Betterwork is a brand of the Ergosanté group.

Ergosanté specializes in the design and distribution of tailor-made ergonomic solutions to help maintain the employment of disabled workers and improve working conditions.

Since 2018, Ergosanté has been engaged in a process of bringing its systems and practices into compliance, in accordance with the European Data Protection Regulation - No. 2016/679 (GDPR).

The purpose of this commitment is to describe the operating principles adopted by Ergosanté in order to comply with the regulations and protect the privacy of individuals whose data is processed. The Ergosanté company is gradually putting in place all the systems and procedures necessary for compliance according to these principles.

The commitment also specifies the general framework for the processing of personal data carried out by Ergosanté and, in this sense, aims to provide the persons concerned with the necessary information.

1. Data processed by Ergosanté

Ergosanté works in close collaboration with its users, customers, suppliers and partners, and therefore collects personal information through its activities, some of which makes it possible to identify individuals.

In accordance with current legislation, Ergosanté has adopted the principle of minimization in collection and only collects the data strictly necessary for the objective pursued and explained to the natural persons concerned, leaving them fully capable of exercising their rights. .

 

1.1.Trade relations

The data processed by Ergosanté for its customers, suppliers and partners are:

-        Identification data: last name, first name

-        Contact data: address, email, telephone

 

1.2.Users of Ergosanté equipment

The data processed by Ergosanté for users of its solutions are:

-        Identification data: last name, first name

-        Contact data: email, telephone

-        Morphological data (size, weight and other information useful for manufacturing equipment)

2. Information processing

 

2.1.Legal bases

The treatments carried out by Ergosanté are based on the following legal bases:

  • The consent of the person concerned (contact or quote requests in particular)
  • Contract execution (manufacture or purchase of equipment in particular)
  • The legitimate interest of the controller
  • A legal obligation to carry out the processing

 

2.2.Treatments

The personal data mentioned above will be used by Ergosanté in the context of its activities. They are only used within the strict limits defined by the legislation in force.

Ergosanté may use an individual's personal data in particular for the following purposes:

  • In order to record it on its information systems and manage the delivery and invoicing of the solutions provided by Ergosanté,
  • In order to manufacture equipment that meets the needs of the user (morphological data in particular),
  • For the purpose of fulfilling its legal obligations,
  • For the purposes of monitoring, critical review and improvement of its offer,
  • In order to keep files for internal administrative use (complaints, loyalty, etc.),
  • For prospecting purposes (by email or through social networks)
  • For purposes of exchanges with suppliers and payment of invoices.

3. Collection of information

3.1. Direct collection

Ergosanté collects the contact details of its contacts (users, customers, suppliers and partners):

-        By direct contact (face-to-face meeting, telephone conversation)

-        By email contact

-        Via its institutional website:

o   Contact form

-        Via the online store:

o   Contact form

o   Quote request form

o   Customer account creation form

When possible, telephone contact is confirmed by sending an email, allowing the person concerned to keep a written record of the conversation and to be able to exercise their rights at any time.

3.2. Cookies

The term “cookies” covers all trackers placed or read when consulting a website.
Cookies, based on a file that can be stored on the user's computer while browsing, are intended in particular to simplify navigation on sites and to measure their effectiveness.

The Ergosanté online sales site uses two categories of cookies:

1)     Cookies strictly necessary for the provision of the service requested by the user. Without them, the proper functioning of the site would be impaired. For example :

o   Visitor authentication

o   Session identifiers: it allows each user to remain identified throughout their order process, once they have created their customer account. This cookie has a lifespan of 30 days

o   Merchant basket: it is recorded each time an item is added to the basket so that the latter is not emptied when the visitor changes pages. This cookie has a lifespan of 3 days when the user is not authenticated and 30 days when he is. This cookie is deleted when disconnecting or validating customer payment.

o   Customization of the user interface (choice of language or presentation)

o   “Déjà vu” cookies: allows each user to see the most recently viewed articles. Its lifetime corresponds to the session time.

 

2)     Audience analysis cookies, which allow Ergosanté to improve its content and online services through various measurements of Internet users' navigation. Issued by Google Analytics and site analyzer, the information collected allows Ergosanté to measure the number of visits, the path and the interests of each visitor anonymously. This data allows us to improve our content and the user experience.

Certain cookies are placed by Ergosanté directly when browsing one of its sites. Other cookies are placed by companies outside Ergosanté in order to collect users' browsing data when they browse different sites. For more information, users are advised to consult the privacy policies of these companies.

In accordance with the recommendations of the CNIL, consent is collected by the appearance of a banner visible on the website, which contains the following information:

  • the purposes of the cookies used ;
  • the possibility of objecting to these cookies and changing settings by clicking on a “learn more and configure cookies” link
  • due to the fact that continuing to browse constitutes agreement to the placement of cookies on your terminal.

Cookies can be deactivated at any time by configuring the browser. Any settings made on the web browser, concerning the acceptance or refusal of cookies, may modify navigation on the Internet and on our site, as well as the conditions of access to certain services requiring the use of these same cookies.

 

4. How and for how long is the data stored ?

Processing actions are carried out on the data contained in Ergosanté's files and databases, by applying strict control rules, in accordance with the technological state of the art and the recommendations of the competent control authority. .

4.1. Security of personal data

Ergosanté takes all necessary precautions to preserve the security and confidentiality of personal data and in particular to prevent them from being distorted, damaged or from unauthorized third parties having access to them.

Ergosanté is gradually extending the scope of its security measures, and developing specific procedures to take the regulation into account.

