Privacy Policy
Cheil France is committed to protecting your privacy and your personal data.
1. Purpose
This Personal Data Protection Policy (hereinafter the “Policy”) informs you of how your personal data is collected and processed by Cheil France, a simplified joint-stock company (société par actions simplifiée) with a share capital of 330,000 euros, having its registered office located at 6 rue Fructidor, 93400 Saint-Ouen-sur-Seine, France, acting in its capacity as data controller in the context of:
– the operation of the website https://cheil.com/fr;
– the management of contact inquiries and new business inquiries;
– the management of job applications;
– and more generally, the management of relations with our contacts, prospects, clients, partners, and suppliers.
Personal data processing activities carried out by Cheil France acting as a data processor on behalf of its clients are subject to separate data processing agreements and remain governed by the privacy policies of said clients. This Policy is accessible at any time from our homepage and at the bottom of each page of the website. Cheil France is committed to protecting user privacy and processing their data in compliance with applicable regulations, in particular the GDPR (General Data Protection Regulation) and the French Data Protection Act (Loi Informatique et Libertés).
– the operation of the website https://cheil.com/fr;
– the management of contact inquiries and new business inquiries;
– the management of job applications;
– and more generally, the management of relations with our contacts, prospects, clients, partners, and suppliers.
Personal data processing activities carried out by Cheil France acting as a data processor on behalf of its clients are subject to separate data processing agreements and remain governed by the privacy policies of said clients. This Policy is accessible at any time from our homepage and at the bottom of each page of the website. Cheil France is committed to protecting user privacy and processing their data in compliance with applicable regulations, in particular the GDPR (General Data Protection Regulation) and the French Data Protection Act (Loi Informatique et Libertés).
2. Definitions
The terms below, whether used in the singular or plural, shall have the following meanings:
o “Personal data”: any information relating to an identified or identifiable natural person, directly or indirectly, within the meaning of the Regulations;
o “Data subject”: any natural person whose personal data is processed by Cheil France;
o “Regulations”: the regulations in force in France applicable to the processing of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”) and Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended;
o “Data controller”: the natural or legal person who determines the purposes and means of the processing of personal data within the meaning of the Regulations;
o “Data processor”: the natural or legal person who processes personal data on behalf of the data controller in the context of a service or provision of services;
o “Website”: the Cheil France website accessible at the URL: https://cheil.com/fr;
o “Processing”: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
o “Personal data”: any information relating to an identified or identifiable natural person, directly or indirectly, within the meaning of the Regulations;
o “Data subject”: any natural person whose personal data is processed by Cheil France;
o “Regulations”: the regulations in force in France applicable to the processing of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”) and Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended;
o “Data controller”: the natural or legal person who determines the purposes and means of the processing of personal data within the meaning of the Regulations;
o “Data processor”: the natural or legal person who processes personal data on behalf of the data controller in the context of a service or provision of services;
o “Website”: the Cheil France website accessible at the URL: https://cheil.com/fr;
o “Processing”: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
3. How do we process your personal data?
This Policy applies to Cheil France in its capacity as a data controller.
When you browse and interact on the Website, and more generally during your interactions or communications with Cheil France, Cheil France may collect and process data concerning you for the management of its activities, as a data controller.
Cheil France respects the right of every individual (clients, prospects, partners, Website users) to have their personal data protected. Cheil France observes the principles defined by the Regulations:
o process your personal data lawfully, fairly, and in a transparent manner;
o collect your personal data for specified, explicit, and legitimate purposes, and not further process it in a manner that is incompatible with those purposes;
o ensure that the personal data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is collected and processed. Personal data may be anonymized where possible and appropriate, depending on the nature of the data and the risks associated with the intended uses;
o keep your personal data accurate and, where necessary, kept up to date. We will take reasonable steps to rectify or erase inaccurate or incomplete data;
o retain personal data for no longer than is necessary for the purposes for which it is collected and processed;
o process personal data in respect of the rights of data subjects;
o implement technical, physical, and organizational measures to secure your data and prevent unauthorized access, unlawful processing, and unauthorized or accidental loss, destruction, or damage to personal data;
o process your personal data in compliance with the legal bases for processing, including obtaining consent where required.
