Rights management

What are the rights of the data subjects of the processing carried out by this site?

 

We collect the individual data that you provide us in the context of these contacts, as well as in the emails you send us.



In accordance with the General Regulation on the Protection of Personal Data (RGPD) which came into force on 25 May 2018 and by the LAW n° 2018-493 of 20 June 2018 relating to the protection of personal data, known as LIL3, and Order n° 2018-1125 of 12 December 2018 taken in application of Article 32 of Law n° 2018-493 of 20 June 2018 relating to the protection of personal data and amending Law n° 78-17 of 6 January 1978 relating to information technology, files and freedoms, you have the following rights:

 

 

Rights at your disposal

Usefulness

Right of access

Right to know whether we hold Personal Data about you and to obtain a copy of it, including the following information:

The purpose of the processing, the categories of Personal Data processed, the categories of recipients of the data, the retention period where possible (or the criteria used to determine this period), the rights you have.

Right to erasure (right to be forgotten)

Right to obtain the deletion of your Personal Data in the cases provided for by the GDPR (Article 17), including:

When the data we process is no longer necessary for us; when you object to commercial prospecting and request deletion in addition to the cessation of processing; when the processing is unlawful.

Right to object

This right applies when we process your data in order to pursue one of our legitimate interests, such as advertising on your social network pages. If you request to object, we will analyze the reasons for your particular situation and investigate whether we have a legitimate and compelling reason to continue processing your data. If not, we will stop the processing concerned.

Right to oppose commercial prospecting

If you object to commercial prospecting, we will simply cease processing the Data concerned.

Withdrawal of consent

Where the processing of your Personal Data is based on your consent, the withdrawal of your consent prevents us from continuing to process the data in question.

Right to rectification and right to limitation

You may request the update or rectification of any Personal Data that you believe to be inaccurate or obsolete.

You may also request that processing be suspended, with the exception of the retention of Personal Data when:

  • you dispute the accuracy of the data (this limitation lasts as long as it takes for us to verify the possible inaccuracy);
  • the processing is unlawful and you prefer to obtain the limitation of the processing rather than the erasure of the data;
  • we no longer need the data but you consider that they are still necessary for the establishment, exercise or defense of legal claims;
  • you have formulated a request for opposition due to your particular situation and this limitation is obtained during the time of checking the balance of interests between our legitimate interests and your rights and freedoms.

Where processing has been restricted, your Data may only be processed with your consent or for the exercise, establishment and defence of legal claims.

 

Right to portability

You have the right to receive the Personal Data you have directly provided to us in a structured, commonly used and machine-readable format.

 

You also have the right to transmit this data or to request that we transmit it to another controller.

This right applies only to processing based on the consent of the individual, or on the performance of the contract and which is carried out by means of an automated process.

 

 

Fate of Data in case of death

 

In accordance with the provisions of Article 85 of the Data Protection Act, we inform you that, as an individual :

  • You have the right to provide us with instructions regarding the retention, deletion and disclosure of your Personal Information after your death;
  • You may change or revoke these instructions with us at any time;
  • You will be able to designate a person to carry out these instructions, who will have the authority after your death to review these instructions and to request their implementation from us.
  • You are also informed that if you do not provide [COMPANY CUSTOMER] with specific instructions on what to do with your Personal Data, your heirs may exercise the rights to retain, delete and disclose your Personal Data after your death to the extent necessary to organize and settle your estate and for [COMPANY CUSTOMER] to take account of your death.

 

You also have the right (where applicable) to formulate general or specific directives relating to the conservation, deletion and communication of your personal data after your death or right to be forgotten.

 

 

How can I exercise my rights under the RGPD and the Data Protection Act?

 

Your requests can be formulated in different ways:

 

  • By email by writing to : [CUSTOMER EMAIL ADDRESS]
  • In person at the reception of [COMPANY NAME + CLIENT ADDRESS].
  • By mail by writing to [CUSTOMER MAILING ADDRESS].
  • Through an agent who will use one of the above channels to make the request.

 

 

Please submit each of your requests by one of the above means and attach a copy of your identification.

 

 

For a right of access request:

 

Please specify in your request which data or processing operations it relates to.

Your data will be sent to you electronically or by post, by registered mail with acknowledgement of receipt.

[CUSTOMER'S BUSINESS NAME] may require payment of a reasonable fee based on administrative costs for any additional copies requested (Article 15.3 of the GDPR).

In case of manifestly unfounded or excessive requests, [CUSTOMER BUSINESS NAME] may require payment of a reasonable fee that takes into account the administrative costs incurred in providing the information or refuse to comply with such requests (Article 12.5 GDPR).

 

 

For a right of rectification request:

 

If you believe that information about you is inaccurate and should be corrected, please indicate precisely which data about you is inaccurate or incomplete, and provide any information that would allow it to be corrected or completed (Article 15 of the GDPR).

 

 

For a request for the right to erasure:

 

Please indicate precisely the data concerning you that you are requesting to be deleted, and the reasons for your request (article 17 of the RGPD).

Please note: this right is not absolute, [COMPANY NAME CUSTOMER] may be obliged to keep information about you, in particular in the context of the management of the commercial relationship (management of invoices, management of disputes) and in the context of documentation and the provision of evidence relating to the exercise of your rights.

 

 

For a request to limit processing:

 

Please indicate precisely which data about you you are requesting to limit the processing of, and the reasons for your request.

Please note: this right is not absolute, [CUSTOMER BUSINESS NAME] may decide to continue processing your data (Article 18.3 of the GDPR). Limitation, if implemented, may result in the suspension of services provided by [CUSTOMER BUSINESS NAME] (access to work and deliverables, receipt of information, etc.). These effects will be described to you in the letter acknowledging receipt of your request to limit processing.

 

 

For an objection request:

 

Please indicate precisely which data processing you wish to object to, and the reasons for your request.

Please note: this right is not absolute. Please indicate precisely the processing for which you object to the handling of your personal data, and the reasons for your request (Article 21 of the GDPR).

 

 

To apply for the right to portability:

 

Each user may at any time make a request for data portability in order to recover the personal data that [CUSTOMER'S BUSINESS NAME] has collected about him/her in the context of processing based on consent and on a contractual basis.

If you would like the data to be transferred to another controller in a standard format, please specify this and provide the contact details of the other controller.

 

 

How to contact the DPO?

 

You can contact the DPO of [COMPANY NAME CUSTOMER] by e-mail at the following address [CUSTOMER DPO E-MAIL ADDRESS] or by post by sending your mail to the following address: [POSTAL ADDRESS DPO CLIENT].

 

You can make a request to the CNIL at the following address

3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

 

Updated on May 07, 2021.