PRIVACY POLICY OF THE WEBSITE
lafaille-nancy.fr

ARTICLE 1 – PREAMBLE

This privacy policy applies to the website: lafaille-nancy.fr.

The purpose of this privacy policy is to inform users of the website:

- How their personal data is collected and processed. Personal data is defined as any data that could be used to identify a user. This includes, in particular, the user’s first name and surname, age, postal address, email address, location and IP address;

- What rights users have in relation to this data;

- Who is responsible for processing the personal data collected and processed;

- To whom this data is disclosed;

- Where applicable, the website’s policy on ‘cookies’.

This privacy policy supplements the legal notices and the General Terms and Conditions of Use, which users can view at the following address:
www.lafaille-nancy.fr

ARTICLE 2 - GENERAL PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF DATA

In accordance with the provisions of Article 5 of the European Regulation 2016/679, the collection and processing of data relating to users of the website comply with the following principles:

- Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who is the data subject. Whenever personal data is collected, the user will be informed that their data is being collected and the reasons for such collection;

- Purpose limitation: the collection and processing of data are carried out to fulfil one or more specific purposes set out in these general terms and conditions of use;

- Minimisation of data collection and processing: only data necessary for the proper fulfilment of the website’s objectives is collected;

- Limited data retention period: data is retained for a limited period, of which the user is informed. Where this information cannot be provided, the user is informed of the criteria used to determine the retention period;

- Integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of Article 6 of Regulation (EU) 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below:

- The user has expressly consented to the processing;

- The processing is necessary for the performance of a contract;

- The processing is required to comply with a legal obligation;

- The processing is necessary to protect the vital interests of the data subject or of another natural person;

- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority; The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.

ARTICLE 3 – PERSONAL DATA COLLECTED AND PROCESSED WHEN BROWSING THE WEBSITE

A. DATA COLLECTED AND PROCESSED, AND METHOD OF COLLECTION
The personal data collected on the La Faille Nancy website are as follows:
- our communications (by email or other means);

- the type of domain through which the User connects to the Internet;

- the IP address assigned to you;

- the date and time of your visit to our website;

- location data or other data relating to the connection;

- the pages you have viewed on our website;

- the type of browser, platform and/or operating system you are using;

- the search engine and the keywords used to find the site;

- your browsing preferences;

- your communication preferences.

This data is collected when the user carries out one of the following actions on the website:
- accessing a page on the website

- using links on the site to access other content

- filling in a contact form

The data controller will store all data collected in the website’s IT systems, under reasonable security conditions, for a period of: - analytics and website usage cookies: 12 months.

The collection and processing of data serve the following purposes:
- We collect your data primarily to improve our service, enhance the visibility of our website and, more generally, to improve and facilitate your browsing experience on our website.

The data processing carried out is based on the following legal grounds:
- This processing is based on our legitimate interest (in particular, to ensure the security of our website), is necessary to comply with our legal obligations and/or is necessary for the establishment, exercise or defence of legal claims

B. DISCLOSURE OF DATA TO THIRD PARTIES
Personal data collected by the website is not transferred to any third party and is processed solely by the website operator.


C. DATA HOSTING
The La Faille Nancy website is hosted by: Infomaniak, whose registered office is situated at the following address:
25 Eugène-Marziano, 1227 Les Acacias, Geneva, Switzerland

The hosting provider can be contacted on the following telephone number: +41 22 820 35 55.

The data collected and processed by the website is transferred to the following country(ies): Switzerland.

This transfer of personal data outside the European Union is justified on the following grounds:
.- The data is hosted in Switzerland, as we have a contract with the hosting provider Infomaniak, located in Switzerland.

ARTICLE 4 – DATA CONTROLLER

A. THE DATA CONTROLLER
The data controller for the processing of personal data is: La Faille (SARL)

They can be contacted as follows:
By email: lafaillenancy@gmail.com

The data controller is responsible for determining the purposes and means of processing personal data.

B. OBLIGATIONS OF THE DATA CONTROLLER
The data controller undertakes to protect the personal data collected, not to disclose it to third parties without the user’s knowledge, and to comply with the purposes for which the data was collected.

The website has an SSL certificate to ensure that the information and data transferred via the website are secure.

The purpose of an SSL certificate (‘Secure Socket Layer’ Certificate) is to secure the data exchanged between the user and the website.

Furthermore, the data controller undertakes to notify the user in the event of any rectification or erasure of data, unless this would entail disproportionate formalities, costs or procedures for the data controller.

In the event that the integrity, confidentiality or security of the user’s personal data is compromised, the data controller undertakes to inform the user by any means.

ARTICLE 5 – USER RIGHTS

In accordance with the regulations governing the processing of personal data, the user has the rights listed below.

In order for the data controller to comply with their request, the user must provide the following: their first name and surname, as well as their email address.

The data controller is required to respond to the user within a maximum of 30 (thirty) days.


A. OVERVIEW OF THE USER’S RIGHTS REGARDING THE COLLECTION AND PROCESSING OF DATA

a. Right of access, rectification and erasure
The user may view, update, amend or request the deletion of their personal data by following the procedure set out below:
- The user must send an email to the data controller, specifying the purpose of their request, to the contact email address.


b. Right to data portability
Users have the right to request that their personal data held by the website be transferred to another website, in accordance with the procedure set out below:
- The user must submit a request for the portability of their personal data to the data controller by sending an email to the address provided above.

c. Right to restriction of processing and right to object to processing
The user has the right to request the restriction of, or to object to, the processing of their data by the website; the website may not refuse such a request unless it can demonstrate the existence of legitimate and compelling grounds that override the user’s interests, rights and freedoms.

To request the restriction of the processing of their data or to object to the processing of their data, the user must follow the procedure set out below:
- The user must submit a request to restrict the processing of their personal data by email to the data controller.


d. Right not to be subject to a decision based solely on automated processing
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision produces legal effects concerning them, or similarly significantly affects them.

e. Right to determine the fate of data after death
Users are reminded that they may specify what is to become of their collected and processed data in the event of their death, in accordance with Law No. 2016-1321 of 7 October 2016.

f. Right to lodge a complaint with the competent supervisory authority
Should the data controller decide not to respond to the user’s request, and should the user wish to challenge this decision, or if they believe that any of the rights listed above have been infringed, they are entitled to refer the matter to the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr) or any competent court.


B. PERSONAL DATA OF MINORS
In accordance with the provisions of Article 8 of the European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data.

If the user is a minor under the age of 15, the consent of a legal representative will be required for personal data to be collected and processed.

The website publisher reserves the right to verify, by any means, that the user is over 15 years of age, or that they have obtained the consent of a legal representative before browsing the website.

ARTICLE 6 – TERMS AND CONDITIONS FOR AMENDING THE PRIVACY POLICY

This privacy policy may be viewed at any time at the address given below:
https://www.lafaille-nancy.fr/privacy-policy.html

The website publisher reserves the right to amend this policy to ensure it complies with current legislation.

Consequently, users are encouraged to review this privacy policy regularly to keep abreast of any recent changes made to it.

Users are hereby informed that this privacy policy was last updated on: 9 August 2022.

ARTICLE 7 - USER ACCEPTANCE OF THE PRIVACY POLICY

By browsing the website, the user confirms that they have read and understood this privacy policy and accept its terms and conditions, in particular with regard to the collection and processing of their personal data, as well as the use of “cookies".

La Faille wishes you a pleasant browsing experience!