Personal data privacy policy

1. Preamble

Pleiades Instruments is committed to respecting privacy and protecting personal data.

Pleiades Instruments acts as data controller and undertakes to implement appropriate measures to secure the personal data of anyone from whom data is collected, in accordance with legal requirements, particularly European Regulation 2016/679 on the protection of personal data (GDPR) and national laws applicable in the European Union.

This data protection policy informs you of our commitments to safeguarding your personal data and acting transparently.

2. Definitions

Personal data: any information that directly or indirectly identifies a natural person.

Data processing: operations performed on personal data, including collection, recording, use, transmission or disclosure. Data controller: the legal entity that determines the purposes and means of processing.

Data processor: a legal entity that processes personal data on behalf of the data controller.

3. Data collected

Pleiades Instruments ensures that the personal data it collects and processes is relevant, adequate, not excessive and strictly necessary for previously determined purposes. Pleiades Instruments takes all appropriate steps to ensure your data is accurate, complete and, where necessary, up to date. Pleiades Instruments undertakes to obtain data subjects’ consent whenever required and to inform them about the processing of their data.

We collect the personal data you may provide to us in the following circumstances:

• When you visit our website,
• When we provide services to you (consulting, auditing and training),
• When you wish to apply for a job at Pleiades Instruments,
• When you wish to contact us with questions or requests.

Mandatory information is generally indicated by an asterisk on the relevant forms when data is collected. You may explicitly and freely consent or decline to consent to the collection and processing of your personal data for these purposes by using a checkbox.

You undertake to ensure that the personal data you provide to Pleiades Instruments is up to date, accurate, complete and unambiguous.

4. Purposes of collection

Pleiades Instruments undertakes to collect and process your personal data fairly and lawfully. Processing by Pleiades Instruments serves explicit, legitimate and specified purposes.

Your data may be processed for the following purposes in particular:

• Providing the services we offer (consulting, auditing, training),
• Processing your payments,
• Sending information about our services and events involving us,
• Answering your questions and requests,
• Conducting surveys, particularly satisfaction surveys.

5. Recipients of collected data

Pleiades Instruments discloses your personal data only to specified, authorized recipients in accordance with applicable regulations.

Pleiades Instruments may entrust your personal data to service providers acting as processors to perform services relating to IT services and applications, including hosting, storage, analysis, data processing, routing, database management or SaaS services.

These third-party providers act only on instructions from Pleiades Instruments. They access your personal data solely to fulfil the purposes pursued when it was collected and are bound by the same security and confidentiality obligations as Pleiades Instruments.

6. Data retention

Pleiades Instruments retains your data for a limited period, no longer than necessary for the purposes of collection. Retention periods are communicated to individuals and vary according to the nature of the data, the purposes of processing and legal or regulatory requirements.

7. Data security

Pleiades Instruments has implemented information systems security policies appropriate to the nature of the data processed to ensure its integrity, confidentiality and availability.

Pleiades Instruments also requires every processor to provide appropriate guarantees for the security and confidentiality of personal data.

8. Rights of data subjects

Under applicable personal data protection legislation, you have a number of rights regarding the collection and processing of your personal data, namely:

Right to be informed

You have the right to receive concise, transparent, understandable and easily accessible information about how your personal data is processed.

Right of access

You have the right to obtain confirmation as to whether personal data concerning you is processed and, if so, to access that data and receive a copy.

Right to rectification

You have the right to have inaccurate personal data concerning you corrected. You also have the right to have incomplete personal data completed, including by providing a supplementary statement.

Right to erasure

In certain cases, you have the right to have your personal data erased. This right is not absolute, and Pleiades Instruments may have legal or legitimate grounds to retain the data.

Right to restriction of processing

In certain cases, you have the right to restrict processing of your personal data. If Pleiades Instruments cannot apply this restriction, it may need to erase your data.

Right to data portability

You have the right to receive the personal data you have provided to Pleiades Instruments in a structured, commonly used, machine-readable format. 

You have the right to transmit that data to another controller without hindrance from Pleiades Instruments. This right applies only where processing is based on your consent or performance of a contract and is carried out by automated means.

Right to object

You have the right to object at any time to processing of personal data on grounds relating to your particular situation.

Right to lodge a complaint with a supervisory authority

You have the right to contact the CNIL to lodge a complaint about Pleiades Instruments’ personal data protection practices.

To exercise these rights, refer to the contact information below.

For information concerning this personal data protection policy, you may email contact@pleiades-instruments.com, enclosing a copy of an identity document.

You may also send your request by post, enclosing a copy of an identity document, to: Pleiades Instruments, 7 rue Antoine Polotti, 38000 Grenoble, France.

10. Updates

This policy may be updated at any time, so we recommend consulting it regularly.