When you browse and interact on the Website, and more generally during your interactions or communications with Cheil France, Cheil France may collect and process data concerning you for the management of its activities, as a data controller.
Cheil France respects the right of every individual (clients, prospects, partners, Website users) to have their personal data protected. Cheil France observes the principles defined by the Regulations:
o process your personal data lawfully, fairly, and in a transparent manner;
o collect your personal data for specified, explicit, and legitimate purposes, and not further process it in a manner that is incompatible with those purposes;
o ensure that the personal data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is collected and processed. Personal data may be anonymized where possible and appropriate, depending on the nature of the data and the risks associated with the intended uses;
o keep your personal data accurate and, where necessary, kept up to date. We will take reasonable steps to rectify or erase inaccurate or incomplete data;
o retain personal data for no longer than is necessary for the purposes for which it is collected and processed;
o process personal data in respect of the rights of data subjects;
o implement technical, physical, and organizational measures to secure your data and prevent unauthorized access, unlawful processing, and unauthorized or accidental loss, destruction, or damage to personal data;
o process your personal data in compliance with the legal bases for processing, including obtaining consent where required.
4. What personal data is collected?
In its capacity as data controller, Cheil France collects and processes your personal data after having appropriately informed you. Personal data corresponds to any information relating to an identified or identifiable person. An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identifier or to one or more factors specific to their physical, physiological, mental, economic, cultural, or social identity.
This Policy does not cover data that has been anonymized, i.e., where individuals are no longer identifiable or can only be identified at the expense of disproportionate time and effort. If anonymous data becomes identifiable, or if pseudonyms are used that allow the identification of individuals, this Policy shall then apply.
The decision to provide us with personal data rests with you. However, if you choose not to provide us with the necessary information when sending your email, we will not be able to process your contact request or review your job application.
In general, your personal data is collected directly from you when you send an email to our dedicated email addresses (New Business, Career). It may also be collected from third parties (for example, professional social networks such as LinkedIn).
The personal data we process includes:
o Data relating to contact / New Business inquiries: first name, last name, email address, phone number, company, job title, as well as any content or message included in your email;
o Data relating to job applications (Career): first name, last name, email address, phone number, CV, cover letter, academic and professional background, skills, and any document or information transmitted as part of your application;
o Connection and browsing data: IP address, browsing history on the Website, data derived from cookies and trackers present on the Website.
Unless required by specific legal obligations, we do not collect "sensitive" personal data or special categories of personal data. In general and unless otherwise excepted, the use of the Website is reserved for adults (persons of legal age).
This Policy does not cover data that has been anonymized, i.e., where individuals are no longer identifiable or can only be identified at the expense of disproportionate time and effort. If anonymous data becomes identifiable, or if pseudonyms are used that allow the identification of individuals, this Policy shall then apply.
The decision to provide us with personal data rests with you. However, if you choose not to provide us with the necessary information when sending your email, we will not be able to process your contact request or review your job application.
In general, your personal data is collected directly from you when you send an email to our dedicated email addresses (New Business, Career). It may also be collected from third parties (for example, professional social networks such as LinkedIn).
The personal data we process includes:
o Data relating to contact / New Business inquiries: first name, last name, email address, phone number, company, job title, as well as any content or message included in your email;
o Data relating to job applications (Career): first name, last name, email address, phone number, CV, cover letter, academic and professional background, skills, and any document or information transmitted as part of your application;
o Connection and browsing data: IP address, browsing history on the Website, data derived from cookies and trackers present on the Website.
