PRIVACY POLICY
Last updated: June 2024
For the
purposes of this Privacy Policy, the following terms mean:
The Legrand Group collects and processes your data in compliance with the
legislation on the protection of personal data, namely, among others, EU
Regulation 2016/679 of the European Parliament and of the Council (GDPR), the
Data Protection Act No. 78-17 and any other European or national regulations
applicable in this area, which may be added subsequently (hereinafter referred
to as "Data Protection Legislation").
SITE HOSTING
The Site
"portal.buildingmanager.legrand.com" ("the Site") is hosted
on the cloud of the company Amazon Web Service (AWS) France (67 Boulevard du
Général Leclerc, 92110 Clichy, France) AWS in France
(amazon.com)
The Site
"myconnectedaccount.legrand.com" ("the Site") is hosted on
the servers of the Legrand Group company, Netatmo SAS (93 rue nationale, 92100
Boulogne-Billancourt) hosted on the Microsoft Azure cloud in Europe: https://azure.microsoft.com/fr-fr/overview/sales-number
.
IDENTITY OF THE DATA CONTROLLER
Any processing of personal data collected is carried out under the
responsibility of:
|
Name and contact details of the
Data Controller |
Legrand SNC 128, av. of Maréchal
de Lattre de Tassigny 87045 Limoges Cedex (France) |
|
Legal information on the Data
Controller |
General Partnership with capital
of €7,765,345 |
DATA COLLECTED AND PURPOSES OF
PROCESSING
DATA YOU PROVIDE TO US
|
Data
collected |
Purposes of
processing |
Legal basis
for processing |
|
E-mail* |
Identity
Verification / Site Login |
Legal
obligation (Article 5,
GDPR) |
|
Password* |
||
|
Name, First
name * |
Customer
relationship |
|
|
Language * |
Interface in
user language |
|
|
City*,
Country* |
Location |
|
|
Phone number |
Customer
Support |
|
|
Customer Site (Name, Postal Address) * |
Use of the
services provided by the application |
|
*Mandatory data
The data identified as mandatory, collected on the legal basis of the
contract when creating your Legrand account, are essential to the provision of
the service. Failure to respond to a mandatory field will result in
compromising access to the site.
We keep all this data for the duration of the contract and for a period of
30 days after the deletion of your user account (following a request for
voluntary deletion on your part according to the procedure described in the
article Exercising user rights ).
DATA COLLECTED WHEN USING OUR
SERVICES
|
Data collected |
Purposes of processing |
|
Area Manager IP Addresses Usage-related metrics (non-exhaustive): Temperature/Humidity/Brightness Consumptions Occupation/People Counting Status of lighting HVAC Status |
Use of the
services provided by the application |
We keep all this data for a period of 30 days after the deletion of your
user account (following a request for voluntary deletion on your part according
to the procedure described in the article Exercising user rights ).
EXERCISE OF USER RIGHTS
In accordance with the applicable Personal Data Regulations, you benefit
from the following rights regarding the processing of your personal data:
To exercise any of these rights, you may submit your request at any time,
using the contact information provided in the “Contact Us and Our DPO” section
of this Privacy Policy. Requests will be processed provided
that you are able to prove your identity, and that your request is
clearly identified. Requests will be processed as soon as possible, and in any
event within a maximum of one (1) month from receipt of your request. If
necessary, this period may be extended by two (2) months, depending on the
complexity of the request and the number of requests. In this situation, we
will inform you of the reasons for this extension. No payment is required for
the exercise of your rights, except in the case of a clearly unfounded or
excessive request. In such cases, we also reserve the right not to follow up on
your request.
In addition to the rights described above, you have the right to lodge a
complaint, at any time, with the competent supervisory authority. For example,
under the GDPR, you can lodge such a complaint in the country in which you
reside or work (if applicable) or where the alleged infringement took place, if
you have reason to believe that the processing of your personal data infringes
the applicable Personal Data Regulation. In France, the supervisory authority
is the Commission Nationale de l’Informatique et des Libertés (the “ CNIL ”).
