Atos Approach to Privacy
Privacy Notice
Privacy Notice
As a global organization with legal entities in 69 different countries and over 105,000 employees, Atos recognizes the importance of data privacy for our customers, partners and employees. We understand that by allowing us to process your data we must be vigilant in our security and data privacy practices. Atos will comply with the applicable data protection legislation, adhere to its own privacy policies and procedures, including its Binding Corporate Rules to ensure the highest standards of data protection across the Atos group. Moreover, our Annual Data Protection Report shows our continuous commitment to data protection principles and their implementation within our company.
Scope of the notice
This Privacy Notice informs you about Atos’s privacy practices and of the choices you can make regarding the processing of your data, and how to exercise your rights in relation to your personal data.
This Privacy Notice applies to all Atos Entities and its affiliates.
Atos may provide additional data privacy notices to applicable laws for specific territories and regions. Those privacy policies can be found on country-specific pages and are to be read in conjunction with this privacy notice.
Please note that this privacy notice does not apply to any personal data we process on behalf of our clients in our role of data processors or subprocessors. The data processing contracts that we have with our clients dictate how we are to process your personal data on our clients’ behalf. If you are a customer or employee of one of Atos’s clients and have questions or concerns pertaining to the processing of your personal data, we recommend that you contact the DPO of the clients.
Your Rights
Under data protection law, you have rights including:
- Your right of access– You have the right to ask us for copies of your personal information.
- Your right to rectification– You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure– You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing– You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing– You have the the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability– You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
- Your right to lodge a complaint with the Data Protection Authority. To learn more about what is the Data Protection Authority that is competent for the processing of your data, please visit our local national webpages.
You are not required to pay any charge for exercising your rights.
In case you would like to exercise your rights or lodge a complaint please use the Atos online form available here.
Data collected
Newsletter subscriber
| Purpose | Legal basis | Personal data | Recipients | Retention |
|---|---|---|---|---|
| Processing of contact details to send you our newsletter(s) | Your consent | Name, surname, email, connection data and date of subscription |
|
We keep your data until you unsubscribe, or you explicitly request us to delete your data |
Events
| Purpose | Legal basis | Personal data | Recipients | Retention |
|---|---|---|---|---|
| Managing your registration and participant to our Event(s) | Our legitimate interest | Name and surname, e-mail, job role and company, country |
|
Automatic deletion 2 years after the date of the event |
| Ensuring broadcasting of an online Event(s), if applicable | Our legitimate interest | Name and surname, e-mail, job role and company, country, image (for speakers) |
|
Automatic deletion 2 years after the date of the event |
| Taking pictures and/or videos | Your consent | Your image, audio and likeliness (as captured on a webinar, in photographs or recordings taken at an event |
|
Automatic archiving 2 years after the date of recording, alternatively they can be deleted upon your request |
| Processing contact details for inviting you to future events | Your consent | Name and surname, e-mail, job role and company, country |
|
Automatic deletion 2 years after the date of the event |
Recruitment
A dedicated notice to job applicant(s) is available at the following link: Job Applicant Privacy Notice (atos.net)
Clients, business partners and providers
| Purpose | Legal basis | Personal data | Recipients | Retention |
|---|---|---|---|---|
| Processing of contact details for the management of the business opportunity and/or negotiation, conclusion and execution of the agreement | Our legitimate interest | Name and surname, e-mail, job role and company, link with a specific account and/or contract |
|
Deletion 3 years since last contact with trigger moment being end of contract or opportunity |
| Contacting clients or prospects to present Atos’ products or services | Our legitimate interest | Name and surname, e-mail, job role and company, link with a specific account and/or contract |
|
Deletion 3 years since last contact with trigger moment being end of contract or opportunity |
| Creation and publication of client stories | Your consent | Name and surname, job role and company; picture |
|
Automatic archiving 2 years after the date of recording, alternatively they can be deleted upon your request |
Legal obligations
| Purpose | Legal basis | Personal data | Recipients | Retention |
|---|---|---|---|---|
| Ensuring compliance with legal and/or regulatory requirements | Legal obligation | Depending on each specific case, but this may include name and surname, contact details |
|
Depending on the local requirements of the country in which the Atos entity operates |
International transfers
Atos is a worldwide organization. Therefore, we have distinct legal entities, country affiliates and subsidiaries in many parts of the world. Our internal processes and infrastructure are international in scope and nature and will cross country borders. Therefore, you should be aware that we may share your personal data with other entities of Atos and transfer it to countries in different parts of the world where we have data centres or where we do business, including those located outside the European Union (EU). The international transfer of personal data within Atos Group will be covered by Atos standards as set forth in the Atos Binding Corporate Rules.
Security
You can learn more about the security measures we put in place by accessing the Global Data Protection Statement Atos Group.