When using the https://horizons.carrefour.com/ website (the “Website“), we (“Carrefour France“, “We“, “Our “, “Us”) may collect and process your personal data.

 

The purpose of this Protection of Personal Data and Privacy Policy (the “ Policy“) is to inform the users of the Website (“User(s)“, “You“, “Your“) of the means used to collect and process Your personal data, in compliance with the applicable French and European legislation, including Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended; Regulation (EU) No. 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR“) and Directive 2002/58/EC of 12 July 2002 as amended by Directive 2009/136/EC (“ePrivacy Directive“); and any national transposition text or any subsequent text that may follow them (“Applicable Regulations“);

 

It is very important to us to respect Your privacy and protect Your personal data.

 

The Policy is supplementing the General Conditions of Use (“GCU”) of the ‘Horizons by Carrefour’ Website for any questions regarding privacy and personal data protection, and must be read together with such GCU.

 

By using the Website and the Blog, You agree that Your personal data will be collected and processed under this Policy.

We may amend the Policy, in order to comply with any legislative, regulatory, jurisprudential, editorial or technical changes under the conditions described in the GCU. Therefore, before browsing, You should refer to the latest version of the Policy.

 

 

 

1.            Definitions

 

The terms “personal data” (“Personal Data“), “process/processing”, “data controller”, “processor”, “recipient(s)”, “consent”, have the same meaning as defined in GDPR.

 

Capitalized terms that are not defined in this Policy shall have the meanings given to them in the GCU.

 

 

 

2.            Data controller

 

The controller of Users’ Personal Data collected on the Website is Carrefour France, a simplified joint stock company, registered in the Caen Trade and Companies Register under number 672 050 085, with registered offices at ZI Route de Paris 14120 Mondeville, and the contact details of which can be found in Article 10 “Contact information”.

 

 

 

3.            What personal data is collected?

 

During the collection of Personal Data, the User will be informed if certain Personal Data must be provided or if they are optional. If Personal Data that is required is not provided, the use to certain features of the Website and of the Blog by the User, such as the Get In Touch contact form or newsletter form, will be impossible.

In particular, Carrefour France may be required to collect the following categories of Personal Data relating to the User, depending on the functionalities concerned, which includes the following categories:

• Identity: first name, last name, e-mail address;
• Your chosen picture;
• Short biographical description of You, including: Your position in Carrefour, the country you are working in, and all information You choose to send us to for Your author profile;
• Professional position, limited to categories provided in the drop-down menu;
• Information contained in Your curriculum vitae You consider relevant to submit us, which may include:
• Fist name, last name, e-mail address, date of birth, telephone number, professional situation, previous professional experiences, academic achievements, picture of You.

 

 

 

4.            Why do we collect your personal data?

 

Personal Data that You provide to Us relative to You is processed in order to respond particularly to the following purposes:

 

Legal Basis	Purposes
Performance of the Website and of the Blog	·         Receive and validate proposals of articles you wish to submit; ·         Verify that You are working in one of Carrefour’s entities, to the extent that only Carrefour’s employees are eligible to have their articles published on the Website and on the Blog; ·         Publish validated articles You proposed; ·         Publish biographical information You have provided us alongside with Your article.
Performance of the Website and of the Blog	·         Process and manage Your job application; ·         Send you updates on the recruiting process of Your application.
Your Consent	·         If requested, to be able to receive Our newsletter;
Performance of the Website	·         To be able to communicate with You, after having used the Get In Touch contact form.

 

 

5.            Who are the recipients of your personal data?

 

The database of Personal Data created for Your use of the Website is strictly confidential. Carrefour France undertakes to take all the necessary precautions and organizational and technical measures in order to preserve the security, integrity and confidentiality of Personal Data, and, in particular, to prevent such data from being distorted or damaged, or unauthorized third parties having access thereto.

In accordance with the regulations in force, Personal Data may be forwarded to the competent authorities upon request and also to public bodies, exclusively to satisfy legal obligations, officers of the law, ministerial officers and debt collection bodies.

Carrefour France may share Personal Data with its staff, also with the audit, legal and HR department as part of the use of the Website as the case may be.

Furthermore, any User profile and his/her contributions to this Blog may be published by Carrefour France as the case may be, and shared with any User. The publication of any contribution on this Blog necessarily includes the dissemination to the public of some of your Personal Data related to your contribution.

Personal Data may also be processed by Carrefour France, its subcontractors, affiliates and/or, if applicable, by Carrefour France business partners, vendors, authorized third-party agents or contractors to provide Our Website and Blog or facilitate transactions. Examples include, but are not limited to: processing or orders, hosting Sites and providing support, recruitment process etc.

In particular, Personal Data are shared with the company Google Cloud France, SARL (single-member company), with a capital of EUR 1,000,000 whose head office is located at 8 rue de Londres – 75009 Paris 09 which is providing the direct and permanent storage of the Website.

The Website may contain links to third-party sites that are operated by companies outside of Our control. Your activities on those third-party sites will be solely governed by the privacy policies and procedures of those third parties. Carrefour France takes no responsibility whatsoever for the content or information practices of such third parties and encourage you to review the privacy polices of these third parties before disclosing any information on their sites.

 

 

5.1         Transfer outside of the European Union

 

As a global organization with affiliated entities located inside and outside of the European Union (“EU”) and European Economic Area (“EEA”) and business processes in operation across borders, We may publish Your profile information over the Internet. We may also transfer Your Personal Information to any Carrefour France affiliate entity worldwide or to third-party business partners, providers, vendors, or contractors, that are located inside or outside of the EU/EEA, for purposes described in 4 above.

