\n| \n Company name<\/strong><\/p>\n<\/td>\n| \n SQORUS SAS<\/p>\n<\/td>\n<\/tr>\n | \n| \n Legal form<\/strong><\/p>\n<\/td>\n| \n Simplified joint-stock company with capital of 1,088,400 euros<\/p>\n<\/td>\n<\/tr>\n | \n| \n Head office address<\/strong><\/p>\n<\/td>\n| \n 25 rue de Maubeuge, 75009 Paris, France<\/p>\n<\/td>\n<\/tr>\n | \n| \n SIREN<\/strong><\/p>\n<\/td>\n| \n 353 663 065<\/p>\n<\/td>\n<\/tr>\n | \n| \n Represented by<\/strong><\/p>\n<\/td>\n| \n Amadou NGOM, Chairman<\/p>\n<\/td>\n<\/tr>\n | \n| \n Website<\/strong><\/p>\n<\/td>\n| \n www.sqorus.com<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n If the contractual relationship is carried out by SQORUS C\u00f4te d’Ivoire or SQORUS Maroc, the local legal entity acts as data controller (see addendums A and B at the end of this notice).<\/p>\n <\/p>\n 1.2. Contact details of the Data Protection Officer<\/h3>\nThe SQORUS Group has appointed a Data Protection Officer (DPO) to act as a single point of contact for any questions or requests relating to your data:<\/p>\n \n\n\n| \n Name and function<\/strong><\/p>\n<\/td>\n| \n Olivier PROFIT – Group Data Protection Delegate<\/p>\n<\/td>\n<\/tr>\n | \n| \n E-mail address<\/strong><\/p>\n<\/td>\n| \n dpo@sqorus.com<\/p>\n<\/td>\n<\/tr>\n | \n| \n Postal address<\/strong><\/p>\n<\/td>\n| \n For the attention of the DPO – SQORUS SAS – 25 rue de Maubeuge, 75009 Paris<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n 1.3. Scope of the notice<\/h3>\nThis notice applies to all natural person contacts in the supplier and partner chain of the SQORUS Group:<\/p>\n \n- Legal representatives and signatories of suppliers and partners ;<\/li>\n
- Commercial and operational contacts designated by suppliers and partners ;<\/li>\n
- Accounting and financial contacts in charge of billing ;<\/li>\n
- Freelancers and external consultants contracting directly with SQORUS as natural persons (autoentrepreneur status, sole proprietorship, self-employed);<\/li>\n
- External technical subcontractors working with SQORUS ;<\/li>\n
- Commercial partners in the Group’s alliances and consortiums.<\/li>\n<\/ul>\n
The notice does not cover suppliers’ employees handled as part of a specific assignment under the responsibility of the end customer (case where SQORUS is a subcontractor and the supplier is a subsequent subcontractor) – this case falls under section 9 and the dedicated contractual clauses (article 28 GDPR).<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row custom_padding_last_edited=”on|tablet” _builder_version=”4.25.2″ _module_preset=”default” background_enable_color=”off” width=”auto” max_width=”1300px” custom_margin=”0px||5%||false|true” custom_padding=”0px|0px|0px|0px|true|false” custom_padding_tablet=”0px|40px|0px|40px|true|true” custom_padding_phone=”0px|30px|0px|30px|true|true” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.25.0″ _module_preset=”default” custom_padding=”|40px||40px|false|true” custom_padding_tablet=”|40px||40px|false|true” custom_padding_phone=”|0px||0px|false|true” custom_padding_last_edited=”on|phone” global_colors_info=”{}”][et_pb_text admin_label=”Titre – H2″ module_class=”Titre_40″ _builder_version=”4.27.6″ _module_preset=”default” header_2_text_align=”left” custom_padding=”||||false|false” custom_padding_tablet=”||20px||false|false” custom_padding_phone=”||20px||false|false” custom_padding_last_edited=”on|phone” header_2_text_align_tablet=”left” header_2_text_align_phone=”center” header_2_text_align_last_edited=”on|phone” global_colors_info=”{}”]<\/p>\n 2. Which treatments concern you?<\/h2>\n[\/et_pb_text][et_pb_text admin_label=”Texte” module_class=”TexteCorps” _builder_version=”4.27.6″ _module_preset=”default” custom_margin=”||||false|false” global_colors_info=”{}”]<\/p>\n 2.1. Overview<\/h3>\nThis section presents all the processing of your data implemented by SQORUS in the context of the supplier or partner relationship, in its capacity as data controller. Each processing operation is described according to a standardized framework: purpose, legal basis within the meaning of Article 6 of the GDPR, categories of data, retention period. <\/p>\n The legal bases used are mainly :<\/p>\n \n- Performance of the supplier or partner contract (Article 6 \u00a71.b GDPR) – for processing directly linked to the conclusion and performance of the contract, including pre-contractual measures ;<\/li>\n
