Privacy policy
Entegra builds strong, lasting relationships with its customers, partners, consumers and associates, based on mutual trust: making sure that their personal data are safe and remain confidential is an absolute priority for Entregra.
Entegra complies with all Local regulatory and legal provisions on the protection of personal data.
Entegra enforces a very strict privacy policy to guarantee protection of the personal data of those who use its websites and other applications
Entegra Europe is a margin enhancement business supporting the hospitality and catering industries. We provide procurement, operational and system solutions for our clients to enhance their profitability. Our mission is to improve the margin of every client we serve.
Entegra Europe is wholly owned by Sodexo SA, the world leader in Quality of Life services. Our parent company Sodexo SA was founded in 1966 in France and is now the worldwide leader in quality of life services. We don’t routinely share Personal Data between our group companies and we’ve set out more details about when we do in the section titled “Disclosure of your Information”
PURPOSE OF THIS POLICY
We take the protection of your personal data very seriously.
We developed this policy to inform you of the conditions under which we collect, process, use and protect your personal data. Please read it carefully to familiarize yourself with the categories of personal data that are subject to collection and processing, how we use these data and with whom we are likely to share it. This policy also describes your rights and how you can get in touch with us to exercise these rights or to ask us any questions you might have concerning the protection of your personal data.
This policy may be amended, supplemented or updated, in particular to comply with any legal, regulatory, case law or technical developments that may arise. However, your personal data will always be processed in accordance with the policy in force at the time of the data collection, unless a compulsory legal prescription determines otherwise and must be enforced retroactively.
This policy also forms an integral part of the Terms & Conditions of the website
IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
The personal data controller is the Entegra Company with which you do business:
Belgium Entegra Europe Belgium. 15 boulevard de la Plaine Brussels
France Entegra Europe France SAS 30, Cours de l’Ile Seguin 92777 Boulogne-Billancourt France
Germany Entegra Europe Deutschland GmbH Waldhofer Str. 98 69123 Heidelberg Germany
Ireland Entegra Europe Ireland Ltd. Temple House 57 Temple Road Blackrock Co. Dublin Ireland
Italy Entegra Europe Italia S.R.L. Via Fratelli Gracchi, 36 20092 Cinisello Balsamo Italy
Netherlands Entegra Europe Nederland B.V Watermanweg 30 3067GG Rotterdam Netherlands
Spain Entegra Europe Iberia S.L. Edificio Azasol, 1a Planta Calle Chile, 8 28290 Las Rozas de Madrid , Madrid
UK, Entegra Europe UK Ltd, 1 Southampton Row London WC1B 5HA England
DEFINITIONS
“Personal data” means any information relating to an identified natural person or one that can be directly or indirectly identified by reference to an identification number or to one or more factors specific to this person.
“us” or “our” Entegra entity (hereinafter Entegra).
“you” any website user/visitor.
“Website” the website of the Entegra entity available at the address: https://www.entegraps.com/sites/eps-eu/home.html
COLLECTION AND SOURCE OF PERSONAL DATA, HOW AND WHY WE USE IT
We will most likely collect your personal data directly (in particular via the data collection forms on our website or other applications) or indirectly (in particular via our service providers and/or technologies on our website). We may be provided with information to create log in details for the services we provide to our clients.
We use personal data to provide and manage our services to clients, and carry out our obligations arising from contracts with our clients or third parties in order to fulfil contractual obligations, to run and improve our business, and for marketing, security and fraud prevention purposes.
You will in any event be informed of the purposes for which your data are collected via the various online data collection forms and via the Cookie Policy
We’ve set out more detail about how we use data and the lawful basis to do so, along with any local laws which apply in Annex A.
PURPOSES FOR WHICH WE USE PERSONAL DATA
We use your personal data specifically for the following purposes:
- to fulfil our contractual obligations , including providing access to our services
- respond to your requests such as requests for information, searches, the newsletter or other content; on the website
- to provide the services and offers ordered on our website and/or in one of our establishments;
- to conduct surveys and gather statistics;
- to personalize and enhance your experience on our website;
- to offer you our products and services and/or our partners’ products and services;
- any other purpose of which we will inform you, if applicable, when we collect your data.
