Privacy Notice

The privacy notice implemented by the company [Eiffage Société anonyme registered with the Versailles trade and companies register under number 709.802.094 with a capital of 392,000,000 euros – Head office: 3-7 place de l'Europe – 78140 Vélizy-Villacoublay France (hereinafter “Eiffage”) is accessible from the “Legal Notices” or “CGU” page of the Eiffage mobile application (hereinafter the “Eiffage App”).


Preamble
 

Eiffage protects the privacy of internet users visiting its “Eiffage App” in its capacity as data controller within the meaning of Law No. 78-17 of January 6, 1978, as amended (hereinafter the “Data Protection Act”) and Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 (hereinafter “GDPR”).

This document, titled "Privacy Notice," aims to inform you about the processing of personal data related to the “Eiffage App” organized by Eiffage as the data controller. This document provides information on:

  • The categories of personal data involved and the methods of collection, processing, and storage of your personal data;
  • How Eiffage uses your personal data;
  • The recipients or categories of recipients of your personal data;
  • The measures taken by Eiffage to ensure the protection of your personal data collected in connection with the use of the “Eiffage App”;
  • Your rights and obligations as well as those of Eiffage under the Data Protection Act and the GDPR.

You agree to review the General Terms and Conditions of Use (hereinafter “CGU”) of the “Eiffage App” and other contractual documents with Eiffage related to the use of the “Eiffage App,” which together with this Privacy Policy form a contractual framework that is enforceable to you.


Definitions
 

The terms defined below will have the following meaning, whether used in the singular or plural:

  • “Personal Data” refers, according to Article 4 of the GDPR, to “any information relating to an identified or identifiable natural person (hereinafter ‘data subject’); an ‘identifiable natural person’ is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.” Personal data includes data that allows the identification of users. For your information, electronic identification data that identifies your device or the pages you visit on the “Eiffage App” are generally insufficient on their own to identify you by name.
  • “Business Partners” refers to Eiffage’s partners. This includes the following companies: none.
  • “Applicable Regulation” refers to all existing or future regulations and standards applicable to users and the “Eiffage App,” particularly those concerning the protection of personal data, including the Data Protection Act and the GDPR.
  • “Data Controller” refers to Eiffage when it determines the purposes and means of processing personal data.
  • “Application” refers to the “Eiffage App,” accessible at https://app.eiffage.com and on the App Store and Google Play Store.
  • “Terminal” refers to the various devices through which the “Eiffage App” is accessible, such as smartphones, tablets, personal computers via the internet (PC or Apple), and any connected or connectable object to another device or the internet.
  • “You,” “Your,” “User(s)” refers to any individual accessing the “Eiffage App” (e.g., visitors) whose personal data may be collected during their visit to the “Eiffage App.”


Methods of Collecting Personal Data
 

Eiffage collects your personal data directly or indirectly, notably:

  • Through your terminal (including cookies, connection data);
  • Through data collection forms on the app.eiffage.com website such as the Contact section;
  • During your browsing on the app.eiffage.com website;
  • Through your posts.


1. Cookies
 

General Information

When you visit the “Eiffage App,” information about your browsing may be recorded in “cookie” files placed on your terminal.
Click here to consult our cookie policy.
 

Your Choices Regarding Cookies

The recording of a cookie depends on your consent. You can configure your browser software to oppose the storage of cookies, either entirely or partially (e.g., depending on the sender). This configuration also gives you the option to accept or reject cookies individually before they are placed on your terminal.

However, rejecting cookies may modify your browsing experience and/or the functionality and access conditions of some services requiring cookies, such as ergonomic page layouts tailored to your terminal.

