DATA PROTECTION POLICY
This data protection policy (hereinafter “Policy”) sets out the way in which users’ data is processed within the framework of this RICE site by GRTgaz (hereinafter the “Site”).
GRTgaz, a public limited company registered under the number 440 117 620 R.C.S. Nanterre, France and whose registered office is located at 6 rue Raoul Nordling, 92270 Bois-Colombes, France, hereinafter referred to as “GRTgaz” or “We”, is responsible for processing the personal data of the users of the Website (the “Data Controller”).
Users of this site are likely to communicate personal data about themselves to GRTgaz, the site’s publisher, by using the various collection media, tools and services made available to them on the site, hereinafter referred to as “you” or “your Personal Data”.
The Personal Data collected may be subject to processing, automated or not, in accordance with the provisions relating to the protection of personal data, including the General Data Protection Regulation “RGPD” applicable since May 25, 2018 and under the conditions attached to each collection medium and this Policy.
- WHAT TYPES OF DATA DO WE COLLECT?
By “Personal Data”, We mean any information about an individual from which that individual can be identified. This does not include data for which the identity has been removed (anonymous data).
Researchbyrice collects the following categories of Personal Information for the purposes described below in Our Policy:
a) your identity;
b) your Faro ID;
c) information filled in a collection form, questionnaires and information request;
d) your image or voice if you use GRTgaz tools capable of recording you and you consent to publication on the site;
e) information you share publicly, on our social networks or websites, for example to give your opinion;
f) when you use our websites: information about your browser, your browsing behavior, the type of terminal you use (smartphone, computer, tablet …), the operating system of your terminal, your Internet service provider, the IP address of your terminal, the geolocation of your terminal ;
g) when you use our mobile applications: We may collect your GPS location, with your consent if required, as the frequency with which you use the application. We also collect information about the browser you use and your browsing behavior. - WHAT DO WE USE YOUR DATA FOR?
Your Personal Data is processed for the purposes described below:
Category of data Purpose Legal basis
Your identity
Your browsing data (preferences, terminal type, operating system, internet service provider, browsing behavior, IP address, etc.) Improved user experience (better understanding of your use of the services and your interests).
Improvement of our sites, applications and services.
Personalize your experience and adapt our services. Legitimate interest of GRTgaz.
Your identity
The data provided by you on the forms available on the GRTgaz websites and application
Your image and/or voice
Your publicly disclosed information User relations, including handling requests, answering questions, handling complaints, providing information, etc.
Registration and management of the newsletter. Performance of the contract with GRTgaz.
Your login data (Faro ID)
Your browsing data (preferences, type of terminal, operating system, internet service provider, browsing behavior, IP address, etc.) Fight against the risks of fraud, theft or any other reprehensible act.
And more broadly to protect the security of GRTgaz, its employees, its sites and applications. GRTgaz’s legitimate interest
Your browsing data (preferences, type of terminal, operating system, internet service provider, browsing behavior, IP address, etc.)
Your location data Analysis of the e-reputation of GRTgaz or its services.
Measure the effectiveness of online and offline campaigns or events.
Preservation of GRTgaz’s image and improvement of marketing campaigns. GRTgaz’s legitimate interest
Consent (occasionally). - WHO DO WE SHARE YOUR DATA WITH?
We will only disclose or share your Personal Information in the following circumstances:
a) with subcontractors acting on our behalf: for example, technical service providers in charge of sending emails for Us, or hosting our website. We may also share information about you with vendors who help Us operate our websites;
b) with certain business partners, subject to your consent: for example, We will share your Personal Information with third parties who are jointly organizing an event with Us;
(c) with a third party in connection with a corporate reorganization or restructuring, including dissolution, liquidation or any transfer including assignment or merger;
d) with GRTgaz employees who are authorized by virtue of their functions and are bound by an obligation of confidentiality;
d) when We are legally required to do so to comply with applicable law, to respond to a court order, or more generally to satisfy any request from an authorized authority.
