Privacy policy
Last updated: November 9, 2026. This translation is provided for information; the French version prevails.
This policy explains how personal data collected on processusgroup.com is processed, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and amended French law no. 78-17 of January 6, 1978 (“Informatique et Libertés”).
Data controller
PROCESSUS GROUP, SARL registered under RCS Lyon 537 632 234, 161 avenue Franklin Roosevelt, 69150 Décines-Charpieu, France, represented by its managing directors.
For job applications, the data controller is the group company hiring for the position concerned (Origin 3D, Factory Plast, Precimade, Perfect Plast or Processus Group); Processus Group manages applications on behalf of its subsidiaries.
Contact for any question about your data: rgpd@processusgroup.com. Group companies are not required to appoint a data protection officer (DPO); this contact handles all requests.
Data processed, purposes and retention
| Processing | Data | Legal basis | Retention period |
|---|---|---|---|
| Contact form | Name, company (optional), email, phone (optional), subject, message | Pre-contractual steps taken at your request (art. 6(1)(b)) or legitimate interest in answering your request (art. 6(1)(f)) | 3 years after the last contact |
| Business relationship management | Business contact details, correspondence, quotations, orders | Performance of a contract (art. 6(1)(b)) and legal obligations (art. 6(1)(c)) | Duration of the relationship, then 3 years; accounting records 10 years (art. L.123-22 of the French Commercial Code) |
| B2B marketing | Name, job title, company, business email | Legitimate interest (art. 6(1)(f)), related to your professional activity | 3 years after the last contact; you may object at any time, including via the unsubscribe link in each message |
| Job applications | Position, first name, last name, email, phone (optional), résumé, cover letter (optional), message | Pre-contractual steps (art. 6(1)(b)); your consent for retention after the hiring process (art. 6(1)(a)) | Duration of the hiring process, then deletion; 2 years if you ticked the box provided, consent you may withdraw at any time |
| Website security | Hosting provider connection logs (IP address, date, page requested) | Legitimate interest (art. 6(1)(f)) and legal retention obligation (French decree no. 2021-1362) | 12 months |
Downloading the brochure, the specification template or the certificates requires no personal data. Fields marked as required in the forms are needed to answer you. No automated decision is made about you, and no data is sold or rented.
Recipients
Your data is accessible only to authorized staff of the group companies concerned by your request (management, sales, engineering, quality, human resources), who are bound by confidentiality.
The website’s forms store no data on the web server: your message, your application and its attachments are sent by email to the relevant team, then deleted from the server once sent. Only an encrypted fingerprint of your IP address (HMAC, with a secret key kept on the server) is retained to limit abusive submissions; it is deleted automatically after about two hours.
Our technical processors, bound by a contract compliant with article 28 GDPR, are:
- OVH SAS (Roubaix, France), website hosting and form processing, data hosted in France;
- Microsoft Ireland Operations Ltd (Microsoft 365), sending of form emails, email and document storage, data hosted in the European Union;
Transfers outside the European Union
Microsoft Ireland belongs to a group based in the United States. Any access from the United States, in particular for technical support, is governed by the EU-US Data Privacy Framework adequacy decision and by the European Commission’s standard contractual clauses included in Microsoft’s data protection addendum.
If you apply for a position at Perfect Plast, your application is sent to that company, established in Tunisia, a country not covered by an adequacy decision. This transfer, necessary to review your application, is governed by the European Commission’s standard contractual clauses.
Your rights
You have the right to access, rectify, erase, restrict and port your data, the right to object to its processing, in particular for marketing purposes, and the right to withdraw your consent at any time where processing is based on it. You may also set instructions regarding the fate of your data after your death (article 85 of the French data protection act).
To exercise these rights, write to rgpd@processusgroup.com or to the registered office, stating your request. Proof of identity may only be requested if there is reasonable doubt about your identity. We reply within one month, which may be extended by two months given the complexity of the request (article 12(3) GDPR).
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr (opens in a new tab), or with the supervisory authority of your country of residence.
Security
Group companies implement technical and organizational measures appropriate to the risks: encrypted connections (HTTPS), access control and logging, multi-factor authentication, backups, protection of forms against abuse.
Cookies
The use of trackers is described in the cookie policy.
Changes to this policy
This policy may be updated to reflect changes to the website or to regulations. The date of the last update appears at the top of the page.