Cookies and trackers
We inform you that during your visits to our website, we may automatically install cookies that will be temporarily stored on your computer’s hard drive. A cookie is a small data file that does not directly identify you but collects information related to your browsing and use of our digital service, which we may read during a subsequent visit. You can choose to accept or refuse the installation of these cookies by giving or explicitly denying your consent. At any time, users can change their consent regarding the placement of cookies by www.meritis.fr.
Furthermore, by clicking on the dedicated social media icons (Twitter, Facebook, LinkedIn) appearing on this website or its mobile application, and if users have expressly accepted the placement of cookies, Twitter, Facebook, and LinkedIn may also place cookies on your devices (computer, tablet, cell phone). These types of cookies will only be placed on your devices if you have expressly consented to them. At any time, users can withdraw their consent regarding the placement of such cookies by www.meritis.fr.
Use and transmission of your personal data
Three types of personal data are collected on the website https://www.meritis.fr
- Data entered and submitted (identification data, academic and professional information, etc.) via contact forms and spontaneous application forms.
- Data collected by the Google Analytics audience measurement tool.
- Subscription to the newsletter and comments left on blog articles.
Your personal data will only be used for the purposes for which you provided it and for which we have specified the purpose in these terms.
The collection of personal data through the various forms on the site is intended to:
- Recontact individuals who have provided their contact information, thereby expressing their consent to be contacted.
- Ensure commercial follow-up with users interested in our services or products based on legitimate interest.
- Allow the submission of a CV and cover letter for a spontaneous application in the context of job openings within MERITIS HOLDING and its subsidiaries.
When you send us a message via the contact page of our website, we request the necessary contact details to respond to you and process your request. These data will not be used for other purposes; they will only be used to properly handle your request. Once processed, this information will be deleted.
These data are sent to us by email. They are not stored on the website. Only duly authorised personnel of MERITIS HOLDING and its subsidiaries, by virtue of their position, have access to these data via email.
When you submit your CV and cover letter using the form provided on the open positions page, we request the strictly necessary personal data and information to process your spontaneous application. These data will not be used for other purposes; they will only be used to properly process your request. These data are sent to us by email and are retained only for the time necessary to review your application, after which they are permanently deleted (unless we inform you of our intention to retain them for a period of two years, in which case they will be deleted at the end of that period). Only duly authorised personnel of MERITIS HOLDING and its subsidiaries, by virtue of their position, have access to these data via email.
Additionally, as part of its activities involving the placement of external consultants with its clients, MERITIS HOLDING informs you that, in the event your application is successful after an interview, your anonymised CV in MERITIS format may be electronically and securely transferred to one of its clients, but only with your prior consent, for potential recruitment within MERITIS HOLDING or one of its subsidiaries, depending on client activities matching your profile.
MERITIS HOLDING has ensured the security and protection of personal data in the context of transfers to its own subsidiaries: MERITIS, MERITIS TECHNOLOGIES, MERITIS REGIONS, MERITIS LAB, and NAVIGACOM.
MERITIS HOLDING has ensured that each of its subsidiaries complies with the provisions of the General Data Protection Regulation (GDPR) concerning the transfer and processing of data, as well as subcontracting relationships.
The collection of personal data through the Google Analytics audience tracking tool used on the site aims to:
- Analyse user behaviour on the site and landing pages to measure their audience and improve their performance based on user consent.
Users give their express consent through a positive action for the personal data collected by Google Analytics to be processed for the purpose of analysing user behaviour to improve the site’s performance.
Statistics and audience measurement
This website uses Google Analytics to collect statistical data such as pages visited, user location, time of visit, etc. We only have access to the data typically provided by Google Analytics on its interface. These data are entirely anonymous: it is impossible for us to identify individuals from the reports available to us.
Your rights regarding your personal data
You can request to receive a file containing all personal data we hold about you, including those you have provided. You can also request the deletion of personal data concerning you. This does not include data stored for administrative, legal, or security purposes, nor anonymised statistical data.
These actions will be carried out as promptly as possible, and in any case within the one-month timeframe provided by law, subject to technical feasibility.
In accordance with the General Data Protection Regulation of 27 April 2016, individuals are granted the following rights:
- Right to information: You must be informed when your data is collected and understand how it will be used.
