Personal data protection & cookies policy

The purpose of this policy is to explain how Vulcain Engineering Group (hereinafter “Vulcain”, “we”) collects, processes and protects the personal data of visitors and customers of https://www.vulcain-eng.com.

Responsible for the treatment

92 Av. Charles de Gaulle, 92200 Neuilly-sur-Seine
SIREN: 420 418 774
Data Protection Officer (DPO) : dpo @vulcain ‑eng.com

Purposes, legal bases and retention periods

1. Purpose: Management of requests via the form, legal basis: Legitimate interest in responding, data processed: Identity, contact details, message content, storage period: 3 years after the last contact

2. Purpose: Recruitment, legal basis: Pre-contractual measures, data processed: CV, cover letter, professional history, retention period: 2 years after the last contact

3. Purpose: Site audience measurement (self-hosted GA4), legal basis: Consent, data processed: Audience measurement cookies, retention period: 13 months

4. Purpose: Essential technical cookies, legal basis: Legitimate interest (exemption from consent), data processed: Session ID, preferences, retention period: 4 months

Recipients

- Authorized internal services (communication, HR, IT).
- Subcontractors for accommodation and maintenance: DNA Studio by Infogene, France — contracts in accordance with the European Commission's standard clauses.
- Judicial or administrative authorities, upon legal request.

Transfers outside the EU

By default, your data is hosted in the EU. Any punctual transfer will be subject to appropriate guarantees (standard contractual clauses, adequacy decision, etc.).

Your rights

In accordance with the RGPD and the amended “Informatique & Libertés” law of January 6, 1978, you have the rights:
- Access to your data;
- Rectification if they are inaccurate;
- Erasure (“right to be forgotten”);
- Opposition or limitation of the treatment;
- Portability of your data provided;
- Withdrawal consent at any time;
- Complaint Next to the CNIL.

To exercise your rights: dpo @vulcain ‑eng.com or Vulcain Engineering Group.
We will respond under 1 month ; deadline extendable to 3 months for complex requests.

Managing cookies

During your first visit, a banner informs you of the cookies used; you can accept, refuse or personalize.

List of cookies:
- fs-cc, purpose: essential technical cookies, duration: 6 months, consent required: no
- fs-consent-ad_storage, purpose: essential technical cookies, duration: 4 months, consent required: no
- fs-consent-ad_user_data, purpose: essential technical cookies, duration: 4 months, consent required: no
- fs-consent-ad_personalization, purpose: essential technical cookies, duration: 4 months, consent required: no
- fs-consent-analytics_storage, purpose: essential technical cookies, duration: 4 months, consent required: no
- fs-consent-functionality_storage, purpose: essential technical cookies, duration: 4 months, consent required: no
- fs-consent-personalization_storage, purpose: essential technical cookies, duration: 4 months, consent required: no
- fs-consent-security_storage, purpose: essential technical cookies, duration: 4 months, consent required: no
- _cfuvid, purpose: essential technical cookies, duration: session, consent required: no
- _ga, purpose: essential technical cookies, duration: 13 months, consent required: yes
- _GA_v26xd7wtr8, purpose: essential technical cookies, duration: 13 months, consent required: yes
‍
You can configure your cookies:
- In configuring your browser (Chrome, Firefox, Safari, Edge) to block trackers.

security

We implement technical and organizational measures in accordance with the state of the art: encryption, robust password policy, encrypted backups, annual penetration tests.

Policy developments

This policy may be updated; the date of publication indicates the last revision. We will inform you of any substantial changes via a notice on the site.