SERCEL Data Privacy Policy
SERCEL S.A.S, with registered offices at 16, rue de Bel Air – 44470 Carquefou, and all SERCEL Group entities (“SERCEL”) are committed to maintaining the principles of integrity and trust with respect to the privacy of your Personal Data.
SERCEL agrees to comply in all material respects with all applicable privacy laws, rules and regulations, including but not limited to the European Regulation (EU) 2016/679 “on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing the EU Data Protection Directive” (the “GDPR”) and any implementing legislation enacted by the member states of the European Union (“European Laws”).
A separate Group Employee Data Privacy General Instruction applies to SERCEL’s employees specifically (including the third-party employees subcontracted to SERCEL, “the Employees”).
Third Parties include amongst others, applicants, clients, subcontractors, vendors/suppliers, investors, insurers and visitors to SERCEL’s website as well as the Employees (such parties referred to herein individually as a “Third Party” or collectively as “Third Parties”).
By providing Personal Data as below defined to SERCEL, Third Parties consent to the disclosure and/or collection and use of information as set forth herein unless otherwise required.
1. Definitions
“Personal Data” and “Personal Information” are used interchangeably herein and refer to information that can be used to identify a Third Party either on its own or in combination with other readily available data (e.g., the individual’s name, title, work location, home address, date of birth, compensation, benefits or family members).
“Sensitive Data” means Personal Data which reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data, or data which concern health, sex life or sexual orientation.
Please note that Personal Data and Sensitive Data may have different definitions depending on your country.
2. Personal Data Collected
SERCEL collects Personal Data entered by Third Parties on SERCEL’s website or through cookies used by SERCEL as specified below, or given in any other way, such as writings or phone calls during any transactional or administrative communications.
Subject to applicable laws and regulations, Personal Data and/or Personal Information collected may include, but is not limited to, the following:
- Personal Data such as date of birth, gender, marital status, and identification numbers including social security, driver’s license, tax identification, passport numbers and resume;
- Contact information such as name, company name, address, phone number, fax number and e-mail address;
- Financial and billing information such as billing name and address, payment information (which might include credit card and/or bank account information);
- Additional information such as title, department name, and additional company information, such as shareholder names, annual revenues, number of employees or industry.
3. Intented Use of Personal Data
A. Purpose and Legal Basis of the Processing
SERCEL uses Personal Information collected from Third Parties for the purposes of SERCEL’s operations and activities management, training programs, and recruiting job applicants.
SERCEL collects and uses the Personal Data of Third Parties for the execution of its contracts with them, to comply with its legal obligations, on the basis of Third Parties’ consent and for the purposes of the legitimate interests of SERCEL.
Failure to provide this information may prevent or delay the fulfilment of these obligations.
SERCEL processes Third Parties’ Personal Data on the following legal basis:
- Performance of a contract – the use of Third-Party Personal Data may be necessary to perform the contract that you have with us.
- Legitimate interests – SERCEL may use Third-Party Personal Data for its legitimate interests, for example to improve our products and services or our marketing practices by monitoring and measuring engagement.
- Consent – SERCEL will rely on Third Parties’ consent to use Personal Data for marketing purposes.
- Legal obligation – to comply with SERCEL legal obligations.
Sensitive Data shall be processed only where required by local law and only where there is a legitimate purpose for SERCEL in doing so.
B. Recipient of Personal Data
To fulfil the purposes mentioned in Article 3.A of the Data Privacy Policy, SERCEL may disclose Personal Data collected on a Third Party on a limited and as-needed basis, including without limitation for example, service providers who advise SERCEL on compensation and benefit programs or administer such programs for SERCEL, insurers, or as otherwise required by law or detailed in this Data Privacy Policy.
In the event that SERCEL or any portion of its assets are acquired, sold or transferred, SERCEL may disclose Personal Data with the company involved to perform the operation and complete the transition, on a limited basis in compliance with applicable law.
