If you participate in the sustainability assessment process please refer to this Legal Notice :
If you do not participate in the sustainability assessment process Ecovadis SAS processes users’ personal information based on EcoVadis’s legitimate interests (Article 6.1.f GDPR) for the following purposes:
Prospecting: Personal data is retained for up to three (3) years after the prospect’s last interaction with EcoVadis. Data is intended to be accessed only by the Engagement, Sales, and Marketing teams.
Supply Chain Request Tracking: For invited entities that do not subscribe or complete an assessment, EcoVadis retains a minimal record to maintain request history, prevent duplicate entries, and ensure auditability for the inviting customer. Personal contact details are kept for up to three (3) years following the invitation, or permanently anonymized earlier upon a valid erasure request. Once anonymized, the remaining non-personal entry falls outside GDPR scope (Recital 26 GDPR) and is kept strictly as an internal operational reference.
Personal Information submitted to EcoVadis may, if needed, be transferred to one or more EcoVadis subsidiaries, located outside of the European Economic Area such as: EcoVadis (Mauritius) Ltd., EcoVadis (USA) Inc., EcoVadis (Hong Kong) Ltd., EcoVadis Canada Ltd., EcoVadis Japan K.K., and other subsidiaries that may be formed on a later date.
As a safeguard this transfer is governed by (Data controller – Data controller) Standard Contractual Clauses between EcoVadis SAS (France) and its subsidiaries if the country is considered not ensuring an adequate level of protection. A copy of such SCC can be requested at [email protected]
For the purpose of the processing, Ecovadis may use providers (processors) based outside the European Economic Area. As a safeguard, EcoVadis signed Standard Contractual Clauses with these providers. For more information go to the GDPR section on our trust center : https://ecovadis.com/fr/trust-center/#IS
You have the right to access, rectify and erase your personal data, restrict or object to processing of your data by contacting support.ecovadis.com
You will find further information about data protection here: https://ecovadis.com/legal-notice/
Should you have any concerns with regards to the protection of your personal data and the exercise of your data protection rights you can contact us: EcoVadis SAS, Data Protection Officer, 43 Avenue de la Grande Armée, 75116 Paris, France. Email: [email protected]
Furthermore, you have the right to lodge a complaint with a supervisory authority CNIL, 3 Place de Fontenoy, 75007 Paris, France if you consider that the processing of personal data relating to you infringes the regulation.
Ecovadis SAS collects information from our website forms or processes your data from newsletter subscriptions. The data is stored in a database for the purpose of prospecting.
The data is kept for 3 years after the customer’s or prospect’s last interaction with EcoVadis.
The data is intended to be accessed only by the Sales and Marketing team.
The processing of users personal information is based on EcoVadis legitimate interests in the meaning of Article 6.1 f) of GDPR.
Personal Information submitted to EcoVadis may, if needed, be transferred to one or more EcoVadis subsidiaries, located outside of the European Economic Area such as : EcoVadis (Mauritius) Ltd., EcoVadis (USA) Inc., EcoVadis (Hong Kong) Ltd., EcoVadis Canada Ltd., EcoVadis Japan K.K., and other subsidiaries that may be formed on a later date.
As a safeguard this transfer is governed by (Data controller – Data controller) standard contractual clauses between EcoVadis SAS (France) and its subsidiaries if the country is considered not ensuring an adequate level of protection. A copy of such SCC can be requested at [email protected]
For the purpose of the processing, Ecovadis may use providers based outside the European Economic Area. As a safeguard, EcoVadis signed Standard Contractual Clauses with these providers. For more information go to the GDPR section on our trust center : https://ecovadis.com/fr/trust-center/#IS
You have the right to access, rectify and erase your personal data, restrict or object to processing of your data by contacting: [email protected]
Should you have any concerns with regards to the protection of your personal data and the exercise of your data protection rights you can contact us: EcoVadis SAS, Data Protection Officer, 43 Avenue de la Grande Armée, 75116 Paris, France. Email: [email protected]
Furthermore, you have the right to lodge a complaint with a supervisory authority CNIL, 3 Place de Fontenoy, 75007 Paris, France if you consider that the processing of personal data relating to you infringes the regulation.
