{"id":8260,"date":"2026-05-29T17:39:03","date_gmt":"2026-05-29T15:39:03","guid":{"rendered":"https:\/\/www.def-france.fr\/politique-de-confidentialite-2-en\/"},"modified":"2026-09-15T11:35:35","modified_gmt":"2026-09-15T09:35:35","slug":"politique-de-confidentialite-2","status":"publish","type":"page","link":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/politique-de-confidentialite-2\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<section class=\"custom-block text-button-block\">\n    <div class=\"container\">\n        <div class=\"text-with-button !bg-white my-4\">\n            \n            <h1>Privacy policy<\/h1>\n<p>The protection of personal data is governed in particular by Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, also known as the General Data Protection Regulation (hereinafter the \u201cGDPR\u201d) and by Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended, known as the \u201cData Protection Law\u201d (hereinafter the \u201cLaw No. 78-17\u201d).<\/p>\n<p>As part of its business activities, R\u00e9seau DEF, a simplified joint-stock company with a share capital of 20,976,137.80 euros, whose registered office is located at 7 rue du Saule Trapu, Parc d\u2019Activit\u00e9s du Moulin de Massy \u2013 91300 Massy, registered with the Evry Trade and Companies Register under number 340 087 576, and all its entities within the meaning of Article L. 233-1 of the French Commercial Code (hereinafter \u201cDEF\u201d), they collect and process, on their own behalf, personal data relating to their customers, prospects, subcontractors, job applicants, service providers or various partners (hereinafter collectively referred to as \u201cCustomers\u201d).<\/p>\n<p>DEF does, in fact, collect personal data when Customers use and interact with the products and services it offers and\/or in the course of its business.<br \/>\nIn addition to the GDPR and Law No. 78-17, DEF undertakes to comply with this privacy policy (hereinafter the \u201cPrivacy Policy\u201d) in relation to all processing of personal data that it carries out.<\/p>\n<h2>Definitions<\/h2>\n<p>For the purposes of this Privacy Policy, each of the terms listed above and below that begins with a capital letter shall have the meaning set forth below, whether used in the singular or plural:<\/p>\n<ul>\n<li>\u2013 \u201cRecipient\u201d: means the natural or legal person, public authority, agency, or any other body to which personal data is disclosed, whether or not it is a third party;<\/li>\n<li>\u2013 \u201cPersonal data\u201d: means personal data as defined in Article 4 of the GDPR, i.e., any information relating to an identified or identifiable individual, directly or indirectly, by one or more factors specific to that individual;<\/li>\n<li>\u2013 \u201cData Subject\u201d: means the natural person whose Personal Data is collected and processed;<\/li>\n<li>\u2013 \u201cData controller\u201d: means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing;<\/li>\n<li>\u2013 \u201cData Processor\u201d: means the natural or legal person who processes personal data on behalf of the data controller;<\/li>\n<li>\u2013 \u201cProcessing\u201d: means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.\u201d<\/li>\n<\/ul>\n<h2>Purpose<\/h2>\n<p>The purpose of this Privacy Policy is to clearly inform all Customers about the Personal Data that DEF collects and processes, how it uses that data, the categories of personal data collected, the reasons for collecting it, how long it is retained, the parties to whom it may be disclosed, the rights of Customers as Data Subjects, contact details in case of questions or complaints, and the protective measures it implements.<br \/>\nThe Privacy Policy applies solely to the processing of personal data in respect of which DEF acts as the Data controller. In this context, the Processing of Personal Data may be carried out directly by DEF or through a Data Processor specifically appointed by it.<\/p>\n<h2>Compliance with the GDPR<\/h2>\n<p>DEF does not process any personal data unless it complies with the general principles of the GDPR.<br \/>\nAny new Processing activity, or any modification or deletion of an existing Processing activity, will be communicated to Customers through an amendment to this Privacy Policy.<\/p>\n<h2>Legal basis for the Processing carried out by DEF<\/h2>\n<p>In accordance with the applicable legislation on the protection of Personal Data, the processing of Personal Data carried out by DEF is based on one of the legal grounds set out below.