The terms used with a capital letter have the definition which is given to them below. The terms have the same definition whether they are used in the singular or in the plural. ADEME uses the appropriate technical and organisational measures to guarantee a suitable level of security for the risk inherent to its Processing operations, to meet the regulatory requirements and to protect the rights and the Personal Data of the Data Subjects from the very design of the Processing operations.
Moreover, ADEME contractually imposes the same level of Personal Data protection on its subcontractors service providers, suppliers, etc. Finally ADEME undertakes to comply with any other binding principle under the applicable regulations relating to the protection of Personal Data, and more specifically concerning the rights granted to the Data Subjects, the Personal Data retention times and the obligations relating to cross-border transfers of Personal Data.
The Data Subjects may communicate their Personal Data to ADEME by various means and particularly on the Sites whilst browsing the Internet and via the Products or Services, by filling in various data collection forms, when subscribing to a newsletter, when creating an account, when submitting an application, at the time of any contact with ADEME or during any other transmission of Personal Data in other circumstances. ADEME points out that, in this regard, its service providers are contractually bound to set up strict measures for the confidentiality and protection of such data.
Furthermore, the ADEME may be obliged to provide personal information to authorised French or foreign public authorities. Some of the recipients mentioned above may be based outside of the European Union and may have access to all or part of the personal information collected by ADEME because of a specific legal authorisation. In accordance with the GDPR, the Data Subjects may, at any time, exercise their rights to access, rectify and delete the data concerning them and also their rights to limit and object to the Processing and to the portability of their Personal Data.
Furthermore, the Data Subjects may legally have the right to set post mortem instructions relating to the retention, the erasure and the communication of their Personal Data, and this from a trusted third party, certified and responsible for enforcing their will, in accordance with the requirements of the applicable legal framework.