Unless required by specific legal obligations, we do not collect "sensitive" personal data or special categories of personal data. In general and unless otherwise excepted, the use of the Website is reserved for adults (persons of legal age).
5. What is the purpose, legal basis, and retention period for collecting your data?
In accordance with applicable regulations, the personal data we collect is used to fulfill the purposes for which it was collected, for the duration indicated in the table below.
The processing operations carried out by Cheil France have the following purposes, legal bases, and retention periods:
In the event of litigation or proceedings, particularly judicial proceedings, initiated prior to the expiry of the periods specified above that require the retention of personal data, notably for the establishment, exercise, or defense of legal rights, such data will be retained for the duration of said proceedings and until all rights of appeal have been definitively exhausted.
The processing operations carried out by Cheil France have the following purposes, legal bases, and retention periods:
|
Purposes
|
Legal Basis
|
Retention Period
|
|
Management and follow-up of contact inquiries and New Business (emails sent to Cheil France)
|
Legitimate interest of Cheil France
|
Duration necessary to process the request (or up to 3 years from the last contact)
|
|
Management of job applications (Career) (CVs and cover letters)
|
Legitimate interest of Cheil France / Pre-contractual measures
|
2 years from the last contact
|
|
Management of relationships with clients, partners, and suppliers
|
Performance of a contract / Legal obligation (accounting/tax/administrative)
|
Duration of the contract plus applicable statutory limitation periods
|
|
Management of corporate communications (Website and social media)
|
Legitimate interest of Cheil France
|
Duration of the communication plus applicable statutory limitation periods
|
|
Management of cookies and other trackers on the Website
|
Consent / Legitimate interest of Cheil France (technical cookies)
|
Retention periods specified in the cookie policy (or max 13 months in accordance with CNIL recommendations)
|
|
Reporting and security of access to the Website
|
Legitimate interest of Cheil France
|
6 months to 1 year maximum
|
|
Administrative and legal formalities and anti-fraud measures
|
Legal and regulatory obligation
|
Duration of applicable statutory limitation periods
|
|
Exercise of your rights regarding personal data
|
Legal and regulatory obligation
|
1 year or 6 years from the request to exercise rights, depending on the right exercised
|
In the event of litigation or proceedings, particularly judicial proceedings, initiated prior to the expiry of the periods specified above that require the retention of personal data, notably for the establishment, exercise, or defense of legal rights, such data will be retained for the duration of said proceedings and until all rights of appeal have been definitively exhausted.
6. Who are the recipients of your data?
Your personal data may be communicated, in accordance with their respective duties and authorizations and strictly on a need-to-know basis for their activities, to the personnel of the following teams and departments at Cheil France, strictly in line with the pursued purposes:
Internal recipients: Creative, Brand Experience, Retail, Strategic Planning, Print, and Digital teams, as well as the Finance, Human Resources, and IT teams.
External recipients: Website hosting providers, auditors and statutory auditors, legal counsel, insurers, duly authorized partners, service providers, and subcontractors that we may engage in the operation of our business, tax and social security bodies, public authorities, court officers, and judicial officers, where applicable.
We invite you to browse our website (https://cheil.com/fr) for more information about Cheil France.
Internal recipients: Creative, Brand Experience, Retail, Strategic Planning, Print, and Digital teams, as well as the Finance, Human Resources, and IT teams.
External recipients: Website hosting providers, auditors and statutory auditors, legal counsel, insurers, duly authorized partners, service providers, and subcontractors that we may engage in the operation of our business, tax and social security bodies, public authorities, court officers, and judicial officers, where applicable.
We invite you to browse our website (https://cheil.com/fr) for more information about Cheil France.
7. Data Transfers
Cheil France prioritizes the processing and storage of your personal data within the European Union. Nevertheless, in certain circumstances, your data may be transmitted to entities located outside the European Union (notably entities within the Cheil group or third-party service providers).
Where these countries benefit from an adequacy decision adopted by the European Commission, your data is transferred on this basis.
