Personal data and trackers charter of the StationT&Vous Innovation Community

Welcome to StationT&Vous (https://stationtetvous.totalenergies/fr), (the « Website »).

The Personal Data and Trackers Charter (hereinafter “ Charter” ) aims to inform you about your rights and responsibilities with regard to our use of your personal data and describes the procedures that we implement to protect them.

TotalEnergies Marketing Services is the "data controller" with responsibility for personal data processing relating to the management of the Website. This processing operation is carried out in accordance with applicable law. Please read this Policy carefully to understand our personal data practices.

 

  1. Purpose of processing, legal basis and the period of storage of data collected

By using the platform associated with an online innovation Community, you may provide us with several personal data in order to use our Services offered by the platform. The personal data we collect and process may include the data listed in the following table :

Purpose of processing and types of personal data

Legal basis

Shelf life

Registration and creation of the User Account (identification data: nickname, email address).

Execution of the General Conditions of Use and the Rules  relating to the Challenge.  

Until the closure of the User Account.

Creation and customization of the Profile/User Account

(Photo*, Name and Surname, Profile, phone number, gender, country of residence). This information is optional

but allow us to take better advantage of our services.

If applicable, your Profile will also display your membership

to one or more team(ies).

*optional data

 

Consent.

Until the closure of the User Account.

Manage your participation in Innovation Challenges on the Website (including in particular the confirmation of registration, management

of the Challenge, communication, and interaction with other members of the Community, publication of information related to the finalists, etc.). 

Execution of the General Conditions of Use and the Rules relating to the Challenge.

1 year after the organization of the Challenge.

Send information related to our Services (for example, a confirmation

of your registration for a pilot test or event) by email and/or any other means of communication.

Consent.

1 year after the organization of the pilot test/event.

Send marketing materials and suggestions for our Services (for example, Challenges or upcoming events) that may

you will be interestedin.

Consent

1 year after the organization of the event/Challenge.

Provide information through a newsletter/ newsletter.

Consent.

Until unsubscribing from the newsletter/ newsletter.

Respond to any questions or requests you may have (including requests for assistance or reporting a problem with the Website or our Services) and notify you of changes to the Website.

 

Legitimate interest.

 

1 year after receipt of the application.

Preserve and ensure the operation and security of the Website.

Execution of the General Terms and Conditions of Use.

1 year

To manage the Website linked to our Innovation Community, including for problem solving, access, data analysis, testing, research, investigation and analytical purposes.

Legitimate interest



1 year 

 

Management of the User/Profile Account blocked or suspended

Execution of the General Terms and Conditions of Use

Between 2 and 5 years old.

Sending personal data to subsidiaries (identification data: name, first name, e-mail address, telephone number).

Permission

Until the right to object is exercised or 3 years from the last contact

Sending commercial offers (identification data: name, first name, e-mail address, telephone number). 

Permission

Until the right to object is exercised or 3 years from the last contact

 
2.      Recipients of the data

In order to process your personal data according to the Charter, your personal data may be communicated to one or more of the data controller’s departments or TotalEnergies company subsidiaries  as well as to external service providers (operational service providers, service providers in the context of the provision of the service, marketing providers, IT service providers, technical service providers or analytics).

When using our Services, your Profile, including your Contributions on a wall/discussion forum, are fully visible to all members of our Community. Certain information about your Profile (e.g. your first name, surname etc.) may also be visible to other people on or off our Website (for example, by visitors to our Website or by users of third-party search engines).

If you post a comment online, some of your associated personal data may be published on the Website. Given the characteristics of the Internet network, which are the free collection of the information disseminated and the difficulty, or even the impossibility, of controlling the use that could be made of it by third parties, we recommend you not mention your personal data in this field and we inform you that you can object such publication by contacting us at the contact address specified below.

In parallel, information that you have communicated to others (for example, through messages, discussions or on walls/in discussion forums) will remain visible after you close your Account, but will be anonymized. Your Profile may continue to be displayed as part of other people's services (for example, search engine results) until the user refreshes their cache.

 

3.      Data transfers

Any transfer of data to a third country outside the European Economic Area is carried out in accordance with the applicable regulations and in such a way as to ensure adequate data protection.

For the purposes of the Services provided on the WebSite, your personal data may be transferred to recipients located outside the European Union, details of which are set out in the table below.

In order to ensure an adequate level of protection of personal data originating in the European Economic Area that may be transferred to TotalEnergies entities established outside the European Economic Area, "Binding Corporate Rules" (BCR) have been adopted.

For transfers of personal data that are not covered by the BCRs and carried out to countries outside the European Economic Area, other measures to ensure adequate data protection are taken.

If you would like more information about our BCRs, please click here. For any information on the other measures put in place to ensure adequate protection please write to the contact address mentioned below.

