Updated on February 22, 2019

Protecting your privacy and your personal data is our top priority. GROUPE ATLANTIC adheres to the following fundamental principles regarding privacy and the protection of personal data:

• We ask for or process your personal information only if it is necessary or if you have given us your consent to do so.
• We do not share your personal data with anyone, except to comply with the law, to assist you, to protect our rights, or if you have given us your explicit consent to do so.

GROUPE ATLANTIC complies with all laws and regulations regarding the protection of personal data in effect in the countries where it operates, including, but not limited to, European Regulation 2016/679 of April 27, 2016 (General Data Protection Regulation, often referred to as the GDPR).

By using the services offered by GROUPE ATLANTIC, you agree to the practices described in this privacy policy.

Who is the data controller for my personal data?

The data controller is the company that determines the purpose and manner in which your personal data is used.
Personal data collected on the website, through mobile apps, and when you place orders is processed by:
Atlantic Société Française de Développement Thermique, registered with the La Roche-sur-Yon Commercial Register under number 562 053 173
Address: 44 Boulevard des Etats-Unis, 85 000 La Roche-sur-Yon, FRANCE
Hereinafter referred to as “ATLANTIC GROUP”

What personal data is collected?

GROUPE ATLANTIC is committed to collecting only the personal data strictly necessary to provide the services you have subscribed to, such as:

• Last name, first name, address, email address, and phone number of the user, the recipient of the order or quote, the customer, or the job applicant.
• Shipping address for the order and/or the customer’s address, if different
• Return Address for a Product That Needs to Be Returned
• Connection data (IP address, connection log)
• SIREN Number as part of our loyalty programs for business customers
• Date and place of birth, Social Security number, for use in our loyalty programs for employees of our business clients
• Information contained in the resumes and cover letters of job applicants.
• In some cases, location data is used to help you set up your devices or services, or to find a nearby professional
• Information and metrics regarding our products and services (connected devices and apps)
• In some cases, your Wi-Fi network credentials (SSID and password) are required to pair your Wi-Fi devices and control them remotely

Why do we collect your personal data?

GROUPE ATLANTIC processes personal data for the following purposes:

• Managing Our Clients and Prospects
• Managing Online Sales Orders on Our Websites
• Management of After-Sales Service for Our Products
• Management of Our Loyalty Programs
• Support provided to our customers and prospects, particularly regarding product selection, installation, and configuration
• Studies and analyses of how our services are used, particularly for the purpose of making improvements.
• Recruitment Management
• Research and Improvement of Our Products and Services
• Management and coordination of our professional networks,
• Participation in games and contests

Accordingly, GROUPE ATLANTIC processes your personal data on the following legal grounds:

(i) as part of your contractual relationship with GROUPE ATLANTIC, or
(ii) based on GROUPE ATLANTIC’s legitimate interest in processing your personal data (if GROUPE ATLANTIC has a business interest in processing your data that is justified, balanced, and does not infringe upon your privacy) or
(iii) when you have given us your consent to process your personal data, or
(iv) In connection with the processing of personal data required by law

What are my rights, and how do I exercise them?

As a customer or user of the ATLANTIC GROUP’s services, you have the right to:

• to request that the data we process about you be deleted from our records. If you exercise your right to be forgotten and you have access to a customer account on a website, that access will be suspended because your username will be deleted from our records. We cannot delete your data as long as an order intended for you is pending, as long as there is a dispute between you and us, or, more generally, as long as we need your data to perform a contract or fulfill one of our obligations.
• to object to the collection and processing of your personal data when it is not strictly necessary.
  to access the data collected about you and to receive it in a standard electronic format;
• to have it corrected;
• to request restrictions on the processing of their personal data—for example, by refusing any use for marketing purposes;

You can exercise these rights by contacting us:

• by email:dpo@groupe-atlantic.com
• By mail (including a copy of your ID if you are exercising your rights) to the following address:

ATLANTIC GROUP
To the attention of the Data Protection Officer (DPO)
44 Boulevard des Etats-Unis
85000 La Roche-sur-Yon
FRANCE

You also have the right to file a complaint with a supervisory authority and to seek judicial remedy, particularly if your requests to exercise your rights have not been addressed within one month of being submitted.

How long do we retain your data?

Personal data collected by GROUPE ATLANTIC is retained only for as long as necessary to fulfill the purpose for which it was collected or to comply with legal and regulatory requirements. GROUPE ATLANTIC undertakes not to retain your personal data beyond the period necessary to provide the service.

Where do we store your personal data?

Any processing of personal data that GROUPE ATLANTIC may perform is carried out in data centers located within the European Union.

In the event of a transfer of personal data to Group companies or processors located outside the European Union, GROUPE ATLANTIC undertakes to ensure that such recipients comply with the provisions of Regulation (EU) No. 679/2016.

Who has access to your personal data?

GROUPE ATLANTIC may disclose the personal data you have provided or that it has collected to its subsidiaries, employees, service providers, or affiliated organizations that

(i) need to know this information in order to process it on behalf of GROUPE ATLANTIC or to provide services for the purposes mentioned above, and
(ii) who have agreed not to disclose them to third parties.

GROUPE ATLANTIC will not rent or sell personal data to third parties. Aside from its employees, service providers, and affiliated organizations, as indicated above, GROUPE ATLANTIC discloses personal data only when required by law.

How do we approach our clients?

If you have provided us with your email address or cell phone number and have consented to receive communications from us, or if you have previously placed an order with us, GROUPE ATLANTIC may send you emails or text messages to let you take advantage of our offers, inform you about new features and product information, ask for your feedback, or simply keep you updated on the latest news from GROUPE ATLANTIC brands and their offers. You can always opt out of any such marketing communications by unsubscribing via the link included in each email, by replying “STOP” via text message, or by contacting our DPO using the contact information provided above.

How is your personal information protected?

GROUPE ATLANTIC takes all reasonable and necessary measures to protect the data it processes against unauthorized access, use, modification, or destruction of personal (or potentially personal) data.

We are committed to the security of our services and have implemented physical, administrative, and technical measures to prevent unauthorized access to your data. Our security policies cover security management for internal operations and our services. These policies govern all areas of security applicable to the services and apply to all GROUPE ATLANTIC employees as well as our service providers and subcontractors who need access to this data.

If we determine that your data has been misappropriated or otherwise improperly obtained by a third party, we will notify you as soon as possible, as well as the supervisory authority (the CNIL in France).

How is personal data collected from minors?

Although the ATLANTIC GROUP does not seek to collect personal data from minors, certain services may be used by minors. In such cases, it is up to parents and any person exercising parental authority to decide whether their minor child is permitted to use GROUPE ATLANTIC’s services.

Changes to the Privacy Policy

GROUPE ATLANTIC may update its Personal Data Processing Policy at any time. Your use of any of GROUPE ATLANTIC’s services following any changes to its privacy policy will constitute your acceptance of those changes.