Thank you for visiting our website.
Compliance with data protection regulations is a particularly important issue for our company. The purpose of this data protection policy is to inform you, the user, about the nature, scope and purpose of the processing of personal data and about your rights if you are considered a data subject as defined in Article 4, point 1) of the General Data Protection Regulation (GDPR). The data protection policy presented here already takes into account the new developments related to the General Data Protection Regulation (GDPR), which entered into force on May 25, 2018.
Realization
The communication agency in Toulouse NRV realized our website cosmopolitan. The web agency in Toulouse is specialized in website creation in Toulouse, but also in video design, natural referencing or social networks management. You can find the different realizations on the site agencenrv.com
Publisher
Simplified joint stock company ARENA (LE COSMOPOLITAIN) with a capital of 9 000,00 €.
SIRET : 80341977900019
R.C.S. : Toulouse B 803 419 779
APE code : Traditional catering (5610A)
VAT number : FR51803419779
Located at : 1 RUE DES TROIS JOURNEES 31000 TOULOUSE - FRANCE
Director of publication
Person in charge of the treatment
Simplified joint stock company ARENA (LE COSMOPOLITAIN)
1 RUE DES TROIS JOURNEES
31000 TOULOUSE - FRANCE
Host
OVH
2 rue Kellermann
59100 Roubaix - France
Images
General information
Our website has been designed to collect as little data about you as possible. In principle, it is possible to visit our website without entering any personal data. The processing of personal data is only necessary if you decide to use certain services (e.g. when using the contact form). In this way, we ensure at all times that we process your personal data in accordance with a legal basis or the consent you have given. We comply with the provisions of the General Data Protection Regulation (GDPR), applicable as of 25/05/2018.
Definitions
In accordance with the GDPR, the terms used in this data protection policy are defined as follows:
- "Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an "identifiable natural person" is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity ;
- "processing" means any operation or set of operations which may or may not be carried out by automatic means and which are applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction ;
- "Limitation of processing" means the marking of retained personal data with a view to limiting their future processing;
- "controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or by the law of a Member State, the controller may be designated or the specific criteria applicable to his designation may be laid down by Union law or by the law of a Member State;
- "processor" means the natural or legal person, public authority, department or other body that processes personal data on behalf of the controller ;
- "Recipient" means the natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the context of a particular investigation mission in accordance with Union law or the law of a Member State are not considered as recipients; the processing of such data by the public authorities in question is in accordance with the applicable data protection rules according to the purposes of the processing;
- "third party" means a natural or legal person, public authority, department or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data ;
- "Consent" of the data subject means any free, specific, informed and unambiguous expression of will by which the data subject agrees, by a declaration or by a clear positive act, to personal data relating to him being processed;
Purpose of data processing
We process the requested personal data in order to legitimize, execute or process our service offering, with Article 6(1)(b) of the GDPR as legal basis. If we use external service providers in the context of delegated data processing, the legal basis for data processing is Article 28 of the GDPR.
Our collection, processing and use of personal data is exclusively limited to the following purposes:
| Purpose of data processing | Legal basis for data processing ("why is the data processing necessary") |
|---|---|
| When making contact and related correspondence | On the basis of your consent |
| Processing your request and providing any additional services you require | On the basis of your consent |
| Sending our newsletter, subscription service | On the basis of your consent |
| To ensure that our website is presented to you in the most efficient and attractive way (e.g. through anonymized evaluation) | On the basis of legitimate interests |
| For the technical implementation of our services | On the basis of legitimate interests |
| Register as a user of the site; share your opinion | On the basis of your consent |
| Participation in competitions | On the basis of your consent |
| For the processing, realization and shipment of your order after a purchase made on the website | On the basis of your consent |
Personal data collected and processed
We only collect and process your personal data when you voluntarily provide it, e.g. when you fill in forms or send e-mails.
The personal data you provide and their contents are stored exclusively by our company and our associated companies. We store and process your data only for the purposes stated in the section "Purpose of data processing". Any use outside the scope of the stated purposes requires your explicit consent, as does the transfer and communication of your data to third parties.
History files
The connection data of the requesting computer (IP address), the pages you visit on our site, the date and duration of your visit, the identification data of the browser and the type of operating system used, the web page from which your visit originated and the indication of a successful access are temporarily saved by the web server in history files. The technical management of the web pages and the anonymous collection of statistics allow an evaluation of the access to the service as well as an evaluation to improve the data protection and data security within our company in order to guarantee an optimal level of protection for the personal data we process.