- Compliance with legal obligations (Article 6 \u00a71.c GDPR) – for processing imposed by the Commercial Code (accounting), the General Tax Code (taxation), Law 2016-1691 of December 9, 2016 known as “Sapin II” (anti-corruption and third-party risk mapping), the Monetary and Financial Code (KYC) ;<\/li>\n
- The Group’s legitimate interest (Article 6 \u00a71.f GDPR) – for the overall management of the supplier panel, quality assessment, partnership prospecting, continuous improvement of the supply chain. A balance of interests test has been conducted for each processing operation of this type. <\/li>\n<\/ul>\n
No sensitive data within the meaning of Article 9 of the GDPR is requested or processed. If you spontaneously provide such information (for example: extract from criminal record – KBis rarely includes this in standard France), it is kept only as long as necessary for verification and then deleted. <\/p>\n <\/p>\n 2.2. Onboarding and supplier referencing (VSA)<\/h3>\nProcessing sheet n\u00b01 – Onboarding and VSA<\/strong><\/p>\n\n\n\n| \n Purpose<\/strong><\/p>\n<\/td>\n| \n Referring a new supplier or partner to the SQORUS Group panel: capacity analysis, identity and credit check of the organization, assessment of security measures (Vendor Security Assessment – VSA), assessment of GDPR commitments, internal validation for entry into contractual relationship.<\/p>\n<\/td>\n<\/tr>\n | \n| \n Legal basis<\/strong><\/p>\n<\/td>\n| \n Pre-contractual measures at the request of the individual (Article 6 \u00a71.b GDPR) – you have initiated or accepted a referral process. Legitimate interest of the Group in selecting its suppliers according to safety, quality and compliance criteria (article 6 \u00a71.f). Legal obligation under the Sapin II law and the Monetary and Financial Code for minimum verifications (article 6 \u00a71.c) – see \u00a7 2.6. <\/p>\n<\/td>\n<\/tr>\n | \n| \n Data categories<\/strong><\/p>\n<\/td>\n| \n Identity of legal representative (surname, first name, position), identity of designated sales and operational contacts, professional contact details, organization data (KBis, SIREN, capital, articles of association), answers to VSA questionnaire (security organization, technical measures, GDPR compliance, certifications), supporting documents submitted (attestations, certificates, insurance policies).<\/p>\n<\/td>\n<\/tr>\n | \n| \n Shelf life<\/strong><\/p>\n<\/td>\n| \n For the duration of the contractual relationship. At the end of the contract: 5 years for traceability of referencing decisions (legitimate interest in demonstrating diligence in supplier selection). In the event of non-referencing (failure at the end of the process): 1 year from the date of the decision, to justify the reason for non-selection in the event of a complaint. <\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n 2.3. Contractual and operational management<\/h3>\nProcessing sheet no. 2 – Supplier contract management<\/strong><\/p>\n\n\n\n| \n Purpose<\/strong><\/p>\n<\/td>\n| \n Conclusion of supplier or partner contracts (negotiation, formalization), contract execution (orders, service monitoring, communication with designated contacts, steering committees, operational points), management of contractual changes (amendments, extensions, end of relationship).<\/p>\n<\/td>\n<\/tr>\n | \n| \n Legal basis<\/strong><\/p>\n<\/td>\n| \n Performance of the contract (Article 6 \u00a71.b GDPR) for contacts designated as interlocutors under the contract. Legitimate interest of the Group (article 6 \u00a71.f) for the overall management of the supplier account. <\/p>\n<\/td>\n<\/tr>\n | \n| \n Data categories<\/strong><\/p>\n<\/td>\n| \n Identity, position and professional details of designated contacts (signatories, sales contacts, operational contacts), history of contractual exchanges, minutes of meetings, signed contractual documents, amendments.