Nuclear Quality Standard Association Personal Data Protection Policy for users

(Last update: August 20, 2018)

This privacy policy is governed by the Terms of Use accessible here.

Nuclear Quality Standard Association (hereinafter NQSA, we, us, our), recognizes the importance of effective and meaningful Personal Data protections when it collects and uses the Personal Data of its Users (as defined below).  

We place great value on integrity and we are committed to building strong and lasting relationships with you based on trust and mutual benefit. Privacy protection is essential to us. This Personal Data Protection Policy expresses the strong commitment of NQSA to respect and protect Personal Data of every individual and to ensure international compliance with data protection laws.  

This Personal Data Protection Policy covers all Personal Data collected and used by NQSA. 

Personal data means any information or pieces of information that could identify you either directly or indirectly. This means that Personal Data includes things like email/home addresses, usernames, user generated content, financial information, IP address, etc.  

User(s) means any prospects, customers, service providers, partners, subcontractors, and more generally anyone who is in contact with us (hereinafter “you” or “your”).  

Processing means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. 

1. What are the principles for processing Personal Data?  

NQSA that collects or uses your Personal Data for its business needs acts as the “data controller”. According to data protection laws, it must determine the purposes and the means of the processing of your Personal Data. This means we have responsibility for the Personal Data that you share with us.  

We process your Personal Data in compliance with the applicable legal requirements and, in particular, the European General Data Protection Regulation 2016/679 (“GDPR”) dated on April 27, 2016 applicable as of May 25th, 2018 in the European Union.  

In particular, we undertake to:  

  • Obtain and process your Personal Data fairly and lawfully;
  • Obtain your Personal data for specified, explicit and legitimate purposes, and not process it subsequently in a manner that is incompatible with those purposes;
  • Process only Personal Data that is adequate, relevant and not excessive in relation to the purposes for which it is obtained and its further processing;
  • Store your Personal Data for a period no longer than is necessary for the purposes for which it is obtained and processed and in accordance with applicable legislation and statute of limitations.   

2. What Personal Data do we collect, why and how do we use it? 

In order for you to have the clearest view on how we use your Personal Data, we have imagined a table where you can find information by searching with the context/purposes of the data collection.  

  • Column 1 - In what scenario is your data collected? This column explains what activity or scenario you are involved in when we use or collect your Personal Data. 
  • Column 2 - What types of Personal Data may we hold about you? This column explains what types of Personal Data we collect.
  • Column 3 - How and why we use it? This column explains what we do with your Personal Data, and the purposes for collecting it.
  • Column 4 - What is the legal basis for using your Personal Data? This column explains the reason why we may use your Personal Data.

When we collect data through forms including electronic forms, we will indicate the mandatory fields via asterisks. Failure to provide the data marked with an asterisk could prevent you from accessing to a service.  

As a User of our services and our websites, there are many ways that you might share your Personal Data with us, and that we might collect it.  

We might collect or receive Personal Data from you via our websites, forms, services, or otherwise. Sometimes you will provide your Personal Data to us directly (e.g. when you contact us via our websites) , sometimes we collect it indirectly (e.g. using cookies to understand how you use our websites).

In which context is your Personal Data collected?

What types of Personal Data may we hold about you?

How and why we may use it?

What is our legal basis for processing your Personal Data?

Downloading NQS-100

  • Name and Surname
  • Job Title
  • Company
  • Email address
  • Address
  • City
  • Postcode
  • Phone number

To

  • Provide you with the service requested
  • Run statistics
  • Inform major update or news related to NQSA

Performance of the association
To allow NQSA to record the applicant in order to know who is interested by our quality standard NSQ100 and the NQSA association

Conclusion of a specific agreement
Information collected when you provide us with a product or service

Name and surname Email address Postal address Function Company name Phone number Billing data

To Manage contracts, orders, deliveries, invoices and accountings

Performance of a contract
To manage the contractual relationship with you

Online browsing
Information collected by cookies or similar technologies (“Cookies”) as part of your browsing on NQSA website.

Cookies are small text files stored on your device (computer, tablet or mobile) when you are on the Internet.

Data related to your use of our website

  • Where you came from
  • Pages you looked at
  • Duration of your visit

Technical information

  • IP address
  • browser information
  • device information
  • To tailor our services for you
  • to display our website in a tailored way
  • To allow proper functioning of our website:
  • proper display of the content,
  • interface personalisation such as language
  • parameters attached to your device including your screen resolution
  • improvement of our website for example, by testing new ideas.
  • To ensure the website is secure and safe and protect you against fraud or misuse of our websites or services
  • To run statistics:
  • To improve our offers
  • To know how you discovered our website

Legitimate interest
To ensure we are providing you with websites and communications that are working properly, are safe and secure and are continually improving, to develop our business

Consent
For cookies that are not necessary for the functioning of our website

Enquirie
Information collected when you ask questions relating to our services

  • Name and surname
  • Email address
  • Function
  • Company name
  • Phone number
  • Other information you have shared with us regarding your enquiry
  • To answer your enquiries Where needed,
  • to connect you with the relevant services

Consent
To process your enquiry Legitimate interest: To help us better understand our Users’ needs and expectations and therefore improve our services

3. Notification and Consent

In many jurisdictions, Personal Data protection laws do not generally require we obtain your consent for the collection, use or disclosure of your Personal Data for the purposes listed in the chart above. However, where required by law, we will endeavor to obtain your consent.  

When do we disclose your Personal Data?  

