Privacy policy

ARTICLE 1 : PREAMBLE

The purpose of this privacy policy is to inform users of the site:

  • On how their personal data is collected. Personal data is any information that can identify a user. As such, it can be: his name and surname, his age, his postal or email address, his location or his IP address (non-exhaustive list);
  • On the rights they have concerning these data;
  • On the person responsible for processing the personal data collected and processed;
  • On the recipients of these personal data;
  • On the site’s policy regarding cookies.

This policy completes the legal notice that can be consulted by users at the following address : https://delphine-grandvaux.fr/en/legal-notices

ARTICLE 2 : PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of the European Regulation 2016/679, personal data are:

  • Processed lawfully, fairly and transparently with respect to the data subject;
  • Collected for specified (see Article 3.1 hereof), explicit and legitimate purposes, and not further processed in a way incompatible with those purposes; Adequate, relevant and limited to what is necessary with regard to the purposes for which they are processed;
  • Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
  • Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which it is processed;
  • Processed in such a way as to ensure appropriate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing is lawful only if, and to the extent that, at least one of the following conditions is met:

  • The data subject has consented to the processing of his/her personal data for one or more specific purposes;
  • The processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject;
  • The processing is necessary for compliance with a legal obligation to which the controller is subject;
  • The processing is necessary to protect the vital interests of the data subject or of another natural person;
  • The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.

 

ARTICLE 3 : PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF NAVIGATION ON THE SITE

Article 3.1 : Collected data

The personal data collected in the context of our activity are the following:

  • Navigation data: device used, location, time of consultation, pages visited

The collection and processing of this data meets the following purpose(s):

  • Traffic analysis
  • Improvement of the user experience

Article 3.2 : Data collection method

When you use our site, the following data are automatically collected:

  • Navigation data (see Article 3.1). As the navigation data collected is fully anonymized, the user’s consent is not required. However, it is possible to object to their processing, in accordance with the elements listed in Article 5.

It is kept by the data controller under reasonable security conditions for a period of : 365 days The company may keep certain personal data beyond the above-mentioned periods in order to fulfill its legal or regulatory obligations.

Article 3.3 : Data hosting

Please refer to legal notices Article 1.4.

Article 3.4 : Transmission of data to third parties

When a third-party service collects personal data, the user will be provided with all the elements necessary to understand the use that will be made of his or her data (to the extent that the third-party service in question allows, at least a link to its privacy policy). It will be up to the user to accept or not the conditions imposed by the service. The present site cannot be held responsible for the data processing carried out by one of its third party services. (note that opposing this processing may in some cases prevent the user from benefiting from all or part of the service). The personal data collected in the context of the use of third party services:

  • Email address

The collection and processing of this data meets the following purpose(s):

  • Management of a mailing list for the newsletter

 

ARTICLE 4 : DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1 : The data controller

Refer to legal notices Article 1.2.

Article 4.2 : Le délégué à la protection des données (DPO)

The company Delphine GRANDVAUX, has currently not appointed a data protection officer, please refer to the data controller. If you consider, after having contacted us, that your rights “Data processing and Freedoms”, are not respected, you can address an information to the CNIL.

ARTICLE 5 : THE USER’S RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Any user concerned by the processing of his or her personal data may avail himself or herself of the following rights, pursuant to the European Regulation 2016/679 and the French Data Protection Act (Law 78-17 of January 6, 1978):

  • Right of access, rectification and right to erasure of data (laid down in Articles 15, 16 and 17 of the GDPR respectively);
  • Right to data portability (article 20 of the RGPD) ;
  • Right to limitation (Article 18 of the GDPR) and opposition to data processing (Article 21 of the GDPR);
  • Right not to be subject to a decision based exclusively on an automated process;
  • Right to determine the fate of the data after death ;
  • Right to have recourse to the competent supervisory authority (Article 77 of the GDPR).

To exercise your rights, please send your request by e-mail to contact@delphine-grandvaux.fr . In order for the data controller to comply with your request, you may be required to provide your e-mail address. Consult the cnil.fr website for more information on your rights.

ARTICLE 6 : CONDITIONS FOR CHANGING THE PRIVACY POLICY

The site editor reserves the right to modify this Policy at any time in order to ensure that users of the site are in compliance with current law. Any changes will not affect previous visits to the site, which will remain subject to the Policy in force, as accepted by the user at the time of the visit. The user is invited to read this Policy each time he/she uses our services, without the need to formally notify him/her of this. The present policy, edited on 08/05/2023, has been updated on 08/05/2023.