Privacy Policy

Data Controller

ESTRADS Certification SAS, 25 avenue Duquesne, 75007 Paris, RCS Paris 881 985 600, is responsible for the data processing described below.

Any questions regarding data protection may be sent to dpo@estrads.fr or by mail to ESTRADS Certification, Data Protection, 25 avenue Duquesne, 75007 Paris.

Scope of Application

This policy applies to the estrads.fr website and the websites label-francerse.fr, label-prods.com, label-protarmac.fr, label-protrack.com, cdofac.fr, ceerse.fr, and nsi-national-sovereignty-index.fr.

It does not apply to the ARGOS platform, which is reserved for certified organizations and has its own privacy policy.

General Principle

These are informational websites. They do not create user accounts, do not offer newsletters, and do not host any customer portals. The only data collected comes from the forms you fill out and the server’s technical logs.

Treatments Implemented

Treatment	Data Collected	Legal Basis	Shelf Life
Contact Form	First Name, Last Name, Company, Phone Number, Email, Subject, Message	Legitimate interest: responding to requests received	3 years from the last contact
Signaling device	Author's identity (unless the submission is anonymous), reported facts, and individuals and organizations mentioned	Legal Requirement, Act of December 9, 2016, as amended	Two months after closure if the report does not fall within the scope of the system; for the duration of the proceedings, followed by archiving with restricted access in all other cases
Applications	Contact information, resume, cover letter, work history	Precontractual measures taken at the individual's request	2 years from the last contact
Sponsorship	Contact information for the person making contact and the name of the sponsor they provide	Legitimate Interest: Facilitating Connections	3 years from the last contact
Log Files	IP address, date and time, pages viewed, browser	Legal Retention Obligation and Legitimate Interest in Security	12 months

No data is used for marketing purposes. No automated decisions are made based on this data. No profiling is performed.

Contact Form

The first name, last name, company, phone number, email, and subject fields are required to process the request. The message field is optional. The data is sent via email to contact@estrads.fr and then forwarded to the appropriate staff members atESTRADS Certification who are responsible for responding.

Signaling device

The “Report a Problem” form allows you to report a violation observed at a certified organization or an organization seeking certification, or a violation attributable to ESTRADS Certification.

Reports are received at contact@estrads.fr, access to which is limited to the only two individuals authorized to view them: Mr. Jean-Michel Samoyau, President and designated contact person, and Mr. Colin Samoyau. Unlike other messages received at this address, reports are not forwarded to any other employees.

The identity of the person filing a report, the identities of the individuals named in the report, and the information collected are strictly confidential. They may be disclosed to third parties only with the consent of the person filing the report, or to a judicial authority under the conditions provided by law.

A report can be filed anonymously. In this case, no individual response will be provided.

The person who is the subject of a report is informed of the processing concerning them within a timeframe consistent with the preservation of evidence and has the rights described below, with the exception of the right to object. Under no circumstances may they be informed of the identity of the person who filed the report.

The complete procedure is described on the "Report a Problem" page.

Applications

Applications received at contact@estrads.fr are retained for two years after the last exchange so that we can contact the applicant again if a suitable position becomes available. A request for immediate deletion may be sent to dpo@estrads.fr.

Sponsorship

Under the referral program, the referrer does not provide the contact information of the person they recommend. It is that person who contacts ESTRADS Certification , specifying the referrer’s name. Therefore, no data is collected from a third party without the person concerned having initiated it.

Recipients

The data is accessible only toESTRADS Certification employees whose job duties warrant access. Reports are restricted to the two authorized individuals mentioned above.

No data is sold, rented, or transferred. No data is shared with business partners.

Data may be disclosed to a court officer or to an administrative or judicial authority when required by law.

Contractors and Hosting

The website and associated email service are hosted by OVH SAS on servers located in France. OVH acts as a processor within the meaning of Article 28 of the GDPR.

No data collected on these websites is transferred outside the European Union.

Security

The websites are accessible via HTTPS. Access to the data is restricted to authorized personnel. Reports are subject to enhanced security measures.

Your Rights

You have the following rights regarding your personal data:

Access: Obtain confirmation that your personal data is being processed and receive a copy of it
correction: having inaccurate or incomplete data corrected
Deletion: Request the deletion of your data, subject to legal retention requirements
Restriction: Request a temporary suspension of payment
Objection: You may object to processing based on a legitimate interest for reasons related to your particular situation
Data portability: to receive your data in a structured format, when this right applies
Post-Mortem Guidelines: Decide What Will Happen to Your Data After Your Death

Exercise Your Rights

Please send your request to dpo@estrads.fr or by mail to ESTRADS Certification, Data Protection, 25 avenue Duquesne, 75007 Paris.

You will receive a response within one month, or within three months if the request is complex; in that case, you will be notified.

As a general rule, no identification is required. Proof of identity is requested only in cases of reasonable doubt regarding the applicant’s identity, in accordance with Article 12 of the GDPR.

Complaint

If, after contacting us, you believe that your rights have not been respected, you may file a complaint with the French Data Protection Authority (CNIL): CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.