The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is NOUVELLE MMO SAS, 24 Route de Beauvais – CS 90148 – 35501 VITRÉ cedex – FRANCE, e-mail: firstname.lastname@example.org. The data controller is the natural or legal person who determines, alone or jointly with others, the purposes and means of data processing.
1) Data collection during your visit to our website
When you use our website for purely informational purposes, i.e. when you do not register or otherwise transmit information to us, we only collect data transmitted by your browser to our server (“server log files”). When you visit our website, we collect the data we technically need to display the website, namely
- Web page visited;
- Date and time of access;
- Amount of data sent in bytes;
- Source/reference from which you accessed the page;
- Browser used;
- Operating system used;
- IP address used (if applicable, in an anonymous format).
Processing is carried out in accordance with Art. 6 (1) point f GDPR based on our legitimate interest in improving the stability and functionality of our website. No transmission or other use of the data takes place. We reserve the right to retrospectively check the server log files if there are concrete indications of illegal use.
- Session cookies: these are deleted at the end of the browsing session, i.e. when you close your browser.
- Persistent cookies: these are stored on your device and allow us to recognise your browser the next time you visit our website.
When cookies are installed, they collect and process certain user information such as browser and site data or IP address values on a personalised basis. Persistent cookies are automatically deleted after a set period of time, which varies for each cookie.
Please note that you can configure your browser so that you are informed about cookie settings and can decide whether to accept or reject cookies on a case-by-case basis or in general. Each browser handles cookie settings differently. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:
- Internet Explorer : http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
- Firefox : https://support.mozilla.org/fr/kb/activer-desactiver-cookies-preferences
- Chrome : https://support.google.com/chrome/answer/95647?hl=fr&hlrm=en
- Safari : https://support.apple.com/kb/ph21411?locale=fr_FR
- Opera : http://help.opera.com/Windows/10.20/fr/cookies.html
Please note that the functionality of our website may be limited if you do not accept cookies.
4) Personal data
When you contact us via our contact form or by e-mail, we collect personal data. The contact form in question clearly indicates the data collected. This information will only be stored and used for the purpose of responding to the request or for contact and technical administration.
Our legitimate interest in responding to your request is the legal basis for processing such data in accordance with Art. 6 (1) point f GDPR. Where the purpose of contact is to conclude a contract, Art. 6 (1) point b GDPR constitutes an additional legal basis. Your data will be deleted once your request has been processed. This is the case when circumstances prove that the facts in question are clarified and provided that no legal retention obligation arises.
5) Web analytics services
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics a recours à des « cookies », c’est-à-dire de petits fichiers texte qui sont stockés sur votre ordinateur et permettent d’analyser votre utilisation du site Web. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
This website only uses the Google Analytics service with the “_anonymizeIp()” extension, which guarantees the anonymity of the IP address by truncating it and excludes any direct identification of users. With this extension, your IP address will be truncated by Google within the European Union or in any other country that is party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. In these exceptional cases, data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in carrying out a statistical analysis of user behaviour for optimisation and marketing purposes.
Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website and internet usage. Google will not associate the IP address transmitted by your browser within the framework of Google Analytics with any other data.
Alternatively and on browsers available on mobile devices, click on the following link to set an opt-out cookie that prevents future recording of data on this website by Google Analytics (this opt-out cookie only works for this browser and this domain; when you delete the cookies from your browser, you need to click on the link again): disable Google Analytics
6) Rights of data subjects
12.1. Under the applicable data protection legislation, you have rights vis-à-vis the controller as a data subject with regard to the processing of your personal data (rights to information and powers of intervention). Information about these rights can be found below:
- Right of access under Art. 15 GDPR: in particular, you have a right of access to the personal data we process about you and to the following information: the purposes of data processing; the categories of personal data processed; the recipients or categories of recipients to whom your data have been or will be communicated; the envisaged retention period or the criteria used to determine this period; the existence of a right to rectification, erasure, restriction of processing, the right to object to such processing; the right to lodge a complaint with a supervisory authority; the source of your data where they have not been collected by us; the existence of automated decision-making (including profiling), and, where appropriate, useful information on the underlying logic, significance and intended consequences of such processing for you; your right to information, as well as the guarantees provided under Art. 46 GDPR when your data are transferred to third countries.
- Right to rectification under Art. 16 GDPR: you have the right to request the immediate rectification of incorrect data about you and/or to complete the incomplete data we store about you.
- Right to erasure under Art. 17 GDPR: you are entitled to request the erasure of your personal data where the conditions of Art. 17 (1) GDPR are met. However, this right does not exist when the processing of data is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
- Right to restriction of processing under Art. 18 GDPR: you are entitled to request the restriction of the processing of your personal data as long as the disputed accuracy of the data has been verified; where you object to the erasure of your data on the grounds of unlawful processing and request instead the restriction of their use; when your data are necessary to assert, exercise or defend legal claims, if we no longer need your data for the purpose of processing; or when you have objected to data processing on grounds relating to your specific situation and it has not yet been determined whether our legitimate reasons prevail.
- Right to notification under Art. 19 GDPR: where you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom your personal data have been communicated of any rectification, erasure or restriction of processing, unless such communication proves impossible or would require disproportionate effort. You are entitled to receive information about these recipients when you request it.
- Right to data portability under Art. 20 GDPR: you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You are entitled to demand that this data be passed on to another controller, provided that this is technically feasible.
- Right to withdraw consent granted under Art. 7 (3) GDPR: you have the right to withdraw your consent to data processing at any time. This right applies prospectively. In the event of an objection, the data concerned shall be deleted immediately, provided that further processing cannot be justified by a legitimate right to processing without consent. Withdrawal of consent shall not affect the lawfulness of processing based on consent carried out prior to such withdrawal.
- Right to lodge a complaint under Art. 77 GDPR: where you consider that the processing of your personal data constitutes a breach of the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State where you are normally resident, where you work or where the breach is alleged to have taken place.
7) Right to object
Where we process your personal data as part of an assessment of interests based on our legitimate interest, you have the right to object to this processing on grounds relating to your specific situation at any time.
This right applies prospectively. When you exercise your right to object, we will stop processing the data concerned. We reserve the right to carry out further processing if we can demonstrate compelling legitimate grounds for doing so which override your interests and fundamental rights and freedoms, or if the processing serves to assert, exercise or defend of legal claims.
8) Retention period of personal data
The retention period of personal data is measured according to the legal retention period (e.g. retention periods under tax and commercial legislation). After this period has elapsed, the corresponding data are routinely deleted, provided that they are no longer required for the preparation or performance of contracts and/or there is no legitimate interest in their retention.