Privacy Policy
What does the personal data use policy cover?
This policy explains the characteristics of this processing and your rights concerning your personal data.
This privacy policy is drawn up in accordance with French Law No. 78-17 of 6 January 1978, known as the French Data Protection Act, and General Data Protection Regulation (GDPR) No. 2016/679.
Who is responsible for this policy?
The data controller is Doriane Simonnet.
The contact email address is: doriane.simonnet@reach-your-market.com
Who is this policy for?
This policy is intended for users of the website.
It concerns:
- People entrusted with technical services, including hosting, maintenance and website security;
- People with access to the website’s back office for administration;
- People who write or are mentioned in website content;
- People who create an account on the website;
- People who contact us through the website’s contact form;
- People listed on the website as partners.
What is the collected data used for (purposes)?
The purpose of processing is to manage the website.
This processing enables:
- Technical management of the website, including maintenance, hosting and security;
- Website administration;
- Management of the website’s editorial content;
- Management of online accounts;
- Management of enquiries received through the contact form;
- Listing partners on the website.
Legal bases for processing: what authorises us to process data
The legal bases for processing are as follows:
- For technical management of the website, including maintenance, hosting and security, the legal basis is legitimate interest;
- For website administration, the legal basis is legitimate interest;
- For management of the website’s editorial content, the legal basis is the consent of the people whose information is published;
- For management of online accounts, the legal basis is legitimate interest or consent;
- For management of enquiries through the contact form, the legal basis is legitimate interest in enabling online communication, or taking pre-contractual steps, such as preparing quotations at the individual’s request;
- For listing partners on the website, the legal basis is their consent.
Data retention periods
Data being processed is retained for no longer than necessary for the purposes for which it was recorded, in accordance with the principle of data minimisation.
The maximum retention periods are as follows:
- For website administration: for as long as the individuals concerned administer the website;
- For management of the website’s editorial content: 5 years from publication;
- For management of enquiries through the contact form: 3 years from the enquiry;
- For management of online support or after-sales service: 5 years from the request;
- For listing partners on the website: 5 years from publication;
Data processed
The data controller processes the following categories of data:
- Civil status, identity, identification data and images, such as surname, first name, address, photograph, date and place of birth;
- Connection data, such as IP addresses, logs, device identifiers, login identifiers and timestamps;
Whether providing data is mandatory or optional
The collected data is mandatory to fulfil the purposes of processing.
Data sources
Data is provided directly by the individual concerned.
Data recipients
Depending on their respective needs, all or part of the data may be received by:
- People responsible for technical services, including hosting, maintenance and website security;
- The website’s publishers;
What security measures are in place?
The data controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
The data controller takes steps to ensure that any individual acting under the authority of the controller or processor who has access to personal data only processes it on the controller’s instructions, unless required to do so.
The following specific security measures have been implemented:
- All processed data is transmitted in encrypted form using HTTPS;
- The server has anti-DDoS protection and a firewall specifically configured for WordPress.
Transfers of data outside the European Union and associated safeguards
The data controller does not transfer personal data outside the European Union.
Automated decision-making
The processing includes fully automated decision-making. The data controller undertakes to comply with the conditions of Article 22 of the GDPR.
Personal data after death – Rights of access, rectification, erasure and data portability
Individuals whose data is processed may set instructions for the retention, erasure and disclosure of their personal data after their death. These instructions may be general or specific.
Individuals whose data is processed also have rights of access, objection, rectification, erasure and, under certain conditions, data portability. They have the right to withdraw consent at any time where consent is the legal basis for processing.
The request must state the individual’s surname, first name and email or postal address, be signed and be accompanied by valid proof of identity.
These rights may be exercised by contacting Ms Doriane Simonnet.
Complaints
Individuals whose data is processed have the right to lodge a complaint with the supervisory authority (CNIL): https://www.cnil.fr/fr/webform/adresser-une-plainte