In certain circumstances, SERCEL may be requested or required to disclose Personal Data in response to valid legal process or under applicable laws and/or regulations. Such circumstances may include a search warrant, subpoena, court order or other request from a government or regulatory authority or agency, including to meet national security or law enforcement requirements. SERCEL reserves the right to disclose such information in response to any such legitimate government or regulatory request or requirement.
SERCEL does not disclose or sell any Personal Data received from a Third Party (individual or legal entity) for marketing or any other commercial purpose.
C. International Transfer of Personal Data
Subject to applicable laws and/or regulations, Personal Data may be transferred to any country in the world where SERCEL does business, including countries where privacy laws may be more or less protective than the privacy laws where a Third Party is located.
In particular, SERCEL may transfer Personal Data of Third Parties located in the European Economic Area to countries located outside the European Economic Area. Where appropriate, SERCEL will ensure that Third Parties are informed of such transfer and that appropriate transfer mechanisms are in place.
D. Onward Transfer and Choice "Opt In - Opt Out"
SERCEL does not intend to disclose or use Personal Data received from a Third Party in a manner not described herein. However, should at any time SERCEL need to use Personal Data for a new purpose that is materially different from that for which the Personal Data was originally collected or subsequently authorized, or is to be disclosed to a non-agent Third Party, SERCEL will provide individuals with an opportunity to choose whether to have their Personal Data so used or disclosed. Requests to opt out of such uses or disclosures of Personal Data should be sent to: data.privacy@sercel.com.
If Personal Data that qualifies as Sensitive Data is to be used for a new purpose that is different from that for which the Personal Data was originally collected or subsequently authorized, or is to be disclosed to a Third Party, SERCEL will obtain the Third Parties’ explicit consent prior to such use or disclosure, except if the use or disclosure is in the vital interests of the Third Party or another person; necessary for the establishment of legal claims or defences; required to provide medical care or diagnosis; necessary to carry out SERCEL’s obligations in the field of employment law; or related to data that are manifestly made public by the individual.
If the Third Party does not consent explicitly to such disclosure or use, SERCEL will take all reasonable measures to remove the Third Party’s Personal Data from the intended disclosure or use.
When the processing of Personal Data is outsourced to a Third-Party processor, SERCEL will select reliable Third Parties, and data processing will be subject to a written agreement between SERCEL and the relevant Third-Party processor. This written agreement will require that the Third-Party processor: (i) has at least the level of security measures in place as those implemented by SERCEL, and (ii) will process Personal Data in strict compliance with SERCEL’s specific written instructions only for the purpose(s) mentioned in the said agreement. SERCEL shall be liable in case the Third Party does not process the Personal Data in an appropriate manner.
E. Personal Data Security
SERCEL maintains appropriate technical and organizational measures to process Personal Data collected from Third Parties in a secure-access environment and in a manner that complies in all material respects with applicable laws and industry standards to guard Personal Data against loss, destruction, misuse, improper disclosure, and unauthorized access or modification. These safeguards are routinely tested internally and periodically audited by outside firms.
F. Personal Data Retention Period
Personal Data is not kept for longer than necessary to fulfil the purpose for which it was collected. Personal Data will generally not be retained longer than the term of Third Parties’ contractual relationship with SERCEL, unless there is any legal or regulatory provision requiring otherwise.
G. Personal Data Accuracy
SERCEL relies on the accuracy and integrity of Third Parties’ Personal Data in order to comply with its business obligations. SERCEL expects Third Parties to inform it of any changes to their Personal Data, such as changes to contact information, address, or any information affecting benefits or services provided by SERCEL.
SERCEL makes reasonable efforts to ensure that the Personal Data it collects and maintains is reliable for its intended use, and is accurate, complete for the purposes for which it was collected.
H. Rights Over Personal Data
Third Parties have a right to request access to their Personal Data and to request the rectification of any incorrect or incomplete data. Third Parties also have the right to data portability, to request the erasure of their Personal Data, to restrict the processing of their Personal Data, as well as to object to their processing by SERCEL, unless SERCEL demonstrates compelling legitimate grounds. Third Parties which are not satisfied with the way SERCEL processes their Personal Data have the right to lodge a complaint with the competent data protection authority.
