ENGIE.com Personal Data Protection Charter

Introduction

ENGIE SA, whose registered office is located at Campus ENGIE – 67 Rue Jules FERRY – 92250 La Garenne-Colombes, France, is required, as part of its activities, to process personal data (that of its employees, customers, subcontractors, suppliers, partners, and users of its website).

ENGIE attaches particular importance to personal data protection and is committed to ensuring their confidentiality and security, in compliance with:

  • The General Data Protection Regulation (GDPR – EU Regulation 2016/679),
  • The Data Protection Act (Loi n° 78-17 du 6 janvier 1978 modified) (Loi Informatique et Libertés),
  • Any other applicable regulation regarding personal data protection.

This Personal Data Protection Charter specifies the commitments of ENGIE SA to guarantee transparent and responsible processing of the data collected on engie.com.

Our Commitments Regarding Data Protection

ENGIE SA commits to respecting the following fundamental principles:

  • Transparency and information: You are informed about the use of your personal data and your rights.
  • Determined and legitimate purpose: Data is collected for specific purposes and is not subsequently processed in a manner incompatible with these purposes.
  • Data minimization: Only strictly necessary data is collected and processed.
  • Limited retention period: Your data is retained only for the time necessary for the defined processing operations.
  • Security and confidentiality: ENGIE implements appropriate technical and organizational measures to protect your data.
  • Respect for your rights: You can exercise your rights of access, rectification, erasure, and objection at any time.

Categories of Data Collected and Purposes

When you browse engie.com, we are likely to collect the following data:

  • Connection data: IP address, event logs, browser type, session duration.
  • Browsing data: pages visited, interactions with content, display preferences.
  • Data collected via forms (if applicable): last name, first name, email address, company, message.

This data is collected for the following purposes:

  • Ensure the proper functioning of the site and improve the user experience.
  • Analyze content performance and optimize our services.
  • Manage your cookie and privacy preferences.

Details of the purposes related to cookies are available on our Cookie Management page.

Legal Basis for Processing

The processing of your personal data is based on:

  • The legitimate interest of ENGIE SA to ensure the proper functioning and security of the site.
  • Your consent for non-essential cookies and trackers (statistics, marketing). You can manage your preferences via our Cookie Management Center.

Data Retention Period

Your personal data is retained only for the period necessary for the purpose of the processing.

Specific retention periods are specified in our cookie management policy.

Recipients of the Data

The collected data may be accessible to ENGIE SA’s technical service providers responsible for the operation and maintenance of the site.

In the event of transmission to other third parties (including internal services of the ENGIE Group), this communication will be carried out in compliance with the laws in force and only if strictly necessary.

Security and Confidentiality

ENGIE SA implements adapted security measures to guarantee the confidentiality and integrity of your personal data:

  • Protection against unauthorized access and data leaks.
  • Encryption of sensitive data when necessary.
  • Access control and supervision of processing operations.

Your Rights and How to Exercise Them

In accordance with the GDPR and the Data Protection Act (Loi Informatique et Libertés), you have the following rights over your personal data:

  • Right of access: obtain a copy of your personal data.
  • Right to rectification: correct inaccurate or incomplete information.
  • Right to erasure (Right to be forgotten): request the deletion of your data under certain conditions.
  • Right to object: refuse the processing of your data for legitimate reasons.
  • Right to restriction of processing: temporarily restrict the processing of your data.
  • Right to data portability: retrieve your data in a structured format.

You can exercise these rights by contacting ENGIE via this form: https://engiegbs.service-now.com/gdpr_portal?id=gdpr_home.

If you believe your rights are not being respected, you have the possibility of filing a complaint with the CNIL (www.cnil.fr).

Contact for the Data Protection Officer (DPO)

ENGIE SA has designated a Data Protection Officer (DPO) with the CNIL. You can contact them at any time for any question relating to the protection of your data:

Cookie Management

To find out more about cookie management and change your preferences, consult our dedicated page: Cookie Management.