HOLDING S.A.L.P.A. commits to preserving the confidentiality of information provided online and, more generally, to protecting the personal information and privacy of its employees, partners, providers, website visitors, and anyone using its services more broadly, in compliance with current regulations, particularly the “Data Processing and Liberties” law no. 78-17 of January 6, 1978, as amended, and the European Regulation 2016/679 (GDPR) regarding the protection of personal data.
The purpose of this policy is to inform you:
- Of the purposes of data processing (objectives);
- Of the types of personal data we collect about you;
- How your personal data is processed;
- The conditions and terms of use of your personal data and your rights in this regard, in compliance with European and French legislation.
All operations on your personal data are performed in compliance with current regulations, notably Regulation no. 2016/679, known as the General Data Protection Regulation (“GDPR”), Law no. 78-17 of January 6, 1978, relating to information technology, files, and liberties, and any applicable national legislation on data protection.
Without prejudice to the choices offered to you by this document and the Law, you acknowledge having read and accepted this Policy.
If you disagree with the terms of this policy, you are free not to provide personal data. However, you are warned that providing certain data is a condition for accessing services, and without this communication, some features and services may be degraded.
1.DEFINITIONS
The following terms will have the following meanings:
A “Personal Data” refers to any information relating to an identified or identifiable natural person, directly or indirectly, by reference to an identification number or one or more elements specific to them.
“Processing of Personal Data” refers to any operation or set of operations performed or not using automated processes and applied to data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
The “Data Controller” is the natural or legal person who determines the purposes and means of processing, i.e., the objective and how to achieve it. In practice, it generally refers to the private or public organization, represented by its legal representative.
A “Processor” refers to the natural or legal person, or any other body, which processes personal data on behalf of the controller.
“Authorized Third Parties” are the natural or legal person, public authority, agency, or body under the direct authority of the controller or processor, authorized to process personal data.
2.DATA CONTROLLER AND DATA PROTECTION OFFICER
The data controller for the site https://salpa.fr/ is:
HOLDING S.A.L.P.A. Rue du pont du péage 67118 GEISPOLSHEIM
The legal representative is François de Bretagne, president.
HOLDING S.A.L.P.A. has appointed a personal data protection officer, reachable at the following address: j.roudet@salpa.fr
3.PERSONAL DATA COLLECTED, PURPOSES, AND LEGAL BASIS
During the use of the site https://salpa.fr/, certain personal data may be collected.
| Purposes | Categories of Collected Data | Legal Basis | Retention Periods |
| Management of information requests and contacts | Via the contact form: identity and contact information | HOLDING S.A.L.P.A.’s legitimate interest | Duration necessary for processing requests, up to 3 years from the last request/last contact with the person concerned |
Generally, all data from our clients are also collected for purposes of accounting management, invoicing, and debt collection of HOLDING S.A.L.P.A., based on our legal obligations, our contractual relationships, or our legitimate interest. Before collecting data, you will be informed whether the personal data requested must be provided mandatorily or if they are optional. Data identified by an asterisk within forms are mandatory. Without providing them, access to Services and their use by the concerned person will be impossible, or a request related to a form cannot be fulfilled. Other data are optional, and their non-provision will not compromise the delivery of promised services or responses to information requests, although it may limit their relevance.
4.RECIPIENTS OF DATA, AUTHORIZED THIRD PARTIES, AND PROCESSORS
The recipients of the data are as follows:
| Concerned Processing | Recipients |
| Management of information requests and contact | HOLDING S.A.L.P.A. |
Authorized Third Parties:
HOLDING S.A.L.P.A. reserves the right to transmit your personal data to comply with its legal obligations, particularly if compelled by judicial requisition.
In accordance with current regulations, your personal data may be transmitted to authorized organizations, judicial assistants, and ministerial officers, within the framework of a specific mission or the exercise of a right to communication.
When HOLDING S.A.L.P.A. faces a request for communication from a third party based on a text, we ensure that the provision put forward is in force and that it indeed provides a right to communication for the requester.
HOLDING S.A.L.P.A. ensures to transmit only the data provided by the text or, in case of imprecision of the latter, only the data that appear strictly necessary to achieve the intended purpose.
Data communication will be carried out in a manner that ensures their security, adapting the measure to the nature of the data and the risks present.
Processors:
Where HOLDING S.A.L.P.A. entrusts data processing activities to processors, only processors who offer sufficient guarantees regarding the implementation of appropriate technical and organizational measures are used, so that the processing meets the requirements of reliability and security required by applicable regulations and ensures the protection of the rights of individuals.
No personal information of the user of the site https://salpa.fr/ is published without the user’s knowledge, exchanged, transferred, assigned, or sold on any medium to third parties. Only the scenario of the acquisition of HOLDING S.A.L.P.A. and its rights would allow the transmission of said information to the potential buyer who would in turn be bound by the same obligation to preserve and modify the data concerning the user of the site.
5.SECURITY MEASURES
Considering the evolution of technologies, the implementation costs, the nature of the data to be protected, and the risks for the rights and freedoms of individuals, HOLDING S.A.L.P.A. implements all appropriate technical and organizational measures to ensure the confidentiality of personal data collected and processed and a level of security appropriate to the risk, including:
- An IT charter
- Access management
- A certified health data host for our care software
- A password policy
- Fighting against malicious codes (viruses, spyware, logic bombs…)
- Protection of computer channels (networks)
- Backups
- Data partitioning
As part of the security measures, the site uses an SSL certificate. It is symbolized by the padlock on the address bar. This guarantees that the information transmitted between your browser and our site is secure.
HOLDING S.A.L.P.A.’s staff and collaborators are also sensitized to the protection of personal data.
6.TRANSFER OUTSIDE THE EU
Personal data is not transferred outside the European Union. Some features integrated into the site may collect data destined for servers in the United States. The transfer of these data is governed by the Data Privacy Framework.
7.EXERCISE OF RIGHTS
In accordance with the “Data Processing and Liberties” Law of January 6, 1978, as amended, and the Regulation (EU) 2016/679 on the protection of personal data, you have the following rights over your data: right of access, right to rectification, right to erasure (right to be forgotten), right to object, right to restrict processing, right to data portability, under applicable conditions depending on the concerned processing.
You can also define directives concerning the preservation, erasure, and communication of your personal data after your death.
When a processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.
To exercise your GDPR rights, you can contact us:
- by email at contact@salpa.fr
- or by mail at the following address: HOLDING S.A.L.P.A. – rue du pont du péage – 67118 – GEISPOLSHEIM
We thank you to specify the object of your request and the right(s) you wish to invoke. In case of reasonable doubt about your identity, a valid proof may be requested.
If you feel, after contacting us, that your rights regarding your personal data are not respected, you can file a complaint with the CNIL.
8.COOKIES
When consulting our site, cookies (also called connection witnesses) are placed on your device to perform audience statistics, improve your user experience, and offer you personalized content. Some cookies are mandatory as they ensure the proper functioning of our website, while others require your consent. To adjust your preferences, you can use the cookie management panel and click on “Cookie Settings”. You also have the possibility to manage the cookies used on the site:
- By setting your browser* to accept or refuse cookies on a case-by-case basis before their installation.
- By regularly deleting cookies from your terminal via your browser.
- By installing a cookie manager to add, delete, modify, search, protect, and block cookies.
- By activating private browsing mode or the “Do Not Track” setting of your browser. *For the management of cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will tell you how to modify your cookie preferences.
However, we inform you that by setting your browser to refuse cookies, some features, pages, spaces of the site will not be accessible, for which we cannot be held responsible. We also draw your attention to the fact that, when you oppose the installation or use of a cookie, a refusal cookie is installed on your terminal equipment. If you delete this refusal cookie, it will no longer be possible to identify you as having refused the use of cookies. Similarly, when you consent to the installation of cookies, a consent cookie is installed. Consent or refusal cookies must remain on your terminal equipment.
Cookies allow the storage, for the duration of the validity of the concerned cookie, of status information when a browser accesses the different pages of a website or when this browser later returns to this website.
Here is the type of cookies that may be used by the site:
- Functional cookies Functional cookies are necessary for the operation of the website. They are essential for the functioning of the site and for users’ navigation on it. They allow people to use the main features of the sites and secure their connection. These cookies have a very short lifespan, for the duration that the session remains active. Without these cookies, users will not be able to use the site normally, and it is therefore advisable not to prevent their use or delete them.
9.LIMITATION OF LIABILITY
HOLDING S.A.L.P.A. cannot be held responsible for the accuracy and relevance of the information put online by the user.
10.MODIFICATION OF THIS POLICY
In case of modification of this Policy by HOLDING S.A.L.P.A. or if the law requires it, it will be published on our site and will be effective upon its publication. Therefore, we invite you to refer to it during each visit in order to be aware of its latest version available permanently on our site.