In addition to the general prospecting activities described above, where you have given your consent via our Cookie Preference Center (“Sales Outreach Personalization”), EcoVadis SAS collects information about how you arrived at our website — such as the page you first visited, the page you came from, and any search terms associated with your visit. If you subsequently submit a form on our website, we link this information to your contact record in our customer relationship management (CRM) and customer data platform (CDP) systems.
We use this information to help our Sales team understand what you may be interested in and to tailor the information, product details, and resources they share with you.
Unlike the general prospecting processing described in this notice, which relies on EcoVadis’s legitimate interests, this specific processing is based on your consent (Article 6.1.a) of GDPR and Article 5(3) of the ePrivacy Directive).
This information is kept for 12 months from the date of collection, after which it is automatically deleted.
This information is intended to be accessed only by the Sales and Marketing team, and is not shared with third-party advertising networks.
You have the right to access, rectify, and erase this data, and to restrict its processing, by contacting [email protected]. You may withdraw your consent to this specific use of your data at any time — via our Cookie Preference Center or by contacting [email protected] — with immediate effect and independently of any other consent or preference choices you have made. Withdrawal will not affect the lawfulness of processing carried out before it.
For more information on how your data may be transferred and protected outside the European Economic Area, and on your rights, please see the sections above.
Should you have any concerns regarding the protection of your personal data, you can contact us: EcoVadis SAS, Data Protection Officer, 43 Avenue de la Grande Armée, 75116 Paris, France. Email: [email protected].
You have the right to lodge a complaint with the CNIL, 3 Place de Fontenoy, 75007 Paris, France, if you consider that this processing infringes the regulation.
In addition to the general prospecting activities described above, EcoVadis SAS shares certain information with third-party advertising partners (such as Google, LinkedIn, or Meta) to measure ad effectiveness, attribute leads to specific campaigns, and optimize our B2B advertising.
This involves two separate steps, each requiring its own consent:
- When you visit our website having accepted “Marketing/Advertising” cookies in our Cookie Preference Center, a web tag may capture and hash your submitted contact details (such as your business email address) at the moment you complete a form.
- Separately, where you have also given your explicit consent by ticking the dedicated checkbox on our lead generation forms, we may later share your hashed contact details together with your lead engagement status (for example, whether our Sales team has qualified you as a prospect). This happens separately and later, because it reflects an internal assessment made after your initial visit.
These advertising partners match the hashed identifiers against their own logged-in user profiles to report on ad performance, and to help us identify and reach other prospective companies with similar profiles (“lookalike” or “similar audience” targeting).
This processing is based on your consent (Article 6.1.a) of GDPR and Article 5(3) of the ePrivacy Directive) — not on EcoVadis’s legitimate interests, unlike the general prospecting activities described above.
This information is kept for 3 years after your last interaction with EcoVadis, consistent with our general prospect data retention; retention on our advertising partners’ side is governed by their own respective policies.
You may withdraw your consent at any time — via our Cookie Preference Center for the web tag, or by contacting [email protected] for the form checkbox. Withdrawal will not affect the lawfulness of processing carried out before it, and will stop this specific use of your data promptly, independently of any other consent or preference choices you have made.
For information on how your data may be transferred and protected outside the European Economic Area, please see the sections above.
You have the right to access, rectify, and erase your personal data, and to restrict its processing, by contacting [email protected].
Should you have any concerns regarding the protection of your personal data, you can contact us: EcoVadis SAS, Data Protection Officer, 43 Avenue de la Grande Armée, 75116 Paris, France. Email: [email protected].
You have the right to lodge a complaint with the CNIL, 3 Place de Fontenoy, 75007 Paris, France, if you consider that this processing infringes the regulation.
In addition to the general prospecting activities described above, and separately from the Ad Performance, Optimization & Data Sharing with Advertising Partners described above, EcoVadis SAS may share a list of your hashed contact details with Google Ads (“Customer Match”) for the following purpose(s):
- using the list as a bid-signal and reporting overlay on our existing advertising campaigns, without this resulting in you being shown additional ads because you are on this list (“observation” use); and/or
- directly showing you ads on YouTube, Gmail, and Google Discover because you are on this list (“targeting” use).
