Privacy & Data Protection Policy

1. Principles of Data Processing

We adhere strictly to the principles of data minimization, purpose limitation, transparency, and integrity. We only collect the minimal personal data necessary to provide access to our informational resources and respond to direct communications.

2. Categories of Information Collected

• Direct Communications Data: When you submit a message through our contact or inquiry forms, we collect your name, email address, inquiry topic, and message content.
• Technical Access Logs: Standard web server logs containing truncated IP addresses, user-agent strings, referral headers, and timestamps for security and denial-of-service prevention.
• Local Calculation Data: Interactive calculators (e.g., Flexibility Mobility Score) run entirely client-side inside your browser engine. None of these parameters are transmitted to or stored on our servers.

3. Legal Basis for Processing (GDPR Article 6)

• Consent (Art. 6(1)(a)): When you voluntarily submit an inquiry form or consent to non-essential cookies.
• Legitimate Interests (Art. 6(1)(f)): Maintaining server stability, preventing abuse, and guaranteeing network security.

4. Data Retention Periods

Inquiry communications are retained only for the duration required to adequately resolve the corresponding question (typically not exceeding 12 months), after which records are securely purged.

5. Your Statutory Rights Under the GDPR

As a data subject located within the European Economic Area, you hold the following unconditional rights:

• Right of Access (Art. 15): Request confirmation and copies of any personal data held concerning you.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete personal records.
• Right to Erasure / "To Be Forgotten" (Art. 17): Request deletion of your personal data where retention is no longer justified.
• Right to Restriction of Processing (Art. 18): Restrict processing under specified legal conditions.
• Right to Data Portability (Art. 20): Receive your submitted data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to data processing predicated on legitimate interests.

To exercise any of these rights, email our data desk at [email protected].

6. Third-Party Disclosures & Transfers

We do not sell, rent, monetize, or transfer your personal data to commercial marketing brokers or third-party ad networks. Data is never transferred outside the European Economic Area without appropriate standard contractual clauses (SCC).

7. Supervisory Authority

You have the right to lodge a formal complaint with the French data protection authority (CNIL - Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr if you believe your rights have been infringed.