<\/p>\n<\/td>\n<\/tr>\n | \n| \n Shelf life<\/strong><\/p>\n<\/td>\n| \n For the duration of the contract. At the end: 5 years (commercial prescription – article L. 110-4 of the French Commercial Code). After that: anonymized archiving for statistical purposes or definitive deletion. <\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n 2.4. Billing, payment and accounting<\/h3>\nProcessing sheet no. 3 – Supplier invoicing and accounting<\/strong><\/p>\n\n\n\n| \n Purpose<\/strong><\/p>\n<\/td>\n| \n Receive and process invoices issued by suppliers, check compliance with contractual commitments, validate and authorize payments, book transactions, associated tax declarations (deductible VAT, annual accounting declarations).<\/p>\n<\/td>\n<\/tr>\n | \n| \n Legal basis<\/strong><\/p>\n<\/td>\n| \n Performance of the supplier contract (article 6 \u00a71.b) and compliance with legal accounting and tax obligations (article 6 \u00a71.c): Commercial Code articles L. 123-22 and L. 110-4, General Tax Code, applicable accounting standards.<\/p>\n<\/td>\n<\/tr>\n | \n| \n Data categories<\/strong><\/p>\n<\/td>\n| \n Identity and contact details of designated invoicing contacts (supplier’s accounting\/sales manager), supplier organization’s bank references, content of invoices received, payment tracking, associated exchanges (reminders, objections, credit notes).<\/p>\n<\/td>\n<\/tr>\n | \n| \n Shelf life<\/strong><\/p>\n<\/td>\n| \n 10 years from the close of the financial year concerned (French Commercial Code, article L. 123-22). For items with contractual evidential value: 5 years (commercial prescription). <\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n For freelancers and auto-entrepreneurs invoicing directly to individuals, bank details and personal identity are part of the data processed and stored under the same conditions as above.<\/p>\n <\/p>\n 2.5. Supplier evaluation and rating<\/h3>\nProcessing sheet no. 4 – Supplier evaluation<\/strong><\/p>\n\n\n\n| \n Purpose<\/strong><\/p>\n<\/td>\n| \n Periodically assess the quality of services, compliance with commitments, commercial and operational reliability of suppliers, identify risks (quality, dependence, performance, compliance), feed an internal rating system used to decide whether to renew or reduce collaboration.<\/p>\n<\/td>\n<\/tr>\n | \n| \n Legal basis<\/strong><\/p>\n<\/td>\n| \n Legitimate interest of the Group to evaluate its suppliers and manage its panel according to quality and performance criteria (Article 6 \u00a71.f GDPR). A balance of interests test has been conducted: the evaluation concerns the performance of the supplier organization and is not intended to evaluate individual natural persons, except in justified exceptional cases. <\/p>\n<\/td>\n<\/tr>\n | \n| \n Data categories<\/strong><\/p>\n<\/td>\n| \n Supplier identity (organization), qualitative assessments formalized by SQORUS teams, significant events (incidents, non-conformities, service failures or successes), internal score, guidance recommendations. Where applicable, identity of the project manager or main contact on the supplier’s side when the assessment directly concerns this scope. <\/p>\n<\/td>\n<\/tr>\n | \n| \n Shelf life<\/strong><\/p>\n<\/td>\n| \n 5 years from last valuation or end of contract, for capitalization purposes and continuity of supplier history.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n The evaluation is carried out by SQORUS teams (project managers, purchasing, operational teams) within a formalized framework. You can ask to be informed of the evaluation elements concerning you directly (as an identified contact) by exercising your right of access with the DPO. <\/p>\n <\/p>\n 2.6. Anti-corruption (Sapin II law) and KYC<\/h3>\nProcessing sheet no. 5 – Third-party and KYC risk mapping<\/strong><\/p>\n\n\n\n| \n Purpose<\/strong><\/p>\n<\/td>\n| \n In compliance with French Law 2016-1691 of December 9, 2016, known as “Sapin II”, and the provisions of the Monetary and Financial Code concerning the fight against money laundering and the financing of terrorism (LCB-FT), the SQORUS Group conducts a corruption risk map on its third parties (suppliers, intermediaries, partners) and minimum identity checks (Know Your Customer \/ Know Your Vendor).