As data controllers, i.e. the legal entity that decides on the purposes and means of collecting and processing information about you (“personal data”) in the context of this website, we respect your right to privacy.
We will process your personal data only as described in this Policy and in accordance with current data protection legislation, including Law 78/17 of 6 January 1978 on data processing, data files and individual liberties, as amended by Law 2018-493 of 20 June 2018, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”).
You can contact us by any of the following means for any questions relating to data protection, including how we collect, store and use your personal data:
– E-mail address: contact@mathon-paris.com, or
– Postal address: 41 rue de Richelieu 75001 Paris, France.
- Purpose of this personal data protection policy
This Privacy Policy governs the collection, use and retention by Mathon of personal data relating to your use of the Website.
This Privacy Policy applies to all web pages that are part of the Website and to all users of the Website.
- Purposes of processing your personal data and legal basis
2.A. Purposes applicable to all users of the Website and related legal basis for processing:
We collect and process your personal data via the Website for the purposes mentioned below. After each purpose is mentioned the legal basis for the processing, required by the GDPR, such as: processing necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures taken at your request, processing necessary for compliance with our legal obligations, processing necessary for the purposes of legitimate interests or processing based on your consent, etc.
– To provide you with information about our newsletter, based on your consent.
- Your rights and how to exercise them
3.A. Your rights
* Right of access
You have the right to obtain information from us as to whether we are processing personal data about you and, if so, to access that data.
You have the right (provided this does not affect the rights and freedoms of third parties) to obtain a copy of your personal data from us.
For more information on how to exercise this right, please see section 3.B “How to exercise your rights”.
* Right of rectification
You have the right to ask us to rectify as soon as possible any personal data concerning you that is inaccurate.
You may also ask us to complete any personal data concerning you that is incomplete, by providing us with a supplementary statement indicating what needs to be added.
For more information on how to exercise this right, please see section 3.B “How to exercise your rights”.
* Right to erasure
You have the right to ask us to delete your personal data as soon as possible if one of the following reasons applies:
-Your personal data is no longer necessary for the purposes for which it was processed.
-You have withdrawn your consent on which the processing is based and we have no other legal basis for the processing.
-You object to the processing of your personal data (for more information on the right to object, see below) and there are no compelling legitimate grounds for the processing.
-Your personal data has been processed unlawfully.
-Your personal data must be deleted to comply with a legal obligation under European law or the law of the European Member State to which we are subject.
Please note that your right to erasure does not apply to the extent that such processing is necessary to:
– exercise the right to freedom of expression and information;
– comply with a European, French or Member State Law to which we are subject; or
– archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with the relevant provisions of the RGPD;
– the establishment, exercise, or defense of legal claims.
For more information on how to exercise this right, please see section 3.B “How to exercise your rights”.
* Right to limit processing
You have the right to obtain from Mathon a restriction on the processing of your personal data where any of the following apply:
– You (in good faith) challenge the accuracy of the personal data held by us about you, in which case the restriction on processing will apply for a period sufficient to allow us to verify the accuracy of your personal data.
– The processing is unlawful and you object to the erasure of your personal data and request instead that their use be restricted.
– We no longer need your personal data, but you require it for the establishment, exercise or defence of legal claims.
– You have objected to Mathon processing your personal data in accordance with the relevant provision of the GDPR, in which case the restriction on processing will apply for a period sufficient to allow us to verify whether our legitimate grounds are overriding your legitimate grounds.
Please note that, notwithstanding the above, we will always have the right to retain your personal data (during the period of limitation) or to process your personal data for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person.
If you have requested the restriction of processing, we will inform you before the restriction of processing is lifted.
For more information on how to exercise this right, please see section 3.B “How to exercise your rights”.
* Right to data portability
You have the right (provided this does not adversely affect the rights and freedoms of third parties) to receive the personal data relating to you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit that data to another data controller, without us interfering, where:
-processing is based on your consent or on a contract; and
-processing is carried out by automated means.
