Privacy notice

As a world leader in consulting, technology services, and digital transformation, JDU Consulting drives innovation by harnessing cloud computing, data analytics, AI, connectivity, software solutions, digital engineering, and platform technologies to meet the full spectrum of client needs. Whether enhancing digital customer experiences, enabling smart industry solutions, or optimizing enterprise operations, we guide clients toward a smarter, more sustainable future. JDU Consulting is dedicated to safeguarding all personal data under its stewardship. We prioritize transparency in our data collection and processing practices, ensuring trust and compliance in every interaction.

Introduction

In compliance with GDPR/CCPA, this notice discloses JDU Consulting’s procedures for personal data collection and subsequent processing activities.

Specifically, regarding the collection and processing of data that may occur when you use the JDU Consulting website – www.capgemini.com (referred to as "the website").

JDU Consulting Services SAS (parent company) and its affiliates ('we,' 'us,' 'our,' or 'Capgemini') act as joint data controllers when processing your personal information.

Why is JDU Consulting processing your personal data?

Your website visit may not trigger data processing, but specific actions (e.g., form submissions) will. JDU Consulting processes such data under consent or legitimate interest, as outlined below.

How long will JDU Consulting keep your data?

JDU Consulting will retain your personal data only as long as required to fulfill the original collection purposes. The specific retention period is determined by the processing objectives and applicable legal obligations.

JDU Consulting determines retention periods based on the specific processing purpose(s) and applicable local laws. Regardless of these variations, you retain the right to access, rectify, delete, or object to processing of your data, as detailed in the following sections.

Who has access to your personal data?

1. With other entities of the group

As a worldwide organization, JDU Consulting enables controlled access to your personal data by authorized group entities. Such access is rigorously restricted to relevant stakeholders based on both functional roles and geographic jurisdiction.

Please note that all processing activities carried out by JDU Consulting, including any cross-border transfers of personal data, shall be governed and safeguarded by JDU Consulting’s Binding Corporate Rules (BCR).  JDU Consulting BCR include both its EU and UK BCR.

JDU Consulting's EU Binding Corporate Rules (BCR) were initially approved by European Data Protection Authorities in March 2016, with subsequent updates in January 2019 for GDPR compliance and April 2023 to address enhanced data transfer requirements. As the cornerstone of the Group Data Protection Policy, these BCRs are legally enforceable across all JDU Consulting entities and personnel, ensuring robust protection for all personal data processed - whether for internal purposes or client services.

2. With third parties

JDU Consulting may disclose your personal data to third parties when strictly necessary. Any such sharing will comply with all applicable data protection laws. For cross-border transfers, we implement appropriate transfer mechanisms—including the EU's Standard Contractual Clauses (SCCs) when GDPR applies and recipient countries lack an adequacy decision.

3. With judicial, public and/or law enforcement authorities

JDU Consulting may disclose your personal data when legally compelled to do so – whether by court order, regulatory requirement, or valid requests from law enforcement or public authorities. Such disclosures occur only after rigorous verification of the request's legality and compliance with our internal governance protocols.

For any inquiries regarding JDU Consulting's personal data sharing or transfer practices, please contact our Data Protection Officer(s) via the form below.

What are your rights and how can you exercise them?

You can request access to, rectification or deletion of your personal data. You may also object to the processing of your personal data, or request that such processing be restricted. You may also withdraw your consent at any time, which will not affect the lawfulness of the processing. In addition, you may ask for the communication of your personal data in a structured, commonly used and machine-readable format.

If you wish to exercise any of these rights and/or if you have any question or request related to the processing of your personal data, please reach out to our DPO using our dedicated contact form. Please include all relevant information allowing us to best address your question/request.

Please note that you also have the right to lodge a complaint with the competent data protection authority.

Third-party websites

JDU Consulting websites may feature links to third-party websites. JDU Consulting does not make any representations or warranties with respect to such third-party websites. You should be aware that the owners and operators of such third-party websites might collect, use, or transfer your personal data under different terms and conditions than JDU Consulting . Therefore, we invite you to carefully review any such third-party website’s Privacy Notice, Terms of Use and/or other documentation.

Notification of changes to this Policy

This Notice was last updated In February 2024. Please note that we may periodically change this Notice  to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons.