Data Protection Policy (Personal data)
Entry into force: at the date of publication of the site
1. General Aspect
The SYNETICS group of companies (hereinafter "the GROUP") whose companies are listed below has always been concerned about the protection of your personal data1 (hereinafter "Data").
This is why your Data, as defined below, is processed securely and in compliance with EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "RGPD") and with all the French regulations applicable in this regard, in particular Law No. 78-17 of January 6, 1978 on information technology (hereinafter "LIL") and, in Germany, the Federal Data Protection Act (FDPA) (Bundesdatenschutzgesetz - BDSG).
The purpose of this document is to present to you the processing that the GROUP carries out on your Data, in particular within the framework of the use of the websites of each of the companies in the GROUP (hereinafter together "the Site").
2. Processors and contacts
The GROUP consists of the following companies acting as joint controllers (Article 26 of the GDPR)
SYNETICS eG (formerly known as ARCOWIN eG)
Registered cooperative company (eingetragene Genossenschaft), duly incorporated, and organized under the German laws, registered towards the Trade registry (District Court) of OLDENBURG (GERMANY) under number GnR 200077, whose registered headquarters are located at 26160, Bad Zwischenahn, Niedersachsen, GERMANY;
SYNETICS France
Simplified joint-stock company, duly incorporated, and organized under the French laws, registered towards the Trade registry of RENNES (FRANCE) under number 501 689 558, whose registered headquarters are located at Rue Éric Tabarly – CS 10040, 35538 NOYAL-SUR-VILAINE CEDEX, FRANCE;
SYNETICS Export
Simplified joint-stock company, duly incorporated, and organized under the French laws, registered towards the Trade registry of RENNES (FRANCE) under number 612 043 166, whose registered headquarters are located at Rue Éric Tabarly – CS 90039, 35538 NOYAL-SUR-VILAINE CEDEX, FRANCE;
SYNETICS Germany
German company ; to be formed soon;
SYNETICS Export Germany
German company; ; to be formed soon;
CHAROLAIS UNIVERS
Union of farmer cooperative companies, duly incorporated, and organized under the French laws, registered towards the Trade registry of RENNES (FRANCE) under number 351 143 458, whose registered headquarters are located at Rue Éric Tabarly – CS 20041, 35538 NOYAL-SUR-VILAINE CEDEX, FRANCE,
Your data protection officer or your RGPD referent:
You can at any time contact the customer service who will transfer the request to the relevant RGPD referent either by sending an email to the following address: info@synetics.world or by mail to the address of the relevant headquarters.
He will answer you as soon as possible and within a maximum of 30 days from the date of receipt of your request or, if necessary, from the date of receipt of proof of your identity.
3. Legal basis of the treatment
The GROUP carries out the processing of Data, mainly the collection, registration, organization, structuring, storage, use and dissemination:
- either within the framework of the realization of an estimate (pre-contractual phase); or,
- in execution of a contract and more broadly of the commercial relations in particular the general conditions of use, the general conditions of sale, the internal regulation; or,
- as a technical service provider for a third company within the limits of the service contract concluded with this third company; or,
- in execution of a legal obligation, in particular in the context of the universal service, the national genetic information system (hereafter "NGIS"); or,
- with the explicit consent of the person concerned (e.g. a newsletter); or, -
- in a legitimate interest, in particular to respond to requests from users of the Site, to carry out prospecting operations.
2. The Data concerned by the various processing operations
The GROUP is likely to collect and process the Data of its customers, prospects, contacts on farms, applicants and, more generally, the Data of users of the Site.
Only the Data necessary for the purposes of the processing concerned are processed.
Some Data are collected directly from you (a), others automatically (b) and finally, for some, indirectly (c).
a) Data collected directly from you
Consent to the processing of your Data is collected directly and explicitly from you. You may at any time exercise your rights as described in Article 9 below.
In the event that your Data is collected through a form, you will be informed of the mandatory or optional nature of the information by placing an asterisk (*)/(*) next to the relevant fields.
Sales leads
Data that may be collected :
- identity: first name, last name
- contact details: email address, postal address, telephone number(s)
- Function or social mandate
- information on the farm concerned (registration number, turnover, zootechnical data, nutrition, on the breeding buildings, etc.)
Customers
Data that may be collected :
- identity: first name, last name
- contact details: email address, postal address, telephone number(s)
- Function or social mandate
- information on the farm concerned (registration number, turnover, zootechnical data, nutrition, on the breeding buildings, etc.)
- bank details: bank account identity (BAI)
Applicants
Data that may be collected :
- identity: first name, last name
- professional background: resume (CV), cover letter, copies of diplomas, letters of recommendation
b) Data collected automatically
The GROUP may automatically collect Data relating to your connection when you use the Site:
- Connection traces (login, IP address, date and time);
- Site usage data (modules, menus);
- With regard to the deposit of cookies, we invite you to consult the Cookies section on the Site.
The GROUP also collects data automatically due to the application of various regulations:
- Farm information received as part of the NGIS, such as farm contact data, indexing data and herd movement data;
- Breeding data from the selection program of the breeding organizations.
c) Data collected indirectly
The GROUP may collect Data about you indirectly, in particular by entering into partnerships as part of research and development (R&D) projects or by assimilating third-party databases.
Finally, the GROUP receives Data from third-party companies or on behalf of third-party companies for the performance of purely technical Data hosting services.
In all cases, the GROUP undertakes to comply with the provisions of Article 14 of the RGPD.
4. Purposes of the processing
Your Data is collected and processed for the following purposes:
- To execute the contract concluded with the GROUP;
- To carry out a technical service on behalf of a third party company;
- To promote and spread the activities of the GROUP;
- Implement the cooperative life and governance of the GROUP (examples: convening general meetings and other territorial committees, etc.);
- Conclude a partnership with one or more agricultural cooperatives/companies or organizations with an agricultural vocation while respecting the coherence of the aims;
- Animate the Site;
- Organize events and conferences;
- Write articles;
- Maintain the link between the Data owner and the GROUP;
- Optimize your navigation on the Site;
- Respond to your requests for information via the various contact forms on the Site;
- To process your unsolicited applications related to job offers;
- To send you information/news about GROUP events;
- Respond to your requests based on the exercise of your rights (Article 9 below);
And other purposes consistent with the above purposes, including the organization of prospecting operations consistent with our activities.
5. Recipients of the Data
The Data collected on the Site are intended for :
- the GROUP ;
- the various ministries or public bodies on the basis of a French law or a binding European text;
- partners with whom the GROUP has concluded a contract requiring compliance with the legal provisions for the protection of personal data;
- to the GROUP's subcontractors.
It may be transmitted to subcontracting companies that the GROUP may call upon in the context of the execution of services and within the limits necessary for the accomplishment of the tasks entrusted to them.
In particular:
- Hosting
- Secure online payment solution
- Outsourcing
- Selection bodies as part of their regulatory mission (transmission of breeding data)
The GROUP:
- ensures that its staff and subcontractors comply with the regulations in force relating to Data and with this Data Protection Policy;
- requires its subcontractors and staff to pay particular attention to the confidentiality and security of the Data.
6. Shelf life of Data
We retain your Data for as long as we are required to do so under applicable law and for the purposes set out above.
Below are the retention periods for your Data.
Customers' management
Data (cf. Article 4 above) : Customers' Data (cf. Article 4)
Shell Life : The entire duration of the contractual relationship
Management des interlocuteurs au sein des exploitations agricoles
Data (cf. Article 4 above) : Contact’s Data
Shell Life : The entire duration of the contractual relationship
Sales leads’ management
Data (cf. Article 4 above) : Sales leads’ Data
Shell Life : 3 years from the end of the commercial relationship or the last contact
Traffic and connection data to the present website
Data (cf. Article 4 above) : Cookies - IP address, date, time and duration of each connection or information that identifies the recipient of a communication
Shell Life : 13 months from collection
Applicants’ management
Data (cf. Article 4 above) : Applicants’ Data
Shell Life : 2 years after the last contact with the candidate and longer if the candidate expressly agrees
---
Once you have terminated your use of our services, we may store your Data in an aggregated or anonymized format.
In addition, notwithstanding the above time periods, we may also retain your Data as reasonably necessary to comply with our legal obligations, to enable us to resolve and litigate disputes, and to enforce our agreements.
7. Security and storage of Data
The GROUP undertakes to ensure the security and confidentiality of your Data in accordance with the rules of the art, i.e. by requiring an adequate level of protection as recommended by the CNIL.
The GROUP regularly tests its internal procedures in the event of a technical or physical incident in order to guarantee and maintain an optimum level of responsiveness and efficiency.
However, in view of the structure of the Internet and networks, the GROUP cannot commit itself to an obligation of security of result. In the event of detection of a security flaw likely to generate a high risk for your rights and freedoms, the GROUP undertakes to inform you as soon as possible and to take, as far as possible, the best means to neutralize the intrusion and minimize its impact.
The GROUP regularly backs up your Data in order to limit the impact of a security breach.
8. To exercise your rights
You may as of right access the Data we hold about you and correct, update, rectify, delete, erase or otherwise modify your Data as soon as it is inaccurate, or has been processed in violation of applicable data protection regulations.
You may also object to the processing(s) or exercise your right to portability.
To exercise your rights, you can send an e-mail to the customer service department whose contact details are given in Article 2 above.
In this context, you will enclose your request with the elements necessary for your identification (surname, first name, email address) as well as any other information necessary to confirm your identity. In case of doubt, the GROUP may ask you for a copy of your identity document in accordance with the provisions of the applicable regulations.
The GROUP :
- undertakes to consider the exercise of your rights as soon as possible, except in cases where the law or a legitimate reason requires them to retain some of your Data ;
- reserves the right to charge the actual costs associated with your request within the limits set by the applicable law.
In the event of an unsatisfactory reply, you may lodge a complaint with:
- For French natural persons: the [French] National Commission for Data Protection and Liberties (Commission Nationale de l'Informatique et des Libertés – CNIL): https://www.cnil.fr/fr/plaintes or by post to the address: Commission Nationale de l'Informatique et des Libertés (CNIL), whose head of office is located at 3 place de Fontenoy – TSA 80715, 75334 PARIS CEDEX 07, FRANCE;
- For German natural persons: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) ; Graurheindorfer Straße 153
53117 BONN, DEUTSCHLAND (GERMANY)
For more information about personal data, you can visit the CNIL website: https://www.cnil.fr/en/ (English version); https://www.cnil.fr/ (French version) or/and the BfDI website: https://www.bfdi.bund.de/DE/Home/home_node.html (German version); https://www.bfdi.bund.de/EN/Home/home_node.html (English version)