<\/p>\n<h3>Performance of the contract<\/h3>\n<p>To access DEF\u2019s products and services and\/or in connection with its business, Customers may be required to enter into a contract related to such business.<br \/>\nThis contract formalises a contractual relationship between each Customer and DEF.<br \/>\nThe Personal Data collected and processed by DEF in this context is necessary for the performance of these contracts, the purposes of which are specified below.<\/p>\n<h3>Customer consent<\/h3>\n<p>When Customers browse a website published by R\u00e9seau DEF, R\u00e9seau DEF may read and\/or write cookies to their device (e.g., computer, cell phone).<br \/>\nBefore placing cookies on the Customer\u2019s device, DEF obtains the Customer\u2019s consent via a \u201ccookie banner.\u201d<br \/>\nDEF also processes the Customer\u2019s Personal Data, provided that the Customer has completed an electronic data collection form in order to participate in an event organised by DEF and\/or has registered for or subscribed to services made available online by DEF (e.g., website, social media, YouTube channel).<br \/>\nCustomers are informed on each form used to collect personal data as to whether responses are mandatory or optional by the presence of an asterisk.<br \/>\nWhere answers are mandatory, DEF explains to Customers the consequences of failing to provide a response.<\/p>\n<h3>Compliance with a legal obligation to which DEF is subject<\/h3>\n<p>DEF\u2019s processing of the Customer\u2019s Personal Data may be required by a legal obligation to which it is subject.<\/p>\n<h3>DEF&#8217;s legitimate interest<\/h3>\n<p>DEF may have a legitimate interest that entitles it to collect and process the Personal Data of Customers who visit a website published by the R\u00e9seau DEF (e.g., conducting marketing campaigns targeting its prospects).<br \/>\nIn this context, DEF ensures that the processing carried out is necessary to pursue its legitimate interest and that it does not infringe upon the fundamental rights and interests of its Customers.<\/p>\n<h2>Categories of Personal Data processed by DEF<\/h2>\n<p>The Personal Data that DEF collects and processes in the course of its activities are as follows:<\/p>\n<p><strong>NON-TECHNICAL DATA (depending on use case):<\/strong><\/p>\n<ul>\n<li>(i) Identification: surname, first name, title, role, pseudonym, social media username;<\/li>\n<li>(ii) Contact details: Telephone number, email address, postal address, fax number, etc.;<\/li>\n<li>(iii) Photographs: where you grant us this right (usually taken during events or interviews at our events);<\/li>\n<li>(iv) Professional background: occupation, degrees, work experience, the company the Customer works for, etc.;<\/li>\n<li>(v) Bank details, if required;<\/li>\n<\/ul>\n<p>DEF collects and processes the Customer\u2019s personal data relating to their browsing and behaviour on a website published by R\u00e9seau DEF.<br \/>\nThe personal data collected and processed in this context are as follows:<\/p>\n<p><strong>TECHNICAL DATA (depending on use case)<\/strong><\/p>\n<ul>\n<li>(i) Identifying information (IP addresses)<\/li>\n<li>(ii) Connection data (including logs)<\/li>\n<li>(iii) Consent data (click) primarily relating to access to DEF services (Sentinel, etc.)<\/li>\n<\/ul>\n<p>DEF does not process sensitive data within the meaning of Article 9 of the GDPR (personal data revealing racial or ethnic origin, philosophical, political, trade union or religious views, or data concerning sex life or health).<\/p>\n<h2>Purposes of the Data Processing carried out by DEF<\/h2>\n<p>DEF\u2019s processing of the Customer\u2019s personal data is necessary to enable DEF to fulfil the following purposes:<\/p>\n<p><strong>Processing carried out for the purposes of DEF\u2019s business activities:<\/strong><\/p>\n<ul>\n<li>(i) Case handling;<\/li>\n<li>(ii) Customer relationship management;<\/li>\n<li>(iii) Improving website navigation;<\/li>\n<li>(iv) Answers to questions put to it (by telephone or online);<\/li>\n<li>(v) Responses to public or private calls for tenders;<\/li>\n<li>(vi) Personalised sales support;<\/li>\n<li>(vii) Improving its services;<\/li>\n<li>(viii) Creation of an account by Customers on the Sentinel platform;<\/li>\n<li>(ix) Processing of payments for the Customers in question.