<\/p>\n<\/td>\n<\/tr>\n | \n| \n Legal basis<\/strong><\/p>\n<\/td>\n| \n Compliance with legal obligations (article 6 \u00a71.c GDPR): Sapin II law articles 3 and 17 for third-party risk mapping and assessment procedures. Code mon\u00e9taire et financier articles L. 561-2 et seq. for KYC checks where applicable. Legitimate interest of the Group in protecting itself against the risks of corruption, fraud and damage to reputation (article 6 \u00a71.f). <\/p>\n<\/td>\n<\/tr>\n | \n| \n Data categories<\/strong><\/p>\n<\/td>\n| \n Identity of the legal representative and beneficial owners of the supplier organization (surname, first name, date and place of birth, nationality, position), any identification documents (copy of identity document where legally required), results of checks on international sanctions lists and lists of politically exposed persons (PEPs), exposure to country risks, business sectors, internal risk scoring.<\/p>\n<\/td>\n<\/tr>\n | \n| \n Shelf life<\/strong><\/p>\n<\/td>\n| \n 5 years after the end of the contractual relationship (Code mon\u00e9taire et financier article L. 561-12). Copies of identity documents are deleted at the end of the verification process, unless there is a specific legal obligation to retain them. <\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.27.6″ background_color=”#f7fbff” custom_margin=”||5%||false|false” custom_padding=”5%|5%|5%|5%|true|true” border_radii=”on|23px|23px|23px|23px” locked=”off” inline_fonts=”Roboto” global_colors_info=”{}”]<\/p>\n Important note on KYC and sanction lists<\/strong><\/p>\nChecks against international sanctions lists and lists of politically exposed persons (PEPs) are carried out at the start of the relationship and periodically, in accordance with the Sapin II and LCB-FT framework. They cover the public identity of the organization’s directors and beneficial owners. <\/p>\n A positive result (alert on a list) triggers an in-depth internal investigation; the final decision is always taken by an internal committee, never automatically.<\/p>\n If you feel that your data has been incorrectly qualified in this context, you can contest via dpo@sqorus.com – the Group’s PRO-GDPR-RIGHTS v1.0 frames this procedure.<\/p>\n <\/ul>\n[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row custom_padding_last_edited=”on|tablet” _builder_version=”4.25.2″ _module_preset=”default” background_enable_color=”off” width=”auto” max_width=”1300px” custom_margin=”0px||5%||false|true” custom_padding=”0px|0px|0px|0px|true|false” custom_padding_tablet=”0px|40px|0px|40px|true|true” custom_padding_phone=”0px|30px|0px|30px|true|true” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.25.0″ _module_preset=”default” custom_padding=”|40px||40px|false|true” custom_padding_tablet=”|40px||40px|false|true” custom_padding_phone=”|0px||0px|false|true” custom_padding_last_edited=”on|phone” global_colors_info=”{}”][et_pb_text admin_label=”Titre – H2″ module_class=”Titre_40″ _builder_version=”4.27.6″ _module_preset=”default” header_2_text_align=”left” custom_padding=”||||false|false” custom_padding_tablet=”||20px||false|false” custom_padding_phone=”||20px||false|false” custom_padding_last_edited=”on|phone” header_2_text_align_tablet=”left” header_2_text_align_phone=”center” header_2_text_align_last_edited=”on|phone” global_colors_info=”{}”]<\/p>\n 3. To whom is your data disclosed?<\/h2>\n[\/et_pb_text][et_pb_text admin_label=”Texte” module_class=”TexteCorps” _builder_version=”4.27.6″ _module_preset=”default” custom_margin=”||||false|false” global_colors_info=”{}”]<\/p>\n 3.1. Internal recipients<\/h3>\nWithin the SQORUS Group, access to your data is limited to people with a role in supply chain and supplier management:<\/p>\n \n- Purchasing teams – for sourcing, selecting, listing and managing the supplier panel;<\/li>\n
