Our Legal Notice

1 - Website Presentation

• This website belongs to Emitech SAS. The company is registered in the Trade and Companies Register under number 344 545 645. Its registered office is at ZA de l'Observatoire - CAP 78 - 3, rue des Coudriers - 78180 Montigny le Bretonneux.

• The publication director is Jean-Marc ROGI, Marketing & Communication Manager.

• Hosting and maintenance are provided by GANDI SAS, located at 63-65 boulevard Massena, Paris (75013) FRANCE.

2 - Rights Information

• All content on this website is the property of Emitech or used with the rights holders' permission. This includes trademarks, domain names, texts, graphics, logos, sounds, photographs, illustrations and animations. Some visuals are generated using AI tools. These are identified as such where required and used in compliance with applicable rights and licences.
• This website is protected by national and international intellectual property law. Any reproduction, use or modification without Emitech's prior agreement may constitute an act of infringement. This may result in civil and criminal liability.
• Any extraction or attempted extraction of data from this website may likewise incur civil and criminal liability.
• Emitech does not guarantee that the information on its website is complete, accurate or up to date at all times. Emitech accepts no liability for use of this content by visitors.
• Links to third-party websites do not validate their content. They do not imply that our company endorses any company, product or service. Emitech accepts no liability for the content of these websites or their use by visitors.

3 - Personal Data

Emitech ensures that all data collection and processing from www.emitech-group.com complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

• Personal data management follows the legal framework set out in Article 34 of French Act No. 78-17 of 6 January 1978, and European Regulation 2016/679.
• You have the right to access and correct your personal data. Submit requests by email via our contact form or by post to: Emitech - ZI de la Vallée du Salaison - 145, rue du Massacan - BP 25 - 34741 Vendargues Cedex.
• Personal data collected on this website is never transferred to third parties, whether free of charge or for a fee.
• To exercise your data protection rights, contact our Data Protection Officer (DPO): DPO Consulting (dpo@emitech-group.com).

3.1 - Scope

This policy covers all personal data processing carried out by any Emitech Group company in relation to external individuals.

3.2 - Personal Data Definitions

The following terms apply throughout this policy:

• Personal data: information relating to an identified or identifiable natural person.
• Processing: any operation applied to personal data, such as collection, recording, use, transmission or communication.
• Data controller: the person or body that determines the purposes and means of data processing.
• Processor: the person or body that processes personal data on behalf of the data controller.
• Recipient: the person or body that receives personal data, whether or not they are a third party.

3.3 – What personal data do we collect, why and how do we use it?

To provide certain services, the Emitech Group may ask you to supply personal data. This applies to contact requests, job applications and newsletter subscriptions, for example. We may collect and process the following data:

• Your contact details: postal address, email address, phone number
• Your identity: first name, surname, title, date of birth, job title, email address
• Your application information: CV, cover letter, interview notes
• Your technical data: IP address
• Any additional information you provide via our website services

Mandatory fields are marked with an asterisk (*) on the relevant forms. The Emitech Group only collects data that is relevant, adequate and strictly necessary for the stated purpose.

• Newsletter subscription and informational emails
  • Types of data collected
    • Email address
    • First name and surname
    • Company name
    • Postal code (for geolocation purposes)
  • Purposes of processing
    • To send you promotional messages you have requested
    • To maintain an opt-out list of individuals who do not wish to be contacted
    • To carry out analyses and compile statistics
  • Legal basis
    • Legitimate interest: to personalise messages and measure their effectiveness
    • Legal obligation: to maintain the opt-out list
  • Retention period:
    • Newsletter: until you object or 3 years from your last contact
    • Informational emails: for the duration of our contract

• Entering into a specific contract
  • Types of data collected
    • Email address
    • First name and surname
    • Postal address
    • Title
    • Company name
    • Phone number
    • Billing details
  • Purposes of processing
    • To create and manage supplier and service provider records
    • To manage contracts, orders, deliveries, invoicing and accounting
  • Legal basis
    • Performance of a contract: to manage our contractual relationship
  • Retention period
    • 5 years from the end of the contract
    • 10 years for accounting records from the end of the financial year

• Online browsing
  • Types of data collected
    • Website usage data: referring page, pages viewed, duration of visit
    • Technical data: IP address, browser and device information
  • Purposes of processing
    • To ensure the website works correctly: display, personalisation, improvements
    • To optimise the website structure
    • To ensure security and prevent fraud
    • To produce statistics and improve our services
  • Legal basis
    • Legitimate interest: proper functioning, security and continuous improvement
    • Consent: for non-essential cookies
  • Retention period
    • 13 months

• Information requests
  • Types of data collected:
    • First name and surname
    • Email address
    • Title
    • Company name
    • Phone number
    • Details of your request
  • Purposes of processing:
    • To respond to your requests
    • To produce statistics
    • To provide a quotation when requested
  • Legal basis:
    • Consent: to handle your request
    • Contract performance: where a contract exists
    • Legitimate interest: to understand user needs
  • Retention period
    • 3 years from last contact if not yet a client
    • 5 years from the end of our contract