Should a Third Party have any request for assistance regarding the exercise of their rights as above mentioned, the Third Party shall use the following e-mail address: data.privacy@sercel.com.
SERCEL will allow a Third Party to review the Third Party’s Personal Data that SERCEL stores and maintains about that Third Party in his or her personnel file, including information relevant to the use and disclosure of that person’s Personal Data. However, in certain limited circumstances SERCEL may not be able to provide a Third Party with access to all of his or her Personal Data where such refusal is permitted or required by applicable law or regulation.
Subject to all applicable laws and regulations, should any Personal Data concerning a Third Party be found to be no longer needed, to be inaccurate or incomplete, or if a Third Party has withdrawn consent, SERCEL will take reasonable steps to erase or correct or update the information it maintains unless applicable laws or regulations exempt SERCEL from doing so.
These rights can vary depending on your country.
I. Website
An individual can access SERCEL’s website without providing any Personal Data. However, should you choose, you may provide us with certain Personal Data. SERCEL may use this information:
- To correspond with you;
- To allow you to participate in features or services we offer on this website;
- To provide you with a subscription or newsletter;
- To transmit your resume within SERCEL for possible employment opportunities.
If you subscribe to any service provided by SERCEL through SERCEL’s website or otherwise, and you wish to terminate that subscription and have all Personal Data about you removed from any list we maintain, please contact SERCEL by sending an e-mail to webmaster@sercel.com, informing us of your request. We will promptly make reasonable efforts to remove all Personal Data about you from our data banks. In addition, e-mail communications from SERCEL inform the recipient how to stop receiving further communication.
SERCEL does not automatically log Personal Data about visitors to our website. SERCEL does not use cookies to store Personal Data, nor does SERCEL link non-Personal Data stored in cookies with Personal Data about specific individuals. We may collect certain non-Personal Data from a visitor to our website such as what browser was used, what pages were accessed, and the Internet address of the service provider in order to compile statistics and analyse this data for trends.
J. Use of Cookies
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
SERCEL’s website uses the following cookies to understand how the site is being used in order to improve the user experience.
Cookie name | Expiration | Category | Source |
token | 3 months | Functional | .tarteaucitron.io |
tarteaucitron | 11 months | Functional | www.sercel.com |
step | 1 month | Targeting | tarteaucitron.io |
s_tslv | 6 months | Targeting | .linkedin.com |
s_tp | 6 months | Targeting | .linkedin.com |
s_sq | Session-based | Targeting | .linkedin.com |
s_ppv | Session-based | Targeting | .linkedin.com |
s_pltp | Session-based | Functional | .linkedin.com |
s_plt | Session-based | Functional | .linkedin.com |
s_ips | 6 months | Targeting | .linkedin.com |
s_fid | 6 months | Functional | .linkedin.com |
s_cc | Session-based | Functional | .linkedin.com |
lms_analytics | 1 month | Functional | .linkedin.com |
lms_ads | 1 month | Targeting | .linkedin.com |
lidc | 1 day | Functional | .linkedin.com |
liap | 12 months | Functional | .linkedin.com |
li_sugr | 3 months | Targeting | .linkedin.com |
li_mc | 6 months | Targeting | .linkedin.com |
li_gc | 4 months | Targeting | .linkedin.com |
lang | Session-based | Targeting | .linkedin.com |
lang | 3 months | Targeting | .tarteaucitron.io |
hubspotutk | 6 months | Targeting | .sercel.com |
hubspotutk | 6 months | Targeting | .hsforms.com |
hubspotapi-strict | 3 weeks | Functional | .hubspot.com |
hubspotapi-prefs | 12 months | Targeting | .hubspot.com |
hubspotapi-lax | 3 weeks | Functional | .hubspot.com |
hubspotapi-csrf | 12 months | Functional | .hubspot.com |