The server history data is stored for analysis purposes separately from all personal data entered by you for a period of 12 months before being deleted.
Integration of third-party content and services
Our website uses content and services from other providers. The user's IP address must be transmitted to ensure that this data can be accessed and displayed in the user's browser. The providers (hereinafter referred to as "third-party providers") therefore use the user's IP address.
Although we endeavor to use only third-party providers who only request the IP address to provide content, we have no influence on whether the IP address is stored, especially for statistical purposes. If we become aware that the IP address is being stored, we will inform you.
Rights of the person concerned
If you are considered a data subject as defined in Article 4, point 1 of the GDPR, you have the following rights under the GDPR regarding the processing of your personal data. The legal act corresponding to the rights presented below is available at http://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/fr/pdf
Right to confirmation and access
In accordance with the provisions of Article 15 of the GDPR, you have the right to request confirmation as to whether or not your personal data are being processed, and you have the right for the controller to give you access to the personal data stored about you at any time and free of charge, as well as to receive a copy of it.
Right of rectification
In accordance with the provisions of Article 16 of the GDPR, you have the right to request the rectification, as soon as possible, of personal data concerning you that are inaccurate. In view of the purposes of the processing, you also have the right to have incomplete personal data completed, including by providing an additional declaration.
Right to erasure
In accordance with the provisions of Article 17 of the GDPR, you have the right to request us to erase your personal data as soon as possible, provided that one of the grounds referred to in Article 17 of the GDPR applies and that the processing is not necessary.
Right to limit processing
In accordance with the provisions of Article 18 of the GDPR, you have the right to request the restriction of processing where one of the conditions referred to in Article 18 of the GDPR applies.
Right to data portability
In accordance with the provisions of Article 20 of the GDPR, you have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to pass this data on to another controller without us interfering with it, provided that the additional conditions of Article 20 of the GDPR apply.
Right to withdraw consent
You have the right to withdraw your consent to the processing of your personal data at any time and without retroactive effect. Please communicate the withdrawal of your consent by using the contact information provided above.
Right to object
In accordance with the provisions of Article 21 of the GDPR, you have the right to object to the processing of your personal data at any time. If the conditions for an effective objection are met, we are no longer authorized to process the data.
Right to lodge a complaint with a supervisory authority
Irrespective of any other remedy in administrative or judicial proceedings, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or where the alleged breach took place, if you consider that the processing of personal data concerning you constitutes a breach of the provisions of the GDPR.
Transmission of your personal data
Your personal data will be transmitted in the manner described below.
The website is hosted by an external service provider in the EU. This is necessary for the operation of the website as well as for the justification, realization and implementation of the existing terms of use and can also take place without your consent.
Data is also transferred if we are entitled or obliged to transfer data on the basis of legal provisions and/or on the orders of authorities or courts. This may include, in particular, communication for the purposes of legal proceedings, urgent intervention or the enforcement of intellectual property rights.
If your data is passed on to the service provider to the extent necessary, the service provider may only access your personal data to the extent necessary to fulfill its obligations. Service providers are obliged to handle your personal data in accordance with the applicable data protection regulations, in particular in accordance with the GDPR.
Apart from the circumstances mentioned above, we do not pass on your data to third parties without your consent. In particular, we do not pass on any personal data to an entity located in a third country or to an international organization.
Length of time personal data is kept
With regard to the retention period, we delete personal data as soon as their retention is no longer necessary for the fulfilment of the original purpose and the statutory retention periods have ceased to apply. The final storage period for personal data is determined by the statutory storage period. After the expiry of this period, the data concerned is regularly deleted. If retention periods must be observed, processing is restricted by blocking the data.
Note on the entry of personal data by the data subject
We would also like to point out that the collection of personal data is legally required under certain circumstances (e.g. payment data for services to be invoiced) or may result from contractual provisions. In order to make full use of the services offered on the website, you must enter into a corresponding contract with us (general terms of use) by logging in. The execution of this contract requires that you provide us with certain personal data (e.g. user name, e-mail address), which we process in the context of the execution of the contract. If you do not provide us with such personal data, we will not be able to enter into the contract with you or, if only part of the data is provided, we will not be able to provide the entire service.
