The Société du Canal de Provence complies with all current legislation on the protection of personal data, in particular the European Union’s general Data Protection Regulation of 27th April, 2016, which pertains to the protection of private individuals as regards the use of their personal data, and with Act no. 78-17 of 6th January, 1978, which pertains to information technology and civil liberties, and has since been amended.
In light of this, the present charter has been drawn up with a view to fully informing clients, suppliers, service providers and others on how and why SCP uses the personal data with which it is entrusted, as well as the steps it takes to protect such data.
This charter complements the general conditions of sale and service.
What is personal data?
‘Personal data’ encompasses all information which enables an individual to be identified, whether directly (first name, family name, etc.), or indirectly (ID, telephone number, etc.).
In order to carry out its business, SCP is obliged to collect and process data pertaining among other things to personal identification, bank details, CVs, or contracts (type of equipment, consumption, purchases, invoices, payments, etc.).
In terms of access to our website, personal data may include digital forms of identification, such as the IP address attributed to your phone or computer, or cookies.
What is it used for?
Personal data is used solely to conduct essential relations with SCP and its business, in particular:
- managing customer files,
- subscribing to or cancelling services,
- billing and collection,
- managing tasks in the field (meter readings, connecting work, infrastructure maintenance, etc.),
- handling complaints and disputes,
- access authorisation and easement agreements,
- provisional sale agreements,
- communicating general information, letters, and commercial documents,
- processing applications for recruitment and internship purposes.
How long is personal data kept?
Personal data plays an important part in contractual relations for the provision of services. As a result, it is only stored for the period required by the relevant legal and regulatory provisions.
Personal data is also useful at the operational level, allowing for proper bookkeeping, efficient management of customer relations, and the smooth handling of fieldwork and potential legal proceedings.
Should you contact us to ask for information, we shall only keep your data for as long as it takes to process your request. Likewise, in the case of job applications, CVs and cover letters are only kept until the position has been filled, and for a maximum of two years.
Most information is kept at least for the duration of contractual relations, and in line with the non-exhaustive list of examples shown in the table below.
| Type of document | Legal retention period |
|---|---|
| Supporting documents for accounting purposes: purchase orders, customer bills | 10 years after the end of the financial year |
| Contracts or agreements signed within the framework of business relationships, business correspondence | 5 years after the end of the accounting contract |
| Property rights: ownership titles, easements, access authorisations | No time limit |
Who consults personal data collected by SCP?
In order to carry out its activities, SCP may transfer personal data exclusively to:
- authorised personnel belonging to the Société du Canal de Provence,
- service providers and sub-contractors working on behalf of the company,
- certain regulated professionals, such as lawyers, solicitors, bailiffs, certified experts, or external auditors,
- legal authorities, government agencies, or public organisations (upon request and within the limits imposed by law),
- municipal and local councils, for the purpose of calculating sanitation tax for “domestic raw water” contracts (unless the individual objects).
All staff members are informed of the need to keep such data confidential. They also ensure that our service providers formally commit to respecting the law in terms of personal data protection.
We never share personal data with third parties for marketing reasons, under any circumstances.
How and where is personal data stored?
All personal data kept by our company is stored in France.
Our priority is to store your data in a safe and secure way. To this end, the Société du Canal de Provence takes all necessary precautions, at both the technical and organisational level, to prevent insofar as is possible any violation of this data.
What are your rights regarding the personal data we collect?
All private individuals are entitled to exercise the following rights:
RIGHT OF ACCESS
You have the right to be informed of how your data is being used and, if appropriate, to access your data.
RIGHT OF RECTIFICATION
In the event that the information you have is incorrect or incomplete, you have the right to correct your personal data.
PURPOSE LIMITATION RIGHT
In certain circumstances, and within the limits imposed by our legal obligations, you have the right to ask us to block or limit the use of your personal data, for example if you object to the way in which such data is being used.
DATA PORTABILITY RIGHT
In certain cases provided for by the law, you have the right to ask us to reuse your personal data elsewhere, or to transfer such information to a third party of your choice, providing that the data is ‘in a structured format, commonly used and machine-readable’.
RIGHT TO ERASURE - RIGHT TO BE FORGOTTEN
Providing that you can prove your identity, you may request the erasure of your personal data. We undertake to answer your request within a reasonable timeframe. However, should we need to retain your personal data on legal or legitimate grounds, we will not be able to satisfy your request and will inform you thereof as quickly as possible.
RIGHT TO OBJECT
Within the limits imposed by our legal obligations, you may at any time object to certain ways in which your personal data is used (e.g. for marketing reasons or for profiling).
What precautions does SCP take to ensure the security of your personal data?
As soon as we receive personal data, we do everything within our power to protect it. Strict security procedures and measures are implemented throughout the company, in order to avoid any unauthorised access to such data.
Our IT department is extremely capable, and our security tools are of a sufficiently high standard.
SCP has appointed an internal Personal Data Officer who is registered with the CNIL (French Data Protection Authority) and represents the company on all matters pertaining to personal data and its use.
In the event of an invasion of privacy, we will take the relevant legal and regulatory steps and notify the CNIL, which is the official authority in France on all matters pertaining to data protection.
Who can you contact to ask for information or exercise your rights?
Should you have any questions or comments on the way in which we use your personal data, or should you wish to exercise one of the rights mentioned above, you can either contact us at the following address:
Société du Canal de Provence et d’aménagement de la région provençale
Monsieur le Délégué aux Données Personnelles
Le Tholonet
CS 70064
13162 AIX EN PROVENCE CEDEX 5,
or send a message to:
dpd@canal-de-provence.com
In the event that you are unable to exercise your rights, or wish to report a violation of personal data protection rules, you may also lodge a claim with the French Data Protection Authority (CNIL):
3 place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
NB: we reserve the right to modify this charter in accordance with changes in the law and SCP’s activities (last updated on 19th July 2019).