- Right of access: You may request confirmation of whether your data is being processed and obtain a copy of it.
- Right to rectification: You can request corrections if your data is inaccurate or incomplete.
- Right to erasure (right to be forgotten): You can request the deletion of your data under certain conditions.
- Right to restriction of processing: You can request that we limit the processing of your data.
- Right to data portability: You have the right to receive your data in a structured, commonly used format and to transmit it to another controller.
- Right to object: You can object to the processing of your data, especially for direct marketing purposes.
- Right to define post-mortem directives: You can specify how you want your data to be handled after your death.
In case of difficulty related to the management of your personal data, you can contact the French data protection authority, CNIL (more information at www.cnil.fr), which is the competent supervisory authority.
To exercise your rights, simply contact us via email at dpo@meritis.fr, or by using the following contact details:
MERITIS HOLDING
For the attention of the data protection officer
36 avenue Pierre 1er de Serbie – 75008 PARIS
Protection of your personal data
All our workstations are encrypted, and our cell phone and digital environments are protected by secure passwords and appropriate measures to prevent intrusions (antivirus, firewalls, etc.).
Your data is regularly backed up on multiple secure local or remote storage systems to ensure its integrity and service continuity.
MERITIS HOLDING employees and those of its subsidiaries have signed confidentiality agreements obligating them to respect the confidentiality of data, including personal data, under penalty of sanctions.
MERITIS HOLDING has appointed a Data Protection Officer (DPO), who is responsible for ensuring compliance with European GDPR regulations and cooperating with the supervisory authority. You can contact the DPO via email at dpo@meritis.fr or by mail at the contact address specified above.
Procedures in case of personal data breach
n accordance with GDPR, in the event of a personal data breach, we commit to notifying the CNIL and, if required, the affected individuals. We will also take all necessary technical and organisational measures to restore security as quickly as possible.
Subcontractors
Meritis uses the Typeform survey platform, based in Spain, which collects nominative but non-mandatory data.
For example, in the “suggest a topic” form (where users can suggest a blog topic to the Meritis editorial team), users can choose:
- To use this feature or not.
- To fill in (or not) the “email”, “first name”, and “last name” fields if they wish to be contacted by the Meritis team.
Meritis also uses Hubspot to collect personal data via the forms on the website and Gravity Forms to collect personal data from job applicants.
Events, competitions, and contests
Purpose of personal data processing
The processing of your personal data aims to manage events and contests, as well as to prospect candidates and potential clients. The legal bases for this processing, under GDPR, are contract execution, consent, and the company’s legitimate interest.
Data processed
Categories of processed data:
- First and last name
- Email address
- Phone number
- Professional information
- Preferences and interests (to help us better understand your expectations and tailor our events and communications to your needs)
Data sources
Personal data is collected through questionnaires or information forms you complete, either on paper or online. This data is essential for processing purposes.
Data subjects
- Contest candidates
- Event participants
- Job seekers
- Prospects or clients
Data recipients
- The communication and marketing department of the Meritis Group (Meritis Holding and all its subsidiaries).
- The recruitment teams of the Meritis Group.
- The sales teams of the Meritis Group.
- External service providers acting on behalf of the Meritis Group (for organising events and contests).
Data retention period
Personal data necessary for contract execution is retained for the duration of the contractual relationship, then archived for the duration of the legal prescription periods before being deleted.
Personal data related to non-client prospects is retained for three years from their collection or the last contact initiated by the prospect. At the end of this three-year period, the data controller may contact the individual to determine if they wish to continue receiving commercial solicitations. In the absence of a positive and explicit response from the individual, the data will be deleted or archived for a period compliant with applicable regulations.
Personal data of candidates is retained for two years from their collection, then for five years to account for legal prescription periods (if the candidate participated in a contest), before being deleted.
Exercising your rights
You can access and obtain a copy of your data, object to its processing, request its correction or deletion, and request the limitation of its processing.
To do so, contact the Meritis DPO at dpo@meritis.fr .
If you believe, after contacting us, that your rights regarding your data are not being respected, you can file a complaint with CNIL (www.cnil.fr).