hubspotapi | 3 weeks | Functional | .hubspot.com |
hs_login_email | 12 months | Targeting | .hubspot.com |
hs_c2l | 5 months | Targeting | .hubspot.com |
gpv_pn | 6 months | Targeting | .linkedin.com |
fptctx2 | Session-based | Targeting | .linkedin.com |
dfpfpt | 10 months | Functional | .linkedin.com |
csrf.app | 12 months | Strictly necessary | .hubspot.com |
bcookie | 12 months | Functional | .linkedin.com |
ar_debug | 1 month | Functional | px.ads.linkedin.com |
_gcl_au | 1 month | Targeting | .linkedin.com |
_gcl_au | 1 month | Targeting | .sercel.com |
_ga_C44ZLPT8D3 | 13 months | Targeting | .sercel.com |
_ga | 13 months | Functional | .sercel.com |
_cfuvid | Session-based | Functional | .hubspot.com |
_cfuvid | Session-based | Functional | .hsforms.com |
__hstc | 6 months | Functional | .hsforms.com |
__hstc | 6 months | Functional | .sercel.com |
__hssrc | Session-based | Functional | .sercel.com |
__hssc | Today (same date) | Functional | .sercel.com |
__hs_cookie_cat_pref | 4 months | Targeting | .hubspot.com |
__cf_bm | Today (same date) | Functional | .hubspot.com |
__cf_bm | Today (same date) | Functional | .hsforms.com |
__cf_bm | Today (same date) | Functional | .hsforms.net |
UserMatchHistory | 1 month | Targeting | .linkedin.com |
SSESSe55ce995f984a8da35cfcefb92e71a43 | 3 weeks | Strictly necessary | .www.sercel.com |
PHPSESSID | Session-based | Strictly necessary | tarteaucitron.io |
AnalyticsSyncHistory | 1 month | Targeting | .linkedin.com |
AMCV_14215E3D5995C57C0A495C55%40AdobeOrg | 6 months | Targeting | .linkedin.com |
Google Analytics
SERCEL uses this to understand how the site is being used in order to improve the user experience. User data is all anonymous. You can find out more about Google’s position on privacy as regards its analytics service at: https://policies.google.com/privacy?hl=en.
To opt out of being tracked by Google Analytics across all websites, visit: tools.google.com/dlpage/gaoptout.
How to withdraw your consent?
On your first connection to the website https://SERCEL.com/, you will be asked to give your consent to the use of non-strictly necessary cookies. If you subsequently wish to change your choices, you may delete or disable cookies on the Preference Center available by clicking on the “Adjust my preferences” button available on all pages of the website.
However, you should keep in mind that deleting or disabling cookies may lead to inconvenience while using our website that would not have happened if you consented to the use of cookies.
I. Enforcement Recourse and Liability
SERCEL will monitor its compliance with this Data Privacy Policy and address questions and concerns regarding its adherence.
As a general principle, SERCEL is committed to resolve complaints about collection and/or use of Personal Data.
Any inquiry or complaint regarding this Data Privacy Policy can be referred to a SERCEL Privacy Officer at data.privacy@sercel.com.
In compliance with the European Laws, SERCEL will strive to acknowledge any complaint or enquiry and take appropriate action to remedy any raised issue within one (1) month of receipt. However, if SERCEL is unable to satisfactorily resolve the issue, SERCEL will inform the concerned Third Parties of the reasons preventing the implementation of measures to resolve such issue.
Regarding the rights over Personal Data as described in Article 4.H of this Data Privacy Policy, Third Parties have also the possibility to lodge a complaint to the EU local data protection authorities. To contact the authorities directly, please visit: ec.europa.eu. If outside of the EEA Third Parties may lodge a complaint with the relevant authority.
Under the GDPR, Third Parties who consider that the processing of their Personal Data infringes their rights have the right to an effective judicial remedy.
5. Changes to SERCEL Data Privacy Policy
SERCEL reserves the right to make changes to this Data Privacy Policy from time to time in order to reflect changes in legal or regulatory obligations, or changes in the manner in which SERCEL manages personal data. This Data Privacy Policy was last updated in June 2024.