General data protection
At Optimum by Shiftmove, we attach great importance to the protection of your privacy and are committed to protecting your personal data and informing you precisely how it is processed and for what purposes. This information applies to the following processing contexts:
A. Website Information on all data processing operations carried out in connection with the operation or use of our websites.
B. Using software applications Information on data processing in our software applications, whether in web or mobile format.
C. Contact with professional customers : Data processing and protection in the context of commercial relations, communications and partnerships.
D. Candidates Information about the processing of your personal data in the context of your job application at Optimum by Shiftmove.
Please use the drop-down menus below to access the information relevant to you.
A. Data protection information - Website
I. Data controller
The data controller within the meaning of Article 4(7) of the RGPD is :
Optimum Automotive SAS
190 Rue Marcelle Isoard,
13090 Aix-en-Provence
E-Mail: contact@optimum-automotive.com
Telephone: +33 (0)1 70 20 02 64
If you have any questions or concerns regarding the processing of your personal data or the exercise of your rights, you can contact us via the contact information provided above.
II. Data Protection Officer
You can contact our Data Protection Officer at the following address donneespersonnelles@optimum-automotive.com or by post to the above address, quoting "Data Protection Officer".
III. Access to our website
When you visit our website, we process personal data to ensure its smooth operation, stability and security. The following data may be collected (log files):
- Operating system and current IP address of terminal used
- Browser (type, version and language)
- Volume of data transferred
- Date and time of access
- URL of previously visited page (referrer)
- URL of the (sub)page consulted on our site
- Internet service provider of the accessing system
The collection of these log files is technically necessary for the display of the site and the guarantee of its security. This constitutes our legitimate interest in accordance with Article 6(1)(f) of the RGPD.
This site is hosted by GANDI SAS63 BOULEVARD MASSENA 75013 PARIS, FRANCE, with whom we have concluded a data processing contract. Your data is processed in a French data center.
IV. Contact
You can send us sales and support inquiries via the contact form or the contact details provided. When submitting a form, mandatory fields must be completed. We can process your surname, first name, e-mail address, company, telephone number and any other information related to your request.
The processing of this data is based on Article 6, paragraph 1, point b) of the RGPD in the context of pre-contractual or contractual measures, or on our legitimate interest in responding to your request in accordance with Article 6, paragraph 1, point f) of the RGPD. Optional information is provided on the basis of your consent (Article 6, paragraph 1, point a) of the RGPD).
Your personal data will be deleted as soon as it is no longer required, subject to legal retention obligations.
Management of sales and support requests
Commercial requests are processed via our in-house customer relationship management (CRM) system developed by Optimum Automotive SAS. Data is processed exclusively in data centers in France. However, requests for assistance may involve the transfer of data to a subsidiary of the Optimum Automotive group in Morocco. A data-processing contract based on EU standard contractual clauses has been concluded with this entity. MAPPING CONTROL Maroc SARL.AU, a subsidiary of the Optimum Automotive group, and Optimum Automotive SAS.
Support requests are managed via our in-house tool Zendeskoperated by Zendesk Inc., 181 S. Fremont St., San Francisco, CA 94105, USA. A data processing contract has been concluded with Zendesk, based on the EU standard contractual clauses. Zendesk is certified according to the EU-US Data Privacy Framework.
V. Advertising and analysis software
- Google Analytics / Google Analytics 4 / Universal Analytics
We use Google Analytics (provider: Google Ireland Ltd). This tool enables us to measure and analyze traffic on our website. The data collected includes information about users, such as their behavior, geographical location, and device. This processing is based on your consent (Article 6(1)(a) of the GDPR) for tracking cookies. A data processing contract based on EU standard contractual clauses has been concluded with Google. Google is EU-US Data Privacy Framework certified. - Google Tag Manager
We use Google Tag Manager (supplier: Google Ireland Ltd). This tool enables us to manage and deploy JavaScript tags on our site, facilitating the integration of various tracking tools. Google Tag Manager does not directly collect personal data, but it may activate tracking services such as Google Analytics or Google Ads. Processing is based on your consent (Article 6(1)(a) of the GDPR), and a data processing contract has been signed with Google. - Google AdWords Conversion / Google Remarketing / Google Ads-DoubleClick
We use Google AdWords Conversion, Google Ads (Doubleclick) and Google Remarketing (supplier: Google Ireland Ltd) to analyze the effectiveness of our advertising campaigns and deliver targeted ads to users. These tools collect information about your interactions with our ads. Processing is based on your consent (Article 6(1)(a) of the GDPR), and a data processing contract has been signed with Google. - CookieYes
We use CookieYes (provider: CookieYes Ltd) to manage user cookie consent. This tool collects and stores users' cookie preferences to ensure compliance with privacy regulations. Processing is based on your consent (Article 6, paragraph 1, point a) of the RGPD). - MonsterInsights
We use MonsterInsights (provider: MonsterInsights, LLC) to connect our WordPress site to Google Analytics and facilitate the collection of analytics data. This tool enables us to track user interactions on our site. Processing is based on your consent (Article 6(1)(a) of the GDPR).