The third parties with whom We share your Personal Data are limited (by law and by contract) in their ability to use your Personal Data for the purposes We have identified. We will make every effort to ensure that the third parties with whom We share your Personal Data are subject to privacy and security obligations consistent with this Policy and the GDPR. We only allow them to process your Personal Data for specific purposes and in accordance with our instructions.
Except as expressly stated above, We will never share, sell or rent your Personal Information to a third party without notifying you and/or obtaining your consent. If you have given Us your consent to use your personal data in a particular way, but subsequently change your mind, you should contact Us and We will stop doing so.
- COOKIES
During the consultation of our Site, information relating to your navigation is likely to be recorded in “Cookies” files installed on your terminal (computer, tablet, smartphone…), subject to the choices you have made concerning cookies and which you can modify at any time.
The information below will help you better understand how cookies work and how to use the current tools to set them.
What is a cookie?
A cookie is a small text, image or software file containing information that is recorded on the hard drive of your terminal (e.g., computer, tablet, smartphone, or any device that allows you to browse the Internet) when you visit a website with your browser. It is transmitted by the server of a website to your browser. The cookie file includes the pages visited, the type of browser you use, your IP address, and allows its issuer to identify the terminal in which it is stored, for the duration of validity or recording of the cookie concerned.
Only the sender of a cookie can read or modify the information contained in it.
Why do we use cookies?
We use 3 categories of cookies whose purposes are described below.
Some technical cookies (session cookies in particular) are essential for the proper functioning of the Site.
When prior consent is required for their use, the period of validity of the consent to the deposit of cookies is 6 months. At the end of this period, We will ask for your consent again. The cookies that We set as operators of our Site and/or application are called “internal cookies”. The cookies that third parties have entrusted to Us on our Site and/or our application are called “third-party cookies”. Third-party cookies are used to provide third-party features or functionality on or through a website (e.g., advertising, interactive and analytical content). The people who create these third-party cookies may collect some of your personal information, recognize your computer both when you visit the website in question and when you visit other websites.
The retention period of a cookie is 13 months. However, the information collected through these cookies is kept by us for a maximum of 25 months, in accordance with French and European regulations. - Technical cookies
Technical cookies are cookies that are strictly necessary for the operation of the Site. They allow access to the reserved and personal areas of our Site, thanks to personal identifiers (session identifier cookie), to implement security measures (for example, when it is requested to connect again to a content or service after a certain period of time), to allow or facilitate communication for the provision of a service by electronic means expressly requested by the Internet user. These cookies are deleted as soon as you close your browser session.
These cookies are issued and deposited by GRTgaz. They have a very short lifespan, for the majority, the time of the session, and at most 13 months.
List of functional cookies used on the researchbyrice website.
Cookie Description of the cookie Retention period
AWSALB Used by Amazon to optimize user experience 7 days
viewed_cookie_policy Retains the user’s consent to their choice regarding cookies. 11 months
cookielawinfo-checkbox-necessary Stores user consent for cookies in the “Necessary” category 11 months
cookielawinfo-checkbox-non-necessary Stores user consent for cookies in the “Not Required” category 11 months
cookielawinfo-checkbox-advertisement Stores user consent for cookies in the “Advertising” category 12 months
cookielawinfo-checkbox-analytics Stores user consent for cookies in the “Analysis” category 12 months
cookielawinfo-checkbox-performance This cookie is used to track which cookies the user has approved for this site. 12 months
CONSENT Stores the user’s consent for all categories of cookies 12 months
apbct_ Used by CleanTalk and acts as an anti-spam and firewall solution for this site. Session
ct_pointer_data Acts as a complete anti-spam and firewall solution for this site. Session
ct_timezone Stores the time of the visit. Session
- The cookies of audience measurement – realization of statistics
These cookies collect information about how visitors use a website. For example, the number of visits, the most visited pages… These cookies make it possible to establish statistics of analysis of the frequentation from which the contents of our Site are improved according to the success met by such or such page near our visitors.
