1 – Processing of Your Personal Data
Definitions
- Personal Data: Refers to any information relating to an identified or identifiable natural person (hereinafter “Personal Data”).
- DPO: The Data Protection Officer (DPO) is responsible for ensuring compliance with the GDPR within the organization. Contact our DPO here
- Data Controller: The Data Controller is the natural or legal person who determines the purposes and means of processing. Typically, this is the legal entity represented by its legal representative. The Data Controller is the Fondation Napoléon.
Our Commitments
We process your Personal Data in accordance with Regulation (EU) 2016/679 of the European Parliament and Council, known as the GDPR.
We are committed to safeguarding your Personal Data. Only authorized personnel trained in confidentiality rules participate in the management of the www.napoleon.org website.
Moreover, the Fondation Napoléon implements appropriate technical and organizational measures to prevent the loss, misuse, alteration, and deletion of your Personal Data. These measures are adapted according to the sensitivity of the data and the level of risk involved in processing or implementing it.
In the event of a data breach affecting your Personal Data, the Fondation Napoléon will notify you within the timeframe and according to the procedures specified by applicable laws and regulations.
Information Obligations
Article 13 of the GDPR requires us to inform you about:
- The identity and contact details of the Data Controller and, where applicable, the Data Controller’s representative;
- The purposes of the processing for which the Personal Data is intended and the legal basis for the processing;
- The recipients or categories of recipients of the Personal Data, if any;
- The period for which the Personal Data will be stored or, if that is not possible, the criteria used to determine that period;
2 – Personal Data We Process
We collect and process the following Personal Data:
Type of data collected |
Processing purpose |
Basis of Processing |
Retention period |
|||
Data collected by the contact form |
||||||
● Last name
● First name ● Title ● Email address ● Message (if any) |
Contact form management | Legitimate interest | 3 years | |||
Data collected when you contact us via our e-mail hyperlinks |
||||||
● Email address
● Content of message |
Managing your contact emails | Legitimate interest | 3 years | |||
Data collected when subscribing to the newsletter |
||||||
· Email address | Newsletter management at your request | Consent | 3 years | |||
Data recorded when you browse our website |
||||||
IP address | Management of visitor navigation data | Legitimate interest | 3 years | |||
Cookies
|
||||||
List of cookies used on our website | Cookies management | Consent | 6 months | |||
3 – Recipients of Personal Data
Personal Data collected on thewww.napoleon.org website is primarily intended for the Fondation Napoléon. However, it may be shared with our partners.
To facilitate website maintenance, newsletter registration, and banking transactions, some of your data may also be shared with our subcontractors.
You can access the list of our subcontractors, partners, and/or service providers upon request by asking our DPO.
We ensure that all our partners and subcontractors are subject to adequate Personal Data protection mechanisms and comply with GDPR requirements, and that data is processed only by authorized personnel bound by a confidentiality agreement or equivalent contractual document.
4 – Exercising your GDPR rights
According to the applicable regulation you have the following right on your personal data:
- Access
To request a copy of the personal data we process in relation to you and to be informed about how we use and share your personal data . - Object
To object to the processing of your personal data if (1) we are processing your PI on the grounds of legitimate interests or for the performance of a task in the public interest (including profiling); or (2) if we are processing your personal data for direct marketing purposes. - Correction
To request that we update the personal data we process in relation to you, or to correct personal data that you think is incorrect or incomplete. - Erasure
To ask that we delete personal data that we process in relation to you where we do not have a legal or regulatory obligation or other valid reason to continue to process it. - Restriction
To request that we restrict the way in which we process your personal data , for example, if you dispute the accuracy of your personal data or have raised an objection which is under consideration. - Portability
To request a copy of your personal data that you have provided to us in a commonly used electronic format such as through the completion of an application form. - Automated decision making
To request manual intervention if you are subject to automated decisions where the decision results in a legal or similar effect to you.
You can exercise your rights by sending your request to the following email address: dpo@datae-consulting.com, or, by mail, accompanied by a copy of an identity document, to the Fondation Napoléon at the following address: 7, Rue Geoffroy-Saint-Hilaire, 75005 Paris. You may also lodge a complaint with the CNIL.
Updates
To comply with regulatory changes and reflect our practices, we reserve the right to modify this policy. We will publish any changes in this document, and we recommend that you regularly review our privacy policy.
Last updated: 26 Septembre 2024.