Last updated: 08.30.2024
HYVIA, a simplified joint-stock company, registered with the Versailles Trade and Companies Register under number 899 902 191, with its registered office at 42 Route de Beynes, 78640 Villiers-Saint-Frédéric, represented by Mr. Nicolas Champetier in his capacity as President (“Hyvia” or “we“), may collect and process your personal data.
We place great importance on the protection and respect of your privacy and are committed to complying with the provisions of the French “Informatique et Libertés” law of January 6, 1978, as amended, and Regulation EU 2016/679 of April 27, 2016 (General Data Protection Regulation or “GDPR“).
This privacy policy aims to inform visitors to the website https://www.hyvia.eu and/or Hyvia’s social media accounts (together, the “Site“), customers, prospects, and other professional contacts of Hyvia (journalists, press officers, etc.), about how we use your personal data and the ways in which you can retain control over it.
For any questions regarding our privacy policy, you can contact us by email at: data.office@hyvia.eu or by letter at the address mentioned above.
If you are applying for a job offer at HYVIA or submitting an unsolicited application, we invite you to consult our talent privacy policy to learn more about how your personal data is processed in this context.
We act as the data controller of your personal data collected and processed in connection with the use of the Site.
We have appointed Harlay Avocats as the Data Protection Officer (the “DPO“), whom you can contact at the following email address: data.office@hyvia.eu.
We use your personal data for the following purposes:
– managing and following up on your requests (quotes, contact requests, etc.);
– conducting commercial prospecting actions with our customers, prospects, and professional contacts;
– conducting external communication actions with journalists and press officers;
– managing the business relationship, including billing and providing our services to Hyvia customers;
– verifying the solvency of our customers;
– conducting satisfaction surveys and customer experience surveys;
– technical administration of the Site and ensuring the proper functioning and stability of the Site;
– conducting studies and statistical analyses related to our products, services, or the use of the Site;
– targeting content on the Site;
– managing litigation and pre-litigation;
– exercising your data protection rights.
We only collect data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
These purposes are specific and legitimate, and under no circumstances will your data be processed in a manner incompatible with these purposes unless we obtain your prior consent.
Depending on the case, we process your personal data based on the performance of a contract or pre-contractual measures, our legitimate interest, your consent, or compliance with a legal obligation:
Performance of the contract and pre-contractual measures:
We process your personal data based on the performance of a contract or pre-contractual measures for the management of the business relationship. The collection and processing of your personal data are necessary. If you refuse to provide the personal data processed for these purposes, we will not be able to perform the contract.
Legitimate interest:
In some cases, we process your personal data based on our legitimate interest, provided that it does not override your interest or your fundamental rights and freedoms. This is the case, for example, when we process your data to ensure the proper functioning and stability of the Site, conduct statistics on the use of our products, services, or the Site, manage and follow up on your requests, carry out external communication actions with journalists and press officers, verify the solvency of our customers, conduct satisfaction and customer experience surveys, and for the management of litigation and pre-litigation.
Consent:
We will send you commercial prospecting messages about us if you consent to them. We also process your personal data for content targeting on our Site based on your consent.
Legal obligation:
We may be required to process your personal data to comply with legal, regulatory, judicial, or administrative obligations, particularly in managing our accounting and tax obligations, and in managing your data protection rights.
We only process your personal data that is strictly necessary for the purposes described above, which includes the following categories of data:
– personal data allowing us to identify you: name, first name, email address, phone number;
– data related to your professional activity: sector of activity, company name, profession;
– data related to your interests;
– connection data: session logs, pages visited, visit duration, clicks made;
– technical data: data related to the operational incidents of the Site;
– any additional information you provide us with in connection with your contact request.
Your personal data is stored with care and is only made accessible under strict conditions to the following persons:
– our personnel members who need access to it;
– our service providers (such as, for example, the Site host, our communication agency);
– our partners Renault SAS, Renault Vehicle Innovation (“PVI”), Plug Power Inc. to respond to your contact requests or, if you consent, to send you commercial prospecting messages;
– social media networks Facebook, Twitter, and LinkedIn, particularly when you click on the share buttons of these social media networks.
Our service providers and/or partners may be located outside the European Economic Area, and personal data transfers outside the European Economic Area may be carried out.
These personal data transfers outside the European Economic Area are carried out in compliance with the applicable regulations:
– either by transferring your personal data to a recipient located in a country that has been subject to an adequacy decision by the European Commission certifying that it provides an adequate level of protection for personal data;
– or by signing Standard Contractual Clauses approved by the European Commission as ensuring an adequate level of protection for your personal data;
– or by using other appropriate safeguards.
You can contact us for further information on the transfer methods.
