Privacy Policy of Equans

Date of last update: 22/08/2023

Equans SAS (hereinafter referred to as "Equans", "we", "us" or "our") owns and operates the www.equans.com website (hereinafter referred to as the "Site").

As a responsible player, Equans undertakes to protect the personal data collected and processed when browsing the Site in compliance with Law n°78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties, amended and Regulation n°2016-679 known as the "GDPR" of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter collectively referred to as the "Data Protection Laws and Regulations").

1- What is the purpose of this privacy policy?

The purpose of this confidentiality policy (hereinafter referred to as the "Policy") is to inform visitors and users (hereinafter referred to as "Users", "you" or "your") of the methods used to process their personal data (hereinafter referred to as "data") in the context of the use of the functionalities and services offered by the Site.

Equans reserves the right to modify the Policy when necessary (for example, in the event of changes in legislation). The current version available on the Site indicates the date of the last update.

This Policy does not apply to the processing of personal data carried out in the Equans recruitment area (www.jobs.equans.com), which has its own confidentiality policy.

2- Who is responsible for processing your data?

The data controller is the person who determines the purposes and means of processing personal data. The data controller of the personal data collected and processed on this Site is Equans SAS ("EQUANS").

Equans SAS

RCS Nanterre B 892 318 312
Postal address: 49-51 rue Louis Blanc - 92400 Courbevoie, France
Email address: communication@equans.com

3- For what purposes do we process your data?

EQUANS processes your personal data in order to :

provide you and/or your company with a response to your request for information, assistance or contact;
if necessary, send your data to other Equans Group entities so that they can respond to your request;
improve the performance and user experience of the Site and contribute to the detection, prevention and resolution of any technical problems (for more information, please consult the Cookie Management policy.

Your data will not be further processed in a way that is incompatible with the purposes described above.

The processing does not involve automated decision-making.

4- On what legal basis do we process your data?

Equans processes your data on the basis of :

its legitimate interest in :

respond to requests made to it,
manage the cookies strictly necessary for the proper use of the Site;

your consent: for the management of other cookies and tracers (marketing, statistics, etc.). You may withdraw your consent at any time by clicking on the "Cookie settings" button at the bottom left of each page of the Site or on the Cookie management page.

5- What categories of data do we process?

Equans only collects the data necessary for the purposes identified in the Policy, namely:

Identification: surname, first name,
Contact details: telephone number, e-mail address,
Professional details: position, name of company employing you, sector of activity, etc.
Connection data: logs, IP address, cookies, etc.
Other: where applicable, any personal data communicated in the free comment zones of the Site's forms.

The User is invited not to communicate personal data within the free comment zones, in particular when it concerns data considered sensitive by Data Protection Laws and Regulations (e.g. racial or ethnic origin, political, philosophical or religious opinions, trade union membership, data relating to health or sex life, offences, convictions, security measures).

Please note that EQUANS is not authorised to process personal data which is not necessary for the purposes it has identified and reserves the right to delete such data as soon as possible.

Mandatory information is marked with an asterisk (*) on forms.

6- How did we obtain your data?

Equans has obtained your data directly from you:

during your browsing on the Site (cookies and tracers), and
where applicable, when they are collected from forms.

7- How long do we keep your data?

Equans retains your personal data for as long as is necessary for the purposes for which it was collected:

for 6 months from receipt of your request on the contact form;
for the calendar year of the request, plus five years for requests to exercise individual rights addressed to the EQUANS Data Protection Officer (1 year for proof of identity requested by Equans);
for the periods set out in the Cookie management policy (which may not exceed 13 months).

Once these retention periods have been reached, your data is deleted from our systems or anonymised.

8- To whom may we communicate your data?

Only authorised recipients receive and have access to your personal data, within the limits of their respective needs, namely :

Equans staff responsible for managing and monitoring requests;
Equans staff involved in processing requests;
Equans' IT service providers, responsible in particular for hosting and maintaining the Site, providing the cookie management functionality, etc.

9- Do we transfer your data outside the European Union?

Your data is mainly processed and stored within the European Union. However, we may need to transfer your data outside the European Union in situations where another entity of the Equans Group would be better able to respond to your request.

Equans takes all necessary measures to ensure that your data is processed in such a way as to ensure an adequate level of protection. For example, by signing the European Commission's Standard Contractual Clauses or any other mechanism provided for by Data Protection Laws and Regulations.