4.2. Data retention period and archiving

The retention period depends on the activity concerned, the nature of the contact (customer or prospect) and industry practices.

-      Ergosanté has set the retention period for personal data at five years by default.

-      Some data is kept for a shorter retention period:

o   Cookies expire thirteen months after their last update.

o   Prospect data is deleted after a period of 3 years without response to any request.

-      Ergosanté keeps certain mandatory documents (invoices, etc.) according to the legal retention period.

-       The duration is sometimes linked to the relevance or necessity of its processing: customer data is kept for the duration of the commercial relationship or data present in directories is kept for the duration of the mandates of the persons concerned.

Old data is archived, strict access control is then activated. Data that is no longer needed is destroyed.

 

5. Who has access to the personal data collected ?

5.1. At Ergosanté

The personal data collected is accessible to the various Ergosanté services depending on the necessary processing, in particular:

-        Sales service for processing orders, deliveries

-        Manufacturing department for the design and manufacture of suitable equipment

-        Accounting service for invoice management

-        Sales service and Webmaster for the online store

5.2. Outside Ergosanté

Ergosanté may transfer the personal data it holds to various third parties, such as:

  • contractors, contractors and suppliers to perform services on their behalf (e.g. technical services, equipment manufacturing),
  • other companies, financial organizations or organizations/services responsible for enforcing laws for the purposes of preventing or detecting fraud, when this disclosure is necessary to preserve the rights of Ergosanté,
  • in cases where the law provides for it or upon formal request from an authority (in particular in the context of legal proceedings), public, parapublic or private organizations as part of a public service mission.

Only data useful for the execution of the contract is provided, and no sensitive data is shared outside Ergosanté.

5.3. Working arrangements with third parties

In the event that personal data is transmitted to a third party for any reason (for example: a subcontracting service), Ergosanté applies the conditions defined by the legislation in force, in particular the information of the persons concerned of this transfer .

Ergosanté will carry out a campaign to monitor the compliance of contracts and the conditions of execution of processing relating to personal data with its subcontractors within the meaning of the GDPR.

The data is under no circumstances transferred to a third party for commercial purposes.

 

6. Obtaining personal data from third parties

Ergosanté may receive personal data such as name, first name, email address, telephone number from third parties (employers and partners in particular), in order to execute an equipment supply contract.

 

Morphological data is collected exclusively from the data subject if they agree to provide it. This data is used to ensure adequate manufacturing of the requested equipment.

 

The data is added to the file when quotes are established and used only in the context of carrying out the business. They are only accessible to Ergosanté sales and manufacturing teams, as well as possible subcontractors.

 

7. Is data transferred outside the EU ?

Ergosanté does not transfer any personal data outside the European Union.

 

8. Who should you contact to exercise your rights ?

Ergosanté has adapted its organization in order to meet the requirements of the European Data Protection Regulation and to provide any person with information on the personal data held concerning them, as well as on the processing carried out on this data.

Any request related to the exercise of rights (access, opposition, limitation, rectification, portability, deletion) must be sent to the address “contact@ergosante.fr”. This request must include as much detail as possible so that it can be processed upon receipt within a maximum of 30 days, in accordance with the requirements of the Regulation.

In case of doubt, proof of identity may be requested in order to process the request.

Any person has the opportunity to contact directly the Autorité de contrôle de son pays (for France, CNIL: www.cnil.fr).

9. Where are our data hosted ?


Website serversBetterwork are exclusively hosted at OVH, in France, in data centers located in the North of France.

These servers host our database necessary for the proper functioning of the site. Customer accounts are stored in this database .

In order to have access to your order history, this data is only deleted if you request it via your dedicated customer area or by email.

10. Does Ergosante resell my personal data ?


No ! All data collected remains with us and will never be given, rented or sold to a third party company.

11. Are passwords secure ?


Passwords are stored "encrypted” and impossible to decipher.

12. Concerning bank card numbers ?


For payments by bank card, we work with a French service provider named PayPlug, guarantor of data security.

At no time do we have access to our customers' bank card numbers.
Our service provider has numerous approvals justifying the security of their IT system.

More information : https://www.payplug.com/fr/politique-de-confidentialite

We also work with the company Paypal but only customers with an account can place an order, their data is therefore secured by Paypal directly.

13. What personal data is collected and what is it used for ?


During the order :

When a customer creates a customer account on our site, we record in our database all the necessary information in order to be able to process the order: email, first and last name, company, postal address and telephone number in order to be able to prepare and deliver the package.

This order data is transmitted to the various service providers so that the order arrives at the customer's premises: our manufacturers and logisticians prepare the packages and the carriers drop them off at the customer's premises.

They have absolutely no right to use the data for any purpose other than to process your order and must delete this data from their computer system after processing. These providers store data in European data centers. However, if the customer chooses to have it delivered outside of Europe, data such as the postal address will necessarily be transmitted to the logistics services of the carrier who will deliver to this country.


Statistics :


In order to constantly improve our service, we use systems and services operated by third-party providers allowing us to monitor our activity. As such, we provide these systems with tracking of our customer base, and their consultation history on our site as well as information concerning the products viewed and ordered. Most of our systems are hosted in France as site analyzer, and others are domiciled in the United States such as google analytics.


14. Do you want to modify or delete your personal data ?


Most of the data can be modified directly by you from your customer area on our website. You can also download all of this data or delete it.
If you are unable to access this information, we invite you to write us an email to contact@ergosanteweb.fr specifying your request.