Privacy policy
Last update: 9 June 2019 (v 2.0)
The purpose of this Personal Data Protection Charter is to inform you about the processing of personal data carried out by VEOLYS, and about the means available to you to exercise your rights regarding this data.
VEOLYS is a simplified joint stock company (SAS) registered in Nanterre RCS under number 499 646 396, with its registered office located at Tour EVE, 3109, 1 place du Sud, 92800 PUTEAUX, France (hereinafter ‘VEOLYS’).
Purpose of data processing
Purposes
The purpose of the processing is to provide commercial building management software through the NouvelAtrium online applications, as well as to manage relations with VEOLYS’s customers and prospects.
It enables VEOLYS to:
- to ensure the creation of user accounts;
- to provide services related to the use of applications;
- to manage requests for assistance and alerts;
- to communicate with its customers and prospects, application users and visitors to the www.veolys.com website;
- to improve and personalise its services;
- to compile statistics.
Legal basis
The legal basis for processing is contractual or pre-contractual performance at the customer’s request. VEOLYS is responsible for processing with regard to managing relations with its customers and prospects, and acts as a processor for customers who have contracted with VEOLYS to provide its building management software.
Processed data
Categories of data processed
- Customer and user identification data (surname, first name, telephone number, login, password, email address, optional photograph);
- Service usage data (IP address; browser used; operating system; authentication data collected via a session cookie; analytical cookies relating to website usage);
- Data relating to interventions and building project files;
- Communications with customers, users and website visitors.
Data source
This information is collected from the customer and/or the person concerned.
Obligatory nature of data collection
The data collected is necessary for the provision of the service.
Photographs are optional.
People involved
The individuals concerned are users of NouvelAtrium applications, VEOLYS customers and prospects, and visitors to the website www.veolys.com.
Data recipients
Categories of recipients
Depending on their respective needs and strictly within the scope of performing their respective services or tasks, the following parties are recipients of all or part of the data: authorised VEOLYS staff and technical service providers responsible for hosting and application development.
The contact details of a building’s users are accessible to users with equivalent access rights.
Transfer of data outside the EU
No data is transferred outside the European Union.
Data conservation period
VEOLYS retains personal data for the time necessary to carry out the operations for which it was collected and in compliance with the legislation in force, taking into account in particular the mandatory time limits linked to legal requirements. Deactivated user accounts are anonymised.
Security
VEOLYS implements appropriate technical and organisational measures to protect personal data against (i) accidental or unlawful destruction, and (ii) unauthorised loss, alteration, disclosure or access to personal data.
Your rights regarding your personal data
You may access and obtain a copy of your personal data.
You have the right to obtain the rectification of any personal data concerning you that is inaccurate. You also have the right to have incomplete personal data completed. You also have the right to restrict the processing of your data. Where applicable, you may object to the processing of your data on legitimate grounds and request its erasure, except in cases where regulations do not allow you to exercise this right.
Users can also directly modify some of their personal data from the ‘My Profile’ section of the application.
Exercising one’s rights
For any enquiries regarding the collection, management and protection of personal data, please contact VEOLYS:
- either by sending an email to contact@veolys.com
- or by sending a letter to the following address:
VEOLYS , Tour EVE, 3109
1 Place du Sud
92800 Puteaux, France
- either by using the contact form available on the VEOLYS website.
Complaint to the CNIL (French Data Protection Authority).
If, after contacting us, you feel that your rights regarding your data have not been respected, you may submit a complaint to the CNIL.