- to enter into contracts with suppliers and clients and carry out any due diligence.
LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We process your personal data as part of the performance and management of our contractual relationship with our clients, to comply with legal obligations and in our legitimate interest to improve the quality and operational excellence of the services we offer , market our services, and ensure compliance with certain regulatory obligations.
Your personal data may also be processed based on your prior consent in the event that under certain circumstances, your consent would be requested.
TYPES OF PERSONAL DATA COLLECTED AND USED BY US
We may specifically collect and process the following types of personal data:
- the information that you provide when filling in the forms on the website (for example, for subscription purposes, to participate in surveys, for marketing purposes, etc.);
- the information that you provide for authentication purposes;
- the information that you provide for order fulfillment or to provide a service;
- via “posts”, comments or other content that you post on the website.
Personal data identified by an asterisk in the data collection forms are compulsory as these are necessary to fulfill any orders placed. In the absence of this compulsory information, these transactions cannot be processed. [EBB3]
PERSONAL DATA THAT WE AUTOMATICALLY COLLECT
We collect some information automatically when you visit the website or applications we provide, in order to personalize and enhance your experience. We collect this information using various methods such as:
Cookies
A “cookie” is a small information file sent to your browser when you visit our website and stored on your computer. This file contains information such as the domain name, the internet access provider and the operating system as well as the date and time of access by the user. Cookies cannot damage your computer in any way.
Cookies are not used to determine the identity of an individual who visits our website. Cookies allow us to identify, in particular, your geographic location and the display language in order to improve your online browsing experience. They also enable us to process information about your visit to our website, such as the pages viewed and the searches made, in order to improve our website content, to follow your areas of interest and offer you more suitable content.
If you do not want to receive cookies from our website, you can adjust your browser settings accordingly. To manage your choices, each browser has a different configuration. These configurations are described in your browser’s help menu, which will explain how to change the settings to your desired cookies configuration.
We recommend, however, that you do not deactivate our cookies. Keep in mind that if you block, turn off or reject our cookies, some of our webpages will not display correctly or you will no longer be able to use some of the services we offer. In this case, we cannot be held liable for any consequences related to the reduced functionality of our services arising from our inability to store or consult the cookies required for its functioning and which you have declined or deactivated.
Lastly, by clicking on the dedicated icons of social networks such as Twitter, Facebook, Linkedin, etc., if these are displayed on our website, and if you have agreed that cookies may be downloaded while you are browsing our website, the social networks in question may also download cookies to your devices (computer, tablet or mobile phone). These types of cookies are downloaded to your device only on condition that you have given your consent by continuing to browse our website. You can, however, at any time revoke your consent to these social networks downloading these types of cookies.
For more information, please consult our Cookie Policy.
IP addresses
An IP address is a unique identifier used by some electronic devices to identify and communicate with each other on the internet. When you consult our website, we can use the IP address of the device used by you to connect you to the website. We use this information to determine the general physical location of the device and to know in which geographical areas visitors are located.
Statistics
The website uses Google Analytics to generate statistical reports. These reports tell us, for example, how many users consulted the website, which pages were visited and in which geographical areas website users are located. The information gathered via the statistics may include, for example, your IP address, the website from which you arrived at our site and the type of device that you used. Your IP address is hidden on our systems and will only be used if necessary to resolve a technical problem, for website administration and to gain insight into our users’ preferences. Website traffic information is only accessible to authorized staff. We do not use any of this information to identify visitors and we do not share this information with third parties.
SOCIAL NETWORKS
You have the option to click on the dedicated icons of social networks such as Twitter, Facebook, Linkedin, etc. that appear on our website.
Social networks create a friendlier atmosphere on the website and assist in promoting the website via sharing. Video sharing services enrich the video content of our website and increase its visibility.
When you click on these buttons, we may have access to the personal information that you have made public and accessible via your profiles on the social networks in question. We neither create nor use any separate databases from these social networks based on the personal information that you have published there and we do not process any data relating to your private life through these means.
