Under data protection law, you have rights including:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
- Your right to lodge a complaint with the Data Protection Authority – To learn more about what is the Data Protection Authority that is competent for the processing of your data, please visit our local national webpages.
You are not required to pay any charge for exercising your rights.
In case you would like to exercise your rights or lodge a complaint please use the Atos online form available here.
Newsletter subscriber
| Purpose | Legal basis | Personal data | Recipients | Retention period |
| Processing of contact details to send you our newsletter(s) | Your consent | Name, surname, email, connection data and date of subscription |
Internal: Marketing team External: Marketo | Until you withdraw your consent or unsubscribe. |
Events
| Purpose | Legal basis | Personal data | Recipients | Retention |
| Managing your registration and participation in our Event(s) | Our legitimate interest | Name and surname, e-mail, job role and company, country |
Internal: Marketing team, Sales team External: Marketo | Automatic deletion 2 years after the date of the event. |
| Ensuring broadcasting of an online Event(s), if applicable | Our legitimate interest | Name and surname, e-mail, job role and company, country, image (for speakers) |
Internal: Marketing, Sales External: LogMeIn | Automatic deletion 2 years after the date of the event. |
| Taking pictures and/or videos | Your consent | Your image, audio and likeness (as captured on a webinar, in photographs or recordings taken at an event) |
Internal: Marketing team External: None | Automatic archiving 2 years after the date of recording, alternatively they can be deleted upon your request. |
| Processing contact details for inviting you to future events | Your consent | Name and surname, e-mail, job role and company, country |
Internal: Marketing team, Sales team External: Marketo | Automatic deletion 2 years after the date of the event. |
Recruitment
A dedicated notice to job applicant(s) is available at the following link: Job Applicant Privacy Notice (opens in a new tab)
Clients, business partners and providers
| Purpose | Legal basis | Personal data | Recipients | Retention |
| Processing of contact details for the management of the business opportunity and/or negotiation, conclusion and execution of the agreement, including subsequent activities such as the administration of Customer Satisfaction Surveys (CSAT) to assess client experience, ensure service quality, and to improve our products and services. | Our legitimate interest | Name and surname, e-mail, job role and company, link with a specific account and/or contract |
Internal: Sales team, Surveys Team, Legal team, Delivery team, Finance team External: SalesForce and Marketo. Depending on each specific case, eventual processors, suppliers or partners that Atos may engage in relation with the activity. | Deletion 3 years since last contact with trigger moment being end of contract or opportunity. |
| Contacting clients or prospects to present Atos’ products or services. | Our legitimate interest | Name and surname, e-mail, job role and company, link with a specific account and/or contract |
Internal: Sales team, Marketing team External: SalesForce and Marketo. Depending on each specific case, eventual processors, suppliers or partners that Atos may engage in relation with the activity. | Deletion 3 years since last contact with trigger moment being end of contract or opportunity. |
| Creation and publication of client stories. | Your consent | Name and surname, job role and company; picture |
Internal: Marketing team External: Claranet (hosting provider) | Automatic archiving 2 years after the date of recording, alternatively they can be deleted upon your request. |
Legal obligations
| Purpose | Legal basis | Personal data | Recipients | Retention |
| Ensuring compliance with legal and/or regulatory requirements. | Legal obligation | Depending on each specific case, but this may include name and surname, contact details. |
Internal: Legal team, Finance team External: DiliTrust | Depending on the local requirements of the country in which the Atos entity operates. |
Website visitors and digital interactions
| Purpose | Legal basis | Personal data | Recipients | Retention |
| Measurement of digital advertising campaign performance and analysis of website traffic originating from paid media, in order to assess campaign effectiveness and improve communication activities. | Your consent | Pseudonymous online identifiers (cookie IDs), technical and device data (browser, operating system, user agent), IP address, and website navigation data (pages visited, conversion events). No directly identifiable data (such as name, email address, or phone number) is processed. |
Internal: Marketing and Digital Communications teams (access to aggregated reports only). External:
| Data is retained in accordance with the retention periods defined by each advertising technology provider. Advertising cookies are stored for a limited duration (up to 13 months). Aggregated reporting data is retained for the duration necessary to analyse campaign performance. |
Atos is a worldwide organization. Therefore, we have distinct legal entities, country affiliates and subsidiaries in many parts of the world. Our internal processes and infrastructure are international in scope and nature and will cross country borders. Therefore, you should be aware that we may share your personal data with other entities of Atos and transfer it to countries in different parts of the world where we have data centres or where we do business, including those located outside the European Union (EU). The international transfer of personal data within Atos Group will be covered by Atos standards as set forth in the Atos Binding Corporate Rules.
You can learn more about the security measures we put in place by accessing the Global Data Protection Statement Atos Group.

