SANTARELLI is the Data Controller of the personal data collected on this website, within the meaning of the regulations on the protection of personal data.
This policy defines our practices regarding the protection of personal data.
What is personal data?
Personal data is defined as any information relating to a natural person which allows that person to be identified, directly or indirectly.
Identification of a natural person may be achieved through a name, first name, photograph, video, voice recording, social security number, employee number, telephone number, etc.
Conversely, company contact details (for example, the company “Company A” with its postal address, switchboard number, and a generic contact email “”) are not, in principle, considered personal data.
How do we collect your personal data?
Your data is collected lawfully, fairly, and transparently when:
- you complete the contact form available on the site,
- you submit an application via the “Careers” form,
- you browse the site, in which case technical data (IP addresses, connection logs, cookies) may be recorded.
What personal data do we process?
We undertake to collect only the data strictly necessary for the purposes pursued.
We process the following categories of data:
- Contact form: Title, Last name, First name, Email, Telephone
- Unsolicited application form: Title, Last name, First name, Email, Telephone, CV (attachment), Cover letter (attachment)
- Technical data: IP address, browsing information (language, type, server errors)
Why do we process your personal data and for how long is it retained?
We process your data for specific, explicit, and legitimate purposes.
Your data is retained for the period necessary to achieve the purposes mentioned above.
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Internal statistical analyses | Legitimate interest of SANTARELLI in improving its services and website | 13 months |
| Processing and handling of requests via the contact form | Legitimate interest of SANTARELLI in responding to incoming requests | 2 years from the last incoming contact |
| Management of applications (employment, work-study, apprenticeship, internship) | Execution of pre-contractual measures and management of the contractual relationship | 2 years after the last contact with the applicant, unless hired |
Who are the recipients of your data?
Your personal data is accessible only to authorized recipients and strictly limited to what is necessary. These include:
- Internal services of SANTARELLI, e.g., the Human Resources department for applications or the relevant team for handling contact requests;
- Pixine, our technical service provider responsible for website maintenance;
- OVH, our hosting provider, whose servers are located in France and Western Europe.
All these providers act as processors, under contracts compliant with GDPR requirements, ensuring in particular the security and confidentiality of the data entrusted to them
Are your data transferred outside the European Union?
In the context of the use of Google Analytics, certain browsing data may be transferred to the United States. Google may store and process this information on servers located outside the European Union.
These transfers are governed by the General Data Protection Regulation (GDPR) and rely on the adequacy decision of the European Commission recognizing the EU–US Data Privacy Framework, to which Google has adhered, thereby guaranteeing a level of protection considered equivalent to that of the European Union.
What security do we guarantee?
We implement appropriate technical and organizational measures to preserve the security and confidentiality of your personal data.
In particular, we manage internal access rights and perform IT backup operations.
These measures are intended to protect your personal data against unauthorized access, use, modification, or disclosure.
What are your rights?
You have the right to information, access, rectification, erasure, restriction, and portability of your personal data.
For more information on your rights, we invite you to read the CNIL’s dedicated section: CNIL – Your rights over your personal data.
You also have the right to object to the processing of your personal data on legitimate grounds.
Where the processing of your data is based on consent, you may withdraw it at any time, without justification.
You also have the right to define instructions regarding the retention, erasure, and disclosure of your personal data after your death, in accordance with applicable law.
These rights may be exercised directly via the website’s contact form, by email at , or by post at the following address:
Santarelli
6 impasse Labrousse
31000 Toulouse – France
All requests will be processed as quickly as possible and in accordance with applicable law.
If you believe that the processing of your personal data infringes your rights, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL):
CNIL
3 Place de Fontenoy
75334 PARIS CEDEX 07
Tel.: +33 (0)1 53 73 22 22
www.cnil.fr
Cookies
A cookie is a text file that may be stored in a dedicated space on the hard drive of your device when using an online service via your browser.
We use cookies that are strictly necessary for the website to function.
These cookies enable the main services of the website to operate optimally. You can technically block them using your browser settings, but your browsing experience may be degraded. They help make our site usable by enabling basic functions such as page navigation or access to secure areas.
| Category of cookies | Purpose | Conditions of use | Consequences if refused | Retention period |
|---|---|---|---|---|
| Necessary cookies | Essential for the functioning of the site and provision of services (e.g., navigation, display). | Always active. Can be blocked or deleted via browser settings. | Deleting them may affect certain settings and make browsing difficult. | Limited to session duration or a few hours/days depending on the cookie. |
| Website analytics cookies | Collect anonymous information to compile traffic statistics and identify traffic sources to improve the site. | Placed only with your consent (via banner or preference center). | Without these cookies, we cannot measure or improve site performance. | 13 months |
| Video player cookies | Enable playback of videos embedded on the site. | Placed only with your consent. | Without these cookies, video playback will be impossible. | Varies by provider (e.g., YouTube: up to 6 months, Vimeo: approx. 2 years). |
| Social media cookies | Placed when you use a share button to a social network. | Placed only with your consent. | Without these cookies, you will not be able to share content directly from the site. | Varies by social network (generally a few months to 2 years). |
For more information on cookies, we invite you to consult the CNIL page: Cookies and trackers: what the law says.
Last update: 22/09/2025