Privacy policy
This is a courtesy translation. In the event of any discrepancy, the French version prevails.
Article 1: preamble
This privacy policy applies to the site: https://resource-soins-énergétiques.fr/
The purpose of this privacy policy is to set out to the users of the site:
The manner in which their personal data is collected and processed. All data liable to identify a user must be regarded as personal data. This includes in particular the first name and surname, age, postal address, email address, the user's location or their IP address; what the users' rights are with regard to this data; who is the data controller for the personal data collected and processed; to whom this data is transmitted; where applicable, the site's policy on "cookie" files.
Article 2: General principles governing the collection and processing of data
In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of the data of the site’s users comply with the following principles:
Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Each time personal data is collected, the user will be informed that their data is being collected, and for what reasons their data is being collected; limited purposes: the collection and processing of data are carried out in order to meet one or more objectives determined in these general terms of use; minimisation of the collection and processing of data: only the data necessary for the proper achievement of the objectives pursued by the site is collected; storage of data limited in time: data is kept for a limited period, of which the user is informed. Where this information cannot be communicated, the user is informed of the criteria used to determine the retention period; integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and the confidentiality of the data collected.
In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below:
The user has expressly consented to the processing;
The processing is necessary for the proper performance of a contract;
The processing meets a legal obligation;
The processing is explained by a necessity relating to safeguarding the vital interests of the data subject or of another natural person;
The processing may be explained by a necessity relating to the performance of a task carried out in the public interest or in the exercise of official authority;
The processing and the collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.
Article 3: Personal data collected and processed in the course of browsing the site
A. DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION
The personal data collected on the ReSource site is the following: Surname, first name, address (street, postcode, town), telephone number.
This data is collected when the user carries out one of the following operations on the site:
When the client leaves a testimonial, their name and their email are requested.
When the internet user makes a contact request, their surname, their first name, their telephone number and their email are requested.
Furthermore, when a payment is made on the site, proof of the transaction comprising the purchase order and the invoice will be kept in the IT systems of the site’s publisher.
The data controller will keep in the site’s IT systems, and under reasonable security conditions, all of the data collected for a period of: 36 months
The collection and processing of data serve the following purposes:
The telephone number and the email are requested in order to be able to contact the internet user or the client; the email may also be used to send the gift voucher by email.
The address is requested in order to be able to send the gift voucher by post and to carry out invoicing
The data processing carried out is based on the following legal bases:
Consent of the user.
B. TRANSMISSION OF DATA TO THIRD PARTIES
The personal data collected by the site is not transmitted to any third party, and is processed only by the site’s publisher.
C. DATA HOSTING
The ReSource site is hosted by: Raoul Hecky, whose registered office is located at the following address:
161 rue des Sources 68220 Hagenthal-le-Haut
Article 4: Data controller
A. THE DATA CONTROLLER
The controller of the personal data is: Nathalie Wiederkehr-Ritz. She may be contacted in the following manner:
By email: resource-energie@proton.me
The data controller is responsible for determining the purposes and the means used for the processing of personal data.
B. OBLIGATIONS OF THE DATA CONTROLLER
The data controller undertakes to protect the personal data collected, not to transmit it to third parties without the user having been informed of this, and to comply with the purposes for which this data was collected.
The site has an SSL certificate in order to guarantee that the information and the data transfers passing through the site are secure.
The purpose of an SSL certificate (“Secure Socket Layer” Certificate) is to secure the data exchanged between the user and the site.
In addition, the data controller undertakes to notify the user in the event of rectification or erasure of the data, unless this entails disproportionate formalities, costs and procedures for the controller.
In the event that the integrity, the confidentiality or the security of the user’s personal data is compromised, the data controller undertakes to inform the user by any means.
Article 5: Rights of the user
In accordance with the regulations concerning the processing of personal data, the user has the rights listed below.
In order for the data controller to grant their request, the user is required to provide the controller with: their first name and surname as well as their email address, and, where relevant, their account, personal area or subscriber number. The data controller is required to reply to the user within a maximum period of 30 (thirty) days.
A. PRESENTATION OF THE USER’S RIGHTS REGARDING THE COLLECTION AND PROCESSING OF DATA
a. Right of access, to rectification and right to erasure
The user may access, update, modify or request the erasure of the data concerning them, by following the procedure set out below:
The user must send an email to resource-energie@proton.me, specifying the subject of their request.
