1. Data Controller Identification
The data controller responsible for the processing of personal data on this website is:
2. Categories of Data Collected
We process personal data only when strictly necessary for providing our research publications and advisory services:
- Inquiry & Consultation Information: Full name, email address, phone number, and message content submitted voluntarily via our contact forms.
- Technical & Connection Data: IP address, browser type, operating system, pages visited, and timestamp logs collected automatically for server security and performance optimization.
- Interactive Tool Inputs: Anonymous parameter selections in the Vitality Audit Calculator (processed locally in your browser and not permanently stored or tied to identity).
3. Legal Bases & Purposes of Processing
Data processing is conducted under Article 6 of the General Data Protection Regulation (EU) 2016/679:
- Consent (Art. 6.1.a): When you voluntarily submit an advisory inquiry or accept analytics cookies.
- Legitimate Interests (Art. 6.1.f): Ensuring website security, network defense against brute force attempts, and platform stability.
- Legal Compliance (Art. 6.1.c): Fulfilling accounting, tax, and French statutory obligations.
4. Data Retention Periods
Advisory inquiry records are retained for a maximum of 24 months following the conclusion of communication, unless ongoing administrative obligations require extended storage. Server security logs are automatically purged after 90 days.
5. Your Statutory Rights Under GDPR
Under European data protection law, you hold the following rights regarding your personal data:
- Right of Access (Art. 15): Obtain confirmation of whether your data is being processed and receive a copy.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of your personal records ("Right to be Forgotten").
- Right to Restriction of Processing (Art. 18): Restrict processing under statutory conditions.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object at any time to data processing based on legitimate interests.
To exercise any of these rights, please contact our Data Protection Officer at: [email protected]. You also have the statutory right to lodge a complaint with the French supervisory authority (CNIL – Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.
6. Data Security & Encryption
All communications between your browser and our server are encrypted using modern Transport Layer Security (TLS 1.3 / 256-bit SSL). We implement robust technical and organizational measures to prevent unauthorized data access, loss, or disclosure.