Privacy and Data Protection Policy

1/ Prospective Data, Information Requests, Quotes, and Callback Requests

Data and information about our potential customers are collected and recorded by ENYGEA, WC LOC, HAPPEE SERVICES, MOOV&COOK, WATERLAB, SWITTEC, SANIBERT, and BASESCLEAN, who are joint data controllers. The purpose of this information collection (identity, contact details, role, interest in a range, messages, and associated responses) is to manage the relationship with prospects (sometimes within the context of potential group quotes between multiple entities of the group). Only customer service and agency personnel in contact with prospects are authorized to access the communicated or recorded data. The maximum retention period for this data is 3 years after the end of the prospect relationship. The legal basis for the use and processing of personal data of our prospects may be based on the execution of contractual measures, failing which, on the consent of the concerned interlocutors or, failing which, on the legitimate interest of potential customers or, failing which, on our legitimate interest as service providers. We inform you that we transfer prospect data to other entities of the ENYGEA group. We also inform you that we may enrich our prospect data through third-party B2B databases of partners and public information, particularly from professional networks.

2/ Données des clients et des interlocuteurs à livrer

Personal information about our buyers and renters as well as their potential interlocutors is recorded by ENYGEA or WC LOC or HAPPEE SERVICES or MOOV&COOK or WATERLAB or SWITTEC or SANIBERT or BASESCLEAN, depending on the entity invoicing the customer. The purpose of this personal data collection and storage (identity, contact details, potential professional role, order history and commercial exchanges, nominative accounting records, potential insurance supporting documents) is to manage the customer relationship, customer support, service execution, and associated invoicing as well as optimize the common resources and means of the ENYGEA group entities to provide its services. Only the Management and personnel in contact with customers can access the necessary data. The maximum retention period for personal data is set at 5 years after the end of the service for delivery contacts and 5 years after the commercial relationship for buyer data, and 10 years for nominative accounting records.

The legal basis for the use and processing of personal data may be based on:

• Execution of a commercial or subcontracting relationship formalized by an order agreement;
• Or execution of applicable sales and rental conditions;
• Or, failing which, our legitimate interest as a rental company and service provider;
• Or, failing which, the legitimate interest of the concerned interlocutors;
• Or, failing which, the execution of any applicable legislation.

We inform you that we may enrich our customer data with public information (e.g., from the commercial register). We also inform you of the transfer of customer and delivery contact data between different entities of the ENYGEA group. Additionally, we may transfer customer and delivery contact data to delivery or cleaning service providers.

3/ Satisfaction Surveys

A satisfaction survey system for the prospects or customers of the ENYGEA group has been set up by ENYGEA, WC LOC, HAPPEE SERVICES, MOOV&COOK, WATERLAB, SWITTEC, SANIBERT, and BASESCLEAN, who are joint data controllers. The purpose of this information collection (identity, contact details, satisfaction responses, segmentation data, associated consents, and proof of consent) is to manage the improvement of our marketed services, sometimes collectively across the ENYGEA group entities, as well as gather consents and potential opinions. Only the managers of the concerned companies, the Marketing department, the Group Management, and any personnel in contact with customers and prospects are authorized to access the communicated or recorded data. The maximum retention period for the data is 3 years. The legal basis for the use and processing of personal data for our satisfaction surveys may be based on the consent of the concerned interlocutors or our legitimate interest as rental companies and service providers. We inform you that we transfer survey data to other entities of the ENYGEA group.

4/ Directory and Partner Contact List

A partner listing system (potential or active) has been set up by ENYGEA, WC LOC, HAPPEE SERVICES, MOOV&COOK, WATERLAB, SWITTEC, SANIBERT, and BASESCLEAN, who are joint data controllers. The purpose of this listing, which contains personal data (name, first name, role, phone, email, etc.), is to manage the partner relationship. Only the Management and concerned personnel are authorized to access the communicated or recorded data. We inform our partners that we may enrich our data with public information. The retention period for personal data is set at 5 years after inactivity. The legal basis for the use and processing of personal data is based on the consent of the concerned interlocutors or, failing which, our legitimate interest as a company.