• Job applications
  • Types of data collected
    • Identification data
    • Contact details
    • CV (qualifications, previous experience, etc.)
    • Interview notes
  • Purposes of processing
    • To review applications
    • To manage the recruitment process
    • To recruit candidates
    • To build a CV database
  • Legal basis
    • Pre-contractual measures: to process your application
    • Legitimate interest: to find the best candidates
    • Consent: for inclusion in a CV database
  • Retention period
    • Duration of the recruitment process until a decision is made
    • 5 years from the date the role is filled (for discrimination claims)
    • 2 years from last contact with unsuccessful candidates, or until you object

• Conversational assistant (Chatlab)
  • Types of data collected
    • Messages you voluntarily enter into the assistant
  • Purposes of processing
    • To answer your questions and information requests
    • To improve the assistant's responses
  • Processing conditions
    • The assistant collects no directly identifying data (name, email, etc.). Conversations are anonymous and not linked to any individual.
    • Content is stored within the Emitech Group only. It is never sold or shared with third parties.
  • Legal basis
    • Legitimate interest: to improve service quality
    • Consent: use of the assistant involves sharing information voluntarily
  • Retention period
    • Duration of the session only

3.4 - Data Recipients

The Emitech Group only shares your data with authorised recipients, in line with applicable regulations.

Access may be granted to group companies, partners and third-party processors. This covers IT services such as hosting, storage, data processing, database management and maintenance.

These processors act only on Emitech Group instructions. They access your data solely to fulfil the stated purposes and are bound by the same security and confidentiality obligations.

3.4bis – International Data Transfers

Some providers may process your data outside the European Economic Area (EEA), including in the United States. Services concerned:

• Google LLC (Google Analytics) — audience analysis
• Microsoft Corporation (Clarity) — behavioural analysis
• Vimeo Inc. — video hosting and playback

These transfers comply with Articles 44 to 49 of the GDPR. Where applicable, they rely on:

• an adequacy decision, such as the EU-U.S. Data Privacy Framework (10 July 2023) for certified US providers;
• or Standard Contractual Clauses (SCCs) under EU Decision 2021/914, with additional safeguards where needed.

3.5 - Data Retention

The Emitech Group only keeps your data for as long as needed. Retention periods comply with applicable law.

3.6 - Security

The Emitech Group protects your personal data using physical and logical security measures.

3.7 - Users' Rights

Under applicable data protection law, you have the following rights:

• right of access,
• right to rectification,
• right to erasure,
• right to restriction of processing,
• right to data portability,
• right to object,
• right to withdraw consent at any time,
• right to lodge a complaint with the CNIL.

To exercise these rights, contact our DPO: dpo@emitech-group.com.

4 - Cookies

A cookie is a small file sent by a web server to your browser. It is stored on your device (hard drive, SSD, etc.).

Without your consent, the only cookie placed on your device is "tarteaucitron". It is linked to the emitech.fr domain and manages your cookie consent preferences.

4-1 Cookies and Browsing Tracking Tools

We use tracking tools to measure website traffic and improve the user experience.

The following cookies are linked to our website (domain .emitech.fr):

Matomo

Matomo is recommended by the CNIL and configured to comply with GDPR. It analyses audience and user behaviour on our website. Results are less precise than Google Analytics but serve the same purpose.

• _pk_id.*: stores the user identifier. Expiry: 13 months.
• _pk_ses.*: temporarily stores session data. Expiry: 30 minutes.

Google Analytics

Google Analytics analyses traffic and user behaviour to improve content and user experience.

• _ga: distinguishes users. Expiry: 12 months.
• _ga_*: stores and counts page views. Expiry: 12 months.

Clarity

Clarity records sessions and provides heat maps. It helps us understand user navigation, spot issues and improve the experience.

• _clck: stores browsing history and behaviour. Expiry: 12 months.
• _clsk: combines page views into a single session log. Expiry: 1 day.

4-2 Third-Party Cookies 

These cookies enable features such as embedded videos. They are set by third-party providers.

• __cf_bm: Cloudflare, distinguishes humans from bots. Domain: vimeo.com. Expiry: 30 minutes.
• _cfuvid: Cloudflare, manages traffic limits. Domain: vimeo.com. Expiry: session.
• player: Vimeo, stores video player preferences. Domain: vimeo.com. Expiry: 12 months.
• vuid: Vimeo, uniquely identifies video visitors. Domain: vimeo.com. Expiry: 13 months.

To manage your cookie preferences, use the banner at the bottom of the page.

You can update your choices at any time using the button at the bottom right of the page.

The cookie settings window also links to the privacy policies of the relevant third parties.