This is a different purpose from the ad-performance measurement and attribution described above: rather than sharing information about an individual interaction with one of our ads, we share a list of contacts so that Google can identify you directly within its own systems.
Google matches the hashed contact details we provide against its own signed-in user accounts.
This processing is based on your consent (Article 6.1.a) of GDPR and Article 5(3) of the ePrivacy Directive) — not on EcoVadis’s legitimate interests. This is a separate, specific consent from any other consent you may have given us, including consent to the Ad Performance, Optimization & Data Sharing with Advertising Partners described above.
This information is kept for 3 years after your last interaction with EcoVadis, consistent with our general prospect data retention; retention on Google’s side is governed by their own policies.
You may withdraw your consent at any time by contacting [email protected]. Withdrawal will not affect the lawfulness of processing carried out before it, and will result in your removal from the relevant list promptly, independently of any other consent or preference choices you have made.
For information on how your data may be transferred and protected outside the European Economic Area, please see the sections above.
You have the right to access, rectify, and erase your personal data, and to restrict its processing, by contacting [email protected].
Should you have any concerns regarding the protection of your personal data, you can contact us: EcoVadis SAS, Data Protection Officer, 43 Avenue de la Grande Armée, 75116 Paris, France. Email: [email protected].
You have the right to lodge a complaint with the CNIL, 3 Place de Fontenoy, 75007 Paris, France, if you consider that this processing infringes the regulation.
Ecovadis SAS has collected your data (your name, professional email address, phone number, job title and company) in a database for the purpose of prospecting.
Your data can originate from various sources : from our research with a third party prospecting service on public profiles we have identified you, based on your title, to have an interest in our service and/or content ; you may have expressed a previous interest in the topic addressed in EcoVadis content or communication; you have participated in an EcoVadis assessment; you have attended an EcoVadis-sponsored event or have had some previous connection, correspondence or relationship with Ecovadis.
EcoVadis Community Insights
If you participate in the EcoVadis Community, we may use the professional ‘Interests’ you provide to deliver personalized sustainability insights and marketing communications. This processing is based on our legitimate interest (Art. 6.1.f GDPR). In accordance with the Digital Services Act (DSA) and the GDPR, you can object to this profiling at any time by updating your profile settings, using the platform’s preference center, or clicking the unsubscribe link in our emails.
The data is kept for 3 years after the customer’s or prospect’s last interaction with EcoVadis.
The data is intended to be accessed only by the Sales and Marketing team.
The processing of users personal information is based on EcoVadis legitimate interests in the meaning of Article 6.1.f) of GDPR.
Personal Information submitted to EcoVadis may, if needed, be transferred to one or more EcoVadis subsidiaries, located outside of the European Economic Area such as: EcoVadis (Mauritius) Ltd., EcoVadis (USA) Inc., EcoVadis (Hong Kong) Ltd., EcoVadis Canada Ltd., EcoVadis Japan K.K., and other subsidiaries that may be formed on a later date.
As a safeguard this transfer is governed by (Data controller – Data controller) standard contractual clauses between EcoVadis SAS (France) and its subsidiaries if the country is considered not ensuring an adequate level of protection. A copy of such SCC can be requested at [email protected]
For the purpose of the processing, Ecovadis may use providers based outside the European Economic Area. As a safeguard, EcoVadis signed Standard Contractual Clauses with these providers. For more information go to the GDPR section on our trust center : https://ecovadis.com/fr/trust-center/#IS
You have the right to access, rectify and erase your personal data, restrict or object to processing of your data by contacting: [email protected]
Should you have any concerns with regards to the protection of your personal data and the exercise of your data protection rights you can contact us: EcoVadis SAS, Data Protection Officer, 43 Avenue de la Grande Armée, 75116 Paris, France. Email: [email protected]
Furthermore, you have the right to lodge a complaint with a supervisory authority CNIL, 3 Place de Fontenoy, 75007 Paris, France if you consider that the processing of personal data relating to you infringes the regulation.