10- How do we protect your data?

Equans undertakes to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged or accessed by unauthorised third parties.

Consequently, Equans implements all appropriate technical and organisational measures in order to guarantee a level of security appropriate to the risks, taking into account the state of knowledge, the costs of implementation, the nature, scope, context and purposes of the processing.

Equans uses service providers, acting as data processors within the meaning of the GDPR. These data processors may have access to your personal data for the sole purpose of carrying out the tasks entrusted to them. Equans ensures that these data processors provide the necessary guarantees to ensure the protection of your data. The list of data processors is available on request from the Data Protection Officer.

11- What individual rights do you have under Data Protection Laws and Regulations?

Right of access

You have the right to know at any time whether we are processing your personal data, to have access to this data and to receive further information on :

objectives ;
the categories of personal data processed;
the recipients or categories of recipients (in particular recipients in third countries) ;
if possible, the retention period or, if this is not possible, the criteria for determining the retention period;
the existence of your privacy rights ;
the right to lodge a complaint with the supervisory authority;
the information we have about the source of the data if we have obtained your personal data from a third party; and
the existence of automated decision-making.

You also have the right to obtain a free and complete copy of the data processed.

Right of rectification

You have the right to have inaccurate personal data about you corrected or to have your data completed if it is incomplete.

Right to erasure ("right to be forgotten")

You have the right to have your personal data deleted as soon as possible in the following situations:

your personal data are no longer necessary for the purposes for which they were collected or processed by EQUANS; or
you object to the processing of your personal data and there are no legitimate grounds for the processing by EQUANS; or
your personal data is processed unlawfully; or
your personal data must be deleted in order to comply with a specific obligation; or
you have withdrawn your consent and there is no other legal basis for processing personal data.

Please note that we may not always be able to erase all personal data on request, for example where processing is necessary for the establishment, exercise or defence of legal claims or because we have a legal obligation to retain certain data or because we may need it in connection with an existing contractual relationship. We will inform you in more detail in our response to your request.

Right to restrict processing

You have the right to have the processing of your personal data restricted if any of the following situations apply:

you dispute the accuracy of personal data: their use is restricted for a period allowing EQUANS to verify the accuracy of the data;
the processing of your personal data is unlawful: instead of deleting your data, you request that their use be restricted;
Equans no longer needs your data for the purposes of the original processing, but you need it for the establishment, exercise or defence of legal claims: instead of deleting your data, you restrict its use;
As long as no decision has been taken concerning the exercise of your right to object to the processing of your data, you request that the use of your personal data be restricted.

Right of opposition and right to withdraw consent

If the processing is based on the legitimate interests of EQUANS, you have the right to object to the processing of your personal data on the basis of your particular situation.

You also have the right, insofar as processing is based on your consent, to withdraw it at any time. However, your withdrawal only has consequences for the future and does not affect the validity of the processing carried out on the basis of your consent prior to the date of withdrawal.

Equans will stop processing your personal data unless we can demonstrate legitimate grounds for the processing which outweigh your concerns or where the processing of personal data is connected with the establishment, exercise or defence of legal claims.

If you withdraw your consent, we can only continue processing to the extent that another legal basis applies.

12- How can you exercise your individual rights?

To exercise your rights or to ask any questions about the processing of your personal data by EQUANS, simply address your request to the DPO :

electronically via a dedicated form,
by post:

For the attention of the DPO

Equans SAS

49-51, rue Louis Blanc

92400 Courbevoie - France.

Please specify the scope of your request and provide details that enable you to be positively identified. If you fail to do so, proof of identity may be requested at a later date.

We will respond to your request as quickly as possible and no later than one month from the date of receipt of your request. Depending on the complexity of the request, this deadline may be extended by a further two months if necessary. If the deadline is extended, we will inform you within one month of receiving your request.

If, after contacting us, you feel that your individual rights have not been respected, you can submit a complaint to the CNIL: https://www.cnil.fr/fr/plaintes

13- How can I contact the Data Protection Officer?

Equans has appointed a Data Protection Officer or "DPO" whom you may contact regarding any questions relating to the protection of your data at the following e-mail address: privacy@equans.com.

To exercise your individual rights, please use the dedicated form.