Privacy & Data Protection Policy
Understanding how SAS ECOPRA secures, processes, and respects structural identity vectors under French and European Union data handling mandates.
1. Data Collection & Purpose
The organization SAS ECOPRA processes personal data strictly to manage corporate operations, project pipelines, and structural communication channels.
Prospects & Clients
Collection of identity vectors, direct contact records, and corporate roles of individuals with a functional link to active or upcoming SAS ECOPRA projects.
Candidates & Stakeholders
Collection of verified identities, contact files, professional metrics submitted within CVs/applications, and matching training logs.
*Note: Additional metrics are routinely evaluated specifically for legal quality management and optimization processes.
2. Corporate Security Commitments
To ensure data integrity, SAS ECOPRA strictly enforces the following organizational constraints:
- Purpose Limitation: Collected metrics will never be redirected to secondary operations or processing lines outside their original intent.
- Physical Infrastructure Boundaries: Outside entities or unverified personnel are strictly prohibited from entering or remaining unescorted within corporate offices holding local data stores.
- Downstream Security Mandates: All active staff, subcontractors, and partners handling system profiles must deploy defensive security layouts and instantly flag anomalies impacting employee or client data pools.
3. Statutory Data Rights
In accordance with statutory mandates—specifically Law No. 78-17 of January 6, 1978 (as amended) and European Regulation No. 2016/679/EU (GDPR)—employees, partners, and clients hold the following operational privileges:
Users may object to dataset parsing for valid, legitimate causes, provided the request does not conflict with pre-existing legal obligations or breach trade secrets and intellectual property boundaries.
4. Execution Framework & Contacts
Excluding your native right to file formal non-compliance issues directly with the CNIL (French Data Protection Authority), right execution is processed upon delivering explicit identity validation documents to the designated administration links:
SAS ECOPRA commits to addressing validated inquiries as soon as possible, capping reply limits at a maximum of two months from intake.
5. Statutory Exclusions
As stipulated by regulatory frameworks defined by the CNIL, SAS ECOPRA is legally exempt from executing data access inquiries under the following scenarios:
- Excessive or Unfounded Actions: Requests that are clearly redundant, continuous, or excessive in speed and volume for components already fully compiled and delivered.
- Purged Datasets: Cases where requested materials are no longer preserved or have been permanently purged according to statutory lifecycle limits.