In other cases, Cheil France ensures that such transfers are governed by appropriate safeguards, in particular through the signing of Standard Contractual Clauses (SCCs) in accordance with the models of the European Commission, combined where necessary with supplementary security measures to guarantee the effective protection of your data. We also inform you that transfers of personal data outside the European Union are lawful, in particular if:
o the transfer is necessary for the performance of a contract between the data subject and the data controller, or for the implementation of pre-contractual measures taken at the request of the data subject;
o the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the data controller and another natural or legal person;
o the data subject has given their explicit consent to the proposed transfer, after having been informed of the potential risks associated with such transfer.
Where these countries benefit from an adequacy decision adopted by the European Commission, your data is transferred on this basis.
In other cases, Cheil France ensures that such transfers are governed by appropriate safeguards, in particular through the signing of Standard Contractual Clauses (SCCs) in accordance with the models of the European Commission, combined where necessary with supplementary security measures to guarantee the effective protection of your data. We also inform you that transfers of personal data outside the European Union are lawful, in particular if:
o the transfer is necessary for the performance of a contract between the data subject and the data controller, or for the implementation of pre-contractual measures taken at the request of the data subject;
o the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the data controller and another natural or legal person;
o the data subject has given their explicit consent to the proposed transfer, after having been informed of the potential risks associated with such transfer.
8. Security and Subcontracting
Cheil France attaches particular importance to the security of your personal data. To this end, Cheil France has implemented appropriate technical and organizational measures given the nature of the personal data, in order to ensure its integrity and confidentiality and to protect it against any malicious intrusion, loss, alteration, or disclosure to unauthorized third parties. Nevertheless, the security and confidentiality of personal data also rely on the best practices of each individual, and you are invited to remain vigilant in this regard.
When Cheil France engages a subcontractor (data processor), we only disclose personal data to them after obtaining undertakings and guarantees regarding their ability to meet security and confidentiality requirements, and after entering into a written contractual agreement with them.
When Cheil France engages a subcontractor (data processor), we only disclose personal data to them after obtaining undertakings and guarantees regarding their ability to meet security and confidentiality requirements, and after entering into a written contractual agreement with them.
9. Third-Party Websites
The Cheil France website may provide links to third-party applications, products, services, or websites for your convenience and information. If you access these links, you will leave the Website.
Cheil France exercises no control over these third-party websites or their privacy and data protection practices, which may differ from ours. Consequently, Cheil France disclaims all responsibility and liability for the content of these websites and their personal data protection practices.
Personal data that you choose to provide via these websites or that is collected by these third parties is not covered by this Privacy Policy. We encourage you to review the data protection policy of any website you interact with before providing them with your personal data.
Cheil France exercises no control over these third-party websites or their privacy and data protection practices, which may differ from ours. Consequently, Cheil France disclaims all responsibility and liability for the content of these websites and their personal data protection practices.
Personal data that you choose to provide via these websites or that is collected by these third parties is not covered by this Privacy Policy. We encourage you to review the data protection policy of any website you interact with before providing them with your personal data.
10. Cookie Management
Cheil France uses cookies on its Website. The management of cookies is subject to a specific policy (“Cookie Policy”) accessible directly on the Website.
11. What are your rights regarding your personal data?
Your right of access
In this respect, you have the right to obtain confirmation as to whether or not your personal data is being processed, and where that is the case, you have the right to request a copy of your data and information concerning:
o The purposes of the processing;
o The categories of personal data concerned;
o The recipients or categories of recipients and, where applicable, international organizations to which the data has been or will be disclosed;
o Where possible, the envisaged retention period or the criteria used to determine that period;
o The existence of the right to request rectification, erasure, restriction of processing, or to object to such processing;
o The right to lodge a complaint with a supervisory authority;
o Information regarding the source of the data where it is not collected directly from you;
o The existence of automated decision-making, including profiling.
