Legal Notice and Privacy Policy

SECTION I - LEGAL NOTICES 

This website www.onduline.com is the property of Onduline Group SAS, whose registered office is: 

24 Quai Gallieni -F-92150 SURESNES, registered at the Trade and Companies Register of Nanterre under the number 552 088 361. 

The director of the publication of the site is Patrick DESTANG in his capacity as CEO. 

The site is published and hosted by 

Alter Way, Bat D, 1 Rue Royale, 92210 Saint-Cloud - www.alterway.fr  

The site's mission is to provide general information about the company and the products it distributes.  

 

Useful contacts 

ONDULINE GROUP SAS 

24 Quai Gallieni, 
92150 Suresnes 
FRANCE 

Phone: +33(0)1 55 63 80 10 

E-mail: [email protected] 

 

Intellectual property 

The site as a whole, as well as each of the elements that make it up independently, in particular programs and specific developments and content including data, texts, still or animated images, logos, sounds, graphics, files, are the exclusive property of the Onduline Group or of third parties who have granted it a licence. Any total or partial representation of the site or of one of its components without the express authorisation of the Onduline Group is forbidden and would constitute an infringement sanctioned by articles L.335-2 and following of the Intellectual Property Code. 

The databases on the site are protected by articles L.341-1 et seq. of the French Intellectual Property Code and any extraction or reuse of qualitatively or quantitatively substantial content from the databases is punishable. 

The trademarks and logos appearing on the site are trademarks registered by the Onduline Group or by third parties. Any reproduction, imitation or use, in whole or in part, of these distinctive signs without express authorisation and in violation of the prohibitions set out in articles L.713-2 et seq. of the French Intellectual Property Code shall engage the responsibility of the author. 

Other distinctive signs, in particular corporate names, commercial names, signs, domain names reproduced on the site are the property of the Onduline Group or third parties and any reproduction without express authorisation is likely to constitute usurpation engaging the responsibility of its author on the basis of article 1382 of the Civil Code. 

 

Warning on information 

The Onduline Group cannot guarantee the completeness, topicality and updating of the information published on its website. The visitor acknowledges that he/she uses this information under his/her own responsibility. The Onduline Group cannot be held responsible for any direct or indirect damage resulting from an error or information consulted on the site or one of its linked sites and, in general, for any trouble whatsoever that may result from difficulties related to the operation of the site. This website may contain links to external sites, for which the Onduline Group is not responsible for the content. Users of an external site may not establish deep links to this site without the prior written permission of the Onduline Group. 

 

Editorial policy 

The information provided and hosted on this website has been researched and written by qualified professionals employed by the Onduline Group. The information is presented as clearly as possible. The deontological and organisational framework within which the editors operate is defined by the Onduline Group. If you would like to know more, you can contact us via the contact details provided in this "legal notice". 

 

Advertising policy 

Advertising banners or the exchange of links with privileged industrial or commercial partners may be a source of benefits in kind or financial contributions to the production of documents or the organisation of events but is not a source of funding for this website and does not influence the editorial policy of the website. 

 

 

SECTION II - PERSONAL DATA PROTECTION POLICY 

The purpose of this Privacy Policy is to define the principles and guidelines implemented by ONDULINE GROUP with regard to the processing of personal data of users of the websites administered by the Group. 

The notion of "personal data" or "personal data" corresponds to the definition given by Article 4 of the European Union's General Data Protection Regulation (RGPD 2016/679), i.e. any information that may allow a natural person to be identified directly or indirectly: surname, first name, IP address, email address, etc. 

The Onduline Group affirms its commitment to respecting the applicable laws and regulations on data protection, and undertakes to preserve the security, confidentiality and integrity of data. 

The Onduline Group formally undertakes not to sell, rent, exchange or give away any personal information. 

 

  1. Scope and exclusion 

This Policy applies to all processing of personal data carried out by the Onduline Group from its website www.onduline.com 

This policy does not apply to processing carried out on third party sites or applications for which Onduline Group is not the controller. 

This Policy also covers processing carried out in the context of: 

  • The recruitment of the Onduline Group's employees 

  • Management of the Onduline Group's service providers and partners 

 

The legal basis for the processing is:  

  • the execution of a contract for the processing of online donations 
  • consent for other treatments 
     

 

  1. Data collected 

The data collected differs according to the purpose of the associated processing. 

  • Email information request form: We collect your contact information (email), civility, first and last name, country, email address and message. 

  • Connection data (IP address, date/time, browser type, URL visited) to the various sites are collected indirectly.   

 

  1. Use of the data collected 

Each collection of data is carried out specifically for explicit purposes and is clearly indicated on the page of the Site where the data is collected. You will also be informed whether the data requested is necessary or optional for the fulfillment of the purpose, as well as the consequences of not providing the necessary data. 

