Geismar generally ensures that it only collects personal data that is appropriate, relevant and necessary for processing purposes (minimisation principle) and takes appropriate security and confidentiality measures to ensure its protection, including dealing with data protection issues from the outset and by default.
Geismar undertakes to comply with the provisions of applicable regulations, in particular those of European Regulation 2016/679 on the protection of personal data, which entered into force on 25 May 2018 (hereinafter, the “GDPR”), as well as those of the Informatique et Libertés (French Data Processing and Civil Liberties) law of 6 January 1978 and of any law or regulation that may supplement or replace it.
1. The data collected and collection procedures
Any information relating to an identified or identifiable natural person constitutes personal data.
In the course of its activities and the operation of its website, the Geismar firm may process a certain amount of personal data. In general, Geismar takes care to collect and process only the data that is strictly necessary for the purpose for which it is processed.
Data that Geismar collects directly from you:
- When registering for the Geismar newsletter: contact information and communication preferences;
- When using the contact form: identity and contact information;
- When applying to Geismar, including through the application form: identity and contact details, professional life (CV);
- When using Geismar’ services: any information necessary for the fulfilment of our mandate. This includes: identity and contact information, financial and billing information.
Data that Geismar collects from third parties:
Geismar may sometimes receive personal data from third parties, in particular in the context of its legal obligations or in the exercise of its mandate, in particular from:
- Geismar offices abroad;
- Administrative and control authorities;
- Clients, as part of the mandates they entrust to us;
- lors de votre navigation sur le site Internet de Geismar : données de connexion et de navigation, en particulier l’indication de la région d’origine de l’utilisateur ;
Data that Geismar collects automatically:
- When browsing the Geismar website: connection and browsing data, in particular the user’s region of origin;
In addition, our website contains Google Analytics cookies, which are used to generate reports on user interactions with our website. The information stored does not allow personal identification of Internet users and is directly transferred to Google without Geismar being aware of it. To learn more about these cookies, you can read Google Analytics’ data protection policy at
Geismar does not collect any sensitive data, except if doing so is required by legal or regulatory provisions, or for the exercise of the mandate you entrusted to us.
Sensitive data is defined as any information concerning a person’s racial or ethnic origin, political, philosophical or religious opinions, trade union membership and health or sexual orientation.
3.Legal basis for processing
Geismar will only process your data in the cases provided for by applicable regulations, and in particular:
- With your voluntary, specific, informed and unequivocal consent (e.g. for subscriptions to newsletters or contact requests);
- When the processing is necessary for the performance of a contract or pre-contractual measures taken at your request (for example, applications or taking charge of a case);
- For compliance with Geismar’ legal or regulatory obligations (for example, combatting fraud);
- When the processing is justified by Geismar’ legitimate interest (compilation of statistics, IT security measures, commercial prospecting).
3. Purpose of processing
Geismar collects your personal data for specific, explicit and legitimate purposes, for example to:
- Process contact requests;
- Manage recruitment.
The Geismar firm may use your personal information for administrative purposes or in order to fulfil its legal and regulatory obligations.
4. Duration of data retention
Geismar keeps your personal data only for the time strictly necessary to fulfil the purposes for which it was collected and subject to its legal obligations to retain some information or the legal provisions relating to archiving and anonymity.
5. Transfer of personal data
Your personal data is stored on Geismar’ servers, which are located in the European Union.
Transfers of personal data are likely to take place:
- With the various Geismar offices and partners for the purposes of processing your file;
- With national administrative and judicial authorities.
Geismar ensures that any transfer of personal data outside Europe is supervised in order to guarantee the security of your data:
- By ensuring that the country is recognised as having an adequate level of protection according to the European Commission (or, for the United States that the recipient company has adhered to the Privacy Shield mechanism);
- When entering into agreements ensuring this security with the recipient; or
- With your consent.
6.Your rights and how you can exercise them
Within the limits provided by the regulations in force, you have the following rights:
|Right to rectify data||This right allows you to correct inaccurate data about you (incorrect age or address) or to complete data (e.g. address without the apartment number) relative to the purpose for the processing.|
|Right to erase data||You have the right to ask Geismar to erase your personal data under certain conditions and subject to exceptions provided by applicable law (Geismar’ legal obligations in particular). See: https://www.cnil.fr/fr/le-droit-leffacement-supprimer-vos-donnees-en-ligne|
|Right to restrict data processing||You may request that the processing of your data be restricted if you dispute its accuracy or object to its processing. In this case, Geismar will need to examine your request, during which time you can ask it to freeze the use of your data. Conversely, you may request that some information not be processed if Geismar wants to delete it. Doing so will allow you to keep this data, for example in order to exercise a right.
|Right to data portability||Where the processing is based on your consent or a contract, you may receive the personal data you provided to Geismar in a structured and commonly used format in order to transmit such data to another controller. When technically possible, you may request that Geismar transmit this data directly to this other controller.|
|Right to object to data processing||You may object to your data being used by Geismar for a specific purpose by indicating the reasons relating to your particular situation (except in the case of commercial prospecting).|
You may withdraw your consent to the processing of your personal data at any time. Doing so will not call into question the lawfulness of any processing carried out prior to your withdrawal.
You also have the option to organise the storage, deletion and communication of your personal data after your death through the adoption of general or specific directives, which can be registered with a digital trusted third party certified by the CNIL.
Finally, you may exercise your rights and send any request for information concerning your personal data by post to:
Gestion des données personnelles – Geismar – 168 Avenue Charles de Gaulle, Neuilly-sur-Seine, 92000, France.
This correspondence must be accompanied by a copy of your identity document and any necessary proof.
Geismar will answer your request as soon as possible, and in any event within one month of receiving your request. This period may be extended by two months in view of the complexity of your request and the number of requests that are addressed to Geismar. If this situation were to arise, Geismar will inform you of such an extension before the initial time limit of one month expires.
If Geismar does not respond to your request, the firm will inform you of the reasons for its refusal or inaction.
You may lodge a complaint with the CNIL (www.cnil.fr).