Privacy Policy
This privacy policy (the “Privacy Policy”) is intended to provide visitors and users (“You” or “User”) of this website (hereinafter the “Site”) with information relating to how Sonepar (as defined in point 1. below “What You need to know”) processes your personal data (as defined below) and your rights in this respect.
1. WHAT YOU NEED TO KNOW
“Personal Data” means information by which You, as a natural person can be directly (for example, by reference to a first or last name) or indirectly (for example, through a phone or ID number) identified.
Personal Data “Processing” means an operation or set of operations performed on your Personal Data (such as collection, structuring, storage, alteration, disclosure).
The “Purpose” of the processing operation is the primary objective in using the Personal Data. Your Personal Data are collected for a specified, legitimate objective (as detailed in point 2. “For what Purpose do we collect and process your Personal Data?” below) and are not further processed in a manner that is incompatible with that initial objective.
The “Controller” is the natural or legal person who decides whether the Personal Data should be processed and how that processing operation will be performed, in particular by determining what Purposes the Personal Data will serve and the tools and means that will be used for their processing.
A “Recipient” is a natural or legal person to whom your Personal Data are disclosed or made accessible.
A “Processor” is a natural or legal person, public authority, agency or other body which processes your Personal Data on behalf of the Controller.
“Sonepar” or “We” means Sonepar, a French société par actions simplifiée, with registered office at 25, rue d’Astorg, 75008 Paris, France and registered with the Registre de Commerce et des Sociétés of Paris under registration number : 585 580 202.
“Sonepar Group” means any and all companies, corporations and other entities (“Affiliate(s)”) controlled directly or indirectly by Sonepar. For the purposes of this definition, the term “control” means the possession, directly or indirectly, of at least fifty percent (50%) of the share capital or voting rights.
“Sonepar Product Data Guidelines” means the Sonepar guidelines related to the level of product data quality Sonepar expects from contributors (partner, supplier, associate). Aiming to ensure the optimal customer experience. It is designed to facilitate the provision of different data sets, including descriptions and digital assets, that will serve as the basis for new validations and the development of KPIs.
2. WHO PROCESSES YOUR PERSONAL DATA?
The Personal Data Processing listed in section 4 “On what legal basis, for what Purposes do we collect and process your Personal Data and for how long are your Personal Data kept?” are performed under the responsibility of:
Sonepar SAS a société par actions simplifiée (French simplified joint stock company), whose registered office is located at 25 rue d’Astorg, 75008 Paris, France and which is registered with the Paris Trade and Companies Registry under number 585 580 202
which acts as Controller.
3. WHAT CATEGORIES OF PERSONAL DATA ARE PROCESSED?
The Personal Data collected and processed through this Site include:
- Identification data (first name, last name, email, phone, country, post code),
- Professional data (job position, name of the company, department),
- Technical Personal Data relating to your use of the Site (such as IP address, technical data relating to the device and browser used, necessary cookies for the technical functioning of the Site, cookies that You have consented to, statistics relating to the use of the Site, its content and the services it offers),
- Any Personal Data that may be contained in your message.
4. ON WHAT LEGAL BASIS, FOR WHAT PURPOSES DO WE COLLECT AND PROCESS YOUR PERSONAL DATA AND FOR HOW LONG ARE YOUR PERSONAL DATA KEPT?
PURPOSES | LEGAL BASIS | DATA RETENTION PERIOD | ||
To respond to your requests through the available contact forms. | Our legitimate interest in responding to your request. | Personal Data is kept for the time necessary to process your request for information and is deleted once the request has been processed. | ||
To give you access to our Sonepar Product Data Guidelines. | Our legitimate interest in sharing with our contributors (partners, suppliers, associates) the best practices to improve the data quality of the product data. | Personal Data is kept for 2 months from their collection. | ||
To send you updates regarding Sonepar Product Data Guidelines. | Our legitimate interest in keeping you informed of any updates, enrichment regarding our Sonepar Product Data Guidelines. | Personal Data is kept for 14 months from the last active contact. | ||
To make statistics regarding the audience and adoption of our Sonepar Product Data Guidelines. | Our legitimate interest in analyzing the audience and adoption of our Sonepar Product Data Guidelines. | Personal Data is kept for 14 months from the last active contact. After this period, the Personal Data will be anonymized. | ||
To measure the audience of the Site. | Your consent expressed through the cookie banner. | Personal Data is kept for 2 years and 14 days from their collection. | ||
To manage data subjects’ rights requests. | To comply with our legal obligations. | Personal Data is kept for a period of one year from the date of collection, then archived for 4 years. If we ask you for proof of identity, we keep it only for the time needed to verify your identity. Once verification has been completed, the proof of identity is deleted. | ||
To manage litigation or pre-litigation procedures in which Sonepar and/or its Affiliates are involved. | Our legitimate interest to defend our legal rights in the event of a dispute or a court action. | Personal data are kept for the application legal statute of limitation. |
5. HOW DO WE ENSURE THE SECURITY OF YOUR PERSONAL DATA?
In accordance with the applicable laws and regulations, Sonepar has implemented reasonable technical (for example, firewalls, username/password system, physical protection solutions, etc.) and organizational (for example, IT Charter) measures to protect your Personal Data from destruction, loss, alteration, disclosure or unauthorized access by a third party.