The Onduline Group reserves the right to create additional and/or complementary means of collection. In this respect, the Onduline Group will specify, in accordance with the regulations, the specific purposes of the processing concerned on the data collection page. 

The Onduline Group does not carry out any processing leading to fully automated decision-making on the basis of your personal data. 

The data collected are used for different purposes: 

  • “Find your country website" form: the data collected via this form is used to process your request and       to produce statistics. The location information (postcode and town) is used to redirect you to the Group entity most likely to meet your needs. 

  • Information request form by e-mail: the data collected via the contact form are used to process your  request and to produce statistics. The location information (postcode and town) is used to redirect your request to the nearest possible location. 

  • Connection data: Connection data is used to ensure the security and traceability of personal data. This  data is also used for statistical purposes regarding the consultation and information on login data and information collected via our trackers and cookies (see section III of thisvisit of our websites. For more policy). 
     

 

  1. Recipients of personal data 

The recipients of the data are of several kinds: 

  • The Onduline Group teams; 

  • Processors and partners for the execution of the processing concerned; 

  • Where appropriate, the judicial and administrative authorities, in accordance with the applicable law and regulations. 

 

These categories of recipients are supplemented, where appropriate, by categories specific to each processing operation and expressly referred to in the notices on the data collection page 

Transmissions of personal data to recipients (regardless of their legal nature, whether they are subcontractors, data controllers or simple recipients) are carried out in a secure manner and in application of an agreement between the Onduline Group and each recipient. The Onduline Group undertakes to ensure that each recipient is aware of the guiding principles of the protection of personal data and is subject to them in application of the law and/or a specific contract. 
 

List of processors and partners to whom personal data may be transmitted 

  • Google (for Google Analytics, Google Maps, Recaptcha, Google Font API, Google Tag Manager) 

  • Algolia 

  • Yett  

  • jsDelivr  

  • YouTube 

  • Facebook Pixel 

  • LinkedIn Pixel 

  • reCAPTCHA / Antibot  

 

  1. How long your data will be kept 

The retention periods applied by the Onduline Group comply with the regulations applicable in France on the date hereof, it being specified that some of your data may be retained and used during the prescription periods provided for by law in the event of legal action.  For the Contact form, your personal data is kept for 2 years after the last contact.  

 

  1. The case of processing carried out for the purpose of managing service providers and partners and customers 

Partners and suppliers 

Onduline Group may also process Personal Data about you when your company is in discussion or has finalised a contract with Onduline Group as a service provider or partner. 

In this context, the Onduline Group will collect information relating to: 

  • to the contact(s) indicated at the Onduline Group such as the contact indicated on the form, the main referent for the contract, the contact for invoicing and any other contact person: surname, first name, professional e-mail address, professional telephone number, function, and all information contained in the exchanges (nature of the request, etc.); 

  • to the signatory(ies) of the contract: surname, first name, function, signature. 

 

This Data is intended, as necessary, for the employees in charge of the follow-up of the commercial relationship and/or the partnership, the accounting/invoicing and the employees of the departments involved in the request/contract. 

It is collected and stored: 

  • for requests for quotations that do not lead to the conclusion of a contract: the time required to study and follow up the request + one (1) year after the request was closed (or the last contact, if applicable); 

  • for contracts and in order to perform the contract: the duration of the contractual relationship; 

  • for the purpose of fulfilling our legitimate interest in ensuring the protection and defence of our rights in the event of litigation, for a period of five (5) years following the end of the contractual relationship. 

 

Customers 

In the course of its activities, the Onduline Group may process a limited amount of personal data about our customers. 

For this purpose, the identity, function, email, address and telephone number of the person concerned may be recorded. 

This data will only be used for legitimate contacts by the Onduline Group and will not be transferred to a third party. 

In accordance with the regulations in force, this data may be kept for the duration of the contractual relationship between the Onduline Group and the customer, or three years after the last contact with the person concerned in the case of prospects. 

 

  1. The case of processing carried out for recruitment purposes 

Onduline Group may process Personal Data about you when you submit an unsolicited application or apply for an advertisement posted by Onduline Group. 

In this context, Personal Data about you are collected: 

  • directly to you during the recruitment process; 

  • indirectly with Third Parties for the verification of your diplomas and references, with your agreement. 

 

The following data is collected: name, first name, email address, telephone number, professional experience and all the information you provide us with when submitting your application and/or curriculum vitae and/or interviews: photo, skills, level of education, languages spoken, salary expectations, home address, hobbies, family situation, etc. 

If you provide us with the details of a referee, it is your responsibility to ensure that the referee is aware of this and has given you their consent. 

