Personal data policy and GDPR
1.Introduction
The Hosteur company as part of its services and contacts with customers is committed to a personal data protection policy. In addition the European RGDP regulation which comes into force in 2018 will be the basis for the processing of personal data for the company Hosteur.
If you are a structure processing personal data there is a good chance that you are subject to the provisions of the GDPR. In this regard you are subject to obligations which you must comply with.
The same applies to Hosteur which in view of its situation will have two obligations: in its capacity as subcontractor or data controller.
Abbreviations : GDPR: general data protection regulation EU: European Union
2. Exercise your rights
For any information or exercise of your data protection rights on the processing of personal data managed by HOSTEUR you can contact its data protection officer (DPO) :
by mail to dpo-at-hosteur.uk
or by mail (with a copy of your identity document in case of exercise of your rights) to the following address :
Hosteur SA
For the attention of the Data Protection Officer (DPO)
Route du Lac Lussy 201,
1618 Châtel Saint Denis, Suisse
3. Obligations as a processor
The personal data that is stored and used are under its sole responsibility. Any intervention on this data by Hosteur is done:
On an express and formal request from the customer as part of the support.
On a maintenance intervention for which Hosteur undertakes to notify the customer as soon as possible.
At the request of a representative of justice or public administration. Hosteur only authorize them after ensuring the validity and merits of the request.
Access to customer data remains regulated thanks to specific authorizations and specific control and security measures.
In all cases The customer remains solely responsible for the integrity of his data and the legality of his own processing.
Within this scope Hosteur undertakes to:
use customer personal data solely for the purposes of the proper performance of its services or at the customer's formal request.
inform you and ask you for formal authorization for any use of subcontractors who could process your personal data.
inform you and ask you for formal authorization for any use of subcontractors who could process your personal data.
implement high security standards in order to provide a high level of security to our services.
notify you as soon as possible in the event of a breach of your data.
assist you in meeting your regulatory obligations by providing you with adequate documentation of our services.
4.Obligations as data controller
Hosteur is declared as data controller when it determines its purposes and means regarding the processing of its data. The data collected can be of a commercial accounting statistical or technical nature.
Within this scope Hosteur undertakes to :
Limit the collection of data to those strictly useful and necessary for the commercial technical and invoicing departments.
Do not use the data collected for purposes other than those for which it was collected.
Retain personal data for a limited and proportionate period. Example: Commercial data can be kept for up to 5 years after the expiration of your contracts. The invoices will be kept 10 years after issue.
Do not transfer this data to third parties other than related companies or working on behalf of Hosteur within the framework provided for in sales or service contracts.
Implement adequate security to best guarantee the protection of your personal data.
Notify you as soon as possible in the event of a breach of your data within 48 hours maximum.
Provide you with a means to control and delete your data.