5/ Data of Registered or Potential Suppliers

The identity of interlocutors at our registered or potential suppliers, all documents or data provided to become a supplier, as well as the accounting records of our suppliers, are collected by ENYGEA, WC LOC, HAPPEE SERVICES, MOOV&COOK, WATERLAB, SWITTEC, SANIBERT, and BASESCLEAN, who are joint data controllers for the purpose of managing the supplier relationship and accounting. Only the Management, purchasing personnel, project personnel related to a supplier, and the accounting department are authorized to access the recorded or communicated data. The maximum retention period for the data is set at 3 years for potential suppliers, 5 years after the last purchase for active suppliers, and 10 years for accounting records. The legal basis for the use and processing of your personal data is based on the consent of the concerned interlocutors or, failing which, on our legitimate interest as a buyer or, failing which, on the execution of a purchase contract. We inform you that in rare cases, we may enrich our active or potential supplier data with public information.

6/ Job Application or Internship Request

Your resume, cover letter (if applicable), and all other documents or data provided during an application (spontaneous or not) as well as any data provided by former employers are collected by ENYGEA, WC LOC, HAPPEE SERVICES, MOOV&COOK, WATERLAB, SWITTEC, SANIBERT, and BASESCLEAN, who are joint data controllers for the purpose of evaluating the suitability of a professional profile for a potential open position. Only the HR department and concerned managers, as well as the administrators of recruitment applications, are authorized to access the communicated data. The maximum retention period for the data is set at 2 years after inactivity in the relationship with the candidate. The legal basis for the use and processing of your personal data is based on the execution of pre-contractual measures or, failing which, on your consent or, failing which, on your legitimate interest as a job seeker or, failing which, on our legitimate interest as a recruiter. We inform you that in rare cases, we transfer resumes to recruitment agencies or temporary employment agencies, as well as institutional partners or those engaged in similar, related, or complementary activities. We inform you that we may enrich our candidate database with public information or recruitment agencies.

7/ Emailing, Newsletters, and Event Invitations

Our customers, professional contacts, and consenting subscribers (suppliers, institutions, partners, etc.) may receive our informational or commercial communications by email, phone, or mail. In this context, a newsletter or guest list system may be set up by ENYGEA, WC LOC, HAPPEE SERVICES, MOOV&COOK, WATERLAB, SWITTEC, SANIBERT, and BASESCLEAN, who are joint data controllers. You can notify us at dpo@enygea.com if you no longer wish to receive our communications. The purpose of this listing, which contains personal data (name, first name, address, role, phone, email, etc.), is to disseminate news, offers, or to manage the organizational and promotional aspects of events. Only the Management and concerned operational personnel are authorized to access the communicated or recorded data. We inform you that in rare cases, we may enrich our invitation data with public information (e.g., from the commercial register) and transfer data to external event organization companies. The retention period for personal data is set at 3 years after inactivity in the relationship with guests or subscribers. The legal basis for the use and processing of personal data is based on the consent of the concerned interlocutors or our legitimate interest as a company or the legitimate interest of the concerned person.

8/ Secure IT Architecture

Our data and that of our customers are hosted in France in our secure premises and our majority ISO27001-certified external datacenters in Europe. We do, however, inform you of the potential use of non-EU SaaS tools that may route some of our data outside the EU in a secure manner through SCC or BCR guarantees. We also inform you of the potential transfer of data to non-EU subsidiaries based in countries recognized as adequate (in this case, Canada).

9/ Your Rights

We inform you that information about our contacts of all types (interns, suppliers, partners, etc.) may be transferred to institutional partners, dispute resolution partners, or oversight bodies: auditors, external lawyers, financiers, external accounting firms, institutions, etc. In accordance with European laws and the French law of January 6, 1978 (relating to data processing, files, and liberties), you have the right to access, rectify, restrict, transfer, and delete your personal data, as well as the right to object to its processing for legitimate reasons. You can exercise all of these rights by email at dpo@enygea.com or by postal mail addressed to Service DPO, Enygea, 6 Allée du Progrès, CS90072, 59481 HAUBOURDIN CEDEX.

You also have the right to withdraw your consent at any time and to lodge a complaint with the National Commission for Information Technology and Civil Liberties (CNIL), particularly on its website www.cnil.fr