Ginger Group : protection of personal date

The Ginger Group is committed to ensuring that the collection and processing of your data on the www.groupeginger.com website complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (“Loi Informatique et Libertés”).

Each form limits the collection of personal data to what is strictly necessary (data minimisation) and indicates in particular:

- the objectives for which this data is collected (purposes);
- whether this data is mandatory or optional for the management of your request;
- who shall be able to access this data (only the Ginger Group, unless specified in the form when transmission to a third party is necessary for the management of your request);
- your data protection rights and how to exercise them with the French Data Protection Authority (“Commission nationale de l'informatique et des libertés – CNIL”).

Personal data collected as part of the services offered on www.groupeginger.com is processed using secure protocols and enables the Ginger Group to manage requests received in its IT applications.

1. DEFINITIONS
Cookies: cover all non-executable text files, tracers, web beacons and other technologies, such as transparent GIFs, clear GIFs or web-bugs, deposited on the terminal's browser (computer, tablet, smartphone, etc.) by Ginger Group companies, Subcontractors or Partners, subject to the consent given by the User, when browsing the Services via the Websites and/or Applications. The information contained in this file may only be read and/or modified by the sender.

Browsing Data: refers to all data relating to a terminal at a given time, even if we do not directly know which terminal you are using or who you are at a given time. The following data may be collected as Browsing Data:

- The identification and content of a cookie file stored by us/our Partners on your terminal;
- The IP address of the terminal connected to the Service(s);
- The date, time and duration of connection of a terminal to an element of the Service(s);
- The Internet address of the page from which the terminal accessing the Service(s) originates;
- The type of operating system of the terminal (e.g., Windows, MacOs, Linux, Unix, BeOS, etc.); - - The type and version of the browsing software used by the terminal (Internet Explorer, Firefox, Safari, Chrome, Opera, etc.);

- Possible download errors;

- The language used by the browsing software

Personal Data: refers to any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, an online identifier, etc.

Partner(s): refers to any company, other than a Subcontractor, selected by a Ginger Group company, with which it has entered into a contract, for the purpose of providing and protecting Personal Data.

Service(s): refers to any online public communication service and/or content made available by the Ginger Group, including the sending of unsolicited applications.

Website: refers to the online public communication service published by the Ginger Group, accessible by Users via their connection terminal and located at the URL www.groupeginger.com and/or any other address that may be added to or substituted for it.

Subcontractor(s): refers to any company that may process Personal Data or Navigational Data on behalf of a Ginger Group company in accordance with the instructions provided by the Ginger Group company(ies).

User: refers to any natural person aged sixteen (16) or over, accessing the Services and/or Websites, on a non-professional and non-commercial basis.

2. IDENTITY AND CONTACT INFORMATION OF THE DATA PROCESSOR
Groupe Ginger as owner of the Site: 12 avenue Gay Lussac, 78 990 Elancourt
OVH as host of the Website: 2 rue Kellermann, 59 100 Roubaix, France.

3. COLLECTION OF PERSONAL DATA
Personal Data is collected and processed with your consent by accepting the General Terms and Conditions of Use on the basis of our legitimate interest.

When sending an unsolicited application via the Website, Users are informed of the collection and processing of their Personal Data by means of an information notice.

By accepting this Data Protection Policy, the User consents to the collection and processing of his/her Personal Data in the manner specified below.

4. PERSONAL DATA COLLECTED
The Personal Data that may be collected from Users includes their surname, first name, address, email address, telephone number and information relating to their professional life (CV and cover letters).

When browsing the Website, the Ginger Group may collect Browsing Data, in accordance with applicable law and with the User's consent. The Ginger Group uses cookies to collect this information. For more information on this subject, please refer to the General Terms and Conditions of Use.

5. PURPOSE OF COLLECTING PERSONAL DATA

The purpose of collecting and processing the User's Personal Data is to:

- Measure the audience and visitor activity on the website;
- Respond to your requests for information and quotations;

- Process and manage your job application;
- Improve the interactivity of the website and share certain website content on social platforms.

6. ACCESS TO PERSONAL DATA
As all personal data is confidential, access to it is limited to the data controller, certain Ginger Group employees, and any subcontractors with whom the Ginger Group has a contractual relationship, particularly for technical services.

Depending on the services used on the Website, Personal Data may be communicated:

To the recruitment department for processing job applications;
To the sales and/or communications department for requests for information and quotations;
To service providers that manage cookies, if cookies are accepted.
The Ginger Group undertakes not to sell, rent or transfer Personal Data to third parties without the consent of the person concerned, unless required to do so by law or regulation.

7. CONSERVATION OF PERSONAL DATA
In the context of requests via the contact form(s), Personal Data is kept for the period necessary for the purpose of processing, i.e., for as long as the contact remains active. If the contact becomes inactive, the Personal Data shall be deleted within 3 years.

Browsing data and audience measurement and sharing cookies are kept for a maximum period of 13 months from the date of collection or first deposit on the terminal.

8. RIGHTS RELATING TO PERSONAL DATA
Users have the right to access, rectify, delete and oppose the processing of their Personal Data by sending an email to dpo@groupeginger.com or a letter to the Data Protection Officer at the following address:

Délégué à la protection des données
Ginger Holding
12 avenue Gay Lussac
78 990 ELANCOURT

France

Any request to exercise a right must be accompanied by a photocopy of an identity document bearing the User's signature and must specify the address to which the reply must be sent.

The Ginger Group shall have one month from receipt of the request to respond.

9. TRANSFER OF PERSONAL DATA
Personal Data is stored in the European Union and is not transferred outside the European Union.

In the event of a transfer to a recipient located outside the European Union, the Ginger Group undertakes to do its utmost to ensure that transfers are controlled and limited to countries considered by the CNIL to provide sufficient protection for Personal Data.

10. UPDATING THE POLICY
This Privacy Policy may be updated at any time to meet the needs of the Ginger Group or as required by law.