PRIVACY POLICY
Version dated 6 July 2026
MALTEUROP is committed to ensuring that personal data is collected and processed in a manner that respects privacy and complies with the Applicable Regulations.
When browsing www.malteurop.com (hereinafter the “Website”), Users may be asked to provide certain Personal Data.
Users are informed that, when browsing the Website, they may be redirected to other VIVESCIA Group websites.
This Privacy Policy is intended to explain to Users how MALTEUROP collects and uses the Personal Data entrusted to it.
In this respect, MALTEUROP undertakes to process Personal Data in strict compliance with the French Data Protection Act of 6 January 1978 (hereinafter the “French Data Protection Act”), as amended, and Regulation (EU) 2016/679 of 27 April 2016 (hereinafter the “GDPR”), and to observe the following two principles:
- Users remain in control of their Personal Data;
- Personal Data is processed transparently, confidentially and securely.
I. Definitions
The terms below have the following meanings:
« Personal Data » or “personal data”): means any information relating to an identified or identifiable natural person, whether directly or indirectly.
« Applicable Regulations » : means any regulation or legislation applicable to the processing of personal data carried out in connection with the use of the Website, including Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data (the “GDPR”), French Law No. 78-17 of 6 January 1978, as amended, on information technology, files and freedoms (the “French Data Protection Act” or “LIL”), as well as any legislative or regulatory provision amending, supplementing or replacing them, together with decrees and orders adopted for their application, and any decision, recommendation, guideline, framework or other act adopted or likely to be adopted by the competent authorities in the field of personal data protection.
« Processing » : means any operation or set of operations performed on personal data, whatever the process used, such as collection, recording, organisation, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
« User » : means any person who accesses and browses the Website.
II. Data controller
This Privacy Policy applies to processing carried out or implemented by MALTEUROP SA, whose registered office is located at 2 rue Clément Ader - 51100 Reims, registered with the Reims Trade and Companies Register under number 377 514 229 (hereinafter “MALTEUROP”), acting as data controller.
III. Contact details of the data protection officer
MALTEUROP’s Data Protection Officer (hereinafter the “DPO”) is responsible for responding to Users’ requests concerning their Personal Data, including any request to exercise their rights.
Users may contact the DPO:
By post: MALTEUROP - Data Protection Officer - 2 rue Clément Ader - 51100 Reims
- Via the form available here
IV. Categories of personal data processed
MALTEUROP may collect and process all or part of the following Personal Data:
Identification data (last name, first name, email address);
Professional data (company, country, business sector, role);
Communication data (description of the contact request and content of the message);
Electronic identification data collected through cookies and other trackers (IP address, connection logs, technical metadata, browsing history).
V. Methods of personal data collection
Personal Data may be voluntarily provided to MALTEUROP by the User.
Personal Data may also be collected through cookies and other trackers on the Website.
Certain features or services require Personal Data to be collected in order to be provided, for example contact requests, exercising rights, information requests and similar services. The User acknowledges that, if such Personal Data is not provided, MALTEUROP may be unable to respond to the request or provide the requested services.
The Website includes features allowing free-text exchange areas, such as communication channels (messaging) or comment areas.
Users are therefore invited to provide only information that is appropriate, relevant and necessary in the circumstances. They must not post excessive or offensive comments, nor disclose Personal Data considered sensitive under Article 9 of the GDPR, such as racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health or sex-life data, offences, convictions or security measures.
MALTEUROP may also invite Users to stay informed whenever new content is published. A User who has provided their email address for this purpose may withdraw their consent freely at any time.
VI. Purposes of personal data processing
In accordance with the Applicable Regulations, MALTEUROP collects and processes Users’ Personal Data for specified purposes, on identified legal bases and for defined retention periods, as described in this Policy and, more specifically, in the table below.
