Hydreka is committed to a continuous process to the protection of personal data and complies with all French & European regulations and legislations regarding the protection of these data.
What data do we collect?
Hydreka may collect the following information:
- Your contact details, postal address, telephone numbers (including mobile numbers) and email address;
- Your on-line browsing activity on our websites
- Your communication and marketing preferences
- Your location
- Other publicly available personal data, including any which you have shared via a public platform
- Our websites are not intended for children and we do not knowingly collect data relating to children.
How do we use your data?
- With your agreement, to contact you electronically about promotional offers, free training events and products and services which we think may interest you
- To make a tailored website available to you
- For market research purposes to better understand your needs
- To enable us to manage customer service interactions with you
- Where we have a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).
How long will we keep your data for?
We will not retain your data for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of data, however the longest we will normally hold any personal data is 6 years.
How do we protect your data?
We are committed to keeping your personal data safe and secure. Our security measures include:
- Encryption of data
- Security controls which protect our IT infrastructure from external attacks and unauthorised access.
- Internal policies setting out our data security approach and training for employees.
What are your rights?
You have the following rights:
- the right to ask for a copy of personal data that we hold about you (the right of access);
- the right (in certain circumstances) to request we delete personal data held on you; where we no longer have any legal reason to retain it (the right of erasure);
- the right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you (the right of rectification);
- the right to opt out of any marketing communications that we may send you and to object to us using/holding your personal data if we have no legitimate reasons to do so (the right to object);
- the right (in certain circumstances) to ask us to ‘restrict processing of data’; which means we would need to secure and retain the data for your benefit but not otherwise use it (the right to restrict processing); and
- the right (in certain circumstances) to ask us to supply you with some of the personal data we hold about you in a structured machine-readable format and/or to provide a copy of the data in such a format to another organisation (the right to data portability);
- Hydreka is committed to process your personal data in strict compliance with all purposes listed above, which have been brought to the attention of our Data Protection Officer (DPO), who has included them in our processing register.
If you wish to exercise any of the above rights, you can email us at firstname.lastname@example.org or write to: Hydreka, DPO, 51 avenue Rosa Parks, 69009 Lyon, France.
Legal basis for processing personal data
Hydreka collects and uses customers’ personal data because it is necessary for:
- the pursuit of our legitimate interests (as set out below)
- the purposes of complying with our duties and exercising our rights under a contract for the sales of goods to a customer: or
- complying with our legal obligations
In general, we only rely on consent as a legal basis for processing personal data in relation to sending direct marketing communications to customers via email.
Customers have the right to withdraw consent at any time. Where consent is the only legal basis for processing, we will cease to process data after consent is withdrawn. Please email email@example.com if you would like to withdraw consent.
Our legitimate interest
The normal legal basis for processing customer data, is that it is necessary for the legitimate interests of Hydreka, including: –
- selling and supplying goods and services to our customers
- protecting customers, employees and other individuals and maintaining their safety, health and welfare
- promoting, marketing and advertising our products and services
- sending promotional communications which are relevant and tailored to individual customers
- understanding our customers’ behaviours, activities, preferences and needs
- improving existing products and services and developing new products and services
- complying with our legal and regulatory obligations
- handling customer contacts, queries, complaints or disputes