The name and address of the person responsible within the meaning of Article 4, paragraph 7, of the RPGD.
ChezNadine SARL Nadine Kramm, 271 Colombet Road, 24260 Audrix,
France Email: firstname.lastname@example.org
Security and Protection of Your Personal
Data We believe that our primary responsibility is to protect the privacy of the personal information you provide and to protect it from unauthorized access. That’s why we apply the highest and most sophisticated security standards to ensure maximum protection of your personal information.
As a private company, we are subject to the provisions of the European Data Protection Regulation (DSGVO) and the Regulation of the Federal Data Protection Act (BDSG).
We have taken technical and organizational steps to ensure that data protection regulations are complied with by both us and our external service providers.
Legislation requires that personal data be treated lawfully, in good faith and reasonably for the person concerned (“legality, fairness, transparency”).
To this end, we inform you of the individual legal definitions also used in this declaration of confidentiality:
“Personal data”: any information about an identified or identifiable individual (hereafter referred to as the “person concerned”); a natural person is considered identifiable, identifiable directly or indirectly, including by association with an identifier such as a name, identification number, location data, an online identifier or one or more peculiarities, the expression of the physical person’s physiological, genetic, mental, economic, cultural or social identity. Treatment is any person, with or without the help of automated procedures, procedures or processes related to personal data, such as collection, collection, organization, organization, storage, adaptation or modification, reading, recovery, use, disclosure by transmission, dissemination or any other form of supply, matching or connection, restriction, or destruction.
“Processing Restriction” is the marking of personal data stored in order to limit their future processing.
Profile “profiling” refers to any type of automated processing of personal data that uses this personal data to assess certain aspects of a person’s personality, including aspects of a person’s work, economic situation, health, analysis or predicting personal preferences, interests, reliability, behaviour, location or location change.
Pseudonymization, the processing of personal data so that personal data can no longer be attributed to a person concerned without additional information being provided, provided that this information is kept separately and subject to technical and organisational measures to guarantee Data cannot be attributed to an identified or identifiable individual.
File system “File System”: any structured collection of personal data accessible according to specific criteria, whether this collection is centralized, decentralized or organized according to functional or geographical considerations.
processing, a natural or legal person, a public authority, one or more agencies, which, alone or in conjunction with others, decides the purpose and means of processing personal data;
Where the purposes and means of this treatment are determined by EU law or By Member State law, the person responsible for the treatment or the specific criteria governing his appointment can be defined in EU or national law.
Processors, a natural or legal person, a public authority, an organization or an organization that processes personal data on behalf of the processor.
A “Recipient” recipient,
a natural or legal person, a public authority, an agency or other agency to which personal data is disclosed, whether or not it is a third party.
However, authorities that may receive personal data under EU or national legislation in relation to a given mission are not considered recipients. the processing of this data by those authorities must comply with applicable data protection rules, in accordance with the purposes of the processing. Third The term “third party” refers to a natural or legal person, a public authority, one or more organizations other than the person concerned, the person in charge of the processing, the subcontractor and the person authorized under the direct responsibility of the person in charge of the processing or subcontractor to process the personal data.
Consent an “informed consent” of the person concerned is any expression of will expressed voluntarily in an informed and unambiguous manner in the form of a statement or other unambiguous confirmation act by which the person concerned indicates that he or she is involved in the treatment of the person concerned.
Legality of treatment
The processing of personal data is only lawful if there is a legal basis for processing. The legal basis for treatment may, in accordance with Article 6, paragraph 1, read. (a) DSGVO in particular: -The person concerned has consented to the processing of personal data concerning him for one or more specific purposes.
Treatment is necessary to carry out a contract to which the person concerned is a party or to carry out pre-contract actions carried out at the request of the person concerned;
Treatment is necessary to fulfil a legal obligation to which the person responsible for the treatment is subjected;
Treatment is necessary to protect the vital interests of the person concerned or any other person;
Treatment is necessary for the performance of a task of general interest or the exercise of a public authority delegated to the person in charge of the treatment;
Treatment is necessary to protect the legitimate interests of the person in charge of the treatment or of a third party, unless the interests or fundamental freedoms and rights of the person concerned that require the protection of personal data prevail, especially when the person concerned is a child.
Information on the collection
of personal data (1) Below we inform of the collection of personal data when using our website. Personal data is z. Name, address, email addresses, user behavior.
(2) When you contact us by email, the information you provide (your email address, name and phone number, if any) will be stored by us to answer your
questions. We will remove data from this connection when storage is no longer needed, or processing will be restricted if legal retention requirements exist. Collecting personal data when visiting
our website In the case of a purely informative use of the site, i.e. if you do not register or provide us with information, we will only collect the personal data that your browser transmits to our server.
If you wish to visit our website, we collect the following data that we are technically required to display our website and ensure its stability and security (the legal basis is s. 6 (1), sentence 1, bed. DSGVO):
If personal data is transmitted to a third country or international organization, you have the right to be informed of the appropriate safeguards provided in Article 46 of the GDPR with respect to the transfer. We provide a copy of the personal data that is being processed. For any additional copy you may ask a person, we may charge a reasonable fee based on administrative fees. If you submit the application electronically, the information must be provided in a standard electronic format, unless otherwise stated. The right to receive a copy in accordance with paragraph 3 does not infringe on the rights and freedoms of others.
(4) Right to rectify You have the right to demand immediate correction of the erroneous personal data about you. Taking into account the purposes of the treatment, you have the right to request the completion of incomplete personal data, including through a supplementary statement.
(5) Right of retraction (“Right to be forgotten”) You have the right to immediately ask the person responsible for deleting your personal data and we are obliged to delete this data immediately if any of the following reasons are true:
Personal data is no longer necessary for the purpose for which it was collected or processed.
