Objective and scope of the Policy
2SF (Société des Services Fiduciaires) attaches the utmost importance and care to the protection of privacy and personal data, as well as to compliance with the provisions of the applicable legislation.
In accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Law No. 78-17 of 6 January 1978 as amended (Law on information technology and Freedoms), personal data must be processed lawfully, fairly and transparently.
The purpose of this privacy policy is to provide you with straightforward, clear and comprehensive information about how we process and use the personal information you provide to us that logs in you. This Policy covers the various processing operations performed 2SF (Société des Services Fiduciaires) as part of your browsing on the website https://www.cash-services.fr
Definitions
All terms relating to the protection of personal data used in this policy and logged in by upper case characters, used in the singular or plural, must be interpreted in accordance with GENERAL DATA PROTECTION REGULATION 2016/679 of 27 April 2016 repealing Directive 95/46/work councils (hereinafter ‘GDPR’).
In particular, we use the following terms in this privacy policy:
- Personal data means any information relating to a logged in or identifiable natural person (the ‘Data subject’). Personal Data processed by 2SF (Société des Services Fiduciaires) are referred to in article 6 of this policy.
- Data subject means any logged in or identifiable natural person whose Personal Data are processed by the Controller. For example, when you browse our website, you are a Data Subject.
- Processing means any operation or set of operations carried out or not carried out using automated processes and applied to data or sets of personal data, such as collection, recording, organization, structuring, preservation, adaptation or modification, retrieval, consultation, use, communication by transmission, dissemination or any other form of making available, reconciliation or interconnection, limitation, erasure or destruction. The processing purposes implemented by 2SF (Société des Services Fiduciaires) are logged in in section 5 of this policy.
- Controller: the natural or legal person, public authority, department or other body which, alone or together with others, determines the purposes and means of the Processing.
- Subcontractor means the natural or legal person, public authority, department or other body that bills of exchange Personal Data on behalf of the Controller.
- Recipient: the natural or legal person, public authority, department or any other body that receives the communication of Personal Data from us, whether or not it is a third party to 2SF (Société des Services Fiduciaires).
Responsibility for treatment
For all the processing operations carried out as part of your browsing on the website https://www.cash-services.fr, the Société des Services Fiduciaires (hereinafter “2SF”), SAS with a capital of € 39 000 000 whose head office is located at 3 avenue du Stade de France 93200 Saint-Denis and signed up in RCS of Bobigny under the number 915 166 045, determines the means and the purposes and thus acts as the controller.
Il est précisé que 2SF agit en qualité de sous-traitant des Banques partenaires dans le cadre de ses activités de traitement des chèques ainsi que la réalisation des opérations de Libre Service Bancaire réalisées sur les bornes Cash services. A ce titre, et pour plus de détails sur les traitements de données à caractère personnel réalisés dans ce cadre, le client est invité à consulter la notice d’information mise à disposition par sa banque, responsable de traitement.
Categories of data processed
As part of your browsing on the 2SF website, you are required to provide us with the information listed below concerning you, the nature and quality of which vary according to the relations you enter into with our company:
- identification data (title, surname, first name);
- contact information (telephone number, postal address, e-mail address);
- all information provided by you in the context of a contact request and, where appropriate, the content of the message, as well as any information communicated subsequently during our exchanges;
- information relating to your career path and your training (curriculum vitae, level of studies, skills...) and any information you provide in connection with an application for a position (spoken language, leisure activities, salary claims...);
- login and navigation data (IP address, cookies...): for more information on the cookies placed on our site, please consult our Cookie Management Policy.
We may also collect data during your visit to our website, such as the types of browsers used and their versions, the operating system used by the system accessing our website, the website from which a system accesses our website, the pages of our website accessed through a system that connects to our website, the date and time of access to our website, an Internet protocol address (IP), the Internet service provider of the system connecting to our website, and other similar data and information used to prevent risks in the event of attacks by our computer systems.
2SF ensures that the collection of your Personal Data is relevant, adequate, not excessive and strictly necessary for its activities. You are informed that certain information is essential to benefit from our services (for example, when you fill out a collection form, this information is indicated by an asterisk). If we do not provide them, we will not be able to provide you with the services concerned.
Purpose and legal basis of processing
We collect your Personal Data for specific purposes and on different legal grounds. 2SF is thus required to collect and process your data for the purposes of:
- respond to all your requests made via the Contact Form on the basis of our legitimate interest or the execution of pre-contractual measures where appropriate;
- establish the necessary elements for the conclusion of contracts, such as the definition of the price and other contractual conditions concerning the provision of our services, on the basis of the performance of the contract;
- consider your candidacy spontaneously or in response to a job offer published by 2SF on the basis of our legitimate interest or the execution of pre-contractual measures where appropriate.
Data recipients
As part of the management of our relationship and in particular to enable us to respond appropriately to the requests made on our website, we are required to transmit your Personal Data:
- In-house: to authorized staff of the departments responsible for accessing and processing the data concerned, in particular the Human Resources, Procurement, Information technology and Communications departments.
- Outside: to technical service providers chosen for their expertise and reliability who act on our behalf and at our direction (information technology subcontractor, host of our servers, etc.) or to local authorities under a legal obligation or at the request of an administrative authority authorized to make this type of request.
We never share your personal informations with other businesses for commercial prospecting potential customers purposes without your consent.
Data retention
In accordance with data protection regulations, your Personal Data will be stored only for the time necessary to fulfill the purposes for which it is collected and processed. To the extent that conservation needs may vary according to the intended purpose, personal information retention periods may also vary. In general, the criteria used to determine the retention periods of your personal informations depend on:
- the existence of a legal obligation to retain the data for a certain period of time;
- an administrative interest in keeping your personal informations;
- the existence of a contract between you and 2SF;
- the time limits for the applicable legal requirements.
For example, the following retention periods are applied by 2SF:
- when you make a contact request: your data is kept by the service concerned by your request for the time necessary to reply to you;
- when you sign a contract with 2SF: your personal informations are retained for the term of our contractual relationship and will then be archived for five (5) years after the termination of the contractual relationship in order to satisfy our legitimate interest in ensuring the protection and defense of our rights in case of litigation;
- when you apply for a job offer: in case of a positive outcome to an application, the data relating to a collaborator are retained for the time of his presence in 2SF and after his departure for the applicable legal retention period; in case of a negative outcome to an application, your data will be retained for two (2) years, unless you object on your part, and will in any case be destroyed on your own request.
International data transfer
2SF strives to process Personal Data from France or the European Economic Area (EEE).
In the event that the recipients of your personal informations, for example in the context of service contracts concluded by 2SF, are located outside EEE in countries where the data protection legislation postpones that applicable within EEE, this transfer of data will be carried out subject to appropriate safeguards, in particular contractual safeguards, in compliance with the applicable personal information protection legislation.
Data Privacy and security
2SF is committed to protect the Personal Data we collect, or process, from unauthorized loss, destruction, alteration, access, or disclosure.
Thus, we implement all appropriate technical and organizational measures, depending on the nature of the Data and the risks that their Processing entails. These measures should help to preserve the security and privacy of your Personal Data. They may involve such things as restricted access to Personal Data by competent people, due to their functions, pseudonymization or encryption.
Rights of data subjects
In accordance with the regulations in force, you have the right to access and rectify your personal informations and, to the extent applicable, the right to request erasure, the right to object to the processing of your data for a lawful reason and to obtain its limitation or portability.
When you exercise your rights, your personal informations will be processed for the purposes of managing your request (title, surname, first name, copy of the identity document, nature of the request, response provided). These data are kept for a period of one year or six years, depending on the right exercised, except for the copy of the identity card which will always be kept for one year.
You can exercise these rights or ask any question relating to the management of your personal informations by 2SF by contacting:
- by e-mail by filling out our Contact Form
- by mail to the address indicated in our Legal Notice
Where there is reasonable doubt as to the identity of the applicant, proof of identity may be requested.
You also have the right to submit to the National Commission for Information technology and Freedoms (CNIL), 3 Place de Fontenoy - TSA 80715 - 75334 Paris CEDEX 07, any complaint relating to the way 2SF collects and bills of exchange your data.
Update of this Policy
This Policy may be regularly update to take into account developments in the Personal Data Regulations.