Personal data and trackers charter of the StationT&Vous Innovation Community
Welcome to StationT&Vous (https://stationtetvous.totalenergies/fr), (the « Website »).
The Personal Data and Trackers Charter (hereinafter “ Charter” ) aims to inform you about your rights and responsibilities with regard to our use of your personal data and describes the procedures that we implement to protect them.
TotalEnergies Marketing Services is the "data controller" with responsibility for personal data processing relating to the management of the Website. This processing operation is carried out in accordance with applicable law. Please read this Policy carefully to understand our personal data practices.
- Purpose of processing, legal basis and the period of storage of data collected
By using the platform associated with an online innovation Community, you may provide us with several personal data in order to use our Services offered by the platform. The personal data we collect and process may include the data listed in the following table :
|
Purpose of processing and types of personal data |
Legal basis |
Shelf life |
|
Registration and creation of the User Account (identification data: nickname, email address). |
Execution of the General Conditions of Use and the Rules relating to the Challenge. |
Until the closure of the User Account. |
|
Creation and customization of the Profile/User Account (Photo*, Name and Surname, Profile, phone number, gender, country of residence). This information is optional but allow us to take better advantage of our services. If applicable, your Profile will also display your membership to one or more team(ies). *optional data
|
Consent. |
Until the closure of the User Account. |
|
Manage your participation in Innovation Challenges on the Website (including in particular the confirmation of registration, management of the Challenge, communication, and interaction with other members of the Community, publication of information related to the finalists, etc.). |
Execution of the General Conditions of Use and the Rules relating to the Challenge. |
1 year after the organization of the Challenge. |
|
Send information related to our Services (for example, a confirmation of your registration for a pilot test or event) by email and/or any other means of communication. |
Consent. |
1 year after the organization of the pilot test/event. |
|
Send marketing materials and suggestions for our Services (for example, Challenges or upcoming events) that may you will be interestedin. |
Consent |
1 year after the organization of the event/Challenge. |
|
Provide information through a newsletter/ newsletter. |
Consent. |
Until unsubscribing from the newsletter/ newsletter. |
|
Respond to any questions or requests you may have (including requests for assistance or reporting a problem with the Website or our Services) and notify you of changes to the Website.
|
Legitimate interest.
|
1 year after receipt of the application. |
|
Preserve and ensure the operation and security of the Website. |
Execution of the General Terms and Conditions of Use. |
1 year |
|
To manage the Website linked to our Innovation Community, including for problem solving, access, data analysis, testing, research, investigation and analytical purposes. |
Legitimate interest |
1 year
|
|
Management of the User/Profile Account blocked or suspended |
Execution of the General Terms and Conditions of Use |
Between 2 and 5 years old. |
|
Sending personal data to subsidiaries (identification data: name, first name, e-mail address, telephone number). |
Permission |
Until the right to object is exercised or 3 years from the last contact |
|
Sending commercial offers (identification data: name, first name, e-mail address, telephone number). |
Permission |
Until the right to object is exercised or 3 years from the last contact |
2. Recipients of the data
In order to process your personal data according to the Charter, your personal data may be communicated to one or more of the data controller’s departments or TotalEnergies company subsidiaries as well as to external service providers (operational service providers, service providers in the context of the provision of the service, marketing providers, IT service providers, technical service providers or analytics).
When using our Services, your Profile, including your Contributions on a wall/discussion forum, are fully visible to all members of our Community. Certain information about your Profile (e.g. your first name, surname etc.) may also be visible to other people on or off our Website (for example, by visitors to our Website or by users of third-party search engines).
If you post a comment online, some of your associated personal data may be published on the Website. Given the characteristics of the Internet network, which are the free collection of the information disseminated and the difficulty, or even the impossibility, of controlling the use that could be made of it by third parties, we recommend you not mention your personal data in this field and we inform you that you can object such publication by contacting us at the contact address specified below.
In parallel, information that you have communicated to others (for example, through messages, discussions or on walls/in discussion forums) will remain visible after you close your Account, but will be anonymized. Your Profile may continue to be displayed as part of other people's services (for example, search engine results) until the user refreshes their cache.
3. Data transfers
Any transfer of data to a third country outside the European Economic Area is carried out in accordance with the applicable regulations and in such a way as to ensure adequate data protection.
For the purposes of the Services provided on the WebSite, your personal data may be transferred to recipients located outside the European Union, details of which are set out in the table below.
In order to ensure an adequate level of protection of personal data originating in the European Economic Area that may be transferred to TotalEnergies entities established outside the European Economic Area, "Binding Corporate Rules" (BCR) have been adopted.
For transfers of personal data that are not covered by the BCRs and carried out to countries outside the European Economic Area, other measures to ensure adequate data protection are taken.
If you would like more information about our BCRs, please click here. For any information on the other measures put in place to ensure adequate protection please write to the contact address mentioned below.
