The following categories of personal data are collected when you use the Website:
Contact information: surname, first name, e-mail address, postal address;
If you agreed to the receipt of our newsletter: your IP address and the date and time of your registration;
Any information you have voluntarily entered in a comment section available on the Website.
The personal data are collected in order to allow us to provide you with your personal account on the Website and, if you agreed to it, to send you information about our products and services.
The data collected will be used anonymously and in aggregate form for a variety of purposes. For instance, we will use this data and feedback from the users to refine and improve the accuracy and relevancy of recommendations, estimated savings, and calculating local and national averages. Anonymous aggregated data may also be provided to utilities or regulatory bodies to help improve or measure the effectiveness of various conservation programs.
The legal basis for the processing of the personal data is, depending on the case:
Your consent to the processing of your personal data;
The processing of personal data is necessary for the performance of a contract to which you are party.
Elum retains your personal data only for as long as it is necessary to fulfil the purposes for which it is used, in accordance with the Regulation and current recommendations.
The data collected by Elum within the framework of the Website will only be accessible to Elum and its authorized personnel.
In some cases, ELUM processes the data using external service providers, who exclusively save, process and use the data on our behalf for the purposes outlined above.
We assure you that your data will not be passed on to third parties for commercial purposes.
Finally, Elum may also communicate data in order to respond to legal or regulatory requests, court decisions, subpoenas or legal proceedings, if required to comply with the regulations in force.
The data collected in the context referred to above is processed within the European Union.
In cases where transfers of personal data outside the European Union take place, Elum undertakes to ensure that the recipient is located in a country benefiting from an adequacy decision of the European Commission or that measures are put in place to ensure that the transferred data benefit from adequate protection, in accordance with the provisions set out in the Regulation.
In accordance with the Regulation, you have the right to (a) access, (b) rectification, (c) erasure, (d) limitation of data processing as well as (e) data portability and (f) object.
In addition, you have the right to define directives relating to the conservation, deletion and communication of your personal data after your death (g).
a) Right of access
You have the right to request confirmation that Elum is processing your personal data and, if so, to receive a copy.
b) Right of rectification
You have the right to request rectification of your personal data if you find it to be inaccurate.
c) Right to erasure
You have the right to request the deletion of your personal data. This right can only be exercised in certain cases, where one of the grounds set out in Article 17 of the GDPR applies. This may involve, for example, personal data that is no longer necessary for the purposes for which we collected it or that has been processed unlawfully. If you exercise this right, we will delete your personal data as soon as possible if one of the reasons applies.
d) Right to limit data processing
You have the right to limit the processing of your personal data. This means that we mark the data, if we do indeed keep it, with a view to temporarily suspending its processing. This right can be exercised on the grounds set out in Article 18 of the GDPR. This right does not give rise to their erasure and we are obliged to inform you before the corresponding processing restriction is lifted.
e) Right to data portability
You have the right to request the supply of personal data that you have directly communicated to us in a structured, commonly used and machine-readable format, if their processing is automated and based on the collection of your consent. This right does not apply to other legal bases for processing. Where applicable and technically possible, you also have the option of requesting the transfer of such data directly to another data controller.
f) Right to object
You have the right to object to the processing of your personal data when the processing is legally based on the legitimate interests of Elum.
However, this right of objection cannot be exercised in the case of processing necessary for Elum to comply with its legal obligations, which is notably the case for data processing in connection with obligations arising from the transparency mechanism.
g) Right to decide what happens to your personal data after your death
You have the right to organize the fate of your personal data after your death by adopting general or specific directives. Elum undertakes to respect these directives.
How to exercise your rights:
If you wish to exercise your rights, simply send a request to Elum:
9 Rue D’Enghien 75010 Paris
In order to process your request as efficiently as possible, we kindly ask you to include the necessary identification details (surname, first name, e-mail) with your request, as well as any other information required to confirm your identity. If there is any doubt about your identity, you may be asked to show proof of identity.
Requests are processed as quickly as possible, and in any event within one month of receipt. If necessary, this period may be extended by two months, depending on the complexity and number of requests we receive. In this case, you will be informed of the extension and the reasons for the postponement.
If, after contacting us and despite our efforts, you feel that your rights have not been respected, you may also lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL): 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07 or directly on its website at https://www.cnil.fr.
As the confidentiality and security of personal data are central concerns for Elum, technical and organizational security measures are put in place to preserve their security and, in particular, to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion or unauthorized access to such data.
Elum implements such technical and organizational measures in order to ensure that personal data is kept securely for as long as is necessary for the purposes for which it is to be used, in accordance with applicable law.
In accordance with the Regulation, in the event of a proven breach of personal data likely to give rise to a risk to the rights and freedoms of the persons concerned, Elum undertakes to communicate this breach to the competent supervisory authority and, where required by said regulations, to the persons concerned.