While most browsers are set to accept cookies by default, you can choose to accept all cookies, reject them systematically, or select the ones you accept based on their sender. You can also delete cookies from your terminal regularly via your browser.
You can change your cookie preferences at any time as follows:

  • For Chrome: click on the menu, then “Settings,” and display the advanced settings. Under “Privacy,” click “Content settings” and select “Cookies.” Choose your desired level.
  • For Mozilla Firefox: Choose the “Tools” menu, then “Options,” click the “Privacy” icon, locate the “Retention rules” menu, and select “Use custom settings for history.” Choose your desired level.
  • For Microsoft Internet Explorer 11.0 and beyond: choose the “Tools” menu, then “Internet Options,” click the “Privacy” tab. Choose your desired level using the slider.
  • For Opera 6.0 and beyond: from the main menu, select “Settings,” click “Privacy & Security” in the sidebar, and under “Cookies,” select the options that suit you.
  • For Safari: in Safari's menu, choose “Preferences” > “Security” or “Privacy,” and select the options that suit you.
     

Make sure to configure all browsers on your different devices (tablets, smartphones, computers…).
Refer to the “Cookie Banner” document for information about cookie banners.


2.    Purposes of Processing Personal Data
 

The processing of personal data carried out by Eiffage through the “Eiffage App” serves the following specific purposes (hereinafter the “Purposes”):

  • To process your questions, information requests, or any other inquiries (e.g., recruitment, quotes, student projects, complaints) via the contact form on the app.eiffage.com website.
  • Management of published posts.
  • Notifications to follow new updates.

The information required by Eiffage to fulfill the above purposes is marked with an asterisk () on the various pages of the “Eiffage App.” Failure to fill in the fields marked with an asterisk () may result in you being denied access to all or part of the services and features of the “Eiffage App,” and your requests may not be considered.
 

Other information is optional and helps us better understand you and improve our communications and services toward you.


3.    Nature of Personal Data
 

The information collected by Eiffage includes:

  • First name
  • Last name
  • Email address
  • IP
  • Subject of your request
     


4.    Data Retention Period
 

To comply with the applicable regulations, personal data collected will be retained for a specific period. The retention period must be proportionate to the purposes described earlier.
 

Thus, your personal data:

  • Electronic identification data: will be retained for thirteen (13) months from the collection date;
  • Data related to cookies: will be retained for thirteen (13) months from the collection date;
  • Data related to the contact form: will be retained for the time it takes to process the request;
  • Data related to notifications: will be retained for thirteen (13) months from the collection date.

The personal data will be deleted upon the occurrence of one of the following events:

  • Expiry of the retention period;
  • Exercise of your right to erasure ("right to be forgotten") in accordance with the applicable regulations and the procedures set out in the section "Your rights of access to your collected data" in this Privacy Policy;
  • Deletion of the “Eiffage App” by Eiffage for any reason;
  • Departure of employees (for collaborators).
     


5.    Recipients of Personal Data
 

To ensure the proper functioning of the “Eiffage App” and in line with the Purposes, personal data may be shared with:

  • Eiffage’s communication service: contact form and cookies;
  • All employees within the Group who have access to the app’s connected section: posts.
     

6.    Sharing and Disclosure of Personal Data


Eiffage will only share your personal data with third parties in the following cases:

  • You have given your prior and express consent to share this information (e.g., for a special promotional event);
  • Eiffage is requested by a judicial or administrative authority authorized by law to disclose this information in accordance with the applicable legal provisions.
     


7.    Personal Data Provided by the User Without Eiffage’s Request
 

Eiffage asks you not to provide unsolicited content such as commercial information, advertisements, personal creations, ideas, concepts, etc., through questionnaires or other data collection forms.
 

When you voluntarily provide personal data about yourself, particularly multimedia content (photos, videos, etc.), you commit to providing accurate information that does not harm the interests or rights of third parties.


8.    Security Measures
 

Eiffage takes all necessary steps to protect your personal data against damage, loss, theft, intrusion, disclosure, alteration, or destruction and has an IT security policy describing the means and security rules applicable in compliance with the ANSSI recommendations and ISO 27001 standards.

Physical and electronic backup procedures for the personal data collected on the “Eiffage App” are implemented, in accordance with French legislation on personal data protection.