The person concerned withdraws consent on which the treatment was based on Article 6, paragraph 1, point (a) or Article 9, paragraph 2, point (a) of the RGP, and does not have a different legal basis for treatment.
The person concerned opposes treatment under Article 21, paragraph 1 of the RPGD and that there are no legitimate high-level grounds for treatment to be treated, or the person concerned objects to treatment under Article 21, paragraph 2, of the RPGD.
Personal data has been processed illegally.
The deletion of personal data is necessary to fulfil a legal obligation under EU law or the law of the Member States to which the person responsible for processing is subject.
Personal data was collected in connection with the information society services proposed under Article 8, paragraph 1, of the GDPR.
If the processor has made the personal data available to the public and is required to delete it in accordance with paragraph 1, taking into account the available technology and implementation costs, he takes appropriate measures, including technical ones, to inform those responsible for processing the personal data. to inform that a person concerned has requested to remove all links to such personal data or copies or reproductions of that personal data.
The right of withdrawal (“right to be forgotten”) does not exist if treatment is required:
Exercising the right to freedom of expression and information;
– fulfilling a legal obligation required by EU law or the Member States to which the person in charge of the treatment is subject, or carrying out a task of general interest or exercise of the public authority delegated to the person responsible for the treatment;
– for public interest reasons in the area of public health, in accordance with Article 9, paragraph 2, points (h) and (i) and Article 9, paragraph 3, of the RPGD;
– for public interest, archival, scientific or historical research, or for statistical purposes under section 89, paragraph 1, of the RPGD, as long as the act in paragraph 1 is likely to render the objectives of this treatment impossible or seriously, or
To assert, exercise or defend legal action.
(6) Right to limit treatment You have the right to require that we restrict the processing of your personal data if one of the following conditions is met:
The person concerned disputes the accuracy of personal data for a period of time allowing the processing manager to verify its accuracy;
The processing is illegal and the person concerned refuses to delete the personal data but asks that the use of personal data be restricted;
The person in charge of the processing no longer needs the personal data for processing purposes, but the person concerned requires them to claim, exercise or defend legal action;
The person concerned objected to the treatment under Article 21, paragraph 1 of the RPGD, provided that it was not certain that the responsible motives outweighed those of the person concerned.
If the processing has been restricted in accordance with the above requirements, this personal data will be stored – with the consent of the parties concerned – except for its storage.
Person or to assert, claim or defend rights or to protect the rights of another individual or legal person or for reasons of major public interest of the Union or a Member State.
In order to exercise the right to limit treatment, the person concerned can contact us at any time using the contact details provided above.
(7) Right to data portability You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format, as well as the right to transfer it to another responsible person without interference from the person in charge of the processing. to whom the personal data was provided, provided that:
Treatment is based on consent within the meaning of Article 6, paragraph 1, point (a) or Article 9, paragraph 2, point (a) or on a contract under Article 6, paragraph 1, point b) of the RGP, and;
The processing is done using automated procedures.
When you exercise the right to portability of the data in accordance with paragraph 1, you have the right to have the personal data transmitted directly from one processing manager to another, to the extent of technical possibilities. The exercise of the right to data portability is without prejudice to the right of retraction (the right to be forgotten). This right does not apply to any treatment necessary for the performance of a public interest task or the exercise of the public authority delegated to the person in charge of the treatment.
(8) Right of Objection You have the right, at any time for reasons relating to your particular situation, to object to the handling of personal data relating to you under Article 6, paragraph 1, points (e) or (f) of the RGP; this also applies to profiling based on these provisions. The processor no longer processes personal data unless he or she can demonstrate legitimate and compelling reasons that outweigh the interests, rights and freedoms of the individual concerned, or that the treatment is intended to enforce, prosecute or defend legal action.
If personal data is processed to manage direct mail, you have the right to object at any time to the processing of your personal data for advertising purposes. this also applies to profiling to the extent that it is associated with such direct mail. If you object to direct marketing processing, personal data will no longer be processed for these purposes.
With regard to the use of information society services, regardless of the 2002/58/EC directive, you can exercise your right to object through automated procedures using technical specifications.
You have the right, for reasons related to your particular situation, against the processing of personal data relating to you and relating to academic or scientific issues
For historical research or statistical purposes under section 89, paragraph 1, an objection is formed, unless the treatment is necessary to carry out a public interest task.
The right of objection can be exercised at any time by contacting the person responsible.
(9) Automated decisions on a case-by-case basis, including profiling. You have the right not to be subject to a decision based solely on automated processing – including profiling – that will have a legal effect or that will affect you in the same way. This does not apply if the decision:
It is necessary to conclude or execute a contract between the person concerned and the person in charge of the treatment,
is authorised by EU or Member States legislation to which the person responsible for the treatment is subject, and where such legislation contains appropriate measures to protect the rights and freedoms and legitimate interests of the person concerned, or
With the express consent of the person concerned.
The person in charge of the treatment takes appropriate measures to safeguard the rights and freedoms and legitimate interests of the person concerned, including at least the right to obtain the intervention of a person from the person in charge of the treatment, to express his own position and to challenge the decision.
This right can be exercised at any time by the person concerned by speaking to the person in charge.
(10) Right to complain to a supervisory authority In addition, without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, particularly in the Member State of its place of residence, place of work or place of alleged infringement, if the person concerned The handling of personal data relating to them is contrary to this regulation.
(11) Right to an effective judicial remedy Without prejudice to any administrative or extrajudicial remedies available, including the right to complain to a supervisory authority under Article 77 of the RGPD, he is entitled to an effective judicial remedy if he believes he can appeal the regulation. Rights were violated as a result of the processing of their personal data in violation of this regulation.