| Purpose | Description of processing | Legal basis | Retention period |
|---|---|---|---|
| Responding to contact requests | Managing requests submitted through the “Become a client” form | Consent (see Article 6(1)(a) GDPR) | Three (03) years after the last contact from the contact person |
| Improving the operation of the Website and the User experience through cookies | Placing and reading functional cookies | Legitimate interest (see Article 6(1)(f) GDPR) | 13 months from the date the cookies are placed |
| Producing statistics (MATOMO) | Storing attribution information, including the referrer used to visit the Website | Legitimate interest (see Article 6(1)(f) GDPR) | 6 months from the date the cookies are placed |
| Displaying job offers available from the Careers section | Making job offers available and redirecting candidates to an external platform dedicated to managing applications | Legitimate interest (see Article 6(1)(f) GDPR) in displaying job offers and redirecting candidates to the dedicated external platform | Two (02) years after the last contact with the candidate |
| Consent collection cookie | Recording acceptance of the use of cookies | Compliance with a legal or regulatory obligation (see Article 6(1)(c) GDPR) | The User’s choice regarding cookies, whether consent or refusal, is retained for 100 days from the date consent is collected. |
| Managing and monitoring requests from Users to exercise their rights | Managing requests to exercise data subject rights | Compliance with a legal or regulatory obligation (see Article 6(1)(c) GDPR) | Personal Data relating to requests to exercise rights is retained for the calendar year of the request plus five years. Any identity documents provided are: (i) deleted immediately where MALTEUROP’s Data Protection Officer is not competent to handle the request, except where transmission is necessary for the request to be processed by the competent department, or where the request, validly addressed to the Data Protection Officer, did not require an identity document to be provided; (ii) deleted one year after receipt of the request in all other cases. |
| Securing the Website forms | Use of a reCAPTCHA-type tool to distinguish human use from automated use and to prevent fraudulent or abusive submissions | Legitimate interest (see Article 6(1)(f) GDPR): MALTEUROP’s legitimate interest in ensuring the security of the Website and its forms | For the period strictly necessary to secure the form, in accordance with the retention periods applicable to the Google reCAPTCHA tool. |
MALTEUROP may also use this Personal Data to comply with its legal or regulatory obligations, including the retention and archiving of invoices and contractual documents.
Certain Personal Data may also be retained as evidence, to protect against potential disputes, on the basis of MALTEUROP’s legitimate interest.
In all cases, and for each defined purpose, MALTEUROP will use all reasonable means available to ensure the security and confidentiality of the Personal Data entrusted to it, in compliance with the Applicable Regulations.
VII. Recipients of personal data
Depending on the case and the purposes described in the previous section, Personal Data collected by MALTEUROP is intended for authorised staff within its internal departments, including customer service, accounting, marketing, sales, media, legal, administrative, finance, within the limits of their duties and to the extent necessary for the purposes pursued.
MALTEUROP may also disclose Personal Data to service providers, including processors and, where applicable, sub-processors, where necessary for the management of the Website and the requested services.
In particular, Personal Data may be disclosed to the following third parties :
Technical service providers for the Website, such as technical solution providers, audience measurement service providers and hosting providers;
Potential business partners;
Third parties that may place cookies or other trackers on the User’s device, subject to obtaining consent where required;
Where applicable, the relevant courts, mediators, accountants, statutory auditors, lawyers, bailiffs, debt collection companies, police or gendarmerie authorities in the event of theft or a judicial request.
VIII. Personal data retention periods
Personal Data is retained for no longer than is strictly necessary for the purposes described in this Privacy Policy. At the end of the retention periods set out below, Personal Data is either deleted or anonymised.
As an exception, particularly in the event of a dispute or pre-litigation matter, all or part of the Personal Data may be retained for longer where necessary to resolve the dispute.
For further details on data retention periods, Users may refer to the dedicated section of this Policy.
IX. Additional information on social media
When browsing the Website, Users may click on links redirecting them to MALTEUROP’s social media pages.
Social media helps improve interaction among Website Users and contributes to promoting the Website through sharing.
When Users use these buttons, MALTEUROP may access personal information that Users have made public and accessible from their profiles on the relevant social media platforms.
To limit third-party access to Personal Data appearing on social media, Users may configure their profile settings and/or the visibility of their posts in the dedicated areas of the relevant social media platforms, in order to control their accessibility and audience.
X. Cookies and other trackers
The Website may use cookies and other trackers, in particular to ensure its proper operation, measure its audience, improve the User’s browsing experience and, where applicable, offer tailored content.
Some cookies are strictly necessary for the operation of the Website and do not require the User’s prior consent. Other cookies and trackers are placed on the User’s device only after consent has been obtained, where required by the Applicable Regulations.
For more information, please refer to the Cookie Policy.
XI. Additional information on tracking pixels
As part of certain electronic communications sent to Users, MALTEUROP may use tracking pixels, which are small invisible images embedded in emails.
