{"id":4675,"date":"2026-10-04T15:36:13","date_gmt":"2026-10-04T14:36:13","guid":{"rendered":"https:\/\/etmb.fr\/?page_id=4675"},"modified":"2026-10-04T15:40:49","modified_gmt":"2026-10-04T14:40:49","slug":"rgpd-3","status":"publish","type":"page","link":"https:\/\/etmb.fr\/en\/rgpd-3\/","title":{"rendered":"GDPR"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

GDPR Charter<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

1<\/b><\/span>. <\/b><\/span>Purpose of this Charter<\/b><\/span><\/p>

The purpose of this Charter is to raise awareness among all employees regarding the protection of personal data and to define the essential best practices required to ensure compliance with the General Data Protection Regulation (GDPR) and applicable Data Protection Laws.<\/p>

This Charter applies to all individuals working for Groupe ETMB<\/p>

2. Fundamental GDPR Principles<\/b><\/span><\/p>

Each employee is required to comply with the following principles:<\/p>

2.1. Purpose Limitation<\/b><\/p>

Personal data shall only be collected or processed for a clear, legitimate, and professional purpose.<\/p>

2.2. Data Minimization<\/b><\/p>

Only personal data that is strictly necessary for the intended purpose shall be collected and processed.<\/p>

2.3. Accuracy<\/b><\/p>

Employees must ensure that personal data remains accurate, up to date, and corrected where necessary.<\/p>

2.4. Storage Limitation<\/b><\/p>

Personal data shall not be retained longer than required for the purposes for which it was collected.<\/p>

2.5. Security<\/b><\/p>

Personal data must be protected against loss, unauthorized access, alteration, disclosure, or misuse.<\/p>

2.6. Confidentiality<\/b><\/p>

Personal information must never be disclosed to unauthorized persons.<\/p>

3<\/b><\/span>. <\/b><\/span>Daily Best Practices<\/b><\/span><\/p>

3.1. <\/b><\/span>Document Management<\/b><\/p>

  • Do not leave documents containing personal data accessible to unauthorized individuals.<\/p><\/li>

  • Store paper records and archives in locked cabinets.<\/p><\/li>

  • Destroy confidential documents using approved shredding equipment.<\/p><\/li><\/ul>

    3.2<\/b><\/span>. Computer Use<\/b><\/p>

    • Lock your workstation whenever you leave it unattended, even for a short period.<\/p><\/li>

    • Use strong and unique passwords for all professional accounts and systems.<\/p><\/li>

    • Never install unauthorized software.<\/p><\/li>

    • Ensure that operating systems and antivirus solutions are regularly updated.<\/p><\/li><\/ul>

      3.3. Data Sharing and Transfers<\/b><\/p>

      • Personal data may only be shared with authorized recipients.<\/p><\/li>

      • Use secure communication channels and approved tools (business email, encrypted file transfer solutions, and company-approved platforms).<\/p><\/li>

      • Never send sensitive data through unapproved services (such as free WeTransfer accounts, personal Gmail accounts, WhatsApp, or similar applications).<\/p><\/li><\/ul>

        3.4<\/b>. <\/b><\/span>Email Management<\/b><\/p>

        • Maintain a strict separation between professional and personal email accounts.<\/p><\/li>

        • Use the Blind Carbon Copy (BCC) function when sending group emails containing personal data.<\/p><\/li>

        • Regularly delete emails containing sensitive information once they are no longer required.<\/p><\/li><\/ul>

          3.5<\/b>. <\/b><\/span>Meetings and Business Travel<\/b><\/p>

          • Do not discuss personal data in public spaces.<\/p><\/li>

          • Never leave documents unattended in unsecured locations such as trains, taxis, meeting rooms, or coworking spaces.<\/p><\/li><\/ul>

            4. Sensitive Data and Restricted Access<\/b><\/span><\/p>

            The following categories of information require enhanced protection and vigilance:<\/span><\/p>

            • Health data<\/p><\/li>

            • Financial data<\/p><\/li>

            • Payment card details<\/p><\/li>

            • Human Resources data (salaries, employment contracts, absences)<\/p><\/li>

            • Children's data<\/p><\/li>

            • Identity documents<\/p><\/li>

            • Access to such information is strictly limited to authorized personnel.<\/p><\/li><\/ul>