Some of your Personal Data may be accessed:  

  • Within NQSA, and by any member of the NQSA;
    This will only be done on a need-to-know basis and where necessary to provide you with the services / information you have asked for, or in the context of a contract between you and NQSA, or with your consent (in particular for information purpose). 
  • By trusted service providers acting as subcontractors (i.e. data processors), which will carry out certain services necessary for the purposes indicated above on our behalf (hosting services, database maintenance, etc.). 
    We only provide them with the information they need to perform such services, and we require that they do not use your Personal Data for any other purpose. These service providers will only act upon NQSA’ instructions and will be contractually bound to ensure a level of security and confidentiality for your Personal Data that is the same as the level NQSA is bound to ensure and to comply with applicable personal data protection laws and regulations.  

Besides, NQSA may share your Personal Data with third parties:  

  • To protect the rights, property or safety of NQSA, our Users, our employees or others; or
  • To comply with a legal obligation or to respond to legal proceedings of any nature, Court orders, any legal action or implementing enforcement measures that are required by the competent authorities; or
  • For other purposes required by applicable legislation or with your prior consent. 

5. Where do we store your Personal Data?  

In France.

Since NQSA has members out of the European Economic Area (“EEA”) , the data that we collect from you may be transferred from a country located within the European Economic Area (“EEA”) to a country located outside of the EEA. If this was the case, where NQSA transfers Personal Data outside of the EEA, this will always be done in a secure and lawful way:  

  • Either by transferring Personal Data to a data recipient in the USA that is Privacy Shield certified, such mechanism being considered as ensuring an adequate level of protection for your data by an adequacy decision of the European Commission; 
  • Or by executing the European Standard Contractual Clauses (signed between NQSA and its members or between NQSA and its service providers) which have been approved by the European Commission as providing an adequate level of protection for your Personal Data.  

6. How long is your Personal Data retained?  

We will keep your Personal Data only as long as necessary for the purposes of the processing for which it was collected. We may, however, keep your data for a longer period of time in application of specific legal or regulatory provisions and/or to comply with applicable statute of limitations periods. In case of longer data retention for other reasons, we will inform you of such reasons and of the applicable retention period upon collecting your Personal Data. To determine the data retention period of your Personal Data, we use in particular the following criteria:  

  • Where you provide your data to download one of our files or that you contact us for an enquiry, we keep your personal data for as long as the NQSA association is existing;
  • Where you are in a contractual relationship with us, we keep your Personal Data for the duration of our contractual relationship and then in accordance with the statute of limitations;
  • Where cookies are placed on your computer, we keep them for as long as necessary to achieve their purposes) and for a period defined in accordance with local regulations and guidance.  

7. How is your Personal Data protected?  

We make our best efforts to protect the confidentiality and security of your personal information. Only employees who need to know the personal information to perform a specific work related to the services provided by NQSA, to NQSA or the Website are granted access to your information. They are kept up-to-date on our security and privacy practices.  

We will inform you if we are aware of any unauthorized access to your personal information. However, no data transmission over the internet can be guaranteed to be fully secure. Therefore, despite our efforts to protect your personal information, NQSA cannot ensure or warrant the security of any information you transmit to the Website.   

8. Your rights 

In accordance with applicable Personal Data protection laws and regulations, you benefit from a certain number of rights in respect of your Personal Data, namely:  

  • A right of access and information: you have the right to be informed in a concise, transparent, intelligible and easily accessible form of the way in which your Personal Data is processed. You also have the right to obtain (i) confirmation as to whether or not Personal Data concerning you are being processed, and, where that is the case (ii) to access such Personal Data and obtain a copy thereof. 
  • A right to rectification: you have the right to obtain the rectification of inaccurate your Personal Data. You also have the right to have incomplete Personal Data completed, including by means of supplying a supplementary statement. 
  • A right to erasure (‘right to be forgotten’): in some cases, you have the right to obtain the erasure of your Personal Data. However, this is not an absolute right and NQSA may have legal or legitimate grounds for keeping such Personal Data. 
  • A right to restriction of processing: in some cases, you have the right to obtain restriction of the processing of your Personal Data. 
  • A right to data portability: you have the right to receive your Personal Data which you have provided to NQSA, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from NQSA. This right only applies when the processing of your Personal Data is based on your consent or on a contract and such processing is carried out by automated means. 
  • A right to object to processing: you have the right to object at any time to the processing of your Personal Data. When you exercise your right to object, on grounds relating to your particular situation, to a processing based on the legitimate interest of NQSA, NQSA may, however, invoke compelling legitimate grounds to continue the processing. 
  • The right to revoke your consent, at any time, to processing that is based on your consent: you may revoke your consent to the processing of your Personal Data when such processing is based on your consent. The revoking of consent does not affect the lawfulness of the processing carried out on the basis of such consent prior to the revocation of consent. 
  • The right to file a complaint with the supervisory authority: you have the right to contact your Data Protection Authority to complain about NQSA’ Personal Data protection practices. 
  • The right to give instructions concerning the use of your data after your death: you have the right to give NQSA instructions concerning the use of your Personal Data after your death. 
  • The right to obtain a copy of the standard contractual clauses signed by NQSA when your Personal Data is transferred outside of the EEA. 

For further information on your rights and to exercise them, contact the point of contact indicated in section 9 of this Personal Data Protection Policy. 
Note that we may require proof of your identity and full details of your request, before we process your request above.  

9. Contact  

If you have any questions or concerns about how we treat and use your Personal Data, or would like to exercise any of your rights above, please contact us at contact(at)nqsa(dot)org

 

Lorem ipsum dolor sit amet consectetuer vitae leo Vestibulum non convallis. Maecenas et accumsan malesuada metus laoreet eget Curabitur Pellentesque cursus ornare. Pede est senectus enim Vestibulum rhoncus Nam vestibulum fermentum.