This policy informs you of the processing of personal data that SIMAH carries out as part of the operation of the website www.simah-cosmetiques.fr , hereinafter the “Website”, in its capacity as data controller within the meaning of EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the “GDPR”.

We attach great importance to the protection of the personal data of users of the Website and, to this end, we have implemented the following policy:

What is personal data?

This refers to any data that can directly (ex: a name) or indirectly designate a natural person (ex: an identifier, a code).

What data does we collect?

As part of your user experience of our Website, we may collect personal data about you.

You may provide us with your personal data in different ways via our Website, as set out in the table below:

• Either directly: request for information, contact for a project or application.
• Or indirectly: cookies.

We do not collect personal data from third parties.

We make sure that we only collect data that is strictly necessary to be able to offer you a user experience that is as pleasant as possible and adapted to your needs and to be able to provide you with the services to which you have subscribed.

For this purpose and if necessary, your consent will be required.

The legal bases for the processing carried out are SIMAH’s legitimate interest (responding to requests for information and managing prospects) and the consent of the person concerned by the processing of personal data (cookies and contact).

The fields that must be filled in are marked with an asterisk. Failure to complete the fields marked with an asterisk may affect our ability to offer you the service you have requested or to manage your requests.

The data that may be collected are as follows:

It should be noted that the retention periods indicated cover storage in active databases and internal archives.

 Who is the data controller?

The data controller is the person who determines the purposes and means of the processing. It is directly responsible for compliance with personal data protection obligations.

SIMAH is the data controller.

Recipients of your data

Only the members of SIMAH’s internal departments and, if necessary, the authorised departments of one of the companies in the Sothys Group may be required to process some of your personal data, for the purposes of managing requests made via the contact form.

Certain data (ex: cookies) may be processed by authorised third party service providers (hereinafter ‘subcontractors’) as part of the management of the Website and to secure our tools.

In this case, SIMAH ensures that its subcontractors comply with the applicable European regulations on the protection of personal data.

In this respect, we inform you that your personal data may be transferred outside the European Union as part of the services provided by our Subcontractors. In this case, SIMAH ensures that these transfers comply with the applicable European regulations on the protection of personal data.

What are your rights?

In accordance with the regulations in force, you have a right to information (to receive concise, transparent, comprehensible and easily accessible information in clear and simple terms), a right of access to your personal data, and a right to rectify, oppose, erasure and limit it, by contacting us at cdmo-meyssac@sothys.net.

If you exercise your right to object to and/or delete and/or port your data, we will be unable to provide certain services.

In addition, you have the possibility to withdraw your consent to the collection and processing of your personal data at any time.

If there is any doubt about your identity, you may be asked to produce a copy of your identity document.

You also have the right to lodge a complaint with the CNIL and/or to take any legal action.