Colas SA and its Subsidiaries[1] attach the greatest importance to the protection of your personal data and undertake to comply with the regulations in force applicable to the processing of personal data, in particular:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 applicable as of May 25, 2018 but also;
• the Law n°78-17 of January 6, 1978 relating to data processing, files and freedoms as amended 

The following disclosures are intended to detail what personal data is collected and how it is processed within the framework of the solutions-colas.com website.

Who is responsible for the processing of my personal data?

The data controller is the company that determines how and for what purpose your personal data is used. 
Within the framework of the processing carried out on this site, the data controller is :
COLAS SA 
1, rue du Colonel Pierre Avia - CS81755 - 75730 PARIS Cedex
Registered with the RCS under number 552 025 314
When Colas SA shares your data with its Subsidiaries, the latter also act as data controllers.

Personal data

Personal data is any information relating to an identified or identifiable individual.

The personal data processed within the framework of the Colas website are the following

• information contained in the contact e-mail or transmitted via the contact forms (surname, first name, e-mail address);
• information contained in attachments sent to us.

Why are my personal data used and on what basis(s)?

Any processing of personal data must, in order to be lawful, be based on one of the legal grounds provided by the RGPD.
Your personal data is collected for the purposes and on the legal grounds detailed below: 
1) Purposes. To respond to requests sent via the contact form
    Basis. Legitimate interests of the data controller  
2) Purposes. Management of prospects (request for information, request for quotation, etc).
    Basis. Legitimate interests of the data controller 

What data is collected and processed? To whom are my data transmitted? 

The personal data processed within the framework of this website are the following: 

No data is transferred outside the European Union.

How long will my data be kept?

Personal data processed in the context of the contact request is kept for the time necessary to formulate a response or to resolve the request. 
Personal data relating to a prospect may be kept for 3 years after the last contact from you.

What are my rights to the data?

You can access your personal data, oppose the processing of these data, oppose receiving commercial prospecting from us, have them rectified or deleted. You also have the right to limit the processing of your data as well as the right to define directives concerning the fate of your personal data in the event of your death. 
Furthermore, you can withdraw your consent to the processing of your data at any time.
The exercise of these different rights applies according to the legal basis of the processing concerned by the request (see above).
Consult the cnil.fr website for more information on your rights.

How can I exercise my rights?

For any information related to your personal data and/or to exercise your rights, contact the Chief Privacy Officer (CPO):
- By email: dataprivacy@colas.com

Complaint to the CNIL  

If you feel, after having contacted us, that your "Data Protection" rights are not being respected, you can lodge a complaint with the Commission Nationale de l'Informatique et des Libertés.

[1] “Colas” or “the Group” designates Colas SA as well as the companies or entities in which Colas directly or indirectly holds more than 50% of the share equity.