Privacy Policy
ENERTOPIA processes your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978, as amended.
1. Data controller
ENERTOPIA, SARL with a share capital of €500,000, RCS Nanterre 431 978 980, 11 B place du Général Leclerc, 92300 Levallois-Perret, France.
Contact for any question about your data: paris@enertopia.fr. ENERTOPIA has not appointed a Data Protection Officer, as such appointment is not mandatory for its activity.
2. Source of the data
ENERTOPIA collects your data directly from you: emails, telephone conversations, trade shows or business cards.
It may also obtain them from professional sources: your employer, a partner manufacturer, a customer who names you as a contact, or public sources such as LinkedIn and business directories.
3. Data collected and purposes
ENERTOPIA processes your data for the following purposes:
- Responding to requests sent by email. Data: last name, first name, company, position, email, telephone, message content. Legal basis: ENERTOPIA’s legitimate interest in responding to requests addressed to it. Retention: 3 years after the last contact.
- Processing price requests and managing the relationship with customers and suppliers. Data: professional contact details, commercial correspondence, orders. Legal basis: pre-contractual measures or performance of the contract. Retention: duration of the relationship, then 5 years in archives for evidentiary purposes.
- Business-to-business commercial prospecting. Data: professional contact details, position, company. Legal basis: ENERTOPIA’s legitimate interest in promoting its products and services. Retention: 3 years after the last contact or the end of the commercial relationship.
- Complying with accounting obligations. Data: invoices and supporting documents. Legal basis: legal obligation. Retention: 10 years from the closing of the financial year.
- Managing unsolicited applications. Data: CV, cover letter, contact details. Legal basis: pre-contractual measures. Retention: 2 years after the last contact, unless you object, then 5 years in archives after the relevant recruitment, for evidentiary purposes.
- Ensuring the security and proper functioning of the Site. Data: IP address, connection logs, browser type. Legal basis: ENERTOPIA’s legitimate interest in protecting the Site against fraud and attacks. Retention: 12 months maximum.
ENERTOPIA only collects the data useful for these purposes. It neither sells nor rents your data.
Your contact details and the subject of your request are necessary to process it. Without them, ENERTOPIA will not be able to reply to you.
4. Commercial prospecting
ENERTOPIA may send professionals information about its products and services, related to their function. Under Article L34-5 of the French Postal and Electronic Communications Code and CNIL rules, this prospecting does not require prior consent. You are informed of it when your contact details are collected. Each message allows you to refuse any further mailings, simply and free of charge.
5. Recipients
Your data is accessible only to authorized persons at ENERTOPIA. It may be transmitted, to the extent necessary:
- to the entity Enertopia Korea (Seoul), for project follow-up with Korean customers;
- to partner suppliers, when your request concerns their products;
- to ENERTOPIA’s technical service providers, including the Site’s hosting provider and email provider;
- to administrative or judicial authorities, upon legal request.
Service providers act on ENERTOPIA’s instructions. A contract compliant with Article 28 of the GDPR obliges them to protect your data.
6. Transfers outside the European Union
Some data may be transferred to South Korea. The European Commission recognizes an adequate level of protection in that country (Implementing Decision (EU) 2022/254 of 17 December 2021).
For any transfer to a country without an adequacy decision, ENERTOPIA governs the transfer by the standard contractual clauses adopted by the European Commission. You can obtain a copy by writing to paris@enertopia.fr.
7. Security
ENERTOPIA implements appropriate technical and organizational measures: access limited to authorized persons, individual passwords, encrypted connection (HTTPS), up-to-date antivirus and firewall, backups and staff awareness.
No transmission over the internet is completely secure. In the event of a data breach presenting a risk to individuals, ENERTOPIA notifies the CNIL within 72 hours. If the risk is high, it also informs the persons concerned as soon as possible.
8. Social networks
ENERTOPIA has a LinkedIn page. When you visit or follow this page, LinkedIn processes your data according to its own privacy policy. For the page’s visitor statistics, ENERTOPIA and LinkedIn are joint controllers. Their obligations are set out in the joint controllership agreement published by LinkedIn.
9. No automated decision-making and minors
ENERTOPIA makes no decision based solely on automated processing, including profiling.
The Site is intended for professionals. It does not target persons under 15 years of age, and ENERTOPIA does not knowingly collect their data.
10. Your rights
You have the following rights over your data: access, rectification, erasure, restriction, objection and portability. You may withdraw your consent at any time, without affecting processing already carried out. You may also define directives on what happens to your data after your death.
Right to object. You may object at any time, on grounds relating to your particular situation, to processing based on ENERTOPIA’s legitimate interest. You may also object to commercial prospecting at any time, without having to justify yourself.
To exercise these rights, write to paris@enertopia.fr or to the registered office address. ENERTOPIA replies within one month, extendable by two months for a complex request. You will then be informed. Proof of identity may be requested if there is doubt about your identity.
If you believe your rights are not being respected, you may lodge a complaint with the CNIL: Service des plaintes, 3 place de Fontenoy, 75007 Paris, or at cnil.fr.
11. Changes to the policy
ENERTOPIA may update this policy. The date of the last update appears at the top of the page.