Toshiba Lighting France (data controller) is a simplified joint stock company, whose registered office is located at 42 Rue Saint-Dizier, 54000 Nancy, is registered with the Nancy Trade and Companies Register under number 341 791 903 and is a subsidiary of the Toshiba Group.

Toshiba Lighting France, like the Toshiba Group, attaches great importance to the protection of your personal data and therefore undertakes to apply French and European law relating to the processing of personal data.

The purpose of this policy is to inform you of the principles governing the way we process your personal data, as well as the purposes of the main processing operations carried out by Toshiba Lighting France.

You are invited to read it carefully and to read it regularly in order to be aware of any changes or updates made to it.

1. Legal and regulatory framework

Toshiba Lighting France undertakes to comply with all the obligations incumbent upon it in compliance with the applicable regulations regarding the protection of personal data, and in particular:

• Law No. 78-17 of January 6, 1978 relating to computers, files and freedoms, as amended by Law No. 2018-493 of June 20, 2018;
• European Regulation n°2016/679 of 27 April 2016 (hereinafter the "Regulation").

2. Methods for processing personal data    

Toshiba Lighting France and the Toshiba Group are required to process the personal data of their customers, prospects and suppliers, on the basis of the execution of the contract involved, the pursuit of its legitimate interests (commercial interests, improvement of the services offered, continuity of services, IT security, etc.) or their legal obligations for the following purposes:

Clients

• Business Relationship Management;
• Creating a customer account;
• Management and follow-up of orders;
• Logistics management;
• Improvement of customer service;
• Customer accounting management (invoicing, general accounting, collection);
• Complaints follow-up;
• Management of commercial prospecting;
• Management of commercial communication (websites, distribution of catalogues, emailing, sending samples);
• Management of the computer support associated with the management of the customer account;
• Personalized contact (incoming calls);
• Elaboration of business statistics;
• IT security management;
• Follow-up of requests to exercise the rights of the persons concerned.

Prospects

• Management of commercial prospecting;
• Management of commercial communication (websites, distribution of catalogues, emailing, sending samples);
• Elaboration of business statistics;
• Follow-up of requests to exercise the rights of data subjects.

Suppliers

• Business Relationship Management;
• Supply Management;
• Supply Order Management;
• Delivery Management;
• Supplier payment management;
• Accounting management;
• Gestion de la comptabilité ;
• Personalized connection (inbound calls);
• Elaboration of business statistics;
• Follow-up of requests to exercise the rights of data subjects.

For this purpose, we process data relating to your identity (last name, first name, e-mail address, telephone number, postal address, position held in your company) and data of an economic and professional nature (bank details of the company in which you work, bank card details) as well as any personal information appearing on documents associated with the processing operations carried out.

In this context, personal data is processed for a period not exceeding that necessary for the purposes intended, taking into account the applicable limitation periods.

The recipients of the personal data are (strictly in consideration of the purposes):

Toshiba Group entities and internal departments;

• our IT service providers;
• our marketing service providers;
• our carriers;
• the banks;
• our chartered accountant;
• our auditor
• any other subcontractor of Toshiba Lighting France or the Toshiba Group.

As part of this processing, we may transfer your personal data to countries outside the European Union. In this case, Toshiba Lighting France and the Toshiba Group undertake to ensure a sufficient and appropriate level of data protection.

3. Security measures enforced

The Toshiba Group is committed to maintaining the confidentiality, integrity, availability and security of your personal data. In compliance with article 32 of the Regulation, the Toshiba Group undertakes to implement the appropriate technical, logical and organizational measures to ensure the level of security best suited to the risks involved in processing your personal data. Toshiba Group also implements measures to prevent, as far as possible, any loss, accidental destruction, alteration and unauthorized access to your personal data.

4. Exercising your rights

In compliance with the applicable law, you have the right:

• To access and rectify your personal data (right of access and rectification);
• To oppose the processing of your personal data for legitimate reasons (right of opposition);
• Within the limits provided for by the texts, to request that the processing of your personal data be limited or that the personal data be deleted (right of limitation and right of deletion);
• To request the portability of your personal data (right to portability).

If you have any questions about this policy or any request relating to the processing of your Data, you can contact us:

• By postal mail at the following address: TLF, 42 rue Saint Dizier, 54000 NANCY
• By e-mail to the following address: [email protected]

Finally, we inform you that you have the right to lodge a complaint with a supervisory authority such as the Commission Nationale de l'Informatique et des Libertés (CNIL) regarding the way in which we processed your Data.