References and links
When you access web pages from our website, you may be asked to re-enter information such as your name, address, e-mail address, browser credentials, etc. This data protection policy does not govern the collection, disclosure or management of personal data by third parties.
Third-party providers may have different rules regarding the collection, processing and use of personal data. Therefore, when you visit the web pages of third parties, we advise you to inquire about their personal data management practices before entering such data.
Changes to the data protection policy
We are constantly developing our website in order to provide you with better services. We keep this data protection policy up to date and adapt it if and when necessary.
We will, of course, inform you in good time of any changes to this data protection policy, including by sending an e-mail to the address you have provided. If it is necessary to obtain additional consent in relation to our handling of your data, we will of course obtain your consent before such a change applies.
You can access the latest version of our data protection provisions online at any time at this address.
Intellectual property, copyright
The content of this site is subject to French and international legislation on copyright and intellectual property. ARENA (LE COSMOPOLITAIN) retains all economic and moral rights related to the documents on this site, subject to the rights enjoyed by the authors of works published on this site. Thus, all reproduction rights, on electronic or paper media, are reserved, including for downloadable documents and iconographic and/or photographic representations. Visitors to the http://cosmopolitain.agencenrv.fr site shall refrain from collecting, capturing, distorting or using the information to which they have access. ARENA (LE COSMOPOLITAIN) will take legal action against any attempt to misuse the site's documentation.
Automated processing of personal data
The personal data collected is intended to provide the user with the services offered by ARENA (LE COSMOPOLITAIN), and will not be used for purposes not provided for in this legal notice. We undertake to take all precautions to preserve the security of the data and in particular to prevent them from being distorted, damaged or communicated to third parties.
Rights of access, modification, rectification and deletion of data
Users have a right to access, modify, portability, rectify and delete data concerning them in accordance with what is stated in Articles 39 and 40 of the Act of January 6, 1978 as amended by the Act of August 6, 2004, as well as the recommendations of the LCEN, and the Data Protection Regulation of May 25, 2018. To exercise this right, you may contact ARENA (LE COSMOPOLITAIN). Users' personal data are protected in particular by Law No. 78-87 of January 6, 1978, Law No. 2004-801 of August 6, 2004, Article L. 226-13 of the Penal Code, the European Directive of October 24, 1995, and the Data Protection Regulation of May 25, 2018. In any case, ARENA (LE COSMOPOLITAIN) only collects personal information about the user for the purpose of certain services offered by the site.
The user provides this information with full knowledge of the facts, in particular when he/she proceeds by himself/herself to their input. It is then specified to the user of the site the obligation or not to provide this information.
In accordance with the provisions of articles 38 and following of the law 78-17 of January 6, 1978 relating to data processing, the files and freedoms, any user has a right of access, of correction and opposition to the personal data relating to it, by carrying out its written and signed request, accompanied by a copy of the title of identity with signature of the holder of the document, while specifying the address to which the answer must be sent.
Accessibility of the site
Accessibility is essential in the consultation of a website and we make every effort to ensure that the site is as accessible as possible. We do our best to respect the Web standards (XHTML, CSS) published by the World Wide Web Consortium (W3C).
Litigation
These conditions are governed by French law and any dispute or litigation that may arise from the interpretation or execution of these conditions shall be under the exclusive jurisdiction of the courts on which the registered office of the company ARENA (LE COSMOPOLITAIN) depends. The reference language for the settlement of any disputes is French.
Privacy
Your personal data are confidential and will not be communicated to third parties except for the proper execution of the service. No personal information of the user of the site is published without the user's knowledge, exchanged, transferred or sold on any medium to third parties. Only the assumption of the repurchase of ARENA (LE COSMOPOLITAIN) and its rights would allow the transmission of the said information to the eventual purchaser who would in turn be bound by the same obligation of conservation and modification of the data with respect to the user of the site. The databases are protected by the provisions of the law of July 1, 1998, transposing the directive 96/9 of March 11, 1996, relating to the legal protection of databases.
Data security
We cannot guarantee the security of computer equipment used by visitors, such as PCs, tablets, smartphones, Wi-Fi connections, etc., used to access the website. We remind you that it is the users' responsibility to ensure the security of their own computer equipment.
We take technical and organizational measures to protect our website against the loss, destruction, alteration or dissemination of your data by unauthorized persons, as well as against access by such persons to such data.
In particular, we transfer your personal data in encrypted form. For this purpose, we use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption system. Our security measures are constantly being improved in line with technological advances.
