Personal Data Protection Policy

LOXAM, a simplified joint stock company (SAS), registered in the LORIENT Trade and Companies Register under number 450 776 968, 256 rue Nicolas Coatanlem, 56850 CAUDAN, FRANCE (hereinafter "LOXAM") processes Personal Data (as defined below) in the course of its business.

This Privacy Policy (the "Policy") describes how LOXAM collects, uses and processes your personal data in accordance with applicable regulations. LOXAM values your privacy and is committed to protecting and preserving your privacy rights.
This Policy applies to the personal data we collect from our customers, suppliers, service providers and lessors in the performance of all types of commercial contracts. It also applies to the personal data of users of our various websites, of persons who would like to apply for our job offers and of any other persons whom we are legitimately required to contact as part of the LOXAM Group's activities.
Within the framework of applicable data protection legislation (including the General Data Protection Regulation (EU) 2016/679) (the "RGPD"), the company responsible for your personal data is LOXAM.
LOXAM may amend this Policy. Do not hesitate to visit this page regularly to consult the possible modifications that we will publish there.
In the event of disagreement on certain aspects of our Policy, you have legal rights which are indicated to you when necessary.
This Policy applies in countries where LOXAM is present. However, the approach to data confidentiality may differ slightly from one country to another.
LOXAM subsidiaries may also collect and process Personal Data. This Policy applies to LOXAM subsidiaries.

1. SCOPE OF THIS PRIVACY POLICY

This Policy sets out the principles and guidelines for the protection of your Personal Data, which includes Personal Data collected on - or via - the various websites of LOXAM and its subsidiaries.

LOXAM collects Personal Data online (including by e-mail) or offline; this Policy applies regardless of the method of collection or processing.

The notion of personal data ("Personal Data") means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more elements specific to his physical, physiological, genetic, mental, economic, cultural or social identity.

Note to visitors and users of the LOXAM website: our various websites contain specific General Conditions of Use which form part of this Policy. The use of our websites and the Personal Data provided by users on our websites are subject to the provisions of this Policy and the applicable Terms of Use.

2. COLLECTED DATA

The Personal Data we may collect varies depending on the purpose of the processing. They are essentially aimed at identifying individuals in the context of their relations with Loxam.

In any event, the Personal Data collected shall be limited to the data necessary for the purposes set out in Article 4 below.
Note for visitors and users of our website: certain features and characteristics of our websites can only be used if certain Personal Data are communicated. The user is free to provide or not all or part of the Personal Data requested. However, if the user decides not to provide them, such a decision may prevent the satisfactory achievement of the objectives described in Article 4 below, certain services and features of our websites may not function properly and/or the user may be denied access to certain pages of the websites.

Customer data:
The data we collect about our customers is limited. As a general rule, we need the contact details of the customer or prospect company (in particular their name, telephone number and e-mail and postal address) in order to be able to execute the contracts concluded with our customers. In customer satisfaction surveys, we also hold information about customer needs or constraints, which we may then use to ensure that our marketing communications to you are relevant and timely. We may also hold additional information that our customer contacts have chosen to share with us. In certain circumstances, when you interact with some of our services or departments, our calls may be recorded, depending on applicable local laws and requirements.

Data relating to suppliers and service providers:
We also collect data about our suppliers and service providers. In order to ensure the proper management of our commercial relations, we collect information from our contacts within the supplier or service provider company, such as their name, telephone number, e-mail address and postal address. We may also hold additional information that our contacts within the supplier or service provider company have chosen to communicate to us.

Data relating to personnel management:
For candidates applying for LOXAM job offers, we may collect various types of information that allow us to analyze applications in relation to the positions offered, including identity, personal details, professional background, diplomas and motivations

Loxam also collects all information useful for the proper management of its personnel, in particular identity, civil status, personal details, professional background, diplomas, banking details, social security, administrative information in accordance with legal and regulatory provisions.

Data relating to the users of our various websites:
We collect personal information from users of our various websites that we use to enable us to improve the use of our websites and to manage the services we provide. This information includes how our sites are used, how often the user accesses them, the type of browser, the location from which you visit our sites, the language in which you choose to visit them and the times our sites are most visited. If you contact us through one of our sites, for example by using the "chat" function, we will collect any information you provide to us, such as your name and contact information.

