Protection of personal data

Teréga (whose head office is at 40 Avenue de l’Europe, CS 20522, 64040 PAU Cedex, France), in its role as data controller, attaches great importance to protecting and respecting your privacy. The aim of this policy, in accordance with Regulation No. 2016-679 of 27 April 2016 on the protection of natural persons in respect of the processing of personal data and the free circulation of such data (hereinafter referred to as the “Regulation”), is to inform you of our practices concerning the collection, use and sharing of information provided to us by you through our website www.terega.fr.

The purpose of this policy is to inform you about the categories of personal data we may gather or hold about you, how we use it, who we share it with, how we protect it, and your rights over your personal data.

When you use our website www.terega.fr, you will need to send us information, some of which could be used to identify you and thus constitutes data of a personal nature (hereinafter referred to as the “Data”). This is particularly the case when you complete a “contact” form.

Such information will include the following data: 

Personally identifiable information: data entered by you when creating a contact record by completing the form. This is your family name, given name, email address, telephone number and postal address.

Browsing data: data collected by us when you browse the www.terega.fr website, such as the date and time of logging in and/or browsing the site, the type of browser, the browser language and its IP address.

We use the Data we collect to:

Purposes

(1) Create a contact form and be able to reply to your queries.

Legal base

(1) Consent

When Data is collected, you will be informed whether the provision of certain Data is required or whether it is optional. Data items identified with an asterisk on the collection form are required. If they are not provided, fulfilment of your request could be restricted. 

• 3.1 Data processed by Teréga 

Data which is collected comes to us in our capacity as data controller.

Purposes

(2) Create a contact form and be able to reply to your queries.

Receiving department or manager

General contact form, for Neighbour, Local Authority and Investor profiles:
Communications Department

Contact form for Distributor, Industry, Shipper, Biomethane Stakeholder, NGV Stakeholder and Hydrogen Stakeholder profiles:
Sales and Regulation Department

Biomethane simulator form:
Sales and Regulation Department

Endowment fund contact form:
Endowment fund

• 3.2 Data transferred to authorities and/or public bodies

In accordance with currently applicable regulations, the Data may be sent to competent authorities upon request, and in particular to public bodies, court officers, law officials, debt recovery agencies, exclusively to meet legal obligations, and in the event of searches for those responsible for online criminal activities.

• 3.3 Data transferred to third parties

We work with a subcontractor whose services we use for sending and storing contact forms.

That third party acts only in accordance with our instructions and shall be contractually bound to guarantee a level of security and confidentiality for your Data which is identical to our own, and to comply with applicable regulations on the protection of personal data.

Your Data will not be retained beyond the period of time which is strictly necessary for the pursued aims as set out in this document. This shall also be in accordance with the Regulation and applicable laws.

In that respect, the Data used for the purposes of creating a contact form and responding to your requests are stored for a period of two years from the date of last contact. When the retention period has come to an end, your Data will be erased or anonymised in such a way that it can be used without affecting your rights.

Your Data is transferred to Formstack, a company located in the United States, solely for the purposes of storing your data.

That transfer is carried out securely and in accordance with applicable regulations, particularly in respect of the protection of personal data.

For further information, please visit the following page: https://www.formstack.com/data-security

We take appropriate technical and organisational measures to prevent unauthorised access, along with modification, disclosure, loss or destruction of your Data. Those measures are based on current best practice and concern both prevention and protection capabilities, but also the means of detecting abnormal activity.

In accordance with the laws and regulations governing the protection of your personal data, you have a certain number of rights relating to your Data, namely:

- A right of access and information: you have the right to be informed in concise, transparent, intelligible and easily accessible terms about how your Data is processed. You also have the right to obtain (i) confirmation that Data about you is being processed and, if applicable (ii) to access the Data and obtain a copy of it.

- A right to rectification: you have the right to obtain the rectification of inaccurate Data about you. You also have a right to complete incomplete Data about you, by supplying an additional declaration. If you exercise that right, we undertake to communicate any rectification to all recipients of your Data.

- A right to erasure: in certain cases, you have the right to obtain the erasure of your Data. However, that is not an absolute right and we may retain the Data for legal or legitimate purposes.

- A right to restriction of processing: in certain cases, you have the right to obtain a restriction of processing of your Data.

- A right to data portability: you have the right to receive your Data which you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or for sending to a third party of your choosing. That right only applies where the processing of your Data is based on your consent, on a contract, or where such processing is carried out by automated means.

- A right to object to processing: you have the right to object at any time to the processing of your Data where processing is based on our legitimate interests, for the public good, and for direct marketing purposes. This is not an absolute right and we may reject your objection for legal or legitimate reasons.

- A right to withdraw your consent at any time:you may withdraw your consent to the processing of your Data when processing is based on your consent. The withdrawal of consent does not compromise the lawfulness of processing based on consent and taking place prior to such withdrawal.

- A right to lodge a complaint with a supervising authority:you have the right to contact your data protection authority to complain about our practices regarding the protection of your personal data.

- A right to give instructions concerning the fate of your data after your death: you have the right to give us instructions about the use of your Data after your death.

To exercise these rights, you can contact our Personal Data Protection Officer by email : dpo@terega.fr and/or by post : Teréga - DPO - 40 avenue des l'Europe, CS 20522, 64010 PAU Cedex, France.

Please note that we may require you to provide proof of your identity to exercise these rights.

We may need to modify this policy from time to time, particularly in order to comply with any regulatory, legal, editorial or technical developments. We shall change the date of the “last update” as appropriate, and indicate the date upon which the changes were made. When necessary, we shall inform you and/or seek your agreement. You are advised to check this page regularly to make yourself aware of any changes or updates to our policy.

If you have any questions about this policy or any question relating to your Data, you can contact us by:

• Sending an email to our Data Protection Officer at the following adress : dpo@terega.fr; or

• Writing to us at the following address: Teréga - DPO - 40 avenue de l'Europe, CS 20522, 64010 PAU Cedex, France.

Version updated on 17 June 2022.