We only collect the data necessary for the purposes described below, in strict compliance with the principle of data minimisation.

• 2.1 Contact form

When you use our contact form, we collect the data you voluntarily provide to us (name, first name, email address, company, subject and content of your message, and any other field you complete).
●  Purpose: to respond to your request for information or contact.
● Legal basis: 45-8 ENERGY’s legitimate interest in handling requests addressed to it (Article 6(1)(f) GDPR) and, where applicable, the performance of pre-contractual measures taken at your request (Article 6(1)(b) GDPR).
● Retention period: this data is kept for as long as necessary to handle your request, and then for 3 years from the last contact for evidentiary purposes, unless you request earlier deletion.

• 2.2 Job applications and humain resources management

When you apply for a job, internship or work-study position via the Site, or send us an unsolicited application, we collect the data contained in your CV, cover letter and any document or information provided on this occasion (identity, contact details, education, professional experience, etc.).
● Purpose: management of the recruitment process (screening applications, organising interviews, follow-up) and, in the case of unsolicited applications, building a pool of candidates.
● Legal basis: pre-contractual measures taken at your request (Article 6(1)(b) GDPR) and 45-8 ENERGY’s legitimate interest in managing its recruitment (Article 6(1)(f) GDPR).
● Recipients: exclusively the Human Resources department and the individuals involved in the recruitment process within 45-8 GROUP SAS.
● Retention period: if your application is not successful, your data is kept for a maximum of 2 years from the last contact with you, unless you expressly agree to a longer retention period (candidate pool), after which it is deleted or anonymised; if you are recruited, your data is included in your personnel file and retained in accordance with applicable employment law.
You may request the deletion of your application at any time by contacting us using the details provided in Section 6.

• 2.3 Browsing data and cookies

When you browse the Site, certain data is automatically collected via cookies and trackers, in particular for audience measurement purposes (Google Analytics), subject to your consent (see Section 5, “Cookies and Trackers”).
● Data concerned: (truncated) IP address, browser and device type, pages viewed, time spent, traffic source, approximate geographic location (city/country).
● Purpose: statistical analysis of Site traffic and usage in order to improve its content and features.
● Legal basis: your consent, collected via the cookie management banner (Article 6(1)(a) GDPR).
● Retention period: statistical data is kept for a maximum of 26 months; consent is requested again at the end of this period (maximum period recommended by the CNIL, the French data protection authority).

We do not collect any other personal data via the Site beyond that described in Sections 2.1 to 2.3.