              5<\/b><\/span>. <\/b><\/span>Use of Digital Tools<\/b><\/span><\/p>

              5.1. Internet Usage<\/b><\/p>

              Do not download files from untrusted sources.<\/p>

              Do not use personal cloud storage services (such as personal Dropbox, Google Drive, or iCloud accounts) for business purposes.<\/p>

              5.2. Corporate Mobile Devices<\/b><\/p>

              Protect company smartphones with a PIN code, biometric authentication, or equivalent security measures.<\/p>

              Do not store sensitive data on mobile devices without adequate protection. The use of a password manager is strongly recommended.<\/p>

              5.3. External Storage Devices<\/b><\/p>

              Only USB drives and removable media provided or approved by the Company may be used.<\/p>

              External storage devices should be encrypted whenever necessary.<\/p>

              6<\/b><\/span>. <\/b><\/span>Processors and Business Partners<\/b><\/span><\/p>

              Before sharing any personal data:<\/p>

              • Verify that the processor or service provider complies with GDPR requirements.<\/p><\/li>

              • Ensure that an appropriate Data Processing Agreement (DPA) is in place.<\/p><\/li>

              • Share only the information that is strictly necessary.<\/p><\/li><\/ul>

                7<\/b><\/span>. <\/b><\/span>Data Breaches: Required Actions<\/b><\/span><\/p>

                A personal data breach may include:<\/p>

                • Loss of a USB device;<\/p><\/li>

                • An email sent to the wrong recipient;<\/p><\/li>

                • Cyberattacks or unauthorized access;<\/p><\/li>

                • Accidental disclosure of information;<\/p><\/li>

                • Accidental deletion of data.<\/p><\/li><\/ul>

                  Any incident must be reported immediately to the GDPR Officer at: contact@etmb.fr and to Company Management.<\/p>

                  The Company must respond within 24 hours and, where required, notify the relevant Supervisory Authority within 72 hours.<\/p>

                  8. Exercising Data Subject Rights<\/b><\/span><\/p>

                  Any request from an employee, customer, supplier, or business partner concerning:<\/p>

                  • Access to personal data;<\/p><\/li>

                  • Rectification;<\/p><\/li>

                  • Erasure;<\/p><\/li>

                  • Data portability;<\/p><\/li>

                  • Objection to processing;<\/p><\/li>

                  • Restriction of processing;<\/p><\/li><\/ul>

                    Must be immediately forwarded to the Company's GDPR Representative.<\/p>

                    No direct response should be provided to the requester without prior internal validation.<\/p>

                    9<\/b><\/span>. <\/b><\/span>Employee Responsibilities<\/b><\/span><\/p>

                    Each employee agrees to:<\/p>

                    • Comply with this Charter;<\/p><\/li>

                    • Seek guidance whenever in doubt;<\/p><\/li>

                    • Participate in internal training sessions;<\/p><\/li>

                    • Report any non-compliant behavior or practice.<\/p><\/li><\/ul>

                      10.<\/b><\/span> <\/b>Employee Acknowledgement<\/b><\/span><\/p>

                      I acknowledge that I have read and understood the GDPR Best Practices Charter.
                      I undertake to comply with all principles and requirements set forth therein.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