As part of the processing, your data is transferred outside the European Union to the following recipients:

 

Recipient

Purpose of the transfer

Country of establishment

Legal basis for the transfer

Amazon Web Services 

Accommodation

United States of America

European Commission Standard Contractual Clauses

 

 

Algolia

 

 

Indexing

Four datacenters in Roubaix (France), two in Strasbourg (France) and one in Gravelines (France)

Not applicable 

FileStack

 File Uploading   and displaying

 122 E. Houston St, 

2nd Floor San Antonio, TX 78205

European Commission Standard Contractual Clauses

 

MailChimp/Mandrill 

 Mailing 

675 Ponce de Leon

Ave NE Suite 5000

Atlanta, GA 30308 

USA 

European Commission Standard Contractual Clauses

 

 

4. Security and confidentiality of your data

The data controller implement appropriate technical and organisational measures to prevent any unauthorized or unlawful processing of your personal data, or any accidental loss, destruction or damage thereto by using our internal security procedures, which cover the retention and destruction of your personal data, as well as access to them.

 

5. Cookies and other tracers management

A cookie is a file which enables a website to save information relating to your computer’s browsing to make your visits to the Website smoother.. Cookies are text files that are stored on your computer device. They allow access to different information about you. Some of them belong to the publisher of the site (First party), others to third party operators (Third  party).   

We activate cookies and other tracers once you have given your consent except for technical cookies and tracers that are essential to provide the Service you request on the Website.

 

Session cookies for site management:

When you access the Website, a "token" cookie with a unique encrypted session identification code is transmitted to your computer.

This token then controls your access to the Website for that session and is removed as soon as you close your browser or log out of the Website. These cookies also allow us to identify your device and preferences when you return to our Website, including personalised features, language and regional preferences.

These cookies are an essential component of the system for making the Website available, and you will not be able to fully use our Website if these cookies are not activated. The information collected by these cookies is anonymous and is used for the sole purpose of improving your experience on our Website.

 

Persistent cookies for the management of the site:

If you register on the Website and select the "Remember me" option, a persistent cookie is transmitted to your computer.

This cookie is not deleted when you leave the Website or close your browser but is saved on your computer.

This cookie contains an encrypted User identification code that identifies your computer during your future visits and automatically connects you to the Website.

This is a functional cookie, designed to remember your preferences in order to improve your experience on our Website. It does not contain any personal information that could be used to identify you.

 

Analysis cookies:

We use AT Internet, Google Analytics and Hotjar to monitor traffic on our Website. When you visit our Site, these programs install certain cookies that record statistical information about your visits to the Website. We measure the number of visits, the number of pages displayed as well as the activity of visitors on the Website and the frequency with which they return. This allows us to improve our Website and its operation, for example, by ensuring that Users are navigated intuitively. These cookies do not record personal information that can be used to identify you.

 

The table below gives a detailed view of each cookie/tracker:

 

Type of  cookie/tracker

Name of the cookie or tracker

Purpose

Provider

Shelf life

Preferences

 

_agorize_session

  

Contains information about the browsing session and allows the User to access the Website.

 Agorize 

Expires at the end of the session.

Preferences

cookies_policy_accepted

Records a user's choice regarding cookies.

 Agorize 

13 months

Preferences

hide_profile_incomplete

Helps Users to fill in their information on the Website.

 Agorize 

13 months

Statistics

_gid

Used to distinguish Users.

Google Analytics

24 hours

Statistics

_hole

Used to limit the rate of requests.

Google Analytics

1 minute 

  

Statistics

_go

Used to distinguish Users.

Google Analytics

13 months

Statistics

_hjIncludedInSample

Session cookie allowing Hotjar to know if a User is included in the sample used to generate statistics.

Hotjar

365 days

Statistics

atidvisitor,  atuserid,  xtant,  xtat,  xtvrn

Traffic analysis.

AT Internet

13 months

  

How to withdraw your consent?

When you first connect to the Website, you give, or not, your consent to the use of cookies and/or make a setting. If you subsequently wish to reconsider your choices, you can manage your cookies by going to the section at the bottom of the page of our site or application or via a reminder button called “cookies”.
To delete cookies already installed, please refer to the procedure provided by your operating system (Windows, OS, etc.).

 

  1. Your rights/ Contact

In accordance with the current regulations, you have a right of access, rectification, deletion of your data, post-mortem directives and can also request the limitation of processing. You also have a right to portability and object to the processing of your personal data. You may withdraw your consent at any time by unchecking the corresponding box on your member account, by clicking on the unsubscribe link in each email sent, or by contacting us via the contact details below.  To exercise your rights and ask us about the processing of your personal data, you can contact us via the following email address: communaute-innovation@totalenergies.com or the postal address TOTALENERGIES MARKETING SERVICES, Tour Michelet, 24 cours Michelet, Puteaux (92800). You can also contact our DPO at the following address: dpo.tems@totalenergies.com. If you consider, after contacting us, that your rights are not respected, you can send a complaint to the CNIL.