3. PROTECTION OF THE PERSONAL DATA OF MINOR CHILDREN

LOXAM's products and services are reserved for adults only and are not intended to be marketed to minors and LOXAM does not collect or store Personal Data of minors on a voluntary basis, except as part of its personnel management information.

4. PURPOSES OF THE COLLECTION OF PERSONAL DATA

Personal Data is collected for the purposes of LOXAM's business, such as the execution of contracts concluded with our customers, suppliers and other service providers or any third party, for the purposes of our legitimate interests or compliance with reporting obligations provided for by law, as well as for the recruitment of employees and the management of LOXAM employees.

LOXAM collects and uses Personal Data for the purposes of its business and in particular to carry out the following activities:

enable our contacts to request and obtain information about LOXAM, our equipment and materials, and our services;
prepare and submit commercial tenders, participate in calls for tender;
to allow the follow-up of the commercial and contractual relation (order, estimate, sending invoice, provision of materials, technical assistance, management of the possible technical litigations
Conduct customer satisfaction surveys;
promote our services to existing customers or prospects;
offer our contacts or prospects to participate in events organized by LOXAM within the framework of trade shows, seminars or events ;
issuing invitations to tender and monitoring the commercial and contractual relationship with suppliers, subcontractors and service providers;
carry out quality audits;
Fulfill our contractual obligations;
assert our rights ;
manage spontaneous applications or applications sent in response to job offers;
managing LOXAM's human resources;
comply with our legal obligations;
any other purpose related to LOXAM's activities.

Subject to applicable local law, by providing your e-mail address, you expressly authorize LOXAM and its affiliates to use it in conjunction with other Personal Data useful for sending you messages for promotional or institutional purposes.

Where appropriate and in accordance with local laws and requirements, we may obtain further information through third party analysis or market research and through online and offline media analysis (which we may perform ourselves or through other companies).

5. COOKIE USE POLICY

What is a cookie?
A "cookie" is a small information file that is stored on your computer's hard drive and records your browsing of a website so that the next time you visit that site, it can present you with personalized options based on the information stored about your last visit. Cookies can also be used to analyze traffic and for advertising and marketing purposes.

Almost all websites use them and they do not damage your system. If you want to check or change the types of cookies you accept, you can usually do so by changing your browser settings. We also provide information about this on our Marketing Preferences page on our websites.

How do we use cookies?
We use cookies for two purposes:

track your use of our site. This allows us to understand how you use the site and to track trends in larger individuals or groups. This allows us to develop and improve our site and services in response to the wishes and needs of our visitors; and
help us offer you jobs that we think you might be interested in, which should allow you to spend less time going through multiple pages and find the job you're looking for faster.

There are two types of cookies:
Session cookies: These are cookies that are stored on your computer only during your web session and are automatically deleted when you close your browser - they usually store an anonymous session ID that allows you to visit a site without having to log back in to each page, but they do not collect any information about your computer; or

Persistent cookies: A persistent cookie is stored as a file on your computer and remains there when you close your browser. The cookie is readable by the website that created it when you visit that site again. We use persistent cookies for Google Analytics and for personalization (see below).

Cookies can also be categorized as follows:

Cookies strictly necessary: These cookies are essential to enable you to use the website effectively and therefore cannot be disabled. Without these cookies, the services you have on our websites cannot be provided. These cookies do not collect information about you that can be used for commercial purposes or to remember the pages you have visited on the Internet.

Performance Cookies: These cookies allow us to monitor and improve the performance of our website. For example, they allow us to count visits, identify sources of traffic and see which parts of the site are most visited.

Functionality Cookies: These cookies allow our sites to remember the choices you make (user name, language, country, etc.) and provide enhanced functionality. For example, we may provide you with information or updates related to the services you use. These cookies can also be used to store changes you have made to the text size, font and other elements of web pages that you can customize. They can also be used to provide services you have requested such as viewing a video or posting comments on a blog. The information these cookies collect is generally made anonymous.

Personalization cookies: These cookies allow us to communicate information about rental solutions that may be of interest to you. These cookies are persistent (as long as you are registered with us), which means that when you log in or return to the site, you may see rental offers that are similar to those you previously viewed.

