Personal Data – Website Management
Activities relating to the website www.groupefmg.fr involve the processing of personal data.
What does the personal data usage policy cover?
This policy informs you of the characteristics of these treatments and your rights over your personal data.
This privacy policy is written in accordance with Law No. 78-17 of 6 January 1978 (known as the “Data Protection Act” or “LIL”) and the General Data
Who is responsible for this policy?
The contact details of the data controller are as follows: 9 Place St Jean 73110 Valgelon-La Rochette.
The controller can be reached at the following number: 0627487934.
The contact email address is: josephconvert[@]groupefmg.fr
Who is this policy for?
This policy is intended for users of the site: Internet users who browse the site.
It also concerns:
- people who have access to the site’s back office for its administration
- people who write or are cited in content on the site
- people who contact us using the site’s contact form
The purpose of the processing is to manage the website.
This processing allows:
- technical management of the site (maintenance, hosting, site security)
- administration of the website
- management of the site’s editorial content
- management of requests for information via the contact form
Legal basis for processing: what gives us the right to process the data
The legal bases for processing are as follows:
- for the technical management of the site (maintenance, hosting, site security), the legal basis is legitimate interest
- for the administration of the website, the legal basis is legitimate interest
- for the management of the editorial content of the site, the legal basis is the consent of the persons whose information is published
- for the management of requests for information via the contact form, the legal basis is legitimate interest (allowing online communication) or the execution of pre-contractual measures (creation of quotes at the request of persons)
Data retention period
The data subject to processing are retained for a period not exceeding that necessary for the purposes for which they are recorded (principle of minimizing processing).
Les durées maximums de conservation sont les suivantes :
- for the technical management of the site (maintenance, hosting, site security): 12 months for IP addresses and connection logs
- for the administration of the website: as long as the persons concerned administer the site
- for the management of the editorial content of the site: 5 years from their publication
- for the management of requests for information via the contact form: 3 years from the request
Data processed
The data controller processes the following categories of data:
- Civil status, identity, identification data, images (surname, first name, address, photograph, date and place of birth, etc.)
Mandatory or optional nature of data collection
The data collected is mandatory to achieve the purposes of processing.
Data sources
The data is transmitted directly by the person concerned.
Recipients of the data
The personal data collected is reserved for the use of the data controller. No personal data is transferred by the data controller to recipients.
What security measures are in place?
The data controller implements appropriate technical and organizational measures to guarantee a level of security appropriate to the risk.
The data controller takes measures to ensure that any natural person acting under the authority of the data controller or the subcontractor, who has access to personal data, does not process it, except on the instructions of the data controller, unless required to do so.
The existence or not of a transfer of data to a country outside the European Union and associated guarantees
The data controller does not transfer any personal data outside the European Union.
Automated decision-making
The processing does not provide for fully automated decision-making.
Fate of personal data after death – Right of access, rectification, deletion and data portability
The person concerned by a processing operation may define guidelines relating to the retention, deletion and communication of their personal data after their death. These guidelines may be general or specific.
The person concerned by a processing operation also benefits from a right of access, opposition, rectification, deletion and, under certain conditions, portability of their personal data. The person concerned has the right to withdraw their consent at any time if consent constitutes the legal basis for the processing.
The request must indicate the name and first name, email or postal address of the person concerned, and be signed and accompanied by valid proof of identity.
It can exercise these rights by contacting:
Joseph Convert
contact[@]groupefmg.fr
Complaint
The person concerned by a processing operation has the right to lodge a complaint with the supervisory authority (CNIL): https://www.cnil.fr/fr/webform/adresser-une-plainte