CONTEXT AND PURPOSE OF THIS POLICY
Within the framework of this website www.salon-resonances.com, we may process certain personal data.
What constitutes personal data?
Any information that allows a natural person to be identified, directly or indirectly.
What qualifies as data processing?
Any action based on personal data, such as collecting, recording, retrieving or deleting.
These processing operations are carried out in accordance with the French Data Protection Act of 1978, as amended, and the European General Data Protection Regulation (hereinafter referred to as the GDPR) which came into application on May 25th, 2018.
The main objective of the GDPR is to enable people concerned by processing operations to have better control over their personal data. Thus, transparency as to the processing carried out with your data, your rights and the ways in which these rights can be exercised, is essential. The purpose of this personal data management policy is to explain to you how we manage your personal data (what type of processing we do, for what purpose, what administrative services have access to it, when we delete the data, how we protect the data) and what your rights are.
THE FREMAA’S OBLIGATIONS
Communication about the processing controller
The controller of the processing operations carried out on this website is:
Fédération des métiers d’art d’Alsace
1 bis rue de l’école
As controller, the Fédération des métiers d’art d’Alsace must fulfil several obligations imposed by the GDPR.
Appointment of a data protection officer (DPO)
The GDPR has introduced as a new obligation for the controller to appoint a Personal Data Protection Officer. This Officer is currently Lucie MUNCH, digital communication manager at Frémaa. For any questions concerning personal data, you can contact her at the following e-mail address: firstname.lastname@example.org
Implementation of security measures / Protection of your data
The Fédération des métiers d’art d’Alsace implements technical and organisational measures to ensure the security of the personal data it processes
Access to information
The Fédération des métiers d’art d’Alsace commits to make available to the people, whose data are processed by its services, all information useful for a proper understanding of their use and the rights they hold over such data. This allows people to make an informed decision as to whether or not they wish to provide us with this personal data.
UNDERSTANDING THE PROCESSING OF YOUR PERSONAL DATA
Precisely informing you while collecting your data
To ensure that information about the processing of your data is understandable and readable, the information is provided to you at the time and place where we collect your personal data, through the use of this website.
Information provided in the privacy statement at the time of collection covers several issues:
THE RIGHTS OF DATA SUBJECTS
The regulations relating to the protection of personal data (French Data Protection Act of 1978, as amended, and the General Data Protection Regulation of April 27th, 2016) recognize certain rights to the person whose personal data are processed.
To exercise your rights, listed below, you can do so in 4 ways:
In theory, we will reply to you within a month of receiving your request. However, by exception, this period will be extended to 3 months in case your request is complex or if there is a large number of requests in progress. We will inform you during the month period of the reasons for the possible extension of the deadline.
You will find below a list of your personal data protection rights.
The right of access
You may ask us to provide you with any of your personal data that we hold.
It is possible for us not to respond favourably to your request in several cases:
The right of rectification
You may ask us to change your personal data that is inaccurate or incomplete.
The right of erasure
You may ask us to delete your personal data, provided that you are in one of the following situations:
When you request deletion, it is important you specify which data you wish to have deleted.
The right to object
This right allows you to object to processing that is carried out for a specific purpose, provided that you can justify “reasons relating to your particular situation”.
We may refuse your request for opposition in certain circumstances, including:
The right to data portability
This right allows you to receive part of your personal data in a machine-readable format.
But this right is limited since it only applies to the data you provided us, the processing of which is automated and whose processing is based on your consent.
Moreover, the exercise of this right must not infringe the rights and freedoms of third parties.
The right to choose the fate of your data after your death
In accordance with article 40-1 of the French Data Protection Act, “any person may define guidelines for the storage, erasure and communication of his/her personal data after his/her death”.
A person may be appointed to carry out these instructions.
If these conditions do not apply, the deceased’s heirs have the right to access and enforce the instructions. The heir must prove his/her identity and provide proof of his/her status as heir by producing an affidavit or a family record book.
The right to lodge a complaint with a supervisory authority (CNIL)
If you believe that your rights are not respected, you can lodge a complaint to the French Data Protection Authority (CNIL) .
CONTACT FORM : Information about the processing of your personal data
The Fédération des Métiers d’Art d’Alsace, located at 1 B rue de l’Ecole F-67140 Andlau, processes your personal data collected by this form in order to enrich a file of people interested in FREMAA’s actions.
This treatment is based on your consent. Fields marked with * are mandatory in order to provide the expected service.
The recipients of your data is FREMAA as well as the digital communication agency Pan. Your personal data will be kept for a period of 3 years.
You have a right to access, rectify, delete, portability, opposition (except exceptions), limitation of processing, withdrawal of your consent at any time (if processing is based on consent) and complaint to the CNIL (French data protection authority).