- Operational teams using the service (project leaders, team managers) – for contract management and evaluation ;<\/li>\n
- Administrative and financial teams – for billing, payment tracking, accounting ;<\/li>\n
- General Management – for strategic suppliers and major commitment decisions;<\/li>\n
- The Data Protection Officer (DPO) – for data protection issues ;<\/li>\n
- Compliance Officer – for Sapin II and KYC verifications.<\/li>\n<\/ul>\n
Intra-Group transfers may occur with subsidiaries SQORUS C\u00f4te d’Ivoire and SQORUS Morocco when the supplier relationship concerns them (e.g.: Group shared service provider, or coordinated Group purchasing).<\/p>\n <\/p>\n 3.2. Technical subcontractors<\/h3>\nThe Group relies on technical subcontractors for purchasing and supplier chain management. These subcontractors are selected according to a rigorous procedure and contractually framed by Article 28 GDPR clauses : <\/p>\n \n\n\n| \n Service category<\/strong><\/p>\n<\/td>\n| \n Main subcontractor<\/strong><\/p>\n<\/td>\n| \n Perimeter<\/strong><\/p>\n<\/td>\n<\/tr>\n\n| \n Collaborative suite and contractual exchanges<\/strong><\/p>\n<\/td>\n| \n Microsoft (M365: Outlook, Teams, OneDrive, SharePoint)<\/p>\n<\/td>\n | \n Email exchanges, document sharing, videoconferencing<\/p>\n<\/td>\n<\/tr>\n | \n| \n Electronic signature<\/strong><\/p>\n<\/td>\n| \n Depending on service provider<\/p>\n<\/td>\n | \n Dematerialized contract signature<\/p>\n<\/td>\n<\/tr>\n | \n| \n Accounting and billing<\/strong><\/p>\n<\/td>\n| \n Depending on ERP in place – details available on request<\/p>\n<\/td>\n | \n Supplier invoice processing, accounting follow-up<\/p>\n<\/td>\n<\/tr>\n | \n| \n Sapin II \/ KYC tools (sanctions lists, PPE)<\/strong><\/p>\n<\/td>\n| \n According to specialized service provider – details available on request<\/p>\n<\/td>\n | \n Third-party compliance audits, screening sanctions<\/p>\n<\/td>\n<\/tr>\n | \n| \n Hosting and technical services<\/strong><\/p>\n<\/td>\n| \n According to contract – details available on request from the DPO<\/p>\n<\/td>\n | \n Hosting certain internal tools<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n The complete and up-to-date list of subcontractors handling personal data is kept by the DPO and is available on request at dpo@sqorus.com.<\/a><\/p>\n <\/p>\n 3.3. External third-party recipients<\/h3>\nYour data may be communicated to external third parties only in the following cases:<\/p>\n \n- Public and judicial authorities upon formal legal request (in particular under Sapin II and LCB-FT obligations);<\/li>\n
- Group Councils (lawyers, chartered accountants, statutory auditors) within the strict framework of their mission;<\/li>\n
- Financing and banking institutions for supplier payment transactions;<\/li>\n
- Where applicable, the end customer when you are working as a subcontractor for one of our RT customers (see section 9).<\/li>\n<\/ul>\n
<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row custom_padding_last_edited=”on|tablet” _builder_version=”4.25.2″ _module_preset=”default” background_enable_color=”off” width=”auto” max_width=”1300px” custom_margin=”0px||5%||false|true” custom_padding=”0px|0px|0px|0px|true|false” custom_padding_tablet=”0px|40px|0px|40px|true|true” custom_padding_phone=”0px|30px|0px|30px|true|true” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.25.0″ _module_preset=”default” custom_padding=”|40px||40px|false|true” custom_padding_tablet=”|40px||40px|false|true” custom_padding_phone=”|0px||0px|false|true” custom_padding_last_edited=”on|phone” global_colors_info=”{}”][et_pb_text admin_label=”Titre – H2″ module_class=”Titre_40″ _builder_version=”4.27.6″ _module_preset=”default” header_2_text_align=”left” custom_padding=”||||false|false” custom_padding_tablet=”||20px||false|false” custom_padding_phone=”||20px||false|false” custom_padding_last_edited=”on|phone” header_2_text_align_tablet=”left” header_2_text_align_phone=”center” header_2_text_align_last_edited=”on|phone” global_colors_info=”{}”]<\/p>\n 4. Is your data transferred outside the European Union?