If you do not want us to have access to your personal information published in the public spaces of your profile or your social accounts, then you should use the procedures provided by the social networks in question to limit access to this information.
SENSITIVE PERSONAL DATA
As a general rule, we do not collect sensitive personal data via our website. “Sensitive personal data” refers to any information concerning a person’s racial or ethnic origins, political opinions, religious or philosophical beliefs, union membership, health data or data relating to the sexual life or the sexual orientation of a natural person. This definition also includes personal data relating to criminal convictions and offenses.
In the event that it would be strictly necessary to collect such data to achieve the purpose for which the processing is performed, we will do so in accordance with local legal requirements for the protection of personal data and, in particular, with your explicit prior consent and under the conditions described in this Confidentiality Policy.
PERSONAL INFORMATION AND CHILDREN
The website is for use by adult persons who have the capacity to conclude a contract under the legislation of the country in which they are located.
Children users under the age of 16 years or without legal capacity must obtain consent from their legal guardians prior to submitting their data to the website.
The 16-year age limit may be reduced to 13 years depending on the local legislation in your usual place of residence.
CUSTOMER RELATIONSHIP MANAGEMENT DATABASE (“CRM DATABASE”)
We use a database to manage and monitor our relationships with existing and potential customers. This database includes the personal data of associates of our customers or other partners with whom we have a business relationship or with whom we want to establish such a relationship. These data, used only for this purpose, notably include: contact details (surname, first name, telephone number, email address, etc.), publicly accessible information, the responses to targeted emails and other information collected and recorded by our associates as part of their interactions with our customers and partners. If you want to be removed from our CRM database, please write to info@entegraps.uk.
WHERE WE STORE PERSONAL DATA
As Entegra is part of an international group, your personal data may be transmitted to internal or external recipients that are authorized to perform services on our behalf and that are located in countries outside the UK or European Union or the European Economic Area which do not offer an adequate level of personal data protection. To guarantee the security and confidentiality of personal data thus transmitted, we will take all necessary measures to ensure that these data receive adequate protection, such as signing standard European Commission contractual clauses or other equivalent measures.
It may also be processed by staff operating outside the UK and EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
Unfortunately, the transmission of information via the internet is not completely secure. Although We will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once We have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
DISCLOSURE OF PERSONAL DATA
The security and confidentiality of your personal data are of great importance to us. This is why we restrict access to your personal data only to members of our staff who need to have this information in order to process your orders or to provide the requested service. We may share your personal data with entities within the Entegra and Sodexo group for the provision of joint services, for example IT support, Legal advice, debt recovery or HR support. It may also be shared for statistical analysis. Where appropriate a data sharing agreement is put in place. In the unusual circumstance that personal data could be shared with a Sodexo group company outside UK/EEA, standard EU contractual clauses will be applied.
We will not disclose your personal data to any unauthorised third parties. We may disclose your personal information to authorised third parties:
• If We sell or buy any business or assets, in which case We may disclose your personal data to the prospective seller or buyer of such business or assets.
• If Entegra or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• If We are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements, or to protect the rights, property, or safety of Entegra and/or its subsidiary and associated companies, our customers, or others or to assist with regulatory or criminal investigations, to prevent physical harm or financial loss. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
• To fulfil a contract
Data may be shared with authorised service providers, for example technical service providers hosting, maintenance, consultants. We do not authorise service providers to use or disclose your data except to the extent necessary to deliver the services on our behalf or comply with legal obligations.