For more information on how to exercise this right, please see section 3.B “How to exercise your rights”.
* Right to object to processing
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on France Pélagique’s pursuit of its legitimate interests as data controller.
In this case, we will no longer process your personal data unless:
-we demonstrate that there are compelling legitimate grounds for the processing which override your interests and your rights and freedoms; or
-for the establishment, exercise or defence of legal claims.
For more information on how to exercise this right, please see section 3.B “How to exercise your rights”.
3.B. How to exercise your rights
If you wish to exercise any of the rights set out above, please contact the Data Protection Officer by email at contact@mathon-paris.com or contact us by post at the following address: 41 rue de Richelieu 75001 Paris, France.
Please clearly identify the right(s) you wish to exercise and include your contact details (including a valid e-mail or postal address) so that we can respond to your request.
Please note that you may be asked to provide proof of identity to enable us to verify that the request relates to you.
If you contact us to exercise any of the above rights, we will respond to your request within one month of receiving your request.
This period may be extended by a further two months if necessary, but in this case we will inform you of the extension within one month of your initial request, stating the reasons for the delay.
* Right to lodge a complaint with a supervisory authority
In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the European Member State in which your habitual residence, place of work or the place where the breach is alleged to have occurred, if you consider that the processing of your personal data constitutes a breach of the GDPR.
Please visit the website of the supervisory authority concerned for more information on how to submit such a complaint.
- Details of the processing of your personal data
4.A. Categories of personal data we collect about you and storage periods.
We obtain your personal data through your use of the Website (e.g. newsletter registration) and also directly from you if you choose to disclose personal data to Mathon, as detailed below.
* Cookies and log files
For more information on the cookies and log files we use and the type of information we collect, please consult our Cookie Policy.
Subscribe to our newsletters via the “Subscribe to newsletter” button
The personal data collected is your contact information: surname (*), first name (*), email address (*). This information is kept for the duration of the service. Without this information (*), we will not be able to send you our newsletters.
(*) We will retain your personal data in accordance with our data retention policy. The retention periods included in our data retention policy are dictated by:
-applicable regulatory/legal requirements
-industry guidelines; and
for categories of data to which no regulatory or legal requirements apply, certain other overriding factors such as the need to prove or enforce a transaction or contract, to apply our policies, etc.; – for categories of data to which no regulatory or legal requirements apply, certain other overriding factors such as the need to prove or enforce a transaction or contract, to apply our policies, etc.
We will delete your personal data once the above-mentioned retention periods have expired, unless we need to retain the data for the establishment, exercise or defence of legal claims, the protection of the rights of another natural or legal person or compliance with a legal obligation under European law or the law of a European Member State which requires such further processing.
4.B. Third parties with whom we share your personal data
* Subsidiaries/affiliates and third party data processors
Third-party service providers include IT service companies, hosting companies, Internet service providers, data analysis providers (Google), providers of emailing tools (mailchimp) and tracking services, as well as service providers who provide technical and administrative support for the website and the underlying IT systems.
These service providers provide their services from locations within the EU (including Germany, Malta, UK and Ireland) and outside the EU (Google, Mailchimp – USA).
Other third parties include regulatory and governmental bodies (see below for further details) and, potentially, third parties with whom we may merge or be acquired. Compliance with laws and legal proceedings.
* We will disclose your personal data:
-if required to do so by applicable law, government agency or law enforcement agency; – to establish or exercise our legal rights or defend against legal claims; or
-to establish or exercise our legal rights or defend against legal claims;
-to investigate, prevent or take action against illegal activities, suspected fraud, situations involving potential threats to a person’s physical safety, breaches of our policies or as otherwise required by law.
* Other
If a third party acquires all (or substantially all) of our business and/or assets, we will disclose your personal data to such third party in connection with such acquisition.
However, such disclosure will take place subject to, and in accordance with, applicable data protection laws.
