the Data may be transmitted to the  competent authorities on request and in particular to public bodies, exclusively to  meet legal obligations, judicial officers, ministerial officers and bodies responsible for  collecting debts, as well as in the case of the search for the authors of offenses  committed on the Internet.
• Data provided to third parties
  The Data may be communicated or made accessible to the Publisher's  subcontractors, suppliers and third-party service providers (such as the Site's host,  Veolia's IT and/or technical service providers).
• Social networks
  The User has the possibility to share the pages he/she is interested in on social  networks by clicking on the share buttons. 

The collection of information through social network sharing buttons is subject to the  privacy policies of those third parties. We invite you to read the policies of these  social networks to find out how your personal data is used.

Exercise of user rights 

In accordance with the Regulation, any individual User has the right to access, rectify,  delete, limit and port his or her Data. 

The User also has the right to define general and specific directives defining the way in  which he/she intends his/her rights to be exercised, after his/her death. 

For all processing operations carried out within the framework of the Site and only within this  framework, regardless of the Entity responsible for processing, the User may exercise his  rights,

• by writing to [email protected] or
• by post to : Monsieur le Délégué à la Protection des Données, Sarp Industries, 427 route du Hazay, 78520 Limay

by sending proof of identity or any other official document. 

In case of difficulty concerning the management of his Personal Data by the Publisher, the  User may contact the Data Protection Officer of SARPI (adresse mail: [email protected]. If the response from the DPO is not satisfactory, the User may submit a complaint to the  competent protection authority (CNIL - 3, place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07 ). 

The Publisher reminds that the User may, for legitimate reasons, object to the processing of his Data. 

Where processing is based on consent, the User may withdraw consent at any time by  sending an e-mail to [email protected].

It is specified that if the User exercises some of the above rights, the Publisher may be  unable to carry out the actions necessary to achieve the purposes described above, or the  User may not be able to use all or part of the Services. 

The Editor is obliged to keep the Data collected from Users up to date. It is therefore recommended that the User inform the Publisher of any changes concerning him/her by  sending an e-mail to the following address: [email protected].

Data retention and archiving 

User Data will not be retained beyond the period strictly necessary for the purposes set out  herein and in accordance with the Regulations. 

In this regard : 

The Data is kept in intermediate storage to enable SARPI to defend itself in the event of legal  proceedings or for the purpose of preventing and detecting criminal offenses, with a view to  making the Data available to the judicial authorities. 

At the end of the intermediate archiving period, the User Data will be permanently deleted. 

In addition, the Publisher may keep Data permanently anonymised, for the purpose of  producing statistical studies. These studies do not identify Users, and are only based on trends derived from their aggregated Data. 

Security 

The Publisher takes appropriate technical and organizational measures to ensure the  security of the Data and to prevent unauthorized access or disclosure of the User Data.  However, the Publisher cannot guarantee the elimination of any risk of misappropriation,  alteration, unlawful reproduction or misuse of the Data. 

The database created when a User sends a request through the contact form is strictly  confidential. Veolia undertakes to take all useful precautions, organizational and technical  measures appropriate to preserve the security, integrity and confidentiality of the Data and,  in particular, to prevent it from being distorted, damaged or accessed by unauthorized third  parties.

Transfer of data outside the European Union 

In the event of transfer of User Data to a subsidiary of the Veolia Group or to a third party  located outside the European Union, SARPI ensures that the recipient country has been the  subject of an adequacy decision by the European Commission. If this is not the case, SARPI  undertakes to use the appropriate legal instruments, in particular the European  Commission's Standard Model Contractual Clauses, to govern the transfer. 

If the User wishes to obtain more information on how SARPI protects his/her Data or wishes  to obtain a copy of the legal instruments implemented, the User may make a request to the  following address: [email protected].