<\/h2>\n[\/et_pb_text][et_pb_text admin_label=”Texte” module_class=”TexteCorps” _builder_version=”4.27.6″ _module_preset=”default” custom_margin=”||||false|false” global_colors_info=”{}”]<\/p>\n Some processing operations involve transfers to countries outside the European Economic Area. These transfers are governed in accordance with the Group’s transfer policy (POL-GDPR-TRANSFERTS v1.0) : <\/p>\n \n\n\n| \n Country \/ Zone<\/strong><\/p>\n<\/td>\n| \n Use cases<\/strong><\/p>\n<\/td>\n| \n Framing mechanism<\/strong><\/p>\n<\/td>\n<\/tr>\n\n| \n United States<\/strong><\/p>\n<\/td>\n| \n Microsoft (M365), certain SaaS tools<\/p>\n<\/td>\n | \n European “Data Privacy Framework” adequacy decision of July 10, 2023 (Decision EU 2023\/1795). In addition (“belt and suspenders”): Standard Contractual Clauses (EU Decision 2021\/914). <\/p>\n<\/td>\n<\/tr>\n | \n| \n Ivory Coast<\/strong><\/p>\n<\/td>\n| \n Group coordination with SQORUS Ivory Coast; local suppliers<\/p>\n<\/td>\n | \n Standard Contractual Clauses (article 46 \u00a72.c GDPR) + documented Transfer Impact Assessment (TIA).<\/p>\n<\/td>\n<\/tr>\n | \n| \n Morocco<\/strong><\/p>\n<\/td>\n| \n Group coordination with SQORUS Morocco; local suppliers<\/p>\n<\/td>\n | \n Standard Contractual Clauses (article 46 \u00a72.c GDPR) + documented Transfer Impact Assessment (TIA).<\/p>\n<\/td>\n<\/tr>\n | \n| \n Other third countries<\/strong><\/p>\n<\/td>\n| \n Exceptional cases, one-off international suppliers<\/p>\n<\/td>\n | \n Mechanisms of Article 46 GDPR or limiting derogations of Article 49 GDPR.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row custom_padding_last_edited=”on|tablet” _builder_version=”4.25.2″ _module_preset=”default” background_enable_color=”off” width=”auto” max_width=”1300px” custom_margin=”0px||5%||false|true” custom_padding=”0px|0px|0px|0px|true|false” custom_padding_tablet=”0px|40px|0px|40px|true|true” custom_padding_phone=”0px|30px|0px|30px|true|true” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.25.0″ _module_preset=”default” custom_padding=”|40px||40px|false|true” custom_padding_tablet=”|40px||40px|false|true” custom_padding_phone=”|0px||0px|false|true” custom_padding_last_edited=”on|phone” global_colors_info=”{}”][et_pb_text admin_label=”Titre – H2″ module_class=”Titre_40″ _builder_version=”4.27.6″ _module_preset=”default” header_2_text_align=”left” custom_padding=”||||false|false” custom_padding_tablet=”||20px||false|false” custom_padding_phone=”||20px||false|false” custom_padding_last_edited=”on|phone” header_2_text_align_tablet=”left” header_2_text_align_phone=”center” header_2_text_align_last_edited=”on|phone” global_colors_info=”{}”]<\/p>\n 5. How long will your data be kept?<\/h2>\n[\/et_pb_text][et_pb_text admin_label=”Texte” module_class=”TexteCorps” _builder_version=”4.27.6″ _module_preset=”default” custom_margin=”||||false|false” global_colors_info=”{}”]<\/p>\n The length of time we keep your data varies according to the nature of the processing and applicable legal obligations. Summary :<\/p>\n \n\n\n| \n Data category<\/strong><\/p>\n<\/td>\n| \n Main duration<\/strong><\/p>\n<\/td>\n| \n Foundation<\/strong><\/p>\n<\/td>\n<\/tr>\n\n| \n Referencing file \/ VSA of a referenced supplier<\/strong><\/p>\n<\/td>\n| \n Contract duration + 5 years<\/p>\n<\/td>\n | \n Legitimate interest in demonstrating diligence in selection<\/p>\n<\/td>\n<\/tr>\n | \n| \n Referencing a non-referenced supplier<\/strong><\/p>\n<\/td>\n| \n 1 year after decision<\/p>\n<\/td>\n | \n Proof of motivation for non-selection<\/p>\n<\/td>\n<\/tr>\n | \n| \n Active contract management data<\/strong><\/p>\n<\/td>\n| \n Contract duration<\/p>\n<\/td>\n | \n Contract performance<\/p>\n<\/td>\n<\/tr>\n | \n| \n | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |