Data privacy policy

Colas[1] attaches the utmost importance to the protection of your personal data and is committed to complying with the applicable regulations governing the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), applicable as of 25 May 2018.

The following provisions are intended to detail which personal data are collected and how they are processed in connection with the website www.colas.com.

1. Data controller
The data controller is the entity that determines the purposes and means of the processing of your personal data.
In the context of the processing carried out on this website, the data controller is:

COLAS SA
1, rue du Colonel Pierre Avia – CS81755 – 75730 PARIS Cedex
Registered with the Paris Trade and Companies Register under number 552 025 314

2. What personal data are collected and processed? Why do you need my data? On what legal basis? To whom are my data transmitted?
Personal data means any information relating to an identified or identifiable natural person. In order to be lawful, any processing of personal data must rely on one of the legal bases provided for under the GDPR.
Your personal data are collected for the purposes and on the legal bases detailed below.
The personal data processed in connection with the Colas website are the following:

  • Information contained in the contact email or submitted by you via contact forms (name, surname, email address);
  • Information contained in any attachments provided;
  • Technical data relating to your use of the site (connection data/IP address, cookies).

We use your personal data for the management of the website.
We also use your personal data to respond to your requests for information or to produce statistics.
We do not collect sensitive personal data[2] concerning you.
The processing carried out in connection with the Colas website is based on:

  • Colas’ legitimate interest in ensuring the proper functioning of the website and in responding to your requests for information;
  • Your consent when you accept the placement of certain cookies via the dedicated tool.

The data are only made available to the departments concerned by your request.
Your data will not be used for automated decision-making or profiling[3].

3. Use of Subcontractors (Processors)
In connection with the website, Colas has engaged WIDE (designer, publisher) and ACQUIA (hosting provider).

4. Transfer of Personal Data to Other Entities
Colas may share your personal data with the Colas Group subsidiary concerned by your request for information.
Your personal data are neither shared nor sold to any third party.Purpose

5. Data retention 
Personal data processed in connection with contact requests are retained for the time necessary to respond or resolve the query. Once the processing is complete, the data will be archived for a period not exceeding the applicable statutory limitation periods and/or legal retention requirements. After these periods, the data will be deleted.

6. Your Rights Regarding Your Data
You have the right to access your personal data in a readable format, to object to their processing, to have them rectified, or erased. You also have the right to restrict the processing of your data and to define instructions regarding the fate of your personal data in the event of death.
In addition, you may withdraw your consent to the processing of your personal data at any time where the processing is based on consent.
The exercise of these rights applies depending on the legal basis of the processing concerned (see above).
For further information about your rights, please visit the CNIL website: https://www.cnil.fr/en/rights-for-controlling-your-personal-data

7. Contact 
For questions regarding the protection of personal data and to exercise your rights, you may contact us at the following email address: dataprivacy@colas.com

8. Complaint to the CNIL
If, after contacting us, you consider that your “Informatique et Libertés” rights have not been respected, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL): https://www.cnil.fr/fr/plaintes

9. Data privacy policy for third parties
Colas has also adopted a personal data protection policy relating to personal information processed in the context of contractual or pre-contractual business relationships with Colas and/or a Colas Group company.
This policy is presented in a Q&A format and is intended for individuals who are not employees or candidates for employment within the Group. It concisely details the personal data held by the Group and how they are used.

 

[1] “Colas” or the “Group” means Colas SA and all companies or entities in which Colas SA directly or indirectly holds more than 50% of the share capital.
[2] Sensitive or special categories of personal data include:
- Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data, biometric data for the purpose of uniquely identifying a natural person; data concerning health; or data concerning a natural person’s sex life or sexual orientation;
- Personal data relating to criminal convictions and offences.
[3] Profiling refers to: any form of automated processing of personal data consisting of the use of such data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.