When activated upon opening an email, these pixels may collect certain technical information relating to receipt or consultation of the message, such as whether the email was opened, the date and time of opening, and certain technical data relating to the device or email software used.
Depending on the circumstances, these pixels may be used to ensure the proper deliverability of electronic communications, measure their audience or tailor communications sent to Users.
Where the use of these pixels requires the User’s prior consent under the Applicable Regulations, such consent is obtained before they are activated.
Users may withdraw their consent at any time in accordance with the procedures brought to their attention in the relevant communications or in this Policy.
Where these pixels are strictly necessary to provide a service expressly requested by the User or for the transmission of the communication by technical means, they may be used without prior consent, within the limits provided for by the Applicable Regulations.
XII. Protection of minors
The Website and related services are not intended for minors. MALTEUROP does not knowingly seek to collect Personal Data from minors under the age of fifteen (15).
The processing of Personal Data relating to a child under the age of fifteen (15) is lawful only where consent has been given by the holder of parental responsibility.
Any parent or guardian who believes that their child has provided Personal Data to MALTEUROP without their consent should contact MALTEUROP via the rights request form or by post at 2 rue Clément Ader - 51100 Reims.
XIII. Job offers and application management
The “Careers” section of the Website allows Users to access, through a redirect link, an external recruitment platform dedicated to viewing job offers and submitting applications.
When Users use this platform, the Personal Data they provide, including their identity, contact details, curriculum vitae, cover letter and any other information they choose to submit, is processed solely for the purposes of managing applications, assessing profiles and conducting the recruitment process. This data is processed in accordance with the Applicable Regulations.
Further information on processing related to the recruitment process is made available to Users directly on the dedicated external platform. Users may exercise their rights in relation to their Personal Data in accordance with the procedures described in the dedicated section of this Policy.
XIV. GDPR data subjects' rights
In accordance with the Applicable Regulations, each User has the following rights:
- Right to withdraw consent at any time (Article 7 GDPR);
- Right of access (Article 15 GDPR);
- Right to rectification (Article 16 GDPR);
- Right to erasure of Personal Data where it is no longer necessary for the purposes for which it was collected or processed (Article 17 GDPR);
- Right to restriction of Processing (Article 18 GDPR);
- Right to portability of the Personal Data provided (Article 20 GDPR);
- Right to object to Processing (Article 21 GDPR);
- Right to define instructions regarding the fate of Personal Data after death and to designate, or not designate, a person responsible for carrying out those instructions (Article 85 of the French Data Protection Act). In the event of death and in the absence of instructions from the User, MALTEUROP undertakes to delete the Personal Data, except where it is necessary to retain it to comply with legal obligations or for evidentiary purposes.
To exercise their rights or for any question relating to the Processing of their Personal Data, Users may contact MALTEUROP’s Data Protection Officer:
- By post: MALTEUROP - Data Protection Officer - 2 rue Clément Ader - 51100 Reims
- Via the form available here
Finally, any User may also lodge a complaint with the supervisory authorities, including the CNIL.
XV. Transfert of personal data outside the european union
As a matter of principle, MALTEUROP processes and retains Personal Data exclusively within the European Union, or in a territory recognized by the European Commission as providing an adequate level of protection equivalent to that required by the Applicable Regulations.
Where Personal Data is transferred to a country that is not recognized as providing an adequate level of protection, MALTEUROP undertakes to implement all appropriate safeguards in accordance with the Applicable Regulations
In particular, MALTEUROP may rely on the standard contractual clauses adopted by the European Commission on 4 June 2021, intended to govern transfers of personal data outside the European Union.
Where applicable, Users may request a copy of, or access to, the safeguards implemented.
XVI. Security measures for the protection of personal data
MALTEUROP undertakes to implement all technical and organizational measures necessary to ensure the security of Processing and the confidentiality of Personal Data, in particular to prevent such data from being distorted, damaged or accessed by unauthorized third parties.
In this respect, MALTEUROP implements the necessary means to secure browsing on the Website, as well as any Processing carried out, through physical, electronic and administrative procedures.
XVII. Changes to the privacy policy
This Privacy Policy may be amended, in particular to reflect changes in the Applicable Regulations or changes to the Website’s features.
The updated version will be available directly on the Website.