Privacy Policy

Geismar generally ensures that it only collects personal data that is appropriate, relevant and necessary for processing purposes (minimisation principle) and takes appropriate security and confidentiality measures to ensure its protection, including dealing with data protection issues from the outset and by default.

Geismar undertakes to comply with the provisions of applicable regulations, in particular those of European Regulation 2016/679 on the protection of personal data, which entered into force on 25 May 2018 (hereinafter, the “GDPR”), as well as those of the Informatique et Libertés (French Data Processing and Civil Liberties) law of 6 January 1978 and of any law or regulation that may supplement or replace it.

The aim of this privacy policy is to inform you in a clear and transparent manner about the personal data that we process and how we process it.

1. The data collected and collection procedures

Any information relating to an identified or identifiable natural person constitutes personal data.

In the course of its activities and the operation of its website, the Geismar firm may process a certain amount of personal data. In general, Geismar takes care to collect and process only the data that is strictly necessary for the purpose for which it is processed.

Data that Geismar collects directly from you:

• When registering for the Geismar newsletter: contact information and communication preferences;
• When using the contact form: identity and contact information;
• When applying to Geismar, including through the application form: identity and contact details, professional life (CV);
• When using Geismar’ services: any information necessary for the fulfilment of our mandate. This includes: identity and contact information, financial and billing information.

Data that Geismar collects from third parties:

Geismar may sometimes receive personal data from third parties, in particular in the context of its legal obligations or in the exercise of its mandate, in particular from:

• Geismar offices abroad;
• Administrative and control authorities;
• Jurisdictions;
• Clients, as part of the mandates they entrust to us;
• Partners
• lors de votre navigation sur le site Internet de Geismar : données de connexion et de navigation, en particulier l’indication de la région d’origine de l’utilisateur ;

Data that Geismar collects automatically:

• When browsing the Geismar website: connection and browsing data, in particular the user’s region of origin;

In addition, our website contains Google Analytics cookies, which are used to generate reports on user interactions with our website. The information stored does not allow personal identification of Internet users and is directly transferred to Google without Geismar being aware of it. To learn more about these cookies, you can read Google Analytics’ data protection policy at
https://www.google.com/analytics/learn/privacy.html?hl=fr.

Geismar does not collect any sensitive data, except if doing so is required by legal or regulatory provisions, or for the exercise of the mandate you entrusted to us.

Sensitive data is defined as any information concerning a person’s racial or ethnic origin, political, philosophical or religious opinions, trade union membership and health or sexual orientation.

3.Legal basis for processing

Geismar will only process your data in the cases provided for by applicable regulations, and in particular:

• With your voluntary, specific, informed and unequivocal consent (e.g. for subscriptions to newsletters or contact requests);
• When the processing is necessary for the performance of a contract or pre-contractual measures taken at your request (for example, applications or taking charge of a case);
• For compliance with Geismar’ legal or regulatory obligations (for example, combatting fraud);
• When the processing is justified by Geismar’ legitimate interest (compilation of statistics, IT security measures, commercial prospecting).

3. Purpose of processing

Geismar collects your personal data for specific, explicit and legitimate purposes, for example to:

• Process contact requests;
• Manage recruitment.

The Geismar firm may use your personal information for administrative purposes or in order to fulfil its legal and regulatory obligations.

4. Duration of data retention

Geismar keeps your personal data only for the time strictly necessary to fulfil the purposes for which it was collected and subject to its legal obligations to retain some information or the legal provisions relating to archiving and anonymity.

5. Transfer of personal data

Your personal data is stored on Geismar’ servers, which are located in the European Union.

Transfers of personal data are likely to take place:

• With the various Geismar offices and partners for the purposes of processing your file;
• With national administrative and judicial authorities.

Geismar ensures that any transfer of personal data outside Europe is supervised in order to guarantee the security of your data:

• By ensuring that the country is recognised as having an adequate level of protection according to the European Commission (or, for the United States that the recipient company has adhered to the Privacy Shield mechanism);
• When entering into agreements ensuring this security with the recipient; or
• With your consent.

6.Your rights and how you can exercise them

Within the limits provided by the regulations in force, you have the following rights:

You may withdraw your consent to the processing of your personal data at any time. Doing so will not call into question the lawfulness of any processing carried out prior to your withdrawal.

You also have the option to organise the storage, deletion and communication of your personal data after your death through the adoption of general or specific directives, which can be registered with a digital trusted third party certified by the CNIL.

Finally, you may exercise your rights and send any request for information concerning your personal data by post to:

Gestion des données personnelles – Geismar – 168 Avenue Charles de Gaulle, Neuilly-sur-Seine, 92000, France.

This correspondence must be accompanied by a copy of your identity document and any necessary proof.

Geismar will answer your request as soon as possible, and in any event within one month of receiving your request. This period may be extended by two months in view of the complexity of your request and the number of requests that are addressed to Geismar. If this situation were to arise, Geismar will inform you of such an extension before the initial time limit of one month expires.

If Geismar does not respond to your request, the firm will inform you of the reasons for its refusal or inaction.

You may lodge a complaint with the CNIL (www.cnil.fr).