We require all service providers that potentially process your Personal Data on our behalf to make contractual commitments to a similar or superior standard.
6. TO WHOM MIGHT WE DISCLOSE YOUR PERSONAL DATA?
Your Personal Data will only be used by and disclosed to persons who require access to such Personal Data for the Purposes described in this Privacy Policy or in order to perform their duties, in all cases in accordance with the applicable laws and regulations.
Sonepar may disclose some of your Personal Data to the following Recipients:
- processors or service providers acting on its behalf and in accordance with its instructions, in particular our data hosting service provider, content management system editor, cookies management platform, audience measurement tool, emailing service provider, Microsoft tools (in particular Office365 and PowerBI), development and maintenance services provider;
- Sonepar Group Affiliates, when necessary, in particular, to transfer your request for information received through the contact forms, to the most appropriate Sonepar Group Affiliate to reply to your queries. These will then act as Controller for further exchanges and their privacy policy shall apply;
- legal and administrative authorities, when required by law or in connection with litigation or pre-litigation procedures; and
- a buyer or partner in the event of a merger, joint venture or disposal.
We ensure that your Personal Data are only disclosed to third parties within an adequate contractual framework that ensures the security and confidentiality of your Personal Data and compliance with the Purpose(s) of the Processing activities undertaken.
7. WHERE MIGHT YOUR PERSONAL DATA BE TRANSFERRED?
This Site is hosted in European Union. For more information please consult the Legal notice and Terms of Use by clicking on the button "Legal Notice".
Nevertheless, as a result of the Sonepar Group’s international footprint, some of the Recipients who will have access to your Personal Data (such as Sonepar Group Affiliates and/or their business partners), are based outside the European Union. This could especially be the case in order to process and transfer your request for information and/or contact details to the most appropriate Sonepar Affiliate based on your country and/or profession.
You can find a list of the entities that belong to the Sonepar Group and the countries in which they operate by clicking on the following link: https://www.sonepar.com/en/explore-sonepar.
In case of transfer of personal data to countries located outside the European Union, we ensure before the transfer that the Recipient offers an adequate level of data protection (for example, based on an adequacy decision validated by the European Commission or on standard contractual clauses).
Additional information on the terms and conditions of data transfers may be obtained by sending a request to the contact indicated in point 8. below “What are your rights?”.
8. WHAT ARE YOUR RIGHTS?
You are entitled to access and modify your Personal Data collected by Sonepar, subject to the applicable legal provisions.
Your rights include:
- Right of access: you may obtain a copy of the Personal Data processed by Sonepar.
- Right to rectification: if you believe that your Personal Data are incorrect or incomplete, you may request a rectification.
- Right to erasure: in certain cases, provided for by law, you may request that your Personal Data be erased, in particular where the Processing operation is exceptionally based on your consent and you wish to withdraw that consent or where it appears that your Personal Data are no longer necessary in relation to the Purposes for which they were collected or processed. However, this right is not unconditional and Sonepar may have a legal basis or legitimate reason to keep your Personal Data.
- Right to object: in certain cases, you may object to the Processing of your Personal Data on grounds relating to your personal situation. However, this right is not unconditional and Sonepar may reject your request for compelling legitimate reasons.
- Right to restrict Processing: you may also request that the Processing of your Personal Data be restricted (for example, suspended) if (i) your Personal Data are incorrect, (ii) you have exercised your right to object or (iii) the data are no longer needed for the processing operation but are still required to establish, exercise or defend your legal rights.
- Right to data portability: when this right applies, you have the right to receive the Personal Data that you have provided or, where technically feasible, to transmit those data to a third party.
- Right to give instructions regarding the use of your Personal Data after your death: you have the right to give Sonepar instructions regarding the use of your Personal Data after your death.
- Right to withdraw your consent, if the personal data processing is based on your consent.
To exercise your rights, please write to the following address: groupcompliance@sonepar.com
You may file a complaint with the competent supervisory authority.
The French supervisory authority is:
Commission nationale de l’informatique et des libertés – CNIL
(French data protection authority)
3 Place de Fontenoy – TSA 80715 – 75334 Paris CEDEX 07 – France
Telephone: +33 (0)1 53 73 22 22
9. LOCAL POLICIES
This Policy applies to Personal Data processed by the Controller listed in section 2 for the Purposes listed in section 4 « On what legal basis, for what Purposes do we collect and process your Personal Data and for how long are your Personal Data kept? ».
Local policies are also available for Processing activities carried out by other Sonepar Group Affiliates.
10.VERSION
This Policy is subject to update or modification, which will be communicated to you prior to effective implementation.
SONEPAR SAS
25, rue d’Astorg 75008 Paris − France
Tel.: +33 (0)1 58 44 13 13
www.sonepar.com
All rights reserved – February 2024