If they have one, the user has the right to request the deletion of their personal area by following the procedure below:
The user must send an email to resource-energie@proton.me, specifying the subject of their request.
b. Right to data portability
The user has the right to request the portability of their personal data, held by the site, to another site, by complying with the procedure below:
The user must send an email to resource-energie@proton.me, specifying the subject of their request.
c. Right to restriction of and to objection to the processing of data
The user has the right to request the restriction of, or to object to, the processing of their data by the site, and the site may not refuse, unless it demonstrates the existence of compelling legitimate grounds which may override the interests and the rights and freedoms of the user.
In order to request the restriction of the processing of their data or to formulate an objection to the processing of their data, the user must follow the procedure below:
The user must send an email to resource-energie@proton.me, specifying the subject of their request.
d. Right not to be subject to a decision based solely on automated processing
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing where the decision produces legal effects concerning them, or similarly significantly affects them.
e. Right to determine what becomes of data after death
The user is reminded that they may organise what is to become of their collected and processed data should they die, in accordance with Law No. 2016-1321 of 7 October 2016.
f. Right to lodge a complaint with the competent supervisory authority
In the event that the data controller decides not to respond to the user’s request, and the user wishes to contest that decision, or if they consider that one of the rights listed above has been infringed, they are entitled to refer the matter to the CNIL, the French data protection authority (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr), or to any competent court.
B. PERSONAL DATA OF MINORS
In accordance with the provisions of Article 8 of European Regulation 2016/679 and with the loi Informatique et Libertés (the French Data Protection Act), only minors aged 15 or over may consent to the processing of their personal data.
If the user is a minor under 15 years of age, the agreement of a legal representative will be required in order for personal data to be collected and processed.
The site’s publisher reserves the right to verify by any means that the user is over 15 years of age, or that they will have obtained the agreement of a legal representative before browsing the site.
Article 6: Use of “cookie” files
The site may make use of “cookie” techniques. A “cookie” is a small file (less than 4 kb), stored by the site on the user’s hard drive, containing information relating to the user’s browsing habits. These files enable the site to process statistics and information on traffic, to make browsing easier and to improve the service for the user’s comfort. For the use of “cookie” files involving the storage and analysis of personal data, the user’s consent is necessarily requested. This consent of the user is deemed valid for a maximum period of 6 (six) months. At the end of this period, the site will again ask the user’s authorisation to record “cookie” files on their hard drive.
a. Objection by the user to the use of “cookie” files by the site
Cookies that are not essential to the operation of the site are only placed on the user’s device after their consent has been obtained. The user may withdraw their consent at any time, in the following manner:
To withdraw consent to the placing of cookies, click on the “manage consent” banner at the bottom of the screen, then click on “Reject all”. More generally, the user is informed that they may object to the recording of these “cookie” files by configuring their browser software. For information, the user can find at the following addresses the steps to follow in order to configure their browser software to object to the recording of “cookie” files:
Chrome: https://support.google.com/accounts/answer/61416?hl=fr
Firefox: https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences
Safari: http://www.apple.com/legal/privacy/fr-ww/
Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
Opera: http://www.opera.com/help/tutorials/security/cookies/
In the event that the user decides to disable “cookie” files, they will be able to continue browsing the site. However, any malfunction of the site caused by this action could not be regarded as being attributable to the site’s publisher.
b. Description of the “cookie” files used by the site
The site’s publisher draws the user’s attention to the fact that the following cookies are used during their browsing:
List of cookies
By browsing the site, the user is informed that third-party “cookie” files may be recorded.
These are, more specifically, the following third parties:
Google Fonts
In addition, the site incorporates social network buttons, allowing the user to share their activity on the site. “Cookie” files from these social networks are therefore liable to be stored on the user’s computer when they use these features.
The user’s attention is drawn to the fact that these sites have their own privacy policies and general terms of use, which may differ from those of the site. The site’s publisher invites users to consult the privacy policies and the general terms of use of these sites.
Article 7: Conditions for amending the privacy policy
This privacy policy may be consulted at any time at the address indicated below:
https://resource-soins-énergétiques.fr/politique-de-confidentialite/
The site’s publisher reserves the right to amend it in order to guarantee its compliance with the law in force. Consequently, the user is invited to consult this privacy policy regularly in order to keep informed of the latest changes made to it. The user is informed that the last update of this privacy policy took place on: 22/10/2022.
Article 8: Acceptance of the privacy policy by the user
By browsing the site, the user certifies that they have read and understood this privacy policy and accepts its terms, more particularly as regards the collection and processing of their personal data, as well as the use of “cookie” files.