The Site allows you to modify the data provided when creating your Legrand
account:
From the Site, you can consult the General Conditions
of Use and the Confidentiality Policies that you have accepted in order to use the connected applications of the Legrand
group. In the event of an update of these documents, you will also be able to
read the changes that we have made to them and to renew your consent to the new
conditions of use and/or processing of your personal data in
order to be able to continue to use the connected applications of the
Legrand group if you wish.
ACCESS TO DATA
Only the following have access to your personal data, within the limits of
their respective attributions:
·
Legrand company subcontractors responsible for the architecture of the environments;
We inform you that the aforementioned recipients
are subject to an obligation of confidentiality and may only process your data
in accordance with our contractual provisions and applicable legislation.
We also inform you that we may be required to share your personal data if this
is necessary to safeguard your vital interests or those of another natural
person, if this is necessary for compliance with a legal obligation to which we
are subject as well as for the establishment, exercise or defense of legal claims.
DATA SECURITY
The LEGRAND Group has implemented adequate physical, electronic and
administrative protection measures that comply with regulations to protect your
personal data. However, the LEGRAND Group wishes to draw users' attention to
the potential risks in terms of data confidentiality related to the operation
of the Internet. It is in particular up to users to
set up or ensure the existence of means to secure their personal computer
network, as well as to ensure the correct configuration of the connection box
(box) connected to the Internet access provider, and other radio accesses
(e.g.: WIFI, 4G, etc.).
COOKIES AND SIMILAR TECHNOLOGIES
When you browse, cookies are placed on your device (computer, mobile phone,
tablet), subject to the choices you have expressed and which you can change at
any time by adjusting your settings (see the section below Accepting or refusing cookies ).
Placed on your device when you visit a site, a cookie is a small text file on
said site, which records information relating to browsing (pages viewed, date
and time of viewing, etc.) and whose main objective is to improve your viewing
and to allow you to receive personalized services. The term "cookie"
hereinafter refers to cookies
TYPE OF COOKIES
Internal cookies necessary for the operation of the Site:
|
Host-next- auth.csrf -token Secure-next- auth.callback - url Secure- next - auth.session-token |
(Session cookie to retain the user's identity during his use of the Site. Expiration: Session) (Session cookie to retain the user's identity during their
use of the Site. Expiration: Session) (Session cookie to retain the user's identity during use of
the Site. Expiry: 24 hours) |
These cookies are strictly necessary for the operation of the Site.
ACCEPT OR REFUSE COOKIES
You can configure your browser so that cookies are saved in your terminal
or rejected, either systematically or according to their issuer, or to be
informed when a cookie is saved in your terminal, in order to
allow you to accept or refuse it.
However, deleting all cookies used may lead to the alteration or loss of
certain settings or information and make navigation difficult or even
impossible. The configuration of each browser is different. It is described in
the help menu of your browser, which will allow you to know how to modify your
wishes regarding cookies. Here is how to control or prevent the recording of
cookies:
UNDER FIFTEEN YEARS
In offering its information society services, the Legrand Group does not
target minors under the age of 15 as a user group. However, access to the Site
is not reserved for adults because it does not present content prohibited for
minors.
The Site does not intentionally collect or use personal information concerning
minors under the age of 15. If information is collected on a minor by the Site,
the minor's legal representative may contact the Group's Data Protection
Officer to rectify, modify or delete this information (see article Exercising User Rights ).
MODIFICATION OF THIS DOCUMENT
This document may be modified at any time without notice. We invite you to
consult it regularly.
By email:
Via the online form https://www.legrandgroup.com “ Contact us ” section
By mail
Legrand Consumer Service
128 Avenue of Maréchal de Lattre de Tassigny
87045 LIMOGES cedex France
Our DPO:
Data Protection Officer – Julie CELMA
128 Avenue of Maréchal de Lattre de Tassigny
87045 LIMOGES cedex France