PRIVACY POLICY
The policy set out (“Privacy Policy”) below applies to the processing of personal data carried out by the association Ecole de Biodanza SIRET number 49791562900024, residing at 1 chemin de la Glacière – 30210 Collias (“we ") and describes how we collect and use information about each of our unregistered visitors and registered users (respectively "Visitor" or "User" or "you"), in relation to the nature of their access and use. of the Biodanza-sud website (the “Website”). The website is edited and hosted by Wix.com.
1 – General provisions
The following provisions concern all processing of personal data carried out by the controller, unless otherwise stated in the specific provisions.
Legal framework – compliance with GDPR and French law
The controller declares that he processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data. personal nature and the free movement of such data (hereinafter referred to as the GDPR) and French law n° 78-17 of January 6, 1978 relating to data processing, files and freedoms.
Controller and other stakeholders
The data controller is Elizabeth Rojas, elizabethrojasbiodanza@gmail.com
For data processed independently by Wix.com, contact Wix.com.
Duration of retention of personal data
The data will be kept for a maximum of 3 years.
Rights of the person whose data is collected
The person whose personal data is collected has the right:
– to ask the data controller for access to personal data, the rectification or erasure thereof, or a limitation of the processing relating to the data subject,
– to oppose the processing,
– the portability of its data,
– to lodge a complaint with a supervisory authority,
– to withdraw consent at any time, without prejudice to the lawfulness of the processing based on the consent given before its withdrawal, this right existing exclusively when the processing is based on Article 6, paragraph 1, point a ), or on Article 9, paragraph 2, point a) of the GDPR, i.e. on the consent of the data subject to the processing of his or her personal data for one or more specific purposes.
Automated decision making – profiling
Unless otherwise stated in the specific provisions, no profiling will be carried out and more generally no automated decision will be taken on the basis of the data collected.
2 – Specific provisions
The following provisions are specific to each type of personal data processing.
Management of the relationship with our contacts and prospects
Personal data processed – We process the following personal data, first name, last name, telephone number, email address, postal address, reason for consultation.
Purposes – The processing of personal data is intended for the management of the relationship with our contacts and prospects. In particular, this processing tends to communicate to the person concerned information on his request for an appointment, the sending of the newsletter, information on the news of our organization and our services.
Legal basis – This processing of personal data is based on the consent of the data subject (Article 6(1)(a) GDPR). The request for data is of a contractual nature. The data subject is not obliged to provide this data. If the person concerned does not provide the data or withdraws their consent to the data processing, they will not be able to make an appointment online, receive the newsletter and information on the news of our organization and our services.
Acceptance procedure for our customers
Personal data processed – We process the following data: first name, last name, telephone number, email address, postal address, service requested, reason for consultation.
Purposes – This data processing is intended to meet our customer due diligence obligations, in accordance with French law, in particular Articles L. 561-4-1 and R. 561-5 of the Monetary and Financial Code.
Legal basis – This processing is necessary for compliance with the legal obligations to which the controller is subject. It is based on Article 6(1)(c) GDPR. The request for data conditions the establishment of a business relationship, in accordance with the applicable legislative and regulatory provisions. The data subject is obliged to provide this data if he wishes to establish this relationship. If the data subject does not provide the data, we will not be able to continue business relations with him.
Management of the relationship with our customers
Personal data processed – We process the following personal data: first name, last name, telephone number, email address, postal address, service requested, reason for consultation.
Purposes – The processing of personal data is intended for the management of the relationship with our customers. In particular, this processing tends to carry out the pre-contractual measures taken at the request of the person concerned, to prepare the consultation for the benefit of the client, to send the newsletter.
Legal basis – This processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the request of the data subject. It is based on Article 6(1)(b) GDPR. The request for data is of a contractual nature. The data subject is obliged to provide this data if he wishes to benefit from our products or services. If the data subject does not provide the data, he or she will not be able to receive the newsletter.
Execution of appointments made on our website
Personal data processed – We process the following personal data: first name, last name, telephone number, email address, reason for consultation.
Purposes – The processing is intended for the holding of the appointment made online.
Legal basis – This processing is necessary for the execution of pre-contractual measures taken at your request and for the execution of the contract concluded between