<\/li>\n<\/ul>\n<p><strong>Data processing carried out for the purpose of sending the newsletter and marketing campaigns:<\/strong><\/p>\n<ul>\n<li>(i) Management of events organised by DEF (conferences, breakfast meetings, etc.);<\/li>\n<li>(ii) Sending newsletters or news feeds; the Customer may unsubscribe at any time from any marketing communications by clicking on the unsubscribe link at the end of the text;<\/li>\n<li>(iii) Compiling statistics and conducting marketing analyses;<\/li>\n<li>(iv) Communication with a Customer who fills out a contact form on a website published by R\u00e9seau DEF;<\/li>\n<li>(v) Creation of a database of customers and prospects;<\/li>\n<li>(vi) Notifying Customers in the event of changes to the services offered by a website published by R\u00e9seau DEF.<\/li>\n<\/ul>\n<p><strong>Processing carried out for the purpose of managing applications:<\/strong><br \/>\nThe processing of Personal Data of Customers covered by DEF is necessary if the Customer accesses the job application service on a website published by R\u00e9seau DEF:<\/p>\n<ul>\n<li>(i) Receipt of applications;<\/li>\n<li>(ii) Hiring a candidate.<\/li>\n<\/ul>\n<p><strong>Processing carried out for the purpose of rights management:<\/strong><\/p>\n<ul>\n<li>(i) Preventing and combating fraud in connection with payments made by a concerned Customer;<\/li>\n<li>(ii) Litigation management;<\/li>\n<li>(iii) To comply with an administrative and\/or legal obligation or in connection with legal proceedings or a dispute;<\/li>\n<li>(iv) Handling requests from Data Subjects to exercise their rights, as listed below.<\/li>\n<\/ul>\n<h2>Recipients of Personal Data<\/h2>\n<p>All personal data collected and processed by DEF is strictly confidential.<br \/>\nDEF undertakes not to disclose its Customers\u2019 Personal Data to any third party that might use it for its own purposes, without the Customers\u2019 express consent.<br \/>\nDEF ensures that Personal Data is accessible only to authorised internal or external Recipients, when necessary to enable them to fulfil the aforementioned purposes exclusively.<\/p>\n<p><strong>Internal recipients:<\/strong><\/p>\n<ul>\n<li>(i) The team responsible for the website published by R\u00e9seau DEF and, where applicable, the team responsible for handling a Customer\u2019s request, and the GDPR Committee.<\/li>\n<\/ul>\n<p>Internal recipients at DEF are trained and authorised to process Personal Data. They are bound by a duty of confidentiality with respect to this data.<\/p>\n<p><strong>External recipients:<\/strong><br \/>\nDEF may temporarily and securely transfer certain Customers\u2019 Personal Data, when necessary, to the following Recipients:<\/p>\n<ul>\n<li>(i) Service providers, partners, or support services with which DEF has entered into contracts (subcontractors, various service providers, service providers responsible for the operation and maintenance of a website published by R\u00e9seau DEF, partners with whom DEF has entered into contracts to enable the performance of the contracts it has concluded with Customers, partners with whom DEF has entered into contracts to enable the management of its relationships with customers and prospects, etc.);<\/li>\n<li>(ii) Certain regulated professionals, such as: lawyers, experts, certified public accountants, auditors, agents, bailiffs, etc.;<\/li>\n<li>(iii) Judicial bodies;<\/li>\n<li>(iv) Administrative and judicial authorities.<\/li>\n<\/ul>\n<p>Where the relevant Recipient is located outside the European Union, or in a country that does not have adequate safeguards within the meaning of the GDPR, DEF governs its contractual relationship with that third party by putting in place appropriate contractual arrangements.<br \/>\nIt should be noted that DEF may be required to disclose its Customers\u2019 Personal Data in order to comply with a legal order from the relevant authorities.<\/p>\n<h2>Retention period<\/h2>\n<p>The Customer\u2019s Personal Data is retained for a period of three (3) years from the date of the last contact with and\/or from the Customer.<br \/>\nAudience measurement statistics are not kept for longer than thirteen (13) months.<br \/>\nHowever, once the aforementioned periods have expired \u2013 including, where necessary, from the date of the Customer\u2019s request for deletion \u2013 such Personal Data may be subject to interim archiving so that DEF can fulfil its statutory retention obligations:<\/p>\n<ul>\n<li>(i) a contract entered into as part of a business relationship will be retained for five (5) years;<\/li>\n<li>(ii) a contract entered into electronically with a consumer for an amount of 120 euros or more shall be retained for ten (10) years from the date of delivery or performance;<\/li>\n<li>(iii) banking records will be retained for five (5) years;<\/li>\n<li>(iv) documents relating to order management shall be retained for ten (10) years;<\/li>\n<li>(v) documents relating to the management of invoicing shall be retained for ten (10) years.