The statistics tool used by GRTgaz, generates a cookie with a unique identifier, whose duration is limited to 6 months. We collect the IP address, in order to identify the city from which you are connecting. The last two bytes are immediately anonymized. The data collected will not be passed on to third parties or used for other purposes. - Sharing cookies (social networks)
Our Site contains sharing buttons (“plug-ins”) to Facebook, Twitter, Instagram, Linkedin, Youtube and others that allow you to share content from our Site with others. When you use these sharing buttons, your web browser will establish a connection with the servers of the social networks concerned and a third-party cookie is installed after your consent has been obtained. If you are connected to the social network while browsing our Site, the sharing buttons allow you to link the content you consult to your user account.
In this context, the purposes and scope of use of your Personal Data, additional processing and your rights will be subject to the privacy policies of the social network providers and will be their sole responsibility.
List of non-functional cookies used on the researchbyrice website.
Cookie Description of the cookie Retention period
test_cookie Test if the browser supports cookies 11 months
IDE stores information about how the user uses the website and any advertising before visiting the website. 12 months and 24 days
Used by Google Analytics to track user’s use of the site. Anonymous. 2 months
Used by Google Analytics to store information about how visitors use a website. Anonymous. 1 day
GPS Defined by Youtube and records a unique identifier for gps tracking of users. 30 minutes
vuid Used by Vimeo to collect tracking information. 13 months
YSC Defined by Youtube and used to track views of embedded videos. Session
VISITOR_INFO1_LIVE Defined by YouTube and used to track information about embedded YouTube videos on a website. 2 months and 27 days
How do I manage cookies?
You have the possibility to personalize your choices in terms of cookies directly on our website thanks to the banner located at the bottom of the page. Several other possibilities are offered to you to manage cookies on your side, like for example to parameterize your browser directly, or to install a tool blocking the trackers. Any settings you may make will affect your browsing of the Site.
Your choices expressed online directly from our Site
You can configure from our Site your choices relating to the cookies that We deposit on your terminal, by using directly the platform of consent to cookies.
When you first visit our Site, you will be asked for your consent to the use of Your Personal Information through cookies via an information banner that will be prominently displayed at the bottom of the page.
Thanks to the “Accept all” and “Refuse all” buttons, you can accept or refuse in a global way so that We can deposit cookies on your computer or your device (cookies related to operations related to targeted advertising, certain audience measurement cookies, social network cookies generated in particular by their sharing buttons when they collect personal data). Nevertheless, a third button “Settings” present on this banner, will allow You to obtain the detail of the categories of cookies used and thus to choose to consent or not by objective.
To exercise your rights or for any general question about the processing of your Personal Data in this system, you can contact the Data Privacy Manager appointed by GRTgaz, at the following postal address: GRTgaz, 6 rue Raoul Nordling, 92270 Bois-Colombes, France, or by e-mail: protectiondesdonnees@grtgaz.com.
- TRANSFER OF YOUR DATA OUTSIDE THE EUROPEAN UNION
The Personal Data we have collected about you may be transferred and processed in a country or region where GRTgaz operates, and this outside the European Union.
Where We transfer your Personal Data to a country/region outside the European Union, We ensure an adequate level of protection for the information transferred to such third countries/regions by transferring your Personal Data to countries/regions that have been the subject of an adequacy decision by the European Commission within the meaning of Article 45 of the GDPR, by entering into data transfer agreements with such recipients based on the standard contractual clauses as validated by the European Commission or any other valid transfer mechanism that may be available (e.g., BCR). - RETENTION PERIOD
Your Personal Data is kept in a form that allows you to be identified only for as long as is reasonably necessary for the purposes described above, or for as long as is permitted by law.
In determining the appropriate retention period for Personal Data, We take into account the amount, nature and sensitivity of the Personal Data, the potential risk of harm resulting from the unauthorized use or disclosure of your Personal Data, the purposes for which We process your Personal Data and the possibility of achieving those purposes by other means, as well as applicable legal requirements.
We retain Personal Data:
– claims, questions, complaints: 3 years following a claim, question or complaint that has been closed;
– contact form: 3 years from your request;
– newsletter subscription: as long as the person concerned does not unsubscribe;
– navigation on the Site: see the durations associated with cookies.
After the set deadlines, the Personal Data are either deleted or kept after being anonymized, notably for statistical purposes. They can be kept in case of pre-litigation and litigation. It is reminded that deletion or anonymization are irreversible operations and that GRTgaz is no longer able to restore them afterwards. - YOUR RIGHTS
As a data subject, you have various rights. These rights are not absolute and each of these rights is subject to certain conditions in accordance with the GDPR and applicable national laws.
Right of access
You may request access to the data we hold about you. In this case, we will provide you with the information required by law on the purposes of the processing, the categories of data processed, the categories of recipients, the duration of data retention, etc.
Right to portability
You may also obtain a copy of any information about you that We hold, in a compatible and structured format allowing you to exercise your right to data portability, for processing based on your consent or the performance of a contract between GRTgaz and you or whose processing is carried out by automated means.
Right of rectification
You may request that we take steps to correct your Personal Information if it is inaccurate or incomplete (for example, if we have the wrong name or address).
Right to erasure
You may request the deletion of your Personal Information if (i) they are no longer necessary for the purpose intended, (ii) you have withdrawn your consent where the processing in question was based on that consent, (iii) you have objected to the processing (iv) the processing of the data is unlawful, (v) the information must be deleted in application of legal obligations applicable to GRTgaz.
Right to restrict processing
You can request the limitation of the processing (i) if you dispute the accuracy of your personal information, which will allow GRTgaz to verify its accuracy, (ii) if you wish to limit the processing of your information rather than have it erased despite the fact that the processing is unlawful (iii) if you want GRTgaz to keep your information because you need it to establish, exercise or defend your legal rights (iv) the time necessary for GRTgaz to examine the validity of your request for opposition.
Right to withdraw your consent
Where the processing of your Personal Data is based on consent you may withdraw such consent at any time, which will not affect the legitimacy of the processing operations carried out before the withdrawal of your consent.
Right to object
Where the processing we carry out is based on our legitimate interest, you may object to such processing if your interests or fundamental freedoms are found to prevail over our legitimate interests.
Right to provide instructions on the use of your Personal Information after your death
You have the right to provide Us with instructions on the management (e.g., retention, deletion and disclosure) of your Personal Data after your death. You may change or revoke your instructions at any time.
Making a complaint about your Personal Information
If you have any questions about how We process your Personal Data or if you wish to exercise any of your rights, please contact our Data Privacy Manager at protectiondesdonnees@grtgaz.com.
As a matter of principle, exercising your right of access (or any other right) will not generate any costs. At times, if your request is manifestly unfounded or excessive (particularly because of its repetitive nature), We may require payment of a reasonable fee and/or refuse to grant your request.
We may need to ask you for specific information to help Us confirm your identity and ensure your right to access this information (or exercise your other rights). This is an appropriate security measure to ensure that Personal Information is not disclosed to anyone who does not have a right to receive it.
You also have the right to file a complaint with the competent supervisory authority, which is the Commission Nationale de l’Informatique et des Libertés (“CNIL”) in France here or by writing by post to: CNIL – Service des Plaintes – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07. - PROTECTION OF YOUR DATA
We will provide an adequate level of protection for your data and ensure that appropriate technical and organizational security measures (including awareness and training of personnel involved in processing operations) are in place to protect your Personal Data from accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and all other forms of unlawful processing.
However, since the Internet is not completely secure, We cannot guarantee that your Personal Information stored or sent will be completely secure. We encourage you to exercise caution when using the Internet to access our sites or applications. - THIRD PARTY SITES
Links may be made to third party sites or services that We do not control and that are governed by their own privacy policies. This Policy does not apply to those third party sites. We encourage you to review the privacy policies of those third-party sites you visit to see how they handle your personal data.
- POLICY CHANGE
Our Policy may change to reflect changes in the way We process information about you. We will post an updated version of this Policy on the Site.
- CONTACT US
If you would like Us to update the information We have about you or your preferences, or if you have any questions about the protection of Personal Data, please contact Us by e-mail at protectiondesdonnees@grtgaz.com.