VI. Shelf life
Unless otherwise specified, we will only process your data for as long as is necessary for the purpose for which it is to be used. Legal retention obligations are respected.
VII. International data transfers
Data transfers outside the EU/EEA are carried out only if adequate safeguards are put in place, in particular via an adequacy decision from the European Commission or the EU standard contractual clauses with additional safety measures.
VIII. Your rights
You have the following rights:
- Right of access (Art. 15 RGPD)
- Right of rectification (Art. 16 RGPD)
- Right to erasure (Art. 17 RGPD)
- Right to restrict processing (Art. 18 RGPD)
- Right to data portability (Art. 20 RGPD)
- Right to object (Art. 21 RGPD)
If the processing is based on your consent, you have the right to withdraw at any time (Art. 7, paragraph 3 RGPD).
To exercise your rights, contact us at donneespersonnelles@optimum-automotive.com. You also have the right to lodge a complaint with a control authority (Art. 77 RGPD).
B. Data protection information - SaaS products
I. Data controller
The data controller within the meaning of Article 4(7) of the RGPD is :
Optimum Automotive SAS
190 Rue Marcelle Isoard,
13090 Aix-en-Provence
E-Mail: contact@optimum-automotive.com
Telephone: +33 (0)1 70 20 02 64
If you have any questions or concerns regarding the processing of your personal data or the exercise of your rights, you can contact us via the contact information provided above.
II. Data Protection Officer
You can contact our Data Protection Officer at the following address donneespersonnelles@optimum-automotive.com or by post to the above address, quoting "Data Protection Officer".
III. Cookies and Third Party Services
1. Purpose and Legal Basis
1.1 Essential cookies
- Cookies Used ASP.NET_SessionId, ApplicationGatewayAffinity, lang, lango.
- Purpose Authentication, session maintenance, load balancing.
- Legal basis Contractual necessity (Art. 6(1)(b) RGPD).
- Shelf life Session duration or according to technical parameters.
1.2 Audience analysis (Google Analytics)
- Cookies Used : _ga, _gid, _gcl_au, _Secure-IPAPISID, _Secure-IPSID, SSID.
- Data processed : User behavior, advertising identifiers.
- Purpose Traffic measurement, campaign personalization.
- Legal basis Consent (Art. 6(1)(a) RGPD).
- Supplier Google LLC (United States), in compliance with EU-U.S. Data Privacy Framework.
- Shelf life Up to 24 months (depending on configuration settings).
1.3 Consent management
- Cookies Used cookieyes-consent.
- Data processed : Consent preferences, truncated IP address.
- Purpose : RGPD compliance and storage of user choices.
- Legal basis Legal obligation (Art. 6(1)(c) RGPD).
- Supplier : CookieYes (EU/US), protected by the Standard Contractual Clauses (SCC).
- Shelf life 12 months.
1.4 Technical features
- Cookies Used : gig_bootstrap_3, env, HSID, SAPISID.
- Purpose Performance optimization, user interface customization.
- Legal basis Legitimate interest (Art. 6(1)(f) RGPD).
- Shelf life Session or up to 30 days.
1.5 Authentication and security
Gigya (SAP Customer Data Cloud):
Purpose: User identity management (login, registration, account recovery).
Processed data : E-mail address, password (hashed), IP address, connection logs.
Legal basis: Contractual performance (Art. 6(1)(b) RGPD).
Supplier: SAP (USA), secure transfers via Data Privacy Framework.
reCAPTCHA (Google) :
Purpose: Bots and fraud prevention (verification of human interactions).
Data processed : IP address, browsing behavior (mouse movements, time spent).
