Privacy Policy

Groupe RG is committed to protecting the security and confidentiality of personal data.

This privacy policy is intended to provide visitors to our website (accessible at www.groupe-rg.com/en/) and our company's customers with information regarding the collection, use and sharing of their personal data.

In accordance with French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, and the General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016, in force since 25 May 2018, this privacy policy sets out below the arrangements for processing and protecting personal data.

1. Consent

By browsing the Groupe RG website, the holder of the personal data (the "Data Subject") consents to this Groupe RG privacy policy and agrees that personal data may be processed.

2. Data Controller

The controller responsible for processing your personal data collected on the Site is RG SAFETY, a simplified joint-stock company (société par actions simplifiée) with share capital of €16,342,937, registered in France with the Lyon Trade and Companies Register under number 420 625 394, with its registered office at 817 rue Nicéphore Niépce – 69800 Saint-Priest.

Any request relating to personal data should be addressed to the Data Protection Officer by email at: dataprivacy@groupe-rg.com.

3. Purposes of the processing of personal data

As part of its business activities, Groupe RG may need to process personal data required for the management and organisation of its operations, including surnames, first names, postal addresses, email addresses and phone numbers. The information collected by Groupe RG is used in particular for the following purposes:

  • Access to and use of the site
  • Verification and authentication of Customer data
  • Optimisation of the site's layout and functionality
  • Prevention of fraud, misuse, viruses and other malicious software
  • Management of the customer relationship and orders
  • Order fulfilment
  • Commercial promotion of product and service offers
  • Personalisation of the services offered
  • Maintenance and configuration of communication, planning and production systems
  • Digital communication through the sending of newsletters and/or email marketing: users are free to unsubscribe at any time via the link available on the site
  • Compliance with legal and regulatory obligations
  • Administrative management of staff

Where certain information is required to access specific features of the www.groupe-rg.com/en/ website, this requirement is indicated at the point of data entry.

If the Customer refuses to provide the required information, they may be unable to access certain services, features or sections of the Site.

The Customer's personal information is retained for a period not exceeding 60 months, unless:

  • they exercise, under the conditions set out below, one of the rights granted to them by law; or
  • a longer retention period is authorised or required under a legal or regulatory provision.

During this period, www.groupe-rg.com/en/ implements the organisational, software, legal, technical and physical means necessary to ensure the confidentiality and security of the Customer's personal data, so as to prevent damage, deletion or access by unauthorised third parties. Access to the Customer's personal data is strictly limited to Groupe RG employees and staff who are authorised by virtue of their role and bound by a duty of confidentiality.

The data collected may, however, be shared with subcontractors contractually responsible for carrying out tasks necessary for the proper functioning of the Site and its services, as well as for the proper management of the relationship with the Customer, without the Customer's prior authorisation being required.

It is specified that, in performing their services, subcontractors have only limited access to Customer data and are contractually required to use it in accordance with applicable personal data protection legislation.

Other than in the cases set out above, www.groupe-rg.com/en/ undertakes not to sell, rent, transfer or grant third parties access to your data without your prior consent, unless required to do so for a legitimate reason (legal obligation, prevention of fraud or misuse, exercise of the rights of defence, etc.).

4. Categories of personal data processed

The following personal data may be collected and processed:

  • Surname, first name
  • Postal address
  • Email address
  • Phone number

Where applicable, these are supplemented by contractual data, including:

  • Products
  • Contract
  • Banking information

Certain browsing information is also collected, such as:

  • Pages viewed
  • Browser used
  • Operating system
  • Connection times

5. Retention period

Groupe RG retains personal data for the period necessary to fulfil the purposes referred to above. At the end of the contractual relationship, personal data is retained for a period of one (1) year.

The Customer may disable cookies through their browser settings. Further information is available at https://www.cnil.fr/fr/site-web-cookies-et-autres-traceurs and https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.

Beyond this period, this data may be archived for a period that is necessary and reasonable, in particular for:

  • Evidential purposes with administrative authorities
  • Evidential purposes in the event of a dispute
  • Compliance with data retention commitments relating to certain Groupe RG activities, where applicable
  • Business continuity purposes

6. Data transfers

Groupe RG informs the Data Subject that their personal data may be transferred to group subsidiaries, partners or technical service providers and subcontractors of Groupe RG based outside the European Union, where they need to process personal data for the purposes referred to above. Groupe RG undertakes to maintain an adequate level of protection during such transfers, in particular by signing standard contractual clauses.