YOUR RIGHTS
We are committed to ensure protection of your rights under applicable laws. You will find below a table summarising your different rights:
|
Right of access |
You can request access to your personal data. You may also request rectification of inaccurate personal data, or to have incomplete personal data completed. You can request any available information as to the source of the personal data and you may also request a copy of your personal data being processed by us. |
|
|
Your right to be forgotten entitles you to request the erasure of your personal data in cases where: |
|
|
You may request that processing of your personal data be restricted in the cases where: |
|
Right to data portability |
You can request, where applicable, the portability of your personal data that you have provided to us, in a structured, commonly used, and machine-readable format and you have the right to transmit this data to another Controller without hindrance from us where: |
|
Right to object to processing including direct marketing |
You can object to us using your Personal Data for direct marketing. You can also contact us to object to how we are using your Personal Data for any other reason but we may not have to stop using it for this purpose. |
|
Right to withdraw consent |
If We process your personal data on the basis of your consent, you can withdraw your consent at any time. |
|
Right not to be subject to automated decisions |
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal affect upon you or significantly affects you. You have the right to object to processing including direct marketing. |
|
Right to lodge a complaint |
You can choose to lodge a complaint with the Data Protection Supervisory Authority in the country of your habitual residence, place of work or place of the alleged infringement, regardless of whether you have suffered damages. In Belgium this is l’Autorité de Protection des Données (APD) Belge http://www.autoriteprotectiondonnees.be/, In France this is the CNIL www.cnil.fr/en, In Germany this is Landesdatenschutzbeauftragte des Bundeslandes, https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. In Ireland this is The Data Protection Commission, www.dataprotection.ie. In Italy this is the Garante www.garente.privacy.it. In the Netherlands this is Autoriteit Persoonsgegevens,autoriteitpersoonsgegevens.nl/en. In Spain this is the Agencia Española de Protección de Datos, www.aepd.es. In the UK this is the ICO, www.ico.co.uk You have also the right to lodge your complaint before the courts where We have an establishment or where you have your habitual residence. |
To make a request you can send your request by email to jennifer.grant3@entegraps.eu
The Group Data Protection Officer can be contacted at dpo.group@sodexo.com
If you wish to unsubscribe to marketing emails communications, you can also do so by using the unsubscribe function on the email.
Our site may, from time to time, contain links, plug-ins or applications to and from the websites of our group companies, partner networks, advertisers and affiliates. If you follow a link to any of these websites or enable these connections, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
STORAGE LIMITATION AND ACCURACY
We will keep Personal Data that is processed accurate and, where necessary, up to date. We only keep Personal Data for as long as necessary for the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements and, where required for us to assert or defend against legal claims, until approximately 6 months after the end of any relevant legal limitation period. If you want to learn more about our specific retention periods for your Personal Data established in our retention policy you may contact us via email at info@entegraps.uk. Upon expiry of the applicable retention period we will securely destroy your personal data in accordance with applicable and regulations.
SECURITY
We implement all appropriate technical and organizational security measures to ensure security and confidentiality in processing your personal data.
To this end, we take all necessary precautions given the nature of the personal data and the risks related to its processing, in order to maintain data security and in particular to prevent distortion, damage or unauthorized third-party access (physical protection of the premises, authentication procedures with personal, secured access via identifiers and confidential passwords, a connection log, encryption of certain data, etc.).
We take, when appropriate, all reasonable measures based on privacy by design and privacy by default principles to implement the necessary safeguards and protect the Processing of Personal Data. We also carry out, depending on the level of risk raised by the processing, a Data Protection Impact Assessment (“DPIA”) to adopt appropriate safeguards and ensure the protection of the Personal Data. We also provide additional security safeguards for data considered to be Sensitive Personal Data.
LINKS TO OTHER SITES
Occasionally, we provide links to other websites for practical and informative purposes. These websites are mostly Sodexo websites and some of them operate independently from our websites and are not under our control. These websites are run by third parties with their own confidentiality recommendations or terms of use which we strongly advise you to read. We do not accept any liability with regard to the content on these sites, for the products and services that may be offered there or for any other use thereof.
UPDATES OF OUR POLICY
Any changes We may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Amendments will only become applicable after a period of 30 business days from the date of the amendment. Please consult this page from time to time if you want to be informed of any possible changes.
