Personal data management and protection policy

Altereo informatique

SAS au capital de 111 631 €, domiciliée 2 avenue Madeleine Bonnaud 13770 Venelles – France

Inscrite au RCS d’Aix-en-Provence sous le n° 489428318

1. Definitions

The HpO® Viewer website: the application edited by Altereo informatique which allows the registration of a Manager and the designation of Users of the HpO® Collect mobile Application and which gives access to the data collected by the Users.

 

The HpO® Collect mobile Application: the application edited by Altereo informatique that allows the collection of drinking water network failures by Users on Android or IOS terminals.

 

The Water Utility: refers to the entity that is the owner/manager of a drinking water service on a given territory.

The Manager: means the authorised representative of the Water Utility.

 

The User: means any person identified by the Manager to access the Service via the HpO® Collect mobile application.

 

The Account: refers to the private space to which a Manager has access on the HpO® Viewer website via his personal login details.

 

The Personal Login Information: refers to the identifier and password used to authenticate the Manager when connecting to his Account on the HpO® Viewer website.

 

The Content(s): refers to the information on drinking water network failures collected by the Users designated by the Manager.

2. Consent

By creating an account, the Manager consents to the computerised processing of all data communicated on the account creation form on the HpO® Viewer website. This data may be used for communication purposes in connection with the processing of the file.

Users who are registered to the Service by the Administrator consent to the computerized processing of all Content they register via the HpO® Collect mobile application. This Content will be used to meet the needs of the drinking water network failure collection service.

 

3. Data controller

Altereo informatique and the Ozwillo association (SIREN 819140872) are jointly responsible for processing the data collected and processed by the HpO® Viewer website and the HpO® Collect mobile application.

 

Altereo informatique and the Ozwillo association undertake to process the data communicated to them in accordance with the law of 8 December 1992 on the protection of privacy in relation to the processing of personal data.

 

The Content entered by the User can be consulted via the HpO® Viewer website. Altereo informatique and the Ozwillo association cannot be held responsible for this Content.

The data is hosted in France in ISO27001 certified data centres (notably OVH® and Scaleway®).

 

3.1       Information collected

3.1.1        Information you provide to us when creating an Account

 

We request and collect the following personal information about the Manager when the Account is created.

 

When creating an account, we ask you to provide certain information such as the Manager’s first name, last name, position (if any), country, business e-mail address and business telephone number, as well as connection identifiers and connection logs (IP address, login and timestamp).

The purpose of this collection and recording of information is the performance of the service including :

 

  • The creation of the Manager account ;
  • The generation of QR CODE allowing the anonymised registration of users;
  • The establishment of the data ownership link.

 

The legal basis for the processing of personal data is the consent of the Manager or, failing that, the execution of the applicable C.G.U. or, failing that, the legitimate interest of the joint data controllers or, failing that, the legitimate interest of the manager or, failing that, the possible execution of a contractual relationship between the joint data controllers.

 

Only relevant staff are authorised to access personal data, in particular the staff administering the service’s accounts.

 

3.1.2        Information we collect automatically when you use the HpO® Collect mobile application

 

When a User uses the HpO® Collect mobile application, we automatically collect personal information. This information is necessary for the proper performance of the service, given our legitimate interest in being able to meet the requirements of the service, including:

 

  • One-off geolocation information at the express request of the User: When using the HpO® Collect mobile Application, we collect information on the approximate or precise location of the User, as determined by the GPS of the mobile terminal or manual identification on the online map, in order to locate the identified drinking water network failure.
  • Date of registration: We collect the date on which the User registered the fault.

 

3.2       How we use the information we collect

 

We store and process the information collected, including personal information about you, in order to provide the HpO® Collect service, to comply with our contractual obligations (in particular the GTC) and in view of our legitimate interest in being able to meet the requirements of the service.

 

  • Storage of collected data and personal information.
  • Process the Content,
  • You propose a cartographic visualisation of the Contents and their synthesis by simple statistics.

4. Your rights

You may exercise any of the rights described in this section with the data controller designated as competent by this Privacy Policy by sending an email to dpo@altereo.fr. Please note that we may ask you to verify your identity before taking further action on your request.

4.1       Rectification of inaccurate or incomplete information

You have the right to ask us to correct inaccurate or incomplete personal information about you. We also point out your right to object or to have your data deleted.

4.2       Data access and portability

Applicable law permits you to request copies of your personal information held by us. You are entitled to request copies of the personal information you have provided to us in a commonly used, structured machine format.

4.3       Right to withdraw consent

We indicate your right to withdraw consent at any time, if the legal basis for processing is consent. We also indicate your right to lodge a complaint with the CNIL.

4.4       Retention and deletion of data

In general, we retain your personal information for as long as necessary to perform the service and to comply with our legal obligations. If you no longer wish us to use your information to provide the service to you, you may ask us to delete your personal information. For example, inactive Manager accounts and associated information are deleted after 2 years of inactivity. Connection logs are kept for 6 months in accordance with the relevant legal time limits. After termination of the contract under the terms of the G.C.U., the data is kept for 90 days in order to ensure the possible portability and reversibility of the data.