7. Data protection

The following measures are in place to ensure the protection of the Data Subject's personal data:

  • Data encryption
  • Restricted access to collected data
  • Storage of data in a secure environment

The personal data that may be collected on the www.groupe-rg.com/en/ website is as follows:

Account/profile creation When you create your account/profile, your surname, first name, date of birth, postal address, email address, phone number and login details are recorded.

Logging in to the site On this occasion, the Customer's login, browsing and location data may be recorded.

Information from third parties Some of the Customer's data (in particular surname, first name, and phone and/or postal details) may have been provided, with your prior consent, by Groupe RG's partners. In this case, the processing of the Customer's data will be governed by these terms.

Cookies When using the www.groupe-rg.com/en/ website, cookies are used to collect certain information (see Section 19). The Customer may disable Cookies via their browser settings.

When browsing the Site, cookies are placed on the Customer's computer, mobile device or tablet. A cookie is a piece of information stored on a browsing device by the server of the website visited. As a result, certain parts of the site may not function properly without the user's acceptance of cookies.

The information collected in this way is used solely to monitor the volume, type and configuration of traffic using this site, to improve its design and layout, for other administrative and planning purposes, and more generally to improve the service offered by Groupe RG.

This includes, in particular, your IP address, information relating to the computer used for browsing, the type of connection, the type and version of the internet browser, the operating system and other technical identifiers, as well as the URL of the connections, including the date and time, and the content viewed.

8. Data Subject rights

In accordance with the requirements of applicable personal data protection legislation, in particular French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, and the General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016, in force since 25 May 2018, the Data Subject has the following rights regarding the processing of their personal data:

  • Right of access: The Data Subject has the right to verify the accuracy of the data and, where applicable, to obtain full information on the processing.
  • Right of rectification: The Data Subject has the right to have their personal data corrected in the event of inaccuracy.
  • Right of erasure: The Data Subject has the right to have their personal data erased at their request, where the processing is unlawful or no longer justified by its purpose.
  • Right to restriction of processing: The Data Subject has the right to request the restriction of the processing of their personal data if it is incomplete, unlawful or inappropriate in relation to its purposes.
  • Right to object: The Data Subject has the right to object to the processing of their personal data.

These rights may be exercised either by amending the Customer's account settings, directly on the Site via the "Contact" section, by post to the following address: RG Safety, 817 rue Nicéphore Niépce – 69800 Saint-Priest, France, or by email to: dataprivacy@groupe-rg.com.

For security reasons and to prevent fraudulent requests, this request must be accompanied by proof of identity. The proof of identity will be destroyed once the request has been processed.

For any further information or complaint, the Customer may contact the French data protection authority (CNIL) (further information available at www.cnil.fr).

Finally, in accordance with Article L.223-2 of the French Consumer Code, Groupe RG reminds the Customer that they may register on the opt-out list for telephone canvassing. This can be done via the "Bloctel" opt-out list (https://www.bloctel.gouv.fr/).

9. Amendment

Groupe RG may amend this privacy policy, in particular to comply with applicable laws and regulations.

Groupe RG therefore reserves the right to amend this privacy policy, and it is the Data Subject's responsibility to keep informed of any changes.

We recommend checking this page regularly to stay informed of any changes or updates.

10. Email open tracking (tracking pixels)

As part of the electronic communications sent by Groupe RG (news, information, invitations, commercial offers or content related to its activities), certain emails may contain a technical tracking device commonly known as a "tracking pixel".

Purposes of the processing

This device allows us to measure the effectiveness of our communications and improve their quality. The data collected is used to:

  • Measure the audience and open rate of our electronic communications
  • Analyse the effectiveness of our information and communication campaigns
  • Improve the relevance of the content we send you

The data collected for this purpose is not used to produce automated decisions with legal effects on you.

Data collected

When the tracking device is active, the following information may be collected:

  • Whether or not the email was opened
  • The date and time of opening
  • Certain technical information relating to the email software or device used
  • Statistical data required to analyse the performance of our communications

Legal basis

Where required by law, this processing is based on your consent.
For situations covered by a specific regime under applicable regulations or guidance, Groupe RG implements the information and rights-exercise arrangements provided for by these texts.

Recipients

The data is accessible only to authorised Groupe RG personnel and to its subcontractors involved in sending and analysing electronic communications, within the scope of their duties.

Your right to object

You may object at any time to the tracking of the opening of our emails, free of charge and without affecting the receipt of our other communications.
The arrangements for exercising this right are set out in the relevant emails, or may be requested by contacting our Data Protection Officer at: dataprivacy@groupe-rg.com. Exercising this right disables open tracking for future emails sent to you.