Privacy Policy

1. Data Controller Identification

The Data Controller responsible for processing your personal data on this website is:

2. Categories of Data Collected

We process only minimal data necessary for site performance and user inquiries:

• Contact Inquiries: Name, email address, inquiry subject, and message content submitted voluntarily via the contact form.
• Technical & Log Data: Anonymized IP addresses, browser user-agent, operating system, and timestamp of page requests for network security and server diagnosis.
• Local Storage & Cookie Preferences: Your selected cookie preferences and checklist progress stored client-side in your browser.

3. Legal Bases for Processing (GDPR Art. 6)

We process personal data based on the following legal grounds:

• Legitimate Interests (Art. 6(1)(f)): Maintaining server stability, detecting cyber attacks, and providing functional web performance.
• Consent (Art. 6(1)(a)): For non-essential analytics cookies and voluntary contact form submissions.
• Legal Obligations (Art. 6(1)(c)): Compliance with statutory French tax, corporate, and accounting retention rules.

4. Data Sharing & Third-Party Transfers

We do not sell, rent, or trade your personal information. Data may only be accessed by technical hosting providers under strict Data Processing Agreements (DPAs) within the European Economic Area (EEA).

5. Your Data Subject Rights (GDPR)

Under the GDPR, you have the right to:

• Request access to and a copy of your personal data.
• Request rectification of inaccurate or outdated data.
• Request erasure of your data ("Right to be Forgotten").
• Object to or restrict data processing.
• Lodge a complaint with the French supervisory authority (CNIL — Commission Nationale de l'Informatique et des Libertés at cnil.fr).

6. Contact for Privacy Inquiries

To exercise any of your data rights, please email our Data Protection officer at [email protected] or write to C.E.R ALFORTVILLE, 49 Rue Victor Hugo, 94140 Alfortville, France.