<\/li>\n<\/ul>\n<p>Certain personal data may be retained beyond the specified retention periods (i) in the event of legal proceedings, in order to establish the facts of the case; and\/or (ii) for the purposes of investigating, establishing and prosecuting criminal offences, solely to enable such data to be made available to the judicial authorities where necessary.<br \/>\nArchiving involves anonymising this personal data so that it can no longer be accessed online, but is instead extracted and stored on a separate, secure medium.<br \/>\nOnce the periods set forth in this Privacy Policy have expired, Personal Data is deleted.<\/p>\n<h2>Rights of Data Subjects<\/h2>\n<p>Customers have the right to access, amend, object to, restrict, request the portability of, and rectify their data; to set out instructions regarding the handling of their data following their death; and to have their personal data erased, subject to compliance with the following rules:<\/p>\n<ul>\n<li>(i) the request is made by the Data Subject and is accompanied by a copy of a valid identity document;<\/li>\n<li>(ii) the request must be made in writing to the following address: rgpd@reseau-def.com<\/li>\n<\/ul>\n<p>In accordance with the right to data portability, Customers are entitled to request a copy of their Personal Data that is being Processed. The information requested will be provided in electronic form, unless expressly requested otherwise.<br \/>\nCustomers are informed that these rights may never relate to information or data that is confidential or for which communication is not authorised by law. Under no circumstances may these rights allow access to documents subject to the Military Secret.<br \/>\nThe right to have Customers\u2019 Personal Data erased shall not apply in cases where the Processing is carried out to comply with a legal obligation.<br \/>\nThe Customer may, at any time, file a complaint with the competent supervisory authority, which in France is the Commission Nationale de l\u2019Informatique et des Libert\u00e9s (CNIL): cnil.fr.<\/p>\n<h2>Use of subcontractors<\/h2>\n<p>DEF hereby informs its Customers that it may engage data processors in connection with the processing of their personal data. A data processor means any natural or legal person who processes Personal Data on behalf of DEF.<br \/>\nIn such cases, DEF ensures that the data processor complies with its obligations under the GDPR.<br \/>\nDEF undertakes to enter into a written contract with all its processors and to impose on them the same data protection obligations as those it itself adheres to. Furthermore, DEF reserves the right to carry out an audit of its data processors to ensure compliance with the provisions of the GDPR.<\/p>\n<h2>Safety<\/h2>\n<p>It is DEF\u2019s responsibility to define and implement the technical and organisational measures it deems appropriate to prevent the accidental or unlawful destruction, loss, alteration or unauthorised disclosure of personal data.<br \/>\nThe main measures include:<\/p>\n<ul>\n<li>(i) Measures to secure its information systems\u2014including networks, workstations, mobile devices, and data\u2014such as implementing security measures for access to the premises (locking offices, access badges, etc.), secure access to computers and smartphones (passwords changed regularly), the implementation of usernames and passwords for all business applications, and the management of access permissions for personal data (with specific requirements for the finance, accounting, and communications departments), the use of VPNs for remote connections, and the use of a complex Wi-Fi password that is changed monthly;<\/li>\n<li>(ii) Measures to ensure the confidentiality, integrity, availability, and resilience of processing systems and services, including by engaging processors that provide sufficient safeguards;<\/li>\n<li>(iii) Measures to restore the availability of and access to Personal Data within a reasonable timeframe in the event of a physical or technical incident affecting any data in DEF\u2019s possession;<\/li>\n<li>(iv) Any procedure designed to regularly test, analyse, and assess the effectiveness of technical and organisational measures, in particular through monitoring and alert tools that directly contact the DEF development team in the event of a failure;<\/li>\n<li>(v) Training and awareness-raising initiatives for its employees.<\/li>\n<\/ul>\n<p>DEF has implemented and maintains technical and organisational measures that are state-of-the-art and appropriate to ensure the protection and security of the Processing and of Personal Data, taking into account the state of the art, the costs of implementation, and the nature, scope, context, the purposes of the Processing, as well as the potential risks associated with failing to implement these technical and organisational measures.<br \/>\nTo ensure the security of Personal Data and, in particular, to prevent any accidental or unlawful distortion, alteration, damage, destruction, loss, disclosure, and\/or access by unauthorised third parties, DEF regularly monitors the compliance with and implementation of these technical and organisational measures.<\/p>\n<p>DEF reserves the right to modify these technical and organisational measures, particularly in light of advances in the state of the art within its industry. Any such change will result in an update to this Privacy Policy. The new technical and organisational measures will maintain an increased or comparable level of security.<br \/>\nTo assess the appropriate level of security, DEF takes into account the risks associated with the Processing, resulting in particular from the accidental or unlawful destruction, loss, alteration, disclosure, or unauthorised access to Personal Data that is transmitted, stored, or processed.<\/p>\n<h2>Cookies<\/h2>\n<p>DEF has a cookie policy, which can be accessed here:\u00a0<a href=\"https:\/\/www.defonline.com\/politique-de-cookies\/\" target=\"_blank\" rel=\"noopener\"><br \/>\n[https:\/\/www.defonline.com\/politique-de-cookies\/]<br \/>\n<\/a><\/p>\n<h2>Statistical use of anonymous data<\/h2>\n<p>As part of its business operations, DEF collects, processes, and stores statistical data regarding website usage and customer activities.<br \/>\nThis usage data, which may be shared with third parties, is anonymous and does not allow Customers to be identified, even indirectly.<\/p>\n<h2>Record of processing activities<\/h2>\n<p>DEF maintains a register of personal data processing operations, which it makes available to the French Data Protection Authority (CNIL).<\/p>\n<h2>Data transfers outside the European Union<\/h2>\n<p>The company makes every effort to ensure that no transfer of personal data outside the European Union takes place.<br \/>\nHowever, when the company is required to disclose Customers\u2019 Personal Data to third parties located outside the European Economic Area, in a country that does not have adequate safeguards within the meaning of the GDPR, the company governs its relationship with that third party by implementing appropriate contractual safeguards and ensures that such transfer complies with the level of protection required within the European Union.<\/p>\n<h2>Evolution<\/h2>\n<p>This Privacy Policy may be amended or modified at any time in the event of changes in the law, case law, or the decisions and recommendations of the European Commission, in particular.<br \/>\nDEF reserves the right to make any changes to the Privacy Policy at any time that it deems necessary and appropriate.<br \/>\nAny new version of this Privacy Policy will be brought to the attention of Customers by any means chosen by DEF, including electronic means (for example, by email or online).<br \/>\nThe Privacy Policy will also be available to the Customer on the websites published by R\u00e9seau DEF.<\/p>\n<h2>Information<\/h2>\n<p>For any further information, please contact our GDPR Committee at the following email address: rgpd@reseau-def.com<\/p>\n\n\n            \n                    <\/div>\n    <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"profession":[],"sector":[],"service":[],"solution":[],"class_list":["post-8260","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/pages\/8260","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/comments?post=8260"}],"version-history":[{"count":0,"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/pages\/8260\/revisions"}],"wp:attachment":[{"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/media?parent=8260"}],"wp:term":[{"taxonomy":"profession","embeddable":true,"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/profession?post=8260"},{"taxonomy":"sector","embeddable":true,"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/sector?post=8260"},{"taxonomy":"service","embeddable":true,"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/service?post=8260"},{"taxonomy":"solution","embeddable":true,"href":"https:\/\/def-italie-preprod.wp-ylly.hunik.tech\/en\/wp-json\/wp\/v2\/solution?post=8260"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}