WEBSITE PRIVACY POLICY

1. Who is responsible for the processing of your Personal Data?
‍

The Germitec entity responsible for processing your Personal Data is. :

- GERMITEC, a public limited company with a share capital of 35 099,18€ and located at 19 rue Vauban 33 000 Bordeaux (33 000), is registered in the Nanterre Trade and Companies Register under the number 484 531 199 and represented by Mr. Vincent GARDES, in his capacity as Managing Director.

Germitec is referred to as "Germitec", "our" and "we" in the Privacy Policy.
‍

2. What kind of Personal Data do we collect ?

The Germitec entity responsible for processing your Personal Data is:

* Data you provide to us : When you contact us, register to our newsletter, apply for a job or interact with us, we collect the Personal Data we need, such as your name, first name or e-mail address.
‍
* Data we collect automatically : When you visit or use one of our Services, we collect data from your terminals. This information is automatically collected through the use of cookies. To learn more about cookies, please read our Cookie Policy.
‍

3. For what purposes and for how long your Personal Data is processed ?
‍

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.
‍
We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
‍
The following table gives details of the purposes and legal bases for the processing we carry out, as well as the periods for which your data is stored.
‍
‍

Does Germitec sell or disclose your data to third parties ?
‍

Germitec may, share your data with the following third parties in certain cases:

- Germitec's external advisors, such as lawyers or auditors;
- Legal or administrative authorities, if Germitec is required to do so by an applicable legal or regulatory obligation.

In addition, Germitec may share your personal data with its subcontractors (companies of the Germitec group or external service providers). In this case, Germitec undertakes to ensure that its subcontractors process your personal data in accordance with the applicable data protection regulations and this Privacy Policy.

As part of its operations, Germitec uses the following subcontractors who may have access to your Personal Data:

4.1. Service Providers

We may employ the following third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services, or to assist us in analyzing how our Service is used:

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

4.2. Cookies

Germitec uses cookies as described in line of Article list, which may imply the transfer of your data to the following subcontractors:

- GoogleInc;
- X(formerly Twitter Inc.);
- Meta(formerly Facebook Inc.);
- GoogleAnalytics;
- Linkedin

To find out more about what cookies are and how we use them please refer to our Cookie Policy available here [https://www.germitec.com/cookie-policy].

In the course of outsourcing your Personal Data, some of your personal data may be transferred outside the European Economic Area (EEA) and to countries that do not offer the same level of protection for your data as you enjoy under the General Data Protection Regulation (hereinafter the "GDPR"). In the absence of an adequacy decision granted by the European Commission under Article 45 of the GDPR, the transfer of your Personal Data will be governed by appropriate transfer mechanisms under Article 46 et seq. of the GDPR, such as the standard contractual clauses adopted by the European Commission. To obtain a copy of the appropriate safeguards, we invite you to contact us at the contact details mentioned in Article 8 of this Privacy Policy.

5. Security Measures
‍

Weimplement appropriate technical and organisational measures to ensure a levelof security adequate to the risk, including but not limited to, as necessary:

• pseudonymisationand encryption of Personal Data;
  
• meansto ensure the continuing confidentiality, integrity, availability andresilience of processing systems and services;
• meansto restore the availability of and access to Personal Data within anappropriate timeframe in the event of a physical or technical incident;
• aprocedure for regularly testing, analysing and evaluating the effectiveness ofthe technical and organisational measures to ensure the security of processing.

6. What are your rights?
‍

We inform you that you have several rights, listed below:

- The right of access: If you request it, we will provide you with a copy of your Personal Data that we process;

- The right of objection: you have the right to object to your Personal Data being processed by Germitec on the basis of its legitimate interest;

- The right to erasure: you have the right to request the deletion of your Personal Data;

- The right to limit processing: you have the right to ask Germitec to limit the processing of your Personal Data;

- The right to data portability: you may, under certain conditions, request to receive all the Personal Data you have provided to Germitec for transfer to another controller;

- The right of rectification: you can ask us to rectify your Personal Data if they are incomplete or incorrect;

- The right to determine the fate of your Personal Data: You have the right to give us instructions (general or specific) about what to do with your data after your death.

Please note that we will not be able to respond to these requests until we have verified your identity and you have provided the information necessary for them to be processed by our internal services.

For any request for information or exercise of your rights, you can contact our data protection officer by mail at the following address: dpo@germitec.com

You may lodge a complaint at any time with the competent data protection authority, and in particular with the CNIL (www.cnil.fr), the competent data protection authority in France.

7. Are our Services intended for minors?
‍

Our Services are not intended for minors.

If we discover that we have collected Personal Data from minors without their legal guardians' permission, we will delete this information. We also invite you to contact us at the address mentioned in Article 6 of this Privacy Policy, if you have provided Personal Data of a minor without the authorization of his/her legal representative(s).

8. Can we change the Privacy Policy?
‍

We may change this Privacy Policy at any time, including to reflect changes in regulations, our services, or data protection practices. We may inform you of a material change to this policy for instance by posting a notice on this page.

Our use of Personal Data is subject to the privacy policy in effect at the time the data is used.
‍

9. How to contact us?
‍

If you have any questions about this privacy policy, or if you would like to receive more information about your rights or exercise them, you can write to us at the following e-mail address: dpo@germitec.fr‍