What personal data do we collect ? what special categories of personal data does C-RISK SAS process about you ? How do we use your personal data ? When do we share your personal data ? How do we keep your personal data secure ? For how long will your personal data be retained ? What are your rights in relation to your personal data ? Updates to the privacy notice
C-Risk SAS respects your privacy and ensures that all personal data is processed in accordance with the best confidentiality practices and the applicable laws on data privacy, notably the European Union General Data Protection Regulation n°2016/679 (hereafter “GDPR”). This privacy policy applies to the processing carried out on C-Risk.com.
In this context, Personal Data means any information relating to an identified or identifiable natural person (a Data Subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
For the purposes of this notice, as a Data Subject and user of C-Risk’s website, you will be hereinafter referred to as ‘’You’’/“Your”.
C-RISK SA, “société anonyme par actions simplifiée” registered in the Nanterre Trade and Companies Register under the number 823 709 050, acts as a Data Controller in the processing of Your personal data (i.e. it determines the purposes and means of the processing of said data). It will hereafter be referred to as ‘’We’’/ “Our”.
We collect/process the following Personal data about You:
Identification data: such as name, surname, company, phone number, e-mail address.
Professional data, such as profession, professional email, company name.
We process the Personal Data above for the following purposes:
Manage your candidacy to a C-RISK job posting
provide an answer to any request for information you may have sent to C-RISK through online forms;
allow you to receive C-RISK newsletters if you sign up to do so;
allow you to ask questions to members of C-RISK’s management team during live broadcasts of major Group events.
In the context of your utilization of our website, we do not collect any special categories of Personal Data.
Your personal data are collected and used for the aforementioned purposes on the basis of Your consent.
Please note that You can withdraw Your consent at any time. However, if You decide to do so, You will no longer be able to receive newsletters or communicate with C-RISK via online forms. This withdrawal, however, does not affect the lawfulness of any processing carried out prior to Your withdrawal.
We communicate Your Personal Data only to identified and duly authorized recipients. These include:
Branches of C-Risk SAS and fcnpartners SAS
French authorities (administration, regulators, jurisdictions) for the execution of legal obligations;
External partners working with C-RISK to provide service engagements for which you may be a suitable candidate.
Please be advised that Your Personal Data can be transferred outside of the European Union.
In that case, We provide safeguards to ensure the security and the confidentiality of Your Personal Data, by framing the transfer through the Standard Contractual Clauses adopted by the European Commission .
We use appropriate technical and organizational measures designed to protect the Personal Data collect about You. These measures are designed to provide a level of security appropriate to the risk of processing Your personal information in line with C-RISK standards.
The collected Data needed will be retained according to the following table:
Purpose of Personal Data Retention period Personal Data processed for newsletters until user unsubscribes Personal Data sent through online forms and included in your resumeThree yearsPersonal Data processed for questions during live broadcasts1 year
In accordance with the French "Informatique et Libertés" law (the law on data protection and civil liberties) n° 78-17 of 6 January 1978 modified and the GDPR, You have the right to:
access Your Personal Data and obtain a copy thereof;
rectify Your Personal Data;
request erasure of Your Personal Data, except if the processing is based upon the respect of a legal obligation of the data controller;
ask the restriction of processing of Your Personal Data in certain circumstances; and
the right to request Your Personal Data portability, where applicable.
Please be aware that if you are a French Data Subject, as per national law, you have the right to decide how your data will be used after Your death.
Considering the legal basis for the Processing is your consent, please be reminded that You may withdraw said consent at any time. If You decide to do so, You will no longer be able to receive newsletters or communicate with C-RISK via online forms. This withdrawal, however, does not affect the lawfulness of any processing carried out prior to it.
You can exercise Your rights by contacting Our Data Privacy Officer at www.c-risk.com/gdpr. As part of Our response to Your request, You may be asked to provide further information to confirm Your identity and/or to facilitate locating the Personal Data associated to your request.
Finally, You have the right to raise any concerns about how Your personal data is being processed with a competent supervisory authority, namely the authority of the Member State of Your habitual residence or place of work or place where you think an alleged infringement to your rights occurred.
In France, the data protection authority is the Commission nationale de l'informatique et des libertés, or “CNIL”
- 3 place de Fontenoy - TSA 80715 – 75334 Paris Cedex 07
We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform You, consistent with the significance of the changes We make. We will obtain Your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.
You can check when this Privacy Policy was last updated by checking the “last updated” date displayed at the bottom of this Privacy Policy.
Date of the last update : 03 September 2020
C-Risk is a recognized expert in Cyber Risk Quantification using the FAIR™ methodology. We provide CRQ solutions, advisory services and training.