Eiffage employees who, due to their role, have access to your personal data are committed to maintaining strict confidentiality.
However, Eiffage cannot control all risks related to the functioning of the internet and alerts you to the potential risks of occasional data loss or breaches of confidentiality of data transmitted over the internet. Information provided on the “Eiffage App” may be interrupted due to force majeure or other factors beyond Eiffage’s control.


9.    Accuracy of Personal Data Collected
 

You acknowledge the importance of the accuracy of your personal data provided through the “Eiffage App.” You agree to provide only accurate personal data during your use of the “Eiffage App” and to update it immediately if any of this data changes during your use of the app.

You may also request access, correction, or full or partial deletion of your personal data as provided in the section "Your rights of access to your personal data collected" in this Privacy Policy.


10.    Exercising Your Rights on Your Personal Data
 

You can exercise your rights by contacting Eiffage’s data protection officer:

•    Via the contact form
•    By email (privacy.fr@eiffage.com)
•    By mail at the following address specifying your request: Eiffage, Data Protection Officer, 3-7 place de l'Europe - 78140 Vélizy-Villacoublay France


You also have the right to lodge a complaint with a supervisory authority:
Commission Nationale de l'Informatique et des Libertés
Attention: Data Protection Officer (DPO)
3, place de Fontenoy
TSA80715
75334 Paris Cedex 07
 


11.    Use of Data in the Event of a Change in Company Control
 

The personal data collected by Eiffage may be transferred to third parties in the event of a change in control of the company, an acquisition, a collective procedure, or a sale of the company’s assets.
 


12.    Policy Regarding Personal Data of Minors
 


The “Eiffage App” is not intended for minors. However, access to the “Eiffage App” is not restricted to adults as it does not contain content prohibited for minors under eighteen (18) years of age.


The forms and questionnaires on the “Eiffage App” are not intended to collect information about minors. If personal data about a minor is collected through the “Eiffage App,” the legal guardian of the minor can contact Eiffage’s communication department to correct, modify, or delete this information (see “Access, Modification, Rectification, and Deletion Rights”).
 


13.    Responsibility
 

By using the “Eiffage App,” you agree to comply with this Privacy Notice.
 

You are responsible for any failure to comply with this Privacy Notice, including the confidentiality of your identification data for the “Eiffage App” and any unauthorized use of the app.


You agree to cover any financial penalties imposed on Eiffage, particularly by any French court or independent administrative authority such as the CNIL, due to your failure to meet your obligations under this Privacy Notice.
Eiffage cannot be held responsible in the event of:

  • i. The voluntary or involuntary use of all or part of your personal data by a third party;
  • ii. Personal data being inaccurate or not updated by you;
  • iii. Failure to comply with your obligations under the Data Protection Act and this Privacy Notice.


14.    Updates to the Privacy Notice


Eiffage may modify the Privacy Notice. These updates will be made without notice and published online.
The previous version of the Privacy Notice will automatically be terminated and replaced by the new version, which will immediately be enforceable to all users.


Due to potential changes, we encourage you to regularly visit the “Personal Data” section.
 


15.    Questions/Contact
 

For any questions or comments regarding this Privacy Notice or how Eiffage collects and uses your personal data, you can send an email via the contact page or send a postal letter to Eiffage.
 


16.    Entirety
 

If any clause in this Privacy Notice is found to be invalid due to legislative changes or a court ruling, it will not affect the validity or enforceability of the remaining clauses in this Privacy Notice.
 


17.    Governing Law and Competent Courts
 

This Privacy Notice is governed by French law.
 

In the event of a dispute related to the validity, execution, or interpretation of the privacy policy, exclusive jurisdiction is granted to the relevant French courts, even in cases of multiple defendants or emergency proceedings.
 

Where a mandatory rule of French public law designates a foreign court or an arbitration body, such provisions will apply

 

Version 1.0 of 07/03/2025