                      Charte RGPD 1. Objet de la charte La pr\u00e9sente charte a pour objectif de sensibiliser l\u2019ensemble des collaborateurs \u00e0 la protection des donn\u00e9es personnelles et de d\u00e9finir les bonnes pratiques indispensables au respect du R\u00e8glement G\u00e9n\u00e9ral sur la Protection des Donn\u00e9es (RGPD) et de la loi Informatique et Libert\u00e9s. Elle s\u2019applique \u00e0 toute personne travaillant […]<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-4675","page","type-page","status-publish","hentry"],"yoast_head":"\nRGPD - ETMB Groupe<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/etmb.fr\/en\/rgpd-3\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"RGPD - ETMB Groupe\" \/>\n<meta property=\"og:description\" content=\"Charte RGPD 1. Objet de la charte La pr\u00e9sente charte a pour objectif de sensibiliser l\u2019ensemble des collaborateurs \u00e0 la protection des donn\u00e9es personnelles et de d\u00e9finir les bonnes pratiques indispensables au respect du R\u00e8glement G\u00e9n\u00e9ral sur la Protection des Donn\u00e9es (RGPD) et de la loi Informatique et Libert\u00e9s. Elle s\u2019applique \u00e0 toute personne travaillant […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/etmb.fr\/en\/rgpd-3\/\" \/>\n<meta property=\"og:site_name\" content=\"ETMB Groupe\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-04T14:40:49+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/etmb.fr\\\/rgpd-3\\\/\",\"url\":\"https:\\\/\\\/etmb.fr\\\/rgpd-3\\\/\",\"name\":\"RGPD - ETMB Groupe\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/etmb.fr\\\/#website\"},\"datePublished\":\"2026-10-04T14:36:13+00:00\",\"dateModified\":\"2026-10-04T14:40:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/etmb.fr\\\/rgpd-3\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/etmb.fr\\\/rgpd-3\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/etmb.fr\\\/rgpd-3\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/etmb.fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"RGPD\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/etmb.fr\\\/#website\",\"url\":\"https:\\\/\\\/etmb.fr\\\/\",\"name\":\"ETMB Groupe\",\"description\":\"ETMB Groupe\",\"publisher\":{\"@id\":\"https:\\\/\\\/etmb.fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/etmb.fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/etmb.fr\\\/#organization\",\"name\":\"ETMB Groupe\",\"url\":\"https:\\\/\\\/etmb.fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/etmb.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/etmb.fr\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/w-ETMB-Groupe_FR_Logo-e1732133516525.png\",\"contentUrl\":\"https:\\\/\\\/etmb.fr\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/w-ETMB-Groupe_FR_Logo-e1732133516525.png\",\"width\":1964,\"height\":936,\"caption\":\"ETMB Groupe\"},\"image\":{\"@id\":\"https:\\\/\\\/etmb.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"RGPD - ETMB Groupe","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/etmb.fr\/en\/rgpd-3\/","og_locale":"en_US","og_type":"article","og_title":"RGPD - ETMB Groupe","og_description":"Charte RGPD 1. Objet de la charte La pr\u00e9sente charte a pour objectif de sensibiliser l\u2019ensemble des collaborateurs \u00e0 la protection des donn\u00e9es personnelles et de d\u00e9finir les bonnes pratiques indispensables au respect du R\u00e8glement G\u00e9n\u00e9ral sur la Protection des Donn\u00e9es (RGPD) et de la loi Informatique et Libert\u00e9s. Elle s\u2019applique \u00e0 toute personne travaillant […]","og_url":"https:\/\/etmb.fr\/en\/rgpd-3\/","og_site_name":"ETMB Groupe","article_modified_time":"2026-10-04T14:40:49+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/etmb.fr\/rgpd-3\/","url":"https:\/\/etmb.fr\/rgpd-3\/","name":"RGPD - ETMB Groupe","isPartOf":{"@id":"https:\/\/etmb.fr\/#website"},"datePublished":"2026-10-04T14:36:13+00:00","dateModified":"2026-10-04T14:40:49+00:00","breadcrumb":{"@id":"https:\/\/etmb.fr\/rgpd-3\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/etmb.fr\/rgpd-3\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/etmb.fr\/rgpd-3\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/etmb.fr\/"},{"@type":"ListItem","position":2,"name":"RGPD"}]},{"@type":"WebSite","@id":"https:\/\/etmb.fr\/#website","url":"https:\/\/etmb.fr\/","name":"ETMB Groupe","description":"ETMB Groupe","publisher":{"@id":"https:\/\/etmb.fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/etmb.fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/etmb.fr\/#organization","name":"ETMB Groupe","url":"https:\/\/etmb.fr\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/etmb.fr\/#\/schema\/logo\/image\/","url":"https:\/\/etmb.fr\/wp-content\/uploads\/2024\/11\/w-ETMB-Groupe_FR_Logo-e1732133516525.png","contentUrl":"https:\/\/etmb.fr\/wp-content\/uploads\/2024\/11\/w-ETMB-Groupe_FR_Logo-e1732133516525.png","width":1964,"height":936,"caption":"ETMB Groupe"},"image":{"@id":"https:\/\/etmb.fr\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/etmb.fr\/en\/wp-json\/wp\/v2\/pages\/4675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/etmb.fr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/etmb.fr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/etmb.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/etmb.fr\/en\/wp-json\/wp\/v2\/comments?post=4675"}],"version-history":[{"count":4,"href":"https:\/\/etmb.fr\/en\/wp-json\/wp\/v2\/pages\/4675\/revisions"}],"predecessor-version":[{"id":4686,"href":"https:\/\/etmb.fr\/en\/wp-json\/wp\/v2\/pages\/4675\/revisions\/4686"}],"wp:attachment":[{"href":"https:\/\/etmb.fr\/en\/wp-json\/wp\/v2\/media?parent=4675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}