As part of the processing, your data is transferred outside the European Union to the following recipients:
|
Recipient |
Purpose of the transfer |
Country of establishment |
Legal basis for the transfer |
|
Amazon Web Services |
Accommodation |
United States of America |
European Commission Standard Contractual Clauses |
|
Algolia
|
Indexing |
Four datacenters in Roubaix (France), two in Strasbourg (France) and one in Gravelines (France) |
Not applicable |
|
FileStack |
File Uploading and displaying |
122 E. Houston St, 2nd Floor San Antonio, TX 78205 |
European Commission Standard Contractual Clauses
|
|
MailChimp/Mandrill |
Mailing |
675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA |
European Commission Standard Contractual Clauses
|
4. Security and confidentiality of your data
The data controller implement appropriate technical and organisational measures to prevent any unauthorized or unlawful processing of your personal data, or any accidental loss, destruction or damage thereto by using our internal security procedures, which cover the retention and destruction of your personal data, as well as access to them.
5. Cookies and other tracers management
A cookie is a file which enables a website to save information relating to your computer’s browsing to make your visits to the Website smoother.. Cookies are text files that are stored on your computer device. They allow access to different information about you. Some of them belong to the publisher of the site (First party), others to third party operators (Third party).
We activate cookies and other tracers once you have given your consent except for technical cookies and tracers that are essential to provide the Service you request on the Website.
Session cookies for site management:
When you access the Website, a "token" cookie with a unique encrypted session identification code is transmitted to your computer.
This token then controls your access to the Website for that session and is removed as soon as you close your browser or log out of the Website. These cookies also allow us to identify your device and preferences when you return to our Website, including personalised features, language and regional preferences.
These cookies are an essential component of the system for making the Website available, and you will not be able to fully use our Website if these cookies are not activated. The information collected by these cookies is anonymous and is used for the sole purpose of improving your experience on our Website.
Persistent cookies for the management of the site:
If you register on the Website and select the "Remember me" option, a persistent cookie is transmitted to your computer.
This cookie is not deleted when you leave the Website or close your browser but is saved on your computer.
This cookie contains an encrypted User identification code that identifies your computer during your future visits and automatically connects you to the Website.
This is a functional cookie, designed to remember your preferences in order to improve your experience on our Website. It does not contain any personal information that could be used to identify you.
Analysis cookies:
We use AT Internet, Google Analytics and Hotjar to monitor traffic on our Website. When you visit our Site, these programs install certain cookies that record statistical information about your visits to the Website. We measure the number of visits, the number of pages displayed as well as the activity of visitors on the Website and the frequency with which they return. This allows us to improve our Website and its operation, for example, by ensuring that Users are navigated intuitively. These cookies do not record personal information that can be used to identify you.
The table below gives a detailed view of each cookie/tracker:
|
Type of cookie/tracker |
Name of the cookie or tracker |
Purpose |
Provider |
Shelf life |
|
Preferences |
_agorize_session
|
Contains information about the browsing session and allows the User to access the Website. |
Agorize |
Expires at the end of the session. |
|
Preferences |
cookies_policy_accepted |
Records a user's choice regarding cookies. |
Agorize |
13 months |
|
Preferences |
hide_profile_incomplete |
Helps Users to fill in their information on the Website. |
Agorize |
13 months |
|
Statistics |
_gid |
Used to distinguish Users. |
24 hours |
|
|
Statistics |
_hole |
Used to limit the rate of requests. |
1 minute
|
|
|
Statistics |
_go |
Used to distinguish Users. |
13 months |
|
|
Statistics |
_hjIncludedInSample |
Session cookie allowing Hotjar to know if a User is included in the sample used to generate statistics. |
365 days |
|
|
Statistics |
atidvisitor, atuserid, xtant, xtat, xtvrn |
Traffic analysis. |
AT Internet |
13 months |
How to withdraw your consent?
When you first connect to the Website, you give, or not, your consent to the use of cookies and/or make a setting. If you subsequently wish to reconsider your choices, you can manage your cookies by going to the section at the bottom of the page of our site or application or via a reminder button called “cookies”.
To delete cookies already installed, please refer to the procedure provided by your operating system (Windows, OS, etc.).
- Your rights/ Contact
In accordance with the current regulations, you have a right of access, rectification, deletion of your data, post-mortem directives and can also request the limitation of processing. You also have a right to portability and object to the processing of your personal data. You may withdraw your consent at any time by unchecking the corresponding box on your member account, by clicking on the unsubscribe link in each email sent, or by contacting us via the contact details below. To exercise your rights and ask us about the processing of your personal data, you can contact us via the following email address: communaute-innovation@totalenergies.com or the postal address TOTALENERGIES MARKETING SERVICES, Tour Michelet, 24 cours Michelet, Puteaux (92800). You can also contact our DPO at the following address: dpo.tems@totalenergies.com. If you consider, after contacting us, that your rights are not respected, you can send a complaint to the CNIL.