PRIVACY POLICY FOR THE
lafaille-nancy.fr

ARTICLE 1 - PREAMBLE

This privacy policy applies to the website: lafaille-nancy.fr.

The purpose of this privacy policy is to inform users of the website:

- How their personal data is collected and processed. Personal data is defined as any data that could identify a user. This includes, in particular, the user’s first name and surname, age, postal address, email address, location and IP address;

- What rights users have regarding this data;

- Who is responsible for processing the personal data collected and processed;

- To whom this data is disclosed;

- Where applicable, the website’s policy on ‘cookies’.

This privacy policy supplements the legal notices and the General Terms and Conditions of Use, which users can view at the following address:
www.lafaille-nancy.fr

ARTICLE 2 - GENERAL PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF DATA

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of data relating to users of the website comply with the following principles:

- Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who is the data subject. Whenever personal data is collected, the user will be informed that their data is being collected and the reasons for such collection;

- Limited purposes: the collection and processing of data are carried out to fulfil one or more specific purposes set out in these terms and conditions of use;

- Minimisation of data collection and processing: only data necessary for the proper fulfilment of the website’s objectives is collected;

- Limited data retention period: data is retained for a limited period, of which the user is informed. Where this information cannot be provided, the user is informed of the criteria used to determine the retention period;

- Integrity and confidentiality of data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below:

- The user has expressly consented to the processing;

- The processing is necessary for the performance of a contract;

- The processing is necessary to comply with a legal obligation;

- The processing is necessary to protect the vital interests of the data subject or of another natural person;

- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority; The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.

ARTICLE 3 - PERSONAL DATA COLLECTED AND PROCESSED WHEN BROWSING THE WEBSITE

A. DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION
The personal data collected on the La Faille Nancy website are as follows:
- our communications (by email or other means);

- the type of domain through which the User connects to the Internet;

- the IP address assigned to you;

- the date and time of your visit to our website;

- location data or other data relating to the connection;

- the pages you have viewed on our website;

- the type of browser, platform and/or operating system you are using;

- the search engine and keywords used to find the site;

- your browsing preferences

- your communication preferences.

This data is collected when the user performs one of the following actions on the site:
- accessing a page on the website

- using links on the site to access other content

- filling in a contact form

The data controller will store all collected data on the website’s IT systems under reasonable security conditions for a period of: - analytics and website usage cookies: 12 months.

The collection and processing of data serve the following purposes:
- We collect your data primarily to improve our service, enhance the visibility of our website and, more generally, to improve and facilitate your browsing experience on our website.

The data processing carried out is based on the following legal grounds:
- This processing is based on our legitimate interest (in particular, ensuring the security of our website), is necessary to comply with our legal obligations and/or is necessary for the establishment, exercise or defence of legal claims

B. DISCLOSURE OF DATA TO THIRD PARTIES
Personal data collected by the website is not disclosed to any third parties and is processed solely by the website publisher.


C. DATA HOSTING
The La Faille Nancy website is hosted by: Infomaniak, whose registered office is located at the following address:
25 Eugène-Marziano 1227 Les Acacias, Geneva, Switzerland

The hosting provider can be contacted on the following telephone number: +41 22 820 35 55.

The data collected and processed by the website is transferred to the following country(ies): Switzerland.

This transfer of personal data outside the European Union is justified on the following grounds:
.- The data is hosted in Switzerland, as we have a contract with the hosting provider Infomaniak, located in Switzerland.

ARTICLE 4 - DATA CONTROLLER

A. THE DATA CONTROLLER
The data controller for personal data is: La Faille (SARL)

They can be contacted as follows:
By email: lafaillenancy@gmail.com

The data controller is responsible for determining the purposes and means of processing personal data.

B. OBLIGATIONS OF THE DATA CONTROLLER
The data controller undertakes to protect the personal data collected, not to disclose it to third parties without the user’s knowledge, and to comply with the purposes for which such data was collected.

The website has an SSL certificate to ensure that the information and data transferred via the website are secure.

The purpose of an SSL certificate (Secure Socket Layer Certificate) is to secure the data exchanged between the user and the website.

Furthermore, the data controller undertakes to notify the user in the event of any rectification or erasure of data, unless this would entail disproportionate formalities, costs and procedures for the data controller.

In the event that the integrity, confidentiality or security of the user’s personal data is compromised, the data controller undertakes to inform the user by any means.

ARTICLE 5 - USER RIGHTS

In accordance with the regulations concerning the processing of personal data, the user has the rights listed below.

In order for the data controller to comply with their request, the user is required to provide: their first name and surname, as well as their email address.

The data controller is required to respond to the user within a maximum of 30 (thirty) days.


A. OVERVIEW OF THE USER’S RIGHTS REGARDING DATA COLLECTION AND PROCESSING

a. Right of access, rectification and erasure
The user may view, update, amend or request the deletion of data concerning them, in accordance with the procedure set out below:
- The user must send an email to the data controller, specifying the subject of their request, to the contact email address.


b. Right to data portability
The user has the right to request the portability of their personal data held by the website to another website, in accordance with the procedure set out below:
- The user must submit a request for the portability of their personal data to the data controller by sending an email to the address provided above.

c. Right to restriction and objection to data processing
The user has the right to request the restriction of, or to object to, the processing of their data by the website, which the website may not refuse unless it can demonstrate the existence of legitimate and compelling grounds that override the user’s interests, rights and freedoms.

To request the restriction of the processing of their data or to object to the processing of their data, the user must follow the procedure below:
- The user must submit a request to restrict the processing of their personal data by email to the data controller.


d. Right not to be subject to a decision based solely on automated processing
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision produces legal effects concerning them, or similarly significantly affects them.

e. Right to determine the fate of data after death
Users are reminded that they may determine the fate of their collected and processed data in the event of their death, in accordance with Law No. 2016-1321 of 7 October 2016.

f. Right to refer the matter to the competent supervisory authority
In the event that the data controller decides not to respond to the user’s request, and the user wishes to challenge this decision, or if they believe that any of the rights listed above have been infringed, they are entitled to refer the matter to the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr) or any competent court.


B. PERSONAL DATA OF MINORS
In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data.

If the user is a minor under the age of 15, the consent of a legal representative will be required for personal data to be collected and processed.

The website publisher reserves the right to verify by any means that the user is over 15 years of age, or that they have obtained the consent of a legal representative before browsing the website.

ARTICLE 6 - TERMS AND CONDITIONS FOR AMENDING THE PRIVACY POLICY

This privacy policy may be viewed at any time at the address below:
https://www.lafaille-nancy.fr/privacy-policy.html

The website publisher reserves the right to amend this policy to ensure it complies with current legislation.

Consequently, users are invited to consult this privacy policy regularly to keep abreast of any changes made to it.

Users are hereby informed that this privacy policy was last updated on: 09/08/2022.

ARTICLE 7 - USER ACCEPTANCE OF THE PRIVACY POLICY

By browsing the website, the user confirms that they have read and understood this privacy policy and accept its terms and conditions, particularly with regard to the collection and processing of their personal data, as well as the use of "cookies".

La Faille wishes you a pleasant browsing experience!