Legal basis: Legitimate interest (Art. 6(1)(f) RGPD).
Retention: Up to 30 days by Google.
IV. International Data Transfers
- Services concerned Google Analytics, CookieYes.
- Guarantees in place :
- Standard Contractual Clauses (SCC) approved by the European Commission.
- EU-U.S. Data Privacy Framework Certification for data transfers to the United States.
V. Data Retention Period
- Technical Cookies Delete at the end of the session.
- Analysis cookies Up to 24 months (unless consent is withdrawn earlier).
- User data Retention in accordance with legal requirements (e.g. 10 years for invoices).
VI. Your rights
You have the following rights under the GDPR:
- Withdraw your consent at any time (via the cookie manager).
- Request access, rectification or deletion of your personal data (contact: dpo@votreentreprise.com).
- Filing a complaint with a supervisory authority (e.g. CNIL in France).
C. Data protection information - Business customers
The following information explains how we process your personal data when you contact us to purchase our products or when we work with external service providers as part of our marketing campaigns.
I. Data controller
The data controller within the meaning of Article 4(7) of the RGPD is :
Optimum Automotive SAS
190 Rue Marcelle Isoard,
13090 Aix-en-Provence
E-Mail: contact@optimum-automotive.com
Telephone: +33 (0)1 70 20 02 64
If you have any questions or concerns regarding the processing of your personal data or the exercise of your rights, you can contact us via the contact information provided above.
II. Data Protection Officer
You can contact our Data Protection Officer at the following address donneespersonnelles@optimum-automotive.com or by post to the above address, quoting "Data Protection Officer".
III. Contact
You can use the form available on our website or the contact information provided to send us commercial or support requests. When you contact us via an online form, mandatory fields must be completed. We may process the following data:
- First and last name
- E-mail address
- Company name
- Phone number
- Any other information relating to your request
The processing of this data is based on Article 6 (1) (b) RGPD in the context of pre-contractual or contractual measures, or on our legitimate interest in responding to your requests (Article 6 (1) (f) RGPD). Information provided voluntarily is processed on the basis of your consent (Article 6 (1) (a) RGPD). Your personal data will be deleted as soon as its retention is no longer necessary, subject to legal retention obligations.
IV. Commercial prospecting
We process the following data as part of our marketing activities:
- Name
- Professional contact details (e-mail, telephone)
- Function and company
- Fleet size
- Other company data
Processing is based on our legitimate interest (Article 6 (1) (f) GDPR) or on your explicit consent (Article 6 (1) (a) GDPR). You may object to receiving our commercial communications at any time.
Purchase and use of external databases
As part of our prospecting activities, we may acquire or rent contact databases from specialized service providers such asEllisphere, LaMég@baseB2B, DATA DNA. These databases are set up according to specific criteria, including company data and professional contact details. Contractual obligations between Optimum and suppliers guarantee compliance with applicable regulations, in particular the RGPD, and ensure the legal origin and regular updating of the information provided.
The processing of this data is based on our legitimate interest (Article 6, paragraph 1, point f of the RGPD) to develop our commercial activity. You may object to the use of your data for prospecting purposes at any time by contacting us via the information provided in this policy.
V. Participation in webinars and online events
When you participate in a webinar or access on-demand content, we process the following data:
- Name
- E-mail address
- Company
- Phone number
- IP address and other technical data
- Audio, video and text content transmitted
Processing is based on your consent (Article 6 (1) (a) RGPD). We delete this data as soon as it is no longer required, subject to legal retention obligations.
VI. Data retention period
Unless otherwise stated, we retain your data for as long as necessary to achieve the purpose of the processing and in compliance with applicable legal obligations (up to 10 years in some cases).
VII. International data transfers
Optimum by Shiftmove processes your data mainly within the European Union (EU) and the European Economic Area (EEA). If data transfers to third countries take place, they are carried out in compliance with the European Commission's Standard Contractual Clauses (SCC) or to entities certified as compliant with the EU-US Data Protection Framework.
VIII. Your rights
In accordance with the RGPD, you have the following rights:
- Right of access (article 15 RGPD)
- Right of rectification (article 16 RGPD)
- Right to erasure (Article 17 RGPD)
- Right to limit processing (Article 18 RGPD)
- Right to data portability (Article 20 RGPD)
- Right to object (article 21 RGPD)
- Right to withdraw your consent at any time (Article 7 (3) RGPD)
To exercise your rights, please contact us at donneespersonnelles@optimum-automotive.com. You also have the right to lodge a complaint with the competent data protection authority (Article 77 RGPD).