Carrefour France will perform any cross-borders transfer in compliance with Applicable Regulations, including GDPR. Where mandated by applicable law, to ensure that Your Personal Data does receive an adequate level of protection, Carrefour France implements the appropriate measures to ensure that Your Personal Data is processed across Carrefour France affiliated entities and by the aforementioned third parties in a way that is consistent with and which comply with the Applicable Regulations.

 

 

 

 

6.            What are your rights regarding your personal data?

 

In accordance with the Applicable Regulations, subject to an express request and justification of Your identity with Carrefour France, You have the right to access to Your Personal Data, a right of rectification, a right to object, as well as a right to erasure, under the conditions set forth in the Applicable Regulations.

Your right to the erasure of Your Personal Data applies subject to the necessities that may justify Carrefour France to process Personal Data, particularly with respect to its legal obligations.

In the event of exercise of the right to object, Carrefour France will cease processing Your Personal Data, except in case of legitimate motive(s) and motive(s) imperative for the processing, or to ensure the observation, the exercise or the defence of its rights in court, in accordance with the Applicable Regulations.

Subject to the terms of the Applicable Regulations, You may also request a restriction to the processing of Your Personal Data.

When the processing of Your Personal Data is based on Your consent, You have the right to withdraw Your consent at any time, unless another applicable legal basis justifies the processing of Your Personal Data.

You also have the right to the portability of some of Your Personal Data processed for performance of the Website and the Blog, allowing You to request, in a readable and usable form, a computer copy of Your Personal Data that is processed by Carrefour France, under the conditions set forth in GDPR.

If necessary, Carrefour France will inform You of the reasons for which any rights you exercise cannot be satisfied in whole or in part.

To exercise the rights mentioned in this Article the procedure differs should you are

• An applicant: it shall be made by e-mail to [email protected] or by post at the following address: Espace Emploi France Carrefour – Service du Délégué à la Protection des Données – 153 Avenue d’Italie – 75013 PARIS specifying the information enabling your identity to be established: first name, last name, Horizon blog application, date of the sharing of the resume – and – your request: erasure, rectification, information etc.

 

A User: it shall be made by e-mail to [email protected] or by post to the Délégué à la protection des données personnelles, at 35 rue Pierre et Dominique Ponchardier, espace Fauriel, CS 60337, 42015 Saint Etienne cedex 2, specifying the information enabling your identity to be established: first name, last name, Horizon blog usage, title of the article – and – your request: erasure, rectification, information etc.

Carrefour France undertakes not to keep Your Personal Data beyond the period strictly necessary for the purposes for which it was collected, and in accordance with the Applicable Regulations.

Carrefour France undertakes to anonymize or delete Your Personal Data as soon as the purpose and/or the duration of their established retention expire.

Nevertheless, Personal Data may be archived beyond the applicable periods for the purposes of researching, investigating, and prosecuting criminal offenses with the sole purpose of allowing, as needed, the provision of such Personal Data to the judicial authorities, or for other retention obligations, in particular for accounting or fiscal purposes. Archiving implies that this Personal Data will be subject to access restrictions and will no longer be available online but will be retrieved and kept on a secure and independent device.

The maximum retention periods set out in the table below apply unless You request that Your Personal Data be erased before the expiry of these periods, in accordance with Article 7 above.

Category	Retention period
Identity: first name, Last name, e-mail address, date of birth, title, picture of You, biographical description of You, contacts and exchanges with Us.	As long as Your article is published on the Website and on the Blog, unless you request to delete it.
Information contained in Your curriculum vitae You consider relevant to submit us according to Article 3 above Contacts and exchanges with Us.	Such Personal Data are retained all along the recruitment process. After a negative decision regarding Your recruitment, Personal Data will be retained for two years after this decision has been sent to the applicant. After a positive decision of Your job application, Personal Data will be retained according to our Employee Privacy Policy.
E-mail address, professional position	As long as You subscribe to Our newsletter.

 

 

 

7.          Security

 

Given the evolution of technologies, the implementation costs, the nature of the Personal Data to be protected as well as risks to the rights and freedoms of individuals, Carrefour France implements the appropriate technical and organizational measures to guarantee the confidentiality of Personal Data collected and processed and a level of security adapted to the risk, in accordance with this Policy.

 

All necessary existing precautions will be taken, with regard to the nature of Personal Data and the risks presented by processing, in order to preserve the security of Personal Data and, in particular, to prevent it from being distorted or damaged, and from unauthorized third parties having access thereto.

 

 

 

8.            Cookie policy    

 

When using the Website, navigation information relating to Your computer, tablet, smartphone, etc. (“Terminal“) may be stored in text files called “cookies” installed on Your Terminal. In this regard, please refer to Our Policy on cookies and other trackers.

 

 

 

9.         Contact information

 

For any questions concerning the treatment of Your Personal Data, You can address Your request or Your complaint directly to one of the two addresses listed in article 6 above.

Carrefour France will endeavour to find a satisfactory solution to ensure compliance with the Applicable Regulations.

In the absence of a response from Carrefour France or if the dispute persists, You may also have the right to lodge a complaint with the CNIL or the supervisory authority of the Member State of the European Union in which you habitually reside.

 

 

 

10.         Updates to this Policy

 

We may update this Policy from time to time in order to reflect any changes to Our Website and Blog or to comply with changes in Our legal and/or regulatory obligations. We will post the revised version on the Website, with an updated revision date. Where such changes to Our Policy are substantial, we will also notify You by other means prior to the changes taking effect, such as by sending you an email notification. By continuing to use Our Website thirty days after such revisions are in effect, You will be deemed to accept and agree to the revisions and to abide by them.

 

 

 

 

 

Last update: 28/09/2020