HOW TO CONTACT US
If you have any questions or comments with regard to this policy, please do not hesitate to contact us at the following address: info@entegraps.uk
Last updated: 01/02/2023
Annex A
How we may collect data from you and how and why we use it.
|
Obtained from |
Personal Data |
Purpose and legal ground |
|
Directly (from webforms/calls/emails) or from a provider/previous provider of the service. |
Identity Data includes name, username or similar identifier. |
Carry out the service provided by us or a client of ours/previous provider - steps to enter contract or perform/fulfil the contract, legal obligation, our legitimate interests of running and improving our business, recovering payments, security, health and safety, fraud prevention customer service, statistical analysis and marketing including segmenting. |
|
Directly (from webforms/calls/emails) or from a provider/previous provider of the service |
Contact Data includes billing and delivery address, email address and telephone numbers. |
Carry out the service provided by us or a client of ours/previous provider - steps to enter contract or perform/fulfil the contract, legal obligation, our legitimate interests of running and improving our business, recovering payments, security, health and safety, fraud prevention customer service, statistical analysis and marketing including segmenting. |
|
Directly (from webforms/calls) |
Financial Data includes bank account and payment card details. |
Carry out the service provided by us or a client of ours - steps to enter contract or perform/fulfil the contract, legal obligation, our legitimate interests recovering payments and keeping accounting records and fraud prevention. |
|
Directly (from webforms/calls from the person booking the event) or from a provider (previous provider) of the service |
Transaction Data includes details about payments to and from you and other details of products and services you have purchased or enquired about from us or vice versa. This will include details about delivery of services, such as dietary requirements for catering events. |
Carry out the service provided by us or a client of ours/previous provider - steps to enter contract or perform/fulfil the contract, legal obligation, our legitimate interests of running and improving our business, recovering payments, security, health and safety, fraud prevention customer service, statistical analysis and marketing including segmenting. |
|
Directly from use of website |
Technical Data includes IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website. |
Carry out the service provided by us or a client of ours - steps to enter contract or perform/fulfil the contract, legal obligation, our legitimate interests of running and improving our business, security, fraud prevention and marketing. To ensure that content from our site is presented in the most effective manner for you and for your computer. |
|
Directly (from webforms/calls/bookings information) and inferred from the information provided |
Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses. |
Provide service (steps to enter contract or perform contract), legal obligation, our legitimate interests of running and improving our business, customer experience security, fraud prevention, statistical analysis and marketing including segmenting. |
|
Directly (from websites) |
Usage Data includes information about how you use our website, products and services. |
Our legitimate interests of running and improving our business, marketing, security and fraud prevention. |
|
Directly (from webforms/calls/letters/emails) or from a previous provider of the service and where applicable third parties providing preference services checks, entering a competition and surveys |
Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences. |
Provide service (steps to enter contract or perform contract), legal obligation, our legitimate interests of running and improving our business, marketing and security, or for electronic marketing to individuals contact is by consent. Necessary for our legitimate interests (to develop our products/services and grow our business). |
|
Contact data from publicly identifiable sources (such as companies house, Linked in, electoral register, IP look up) data matching, including meta data. |
Name, work email and other contact details, meta data, IP (or equivalent device address identifier), preferences. |
Our legitimate interests of running and improving our business, statistical analysis, marketing including segmenting, customer experience and security and fraud prevention. Necessary for our legitimate interests to develop our products/services and grow our business. |
Explanation of the purposes which we may use your personal data
Contract and providing services
This means things like:
• Carrying out our obligations arising from any contracts entered into between you and us, or a third party we are fulfilling a contract for. For example, sometimes we provide services for a corporate client for users of their service etc.
• Allowing you to participate in interactive features of our service, when you choose to do so.
• Notifying you about changes to our service or that we have taken over a service/business.
• Registering you as a new customer or authorised user
• Managing your relationship with us.
Legal Obligations
This is things like keeping records for tax purposes and complying with statutory requirements when providing services to consumers.
Legitimate Interests
This means things like running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise, health and safety or security requirements.
It can also mean enabling you to participate in a prize draw, competition or complete a survey. Studying how customers use our products and services to develop our business. We may use your identity, contact, technical, usage and profile data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing). For example, we may market an event to individuals who live near a venue based on the geographical data we hold about them. We only send electronic direct marketing communications to individuals if they have consented to us doing so.