Your right to rectification of your data
You may request that your personal data be rectified or completed, as appropriate, if it is inaccurate, incomplete, ambiguous, and/or outdated.
Your right to erasure of your data
You may request the erasure of your personal data in the cases provided for by regulation. This is not an absolute right and can only be applied if one of the legal grounds is met.
Your right to restriction of processing
You may request the restriction of the processing of your personal data in the cases provided for by regulation.
Your right to object to processing
You have the right to object at any time, on grounds relating to your particular situation, to processing based on Cheil France's legitimate interests. In the event this right is exercised, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Your right to data portability
You have the right to the portability of your personal data. This right is limited to automated processing where the legal basis is your consent or the performance of a contract / pre-contractual measures.
Your right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time. This withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Your right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL: www.cnil.fr).
Your right to define post-mortem directives (France)
In accordance with the French Data Protection Act (Loi Informatique et Libertés), you have the option to define directives regarding the retention, erasure, and communication of your personal data after your death.
How to exercise your rights
You may exercise your rights with Cheil France:
By email: gdpr@cheil.com
By post: Data Protection Officer, Cheil France, 6 rue Fructidor, 93400 Saint-Ouen-sur-Seine, France
We will respond as soon as possible and, in any event, within a maximum of one month from receipt of the request. This period may be extended by two months taking into account the complexity and number of requests, in which case you will be informed.
In this respect, you have the right to obtain confirmation as to whether or not your personal data is being processed, and where that is the case, you have the right to request a copy of your data and information concerning:
o The purposes of the processing;
o The categories of personal data concerned;
o The recipients or categories of recipients and, where applicable, international organizations to which the data has been or will be disclosed;
o Where possible, the envisaged retention period or the criteria used to determine that period;
o The existence of the right to request rectification, erasure, restriction of processing, or to object to such processing;
o The right to lodge a complaint with a supervisory authority;
o Information regarding the source of the data where it is not collected directly from you;
o The existence of automated decision-making, including profiling.
Your right to rectification of your data
You may request that your personal data be rectified or completed, as appropriate, if it is inaccurate, incomplete, ambiguous, and/or outdated.
Your right to erasure of your data
You may request the erasure of your personal data in the cases provided for by regulation. This is not an absolute right and can only be applied if one of the legal grounds is met.
Your right to restriction of processing
You may request the restriction of the processing of your personal data in the cases provided for by regulation.
Your right to object to processing
You have the right to object at any time, on grounds relating to your particular situation, to processing based on Cheil France's legitimate interests. In the event this right is exercised, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Your right to data portability
You have the right to the portability of your personal data. This right is limited to automated processing where the legal basis is your consent or the performance of a contract / pre-contractual measures.
Your right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time. This withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Your right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL: www.cnil.fr).
Your right to define post-mortem directives (France)
In accordance with the French Data Protection Act (Loi Informatique et Libertés), you have the option to define directives regarding the retention, erasure, and communication of your personal data after your death.
How to exercise your rights
You may exercise your rights with Cheil France:
By email: gdpr@cheil.com
By post: Data Protection Officer, Cheil France, 6 rue Fructidor, 93400 Saint-Ouen-sur-Seine, France
We will respond as soon as possible and, in any event, within a maximum of one month from receipt of the request. This period may be extended by two months taking into account the complexity and number of requests, in which case you will be informed.
12. Changes to the Personal Data Protection Policy
Cheil France reserves the right to modify this policy as necessary, for example, to comply with changes in laws, regulations, Cheil France’s practices and procedures, or requirements imposed by data protection authorities. The updated policy will be published on the Website. We encourage you to review it regularly.
If you have any questions or comments regarding this policy, please contact Cheil France using the contact details provided in Article 11 above.
Last updated: July 2026.
If you have any questions or comments regarding this policy, please contact Cheil France using the contact details provided in Article 11 above.
Last updated: July 2026.