6. CONDITIONS FOR PROCESSING AND STORING PERSONAL DATA

The "processing" of Personal Data includes in particular the use, storage, recording, transfer, adaptation, analysis, modification, declaration, sharing and destruction of Personal Data as necessary in the light of circumstances or legal requirements.

If you suspect misuse, loss or unauthorized access of your personal information, please notify us immediately.

We will delete personal data from our systems in the absence of significant contact with you (or, if applicable, the company you work for or with) for five years (or for a longer period if we believe in good faith that the law or relevant regulatory authorities require us to retain your data), unless otherwise required by law. At the end of this period, your data will probably no longer be relevant to the purposes for which they were collected.

By "meaningful contact", we mean, for example, any communication between us (verbal or written), or an active commitment on your part regarding our services. The fact that you receive, open or read an e-mail or other digital message from us will not be considered a meaningful contact - this will only be the case if you click on that message or reply directly to it.

7. TRANSFER OF PERSONAL DATA

In order to provide you with the best services and to meet the purposes of this Privacy Policy, your data may be transferred as follows:

between and within LOXAM group entities in France and abroad;
to third parties (such as consultants or other suppliers or subcontractors);
to one or more cloud-based storage providers.

LOXAM may disclose your Personal Information if required to do so by law or if LOXAM believes in good faith that such disclosure is reasonably necessary to comply with legal process (for example, a warrant, subpoena or other court order) or to protect the rights, property or safety of LOXAM employees, our customers or the public.

We are committed to ensuring that your data is securely stored and transferred. Accordingly, we will transfer data outside the European Economic Area or EEA (including the EU Member States plus Norway, Iceland and Liechtenstein) only to countries that comply with data protection legislation and where the means of transfer ensure adequate protection of your data.

To ensure that your personal information receives an adequate level of protection, we establish appropriate procedures with third parties with whom we share your personal data to ensure that your personal information is handled by those third parties in a consistent manner and in compliance with data protection laws.

8. YOUR RIGHTS ON THE DATA

LOXAM has put in place appropriate Personal Data protection measures to ensure that Personal Data are used in accordance with the purposes indicated above and to ensure their accuracy and updating.

Right of opposition :
You may at any time object to us processing your personal data.

Your objection will be dealt with expeditiously and we will cease the activity to which you object. Nevertheless, we reserve the right not to cease the activity in question if:

we can demonstrate that we have legitimate and compelling reasons to process your data that prevail over your interests; or
we process your data for the purpose of establishing, exercising or defending a legal claim.

If your refusal relates to direct marketing, we must act in accordance with your opposition by ceasing this activity as far as you are concerned.

Right to Withdraw Consent:
If we have obtained your consent to the processing of your personal data for certain activities other than those for which no consent is required, you may withdraw such consent at any time and we will cease to perform the particular activity to which you have consented, unless we consider that there is another reason why we should continue processing your data for that purpose, in which case we will inform you of the situation.

Access requests :
You can at any time ask us to confirm the information we hold about you, and you can ask us to change, update or delete it. We may ask you to verify your identity and request additional information about your request. If we give you access to the information we hold about you, we will not charge you for such access unless your request is "manifestly unfounded or excessive". If you request additional copies of this information from us, we may charge you a reasonable administrative fee where permitted by law. If the law permits, we may refuse your request. If we do, we will always justify that refusal.

Please note that in some of the countries where we operate, we are subject to specific local legal requirements regarding access requests from individuals concerned and may therefore refuse your request in accordance with these laws.

Right to erasure:
You have the right to request that we delete your personal data in certain circumstances. In principle, the information in question must fulfil one of the following criteria:

The data are no longer necessary for the purposes for which we originally collected and/or processed them;
you have withdrawn your consent to the processing of your data and there is no other valid reason for us to continue processing it;
the data have been processed unlawfully;
the data must be deleted to comply with our legal obligations as controller

; or

if we process the data because we believe it is necessary for our legitimate interests, you object and we are not able to demonstrate that there is a legitimate and compelling reason to continue processing.

Please note that in some of the countries where we operate, we are subject to specific local legal requirements regarding the right of individuals concerned to be deleted and may therefore refuse your request in accordance with those local laws.

We would be entitled to refuse to respond to your request solely for one of the following reasons:

exercise the right to freedom of expression and information;
comply with legal obligations;
for public health reasons in the public interest;
for archival, research or statistical purposes

; or

exercise or defend a right in court.

When we respond to a valid data erasure request, we will take all appropriate practical steps to delete the data in question.

Right to limitation of treatment:
You have the right to request that we limit the processing of your personal data in certain circumstances. This means that we can only continue to keep your data and that we can only carry out other processing activities in one of the following cases: (i) resolution of one of the circumstances listed below; (ii) your consent; or (iii) further processing is necessary for the establishment, exercise or defence of legal rights, for the protection of the rights of another person, or for important reasons relating to the public interest of the European Union or a Member State.

The cases in which you are entitled to request that we limit the processing of your personal data are as follows:

when you dispute the accuracy of the personal data we process about you. In this case, our processing of your personal data will be limited during the period of verification of the accuracy of the data;
when you object to our processing of your personal data for the purposes of our legitimate interests. You may request that the data be limited while we verify our reasons for processing your personal data;
your data has been unlawfully processed by us, but you simply prefer that we limit rather than delete your data; and
when we no longer need to process your personal data but you request it in order to establish, exercise or defend legal rights.

If we have disclosed your personal data to third parties, we will inform them of the limited processing unless this proves impossible or involves disproportionate efforts. Of course, we will inform you before lifting any restrictions on the processing of your personal data.

Right of rectification:
You also have the right to request that we rectify inaccurate or incomplete personal data that we hold about you. If we have communicated this personal data to third parties, we will inform them of the rectification unless this proves impossible or involves disproportionate efforts. If applicable, we will also inform you to which third parties we have disclosed such inaccurate or incomplete personal data. If we think it is reasonable not to respond to your request, we will give you the reasons for this decision.

Data portability rights:
If you wish, you have the right to transfer your personal data from one controller to another. In concrete terms, this means that you are able to transfer the data to another online platform. So that you can do so, we will provide you with your data in a readable format. This right of portability applies to the following data: (i) personal data that we process automatically (i.e. without human intervention); (ii) personal data that you provide; and (iii) personal data that we process on the basis of your consent or as part of the performance of a contract.

Right to lodge a complaint with a supervisory authority:
You also have the right to lodge a complaint with your local supervisory authority.

It is important that the personal information we hold about you is accurate and correct. Please inform us of any changes to your personal information during the time we hold your data.

9. SECURITY AND DATA RECIPIENTS

We will take all reasonable and necessary steps to protect the personal information we hold from misuse, loss, alteration, disclosure, destruction or unauthorized access. To do this, we have a range of appropriate technical and organisational measures at our disposal. These may include measures to deal with suspected data breaches.

All Personal Data being confidential, their access is limited to LOXAM employees, service providers and agents who need it in order to carry out their mission. All persons who have access to your Personal Data are bound by an obligation of confidentiality and are subject to disciplinary measures and/or other sanctions if they do not respect these obligations.

10. DISPUTE RESOLUTION

Although LOXAM has taken reasonable steps to protect Personal Data, no transmission or storage technology is foolproof.

However, LOXAM is concerned to guarantee the protection of Personal Data. If you have reason to believe that the security of your Personal Data has been compromised or misused, you are invited to contact LOXAM at the following address:

By mail to the following address: Legal Department - 256 rue Nicolas Coatanlem - 56850 Caudan (France), or
By e-mail at the following address: service.juridique@loxam.fr

LOXAM will investigate complaints regarding the use and disclosure of Personal Data and attempt to resolve them in accordance with the principles set forth in this Policy.

Unauthorized access to or misuse of Personal Data may constitute an offence under local law.

11. CONTACT

For any question concerning this Policy, to stop receiving information from LOXAM or for any request to rectify, supplement, update or delete Your Personal Data, You can send an e-mail to the following address: service.juridique@loxam.fr

12. REVISIONS OF THE PERSONAL DATA PROTECTION POLICY

This Policy may be updated to reflect LOXAM's needs and circumstances or as required by law. We therefore invite you to regularly check for updates.