ON Group – Privacy policy

The General Data Protection Regulation (GDPR) coming into force on May 25, 2018, define the principles to be respected when collecting, processing and storing personal data. They also guarantee rights for data subjects.

This Privacy Policy sets out and informs you of the manner in which our website uses and protects any information that you may provide to us when you use this website accessible from the following URL: https://ongroup.net/

Please note that this privacy policy may be amended or supplemented at any time by ON GROUP, in particular in order to comply with any changes in legislation, regulations, case law or technology.

In such a case, the date of the update will be clearly identified at the top of the present policy.

These modifications are binding on the User as soon as they are put online. It is therefore advisable for the User to regularly consult the present privacy and cookie use policy in order to be aware of any changes.

I. PERSONAL DATA

In general, you can visit our Site without communicating any personal information about yourself. In any case, you are under no obligation to transmit information to ON GROUP. Nevertheless, if you refuse, you may not be able to benefit from certain information or services that you have requested. In certain cases, our Site may ask you to provide your surname, first name, e-mail address, telephone number, company and job title (hereinafter referred to as your “Personal Information”). By providing this information, you expressly agree that it may be processed by ON GROUP, for the purposes indicated in point 2 below, as well as for the purposes stated at the end of each form. In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on April 14, 2016, and the amended French Data Protection Act of January 6, 1978, ON GROUP informs you of the following:

1. IDENTITY OF THE CONTROLLER

The data controller is ON GROUP, whose registered office is located at :

Route de Paris, 21530 La Roche en Brenil, France

Tel: 03 80 64 71 86

2. PURPOSES OF PROCESSING

ON GROUP may process your Personal Information: (a) for the purposes of providing you with the information 2/3

or services you have requested (in particular: sending you a brochure, commercial offer, white papers or assessing your level of compliance via a quiz); and/or (b) for the purposes of collecting information enabling us to improve our Site, our products and services (in particular by means of cookies); and/or (c) for the purposes of being able to contact you about various events relating to ON GROUP, including in particular product updates and customer support.

3. MAIL TO

ON GROUP is the sole recipient of your personal information. This information, whether in individual or aggregated form, is never passed on to a third party, notwithstanding the subcontractors ON GROUP uses (you will find more information about them in point 7 below). Neither ON GROUP nor any of its subcontractors market the personal data of visitors and users of its Site.

4. SHELF LIFE

Your Personal Information is kept by ON GROUP only for the time corresponding to the purpose of the collection as indicated in 2 above, which in any event may not exceed 24 months.

5. DATA PROTECTION RIGHTS

You have the following rights concerning your Personal Information, which you may exercise by writing to us at the postal address mentioned in point 1 or by filling in administration personal data.

o Data access and communication rights You have the right to access your personal information. However, in view of ON GROUP’s obligation of security and confidentiality in the processing of personal data, you are informed that your request will be processed provided that you can prove your identity, in particular by producing valid electronic identification (in the event of a request via our dedicated electronic form) or a signed photocopy of your valid identity document (in the event of a request sent in writing). ON GROUP informs you that it will be entitled, if necessary, to oppose manifestly abusive requests (due to their number, repetitive or systematic nature). To help you with your request, particularly if you wish to exercise your right of access by sending a written request to the postal address mentioned in point 1, you will find a model letter drawn up by the Commission Nationale de l’Informatique et des Libertés (the “CNIL”) by clicking on the following link. https://www.cnil.fr/fr/modele/courrier/exercer-son-droit-dacces

o Right to rectify data: Under this right, you have the legal right to request the rectification, updating, blocking or deletion of any data concerning you that may be inaccurate, erroneous, incomplete or obsolete. You may also define general and specific directives concerning the fate of your personal data after your death. Where applicable, the heirs of a deceased person may request that the death of their loved one be taken into account and/or that the necessary updates be made. To help you with your request, particularly if you wish to exercise your right to rectification on your own behalf or on behalf of a deceased relative, please send a written request to the postal address mentioned in point 1. Click on the following link to download a model letter drawn up by the CNIL. https://www.cnil.fr/fr/modele/courrier/rectifier-des-donnees-inexactes-obsoletes-ou-perimees

o Right to object: This right can only be exercised in one of the following two situations:

• Where the exercise of this right is based on legitimate grounds
• When the purpose of exercising this right is to prevent the data collected from being used for commercial prospecting purposes.
• To assist you in this process, and in particular if you wish to exercise your right to object by means of a written request sent to the postal address indicated in point 1, you will find a model letter drawn up by the CNIL by clicking on the following link. https://www.cnil.fr/fr/modele/courrier/supprimer-des-informations-vous-concernant-dun-site-internet

6. RESPONSE TIMES

ON GROUP undertakes to respond to your request for access, rectification or opposition or any other request for additional information within a reasonable period of time, which may not exceed 1 month from receipt of your request.

7. AUTHORIZED SERVICE PROVIDERS AND TRANSFER TO A NON-EUROPEAN UNION COUNTRY

ON GROUP informs you that it has recourse to authorized service providers to facilitate the collection and processing of the data you have communicated to us. These service providers may be located outside the European Union and are responsible for communicating data collected via the various forms on the Site (with the exception of the form enabling you to exercise your data protection rights, which is proposed and operated by ON GROUP). ON GROUP has previously ensured that its service providers provide adequate guarantees and comply with strict conditions in terms of confidentiality, use and data protection. In particular, vigilance has been exercised to ensure that there is a legal basis for any transfer of data to a third country. In this respect, one of our service providers is subject to internal company rules (or “Binding Corporate Rules”) that were approved by the CNIL in 2016 when the others obey not only Standard Contractual Clauses but also the Privacy Shield.

8. COMPLAINT TO THE COMPETENT AUTHORITY

If you consider that ON GROUP is not complying with its obligations with regard to your Personal Information, you may lodge a complaint or a request with the competent authority. In France, the competent authority is the CNIL, to which you can send an electronic request by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet.

Finally, to consult our cookies policy, go to our dedicated page : here