This Data is only collected and stored in the context of the management of your application, based on the legitimate interest of the Onduline Group and/or your Consent and is not used for any other purpose, in particular commercial. 

 

They are kept: 

  • in the event of a successful application: the Data relating to an employee is kept for the time of his/her presence within the Onduline Group and after his/her departure for the applicable legal retention period. 

  • in the event of a negative outcome to an application: two years, unless you object. 

Your Personal Data will in any case be destroyed upon your request (see section on contact details of the DPO), within a maximum period of 1 month from your request. 

This data is processed by the staff in charge of recruitment within the Onduline Group only and, incidentally, for technical and logistical reasons, by the subcontractors of the Onduline Group. 
 

 

  1. Security of your data 

The Onduline Group is particularly committed to the protection of the personal data that we collect and process. These operations are carried out in a secure manner. 

We implement the necessary technical, physical and organisational measures to prevent, as far as possible, any alteration, loss or unauthorised access to your personal data. 
 

 

  1. Data storage 

Personal data is stored in the European Union in Onduline Group databases or files or in those of service providers with whom the Group has a dedicated contractual relationship. 
 

 

  1. Rights relating to personal data 

In accordance with the General Data Protection Regulation 2016/679, you have the following rights: 

  • right of access to your personal data ; 

  • right to rectify your personal data if they are inaccurate or incomplete; 

  • right of limitation under the conditions set out in Article 18 of the GDPR; 

  • right to object on legitimate grounds ; 

  • right to portability of your data ; 

  • for processing based on consent, to withdraw your consent at any time; 

  • right to erasure of your personal data if : 

    • you withdraw your consent for processing subject to consent; 
    • you validly object to the processing; 
    • it has been processed unlawfully; 
    • a law requires it. 

In accordance with Article 40-1 of the French Data Protection Act [to be adapted according to local legislation], you also have the possibility of giving instructions concerning the conservation, deletion and communication of your personal data after your death. 

 

  1. Claims 

If you have a complaint, you can contact our DPO at [email protected] 

or by post: 

DPO 

Onduline Group  

24 Quai Gallieni, 

92150 Suresnes 

You also have the right to lodge a complaint with the CNIL in accordance with the European     Regulation (www.cnil.fr). 

 

 

SECTION III - LOGIN DATA, TRACKERS AND COOKIES 

What is a cookie? What is a tracker? 

A cookie, also known as a "connection indicator", belongs to the family of "tracers". It is a text file deposited in a dedicated space on your computer or mobile device when you visit a website. 

A Cookie allows, for the duration of its validity, to recognise the computer or mobile device you are using each time you access our website. It does not identify you personally, but only recognises the web browser on your computer or mobile device. 

Today, there are other types of trackers. The invisible pixel, also called transparent GIF or action tag. This is a fragment of code that appears as a tiny image on the web page. It can be used to recognise the time and date a page was viewed and to collect technical information such as the IP address or the configuration of the machine. 

Cookies, tracers and information collected by these means are kept for a maximum of 13 months. 

Some cookies and trackers transfer data to GOOGLE and FACEBOOK companies established in the United States. These companies have adhered to the Privacy Shield, a self-certification mechanism for companies established in the United States which is currently no longer recognised by the European Commission as offering an adequate level of protection for personal data transferred by a European entity to companies established in the United States. 

You may exercise your rights with respect to your personal data in the same manner as set out in section II of this Policy. 

In order to comply with the transparency obligation imposed by the RGPD, we detail below the different trackers that we use on our website. 
 

Our technical cookies 

These cookies are essential for accessing, consulting and using the information and services of the website. They enable us to recognise your browser, to indicate your visit to a specific page of our website, to improve your browsing comfort (adapting the display resolution, retaining the language used, memorising passwords and information relating to an online form, etc.), to implement security measures and to retain your choices concerning cookies and tracers. 

These technical cookies cannot be deactivated or set, otherwise you will not be able to access the website, its information and services. 

You can set your browser to block the installation of these cookies on your computer or mobile device, but some features and services of the site will not function normally. 

These technical cookies used for www.onduline.com are the following: 

 

"Google Font API" 

Retention period: 12 months  

Legal basis: legitimate interests of the Onduline Group to operate its website 

Finality: To display harmonized font on our website pages.  
Google Fonts does not set cookies. However, if a font is requested by the visitor’s browser, the visitor’s IP address is recorded by Google and used for analytical purposes (to show the popularity of each font and determine which websites use Google fonts. This data is then published and available in Google Fonts’ Google BigQuery database.  

 

"lang" 

Retention period: session 

Legal basis: legitimate interests of the Onduline Group to operate its website 

Finality: To retain the language used on our website. It is not personal and is used for the proper functioning of the site. 