D. Data protection information - Candidates
Thank you for your interest in our company and for applying or wishing to apply for a position with Optimum by Shiftmove or its affiliated companies. We would like to provide you with the following information regarding the processing of your personal data in connection with your application.
I. Data controller and data protection officer :
The person responsible for processing your data is :
Optimum Automotive
190 rue Marcelle Isoard, Oxydium Bâtiment À - AIX EN PROVENCE - FRANCE
Tel: +33 1 70 20 02 64
E-mail: contact@optimum-automotive.com
Optimum has appointed a Data Protection Officer who can be contacted at : donneespersonnelles@optimum-automotive.com.
II. Recruitment process
- Purposes of processing and categories of data
As part of the processing of your application, we collect and process the data you have provided to us in order to assess your suitability for the position (or other open positions within our companies) and to conduct the recruitment process. This data generally includes :
- Contact Name, address, telephone number, e-mail address.
- Application documents CV, cover letter, certificates, references.
- Personal data Date and place of birth, photo (optional).
- Training and qualifications Diplomas, studies, training, further training.
- Professional experience Information on former employers, positions held and areas of activity.
- Language skills Foreign languages and their levels.
- Specialized skills : Computer skills, certifications, specialized knowledge.
- Social profiles Links to professional profiles such as LinkedIn and Indeed.
- Other information Interests, hobbies, volunteer activities, memberships.
- Legal basis for processing
The processing of your data is based on the performance of pre-contractual measures related to an employment contract pursuant to Article 6, paragraph 1, point b) of the RGPD. If data is required for the defense of legal rights after the recruitment process has ended, processing may be carried out on the basis of Article 6(1)(f) of the GDPR, in particular to defend our legitimate interests, for example in the context of a legal claim or the Equal Treatment Act (AGG).
If you have consented to the storage of your data in our candidate pool, the legal basis for storage is your consent in accordance with Article 6(1)(a) of the GDPR. You can revoke this consent at any time with effect for the future by contacting us via the options mentioned above.
- Data recipients
3.1 Service providers
To manage our job applications, we use the services of LinkedIn Recruiter and Indeed, third-party platforms with which we have concluded data processing agreements. Your data may be transferred to and processed by these services.
3.2 Group companies
Your application details will be examined by the Human Resources department once we have received your file. Successful applications will then be forwarded to the department managers for each vacancy. Only those persons who need your data to carry out our recruitment process will have access to it. Data may be transferred to group entities insofar as this is necessary to carry out the recruitment process.
4. Shelf life
Candidate data will be deleted after 6 months in the event of rejection. If you have agreed to join our applicant pool, your data will be stored for a period of two years. If you are selected for a position, your application data will be transferred to our personnel information system.
III. Candidate satisfaction surveys
- Purpose of processing and categories of data
To improve our recruitment process, we send out satisfaction surveys at various stages of the procedure. The results are aggregated and pseudonymized. However, in the event of specific feedback, we may be able to make a link with your person. We process the following categories of data in the context of satisfaction surveys:
- Contact Name, e-mail address.
- Feedback Comments and answers to survey questions.
- Technical data IP address.
- Legal basis for processing
The legal basis for processing your data is our legitimate interest in improving our recruitment process in accordance with Article 6(1)(f) of the GDPR.
- Recipients
We work with [Name of survey provider], to carry out our surveys. A data processing agreement has been concluded with this provider.
- Shelf life
Survey data is pseudonymized and aggregated immediately after collection. Individual responses to questions are deleted after 6 months.
IV. Your rights
You have the following rights with regard to your personal data and in accordance with legal requirements:
- Right of access (article 15 RGPD),
- Right of rectification (article 16 RGPD),
- Right to erasure (Article 17 RGPD),
- Right to limit processing (Article 18 RGPD),
- Right to data portability (Article 20 RGPD),
- Right to object (Article 21 RGPD).
You also have the right to lodge a complaint with a supervisory authority under Article 77 RGPD if you believe your data is being processed unlawfully. If data processing is based on your consent, you have the right to withdraw this consent at any time (Article 7 RGPD). The revocation does not affect the lawfulness of the processing carried out prior to the revocation.