Privacy Policy Privacy PolicyIntroduction What is personal data? Personal data is any information concerning a physical person, who may be identified or identifiable, directly or indirectly, through an identification number or through one or several elements belonging to that person. How is personal data collected? Personal data is collected directly from a client making contact during a request, a complaint or when asking for specific information, etc. Who is responsible for processing? Compagnie Eiffage du Viaduc de Millau (CEVM), Péage de Saint-Germain, BP 60457 - 12104 Millau Cedex Personal data protection : CEVM collects and processes personal data that is absolutely essential for providing customers with personalised, quality services. Processed personal data and associated purposes CEVM collects the following personal data from its customers: title, surname, first name, e-mail address, telephone number(s), given on a contact form aimed at customer relationship managment (answering requests, complaints, specific information requests). Legal basis for processing personal data: CEVM is permitted to process personal data notably: • For its own legitimate interests and for carrying out a public service mission for customer relationship. Mandatory or optional nature of data: Certain data, marked in the contact form with an asterisk, is mandatory. If the customer does not wish to communicate this data, CEVM will be unable to provide customer relationship. How long processed data is retained: In accordance with the principles defined in the regulation, CEVM retains personal data only for the amount of time required for reaching the objective intended upon collection. The following conservation periods are therefore respected: Customer relationship management: Data from unregistered customers is retained for a maximum period of 2 years starting from the most recent request or reply to a complaint. Recipients of processed data Customer relationship management: Personal data is processed by CEVM’s authorised internal departments. Security measures applied to personal data: Personal data is subject to all the technical and organisational measures required for ensuring its confidentiality and security from any data violation, destruction, loss, alteration, disclosure or reproduction and from any unauthorised access. CEVM guarantees that personal data shall not be sold, exchanged or transferred to another company/structure for any use whatsoever, without your consent. Likewise, CEVM employees are required to respect the confidentiality of your data. Personal data localisation: The data shall not be sent outside the European Union. Automated decision making: Data processing shall not be subject to automated decision making.. Personal data processing rights In accordance with the regulation, all persons concerned are entitled to the following rights: The right to access, delete, legitimately oppose or limit personal data. All of these rights may be exercised by contacting the data protection delegate at Compagnie Eiffage du Viaduc de Millau via: • e-mail: dpd.cevm@eiffage.com, • the following postal address: DPD CEVM - Péage de Saint-Germain - BP 60457 12104 Millau Cedex Right to file a complaint with the CNIL Any person concerned by processing of their personal data and who, having contacted the processing manager, considers that their rights are not respected, may file a complaint with the CNIL (French National Information Science and Liberties Commission).