Your personal data is stored only for the time necessary to achieve the purposes pursued when we collect it. The retention periods applied to the data are proportionate to the purposes for which it was collected.
The retention periods for your personal data are as follows:
| Purpose | Retention Period |
|
Management and follow-up of your requests (quotes, contact requests, etc.) |
For 3 years from the end of the business relationship (if you are a customer) or for 3 years from the collection of your data or your last contact (if you are not a customer). |
|
Commercial prospecting actions |
For 3 years from the end of the business relationship (if you are a customer) or for 3 years from the collection of your data or your last contact (if you are not a customer). |
|
Conducting external communication actions with journalists and press officers |
For 3 years from the collection of your data or your last contact. |
|
Management of the business relationship |
Throughout the duration of the contractual relationship. |
|
Verification of customer solvency |
Throughout the duration of the contractual relationship. |
|
Conducting satisfaction surveys and customer experience surveys |
As long as necessary to achieve the purpose of the survey or until the right to object is exercised. |
|
Technical administration of the Site |
For as long as necessary for the technical administration of the Site, taking into account the nature and sensitivity of your personal data. Where possible, your data is aggregated for statistical purposes. |
|
Conducting statistics on the use of our products and services and the Site |
For as long as necessary to complete the study, taking into account the nature and sensitivity of your personal data. Where possible, your data is aggregated for statistical purposes. If the information has been collected through analytical cookies, this information will be kept for a maximum of 25 months. |
|
Targeting content on the Site |
For the duration of the targeting campaign and for a maximum of 25 months. |
|
Management of litigation and pre-litigation |
Throughout the duration of the contractual relationship. |
|
Exercising your data protection rights |
For as long as necessary to manage and process your requests (when the collection of an identity document was necessary, it is deleted as soon as the verification is completed). |
At the end of the retention periods indicated above, we may archive your personal data for documentary purposes to meet legal retention and/or probative obligations during the applicable legal limitation periods.
You can exercise your rights by writing to us at the following email address: data.office@hyvia.eu by proving your identity by any means. If we have reasonable doubts about your identity, we may ask for a copy of your identity document.
You have the right to know whether we hold personal data about you and, if so, to request access to it and obtain the following information regarding:
– the purposes of the processing;
– the categories of personal data concerned;
– the recipients, or categories of recipients, to whom the personal data has been or will be disclosed, in particular recipients established in third countries or international organizations;
– where possible, the period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
– the existence of the right to request from the data controller the rectification or erasure of your personal data, the right to request a restriction on the processing of your personal data, or the right to object to such processing;
– the right to lodge a complaint with a supervisory authority;
– information relating to the source of personal data where the personal data is not collected directly from you;
– the existence of automated decision-making, including profiling, and, in such cases, meaningful information about the logic involved, as well as the significance and expected consequences of such processing for you;
– where personal data is transferred to a third country or an international organization, information on the appropriate safeguards in place.
You have the right to rectify or request the rectification of personal data concerning you that is inaccurate or incomplete.
You have the right to request the deletion of your personal data. This right may only be exercised in certain cases, where one of the grounds provided for in Article 17 of the GDPR applies. For example, it may involve personal data that is no longer necessary for the purposes for which it was collected or that has been unlawfully processed.
If you exercise this right and one of the grounds applies to your request, we will delete your personal data as soon as possible.
The deletion is final, except in cases where the processing of your personal data is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.
You have the right to obtain a restriction on the processing of your personal data. This right can be exercised for the reasons provided in Article 18 of the GDPR, particularly when you contest the accuracy of your personal data.
This right does not result in their deletion, and we are required to inform you before lifting the restriction on the corresponding processing.
When we process personal data about you based on our legitimate interest, you can object to the processing at any time.
This right to object is not absolute, and we may refuse your request for legal or legitimate reasons.
You may request to receive your personal data in a structured, commonly used, and machine-readable format for portability purposes.
The right to portability of processed personal data is not a general or absolute right. Therefore, this right only applies when the processing is based on your consent or a contract and is carried out by automated means.
You may withdraw your consent at any time when the processing is based on your consent. We will then stop processing your personal data for the future, without affecting the previous processing of your personal data to which you had consented.
You can inform us of your instructions regarding the fate of your personal data after your death and how it should be used.
If, despite all the care we take to protect your personal data, you believe that your rights have not been respected, you can file a complaint with the competent authority (in France, the CNIL is the competent authority, and its contact details are as follows: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, Tel.: 01 53 73 22 22).
To ensure your satisfaction, our Site is constantly improving and seeking new developments.
We may occasionally modify the privacy policy, in particular to comply with regulatory, judicial, editorial, or technical changes.
In such a case, we will inform you of this modification by any means, and the date at the top of the document will be updated. We invite you to consult this page regularly.