 
"http://www.onduline.com""Re-captcha” / “Antibot”  

Legal basis : legitimate interests of the Onduline Group to operate its website  

Retention period: after 1 year  

Finality: To avoid bots or spam software of all kinds and protect our website from bot attacks.   

 

" Google Map" 

Retention period: 12 months 

Legal basis : legitimate interests of the Onduline Group to operate its website  

Finality: To show you locations according to your requests on the most user-friendly way, based on your IP address. 

 

" Algolia" 

Retention period: 12 months 

Legal basis : legitimate interests of the Onduline Group to operate its website  

Finality: To use the search function of Algolia on our website and provide results fast. 

 

"Yett" 

Retention period: 12 months 

Legal basis : legitimate interests of the Onduline Group to operate its website  

Finality: To control the execution of (third party) scripts like analytics   

 

"jsDelivr" 

Retention period: 12 months  

Legal basis : legitimate interests of the Onduline Group to operate its website  

Finality: To provide the content of our online offerings, especially files such as graphics or scripts, faster with the aid of regionally or internationally distributed servers (called CDN, Content Delivery Network). The jsdelivr.com privacy policy expressly states that the company does not use cookies or other tracking services 

 

Our audience measurement and statistical cookies: 

The audience measurement cookies establish statistics on the number of visits to the site and the use of our services. Statistics on the number of visits, content and pages displayed may thus be collected. These statistics make it possible to improve the interest and ergonomics of our services. 

You can accept or refuse the deposit of these Cookies via the "Cookies & Trackers Management" console. 

Refusal to deposit these Cookies will prevent us from establishing anonymous statistics.  

 

“Google Analytics”  

Retention period: From a session to 2 years  

Legal basis: Consent  

Purpose: To collect your browsing data and transmit it to Google for Google Analytics, an analytic tool provided by Google. It uses cookies that allow us to analyse the use of our website and create dashboards about our website activities to improve our experience on our website. 

https://policies.google.com/technologies/cookies   

 

“Google Tag Manager” 

Retention period: 26        months 

Legal basis: Consent 

Purpose: To facilitate the installation of non-essential Google Analytics Cookies and marketing cookies. It is not a cookie, it is essential to the proper functioning our site, and it does not have an expiration date. 
https://www.google.com/analytics/terms/tag-manager/  

 

“Facebook Pixel” 

Retention period: 6 months  

Legal basis: Consent 

Purpose: To collect your browsing data when you arrive on our website via Facebook and transmit it to Facebook. It tracks your actions on our website and matches your user data and your Facebook account to show you more adapted content and advertisements.  
https://www.facebook.com/policy.php 

 

“LinkedIn Insight Tag” 

Retention period: 6 months 

Legal basis: Consent 

Purpose: To collect your browsing data and transmit it to LinkedIn. It allows us to track conversions, retarget website visitors, and unlock additional insights.   
https://fr.linkedin.com/legal/privacy-policy 

 

“Pinterest Conversion Tag” 

Retention period: 6 months 

Legal basis: consent 

Purpose: To collect your browsing data and transmit it to Pinterest. It tracks the actions you take on our website after viewing our Promoted Pin and help us to optimize our offer.  

https://policy.pinterest.com/en/community-guidelines  

 

“YouTube“ 

Domain: https://www.youtube.com/ondulinegroupofficial  

Retention period: 13        months 

Legal basis: consent 

Purpose: To collect your browsing data and transmit it to YouTube to allow video to be displayed.  

https://www.youtube.com/howyoutubeworks/policies/community-guidelines/  

 

Our targeted advertising or marketing trackers: 

You can accept or refuse the deposit of these Cookies via the "Cookies & Trackers Management" console. 

Refusal to use this tracker will prevent us from offering you targeted advertising. 

 

“Google Remarketing Tag” 

Durée retention period: 26   months 

Legal basis: consent 

Purpose: To collect your browsing data and transmit it to Google to measure the return of investment of our advertising campaigns made with Google.  

https://policies.google.com/technologies/ads?hl=en-US  

 

Credits  
Design, Graphic design, development by VANKSEN 
www.vanksen.com  

 

Images 
Fotolia, Gettyimages, Shutterstock, Onduline   

 

YouTube (GOOGLE) Cookies 

These cookies are deposited by GOOGLE when you wish to play videos embedded in our web pages. You can accept or refuse the deposit of these cookies via the "Cookies & Trackers Management" console. If you refuse to accept these cookies, you will not be able to play the videos. 

When you accept the deposit of these Cookies, GOOGLE collects and processes some of your personal data. For more information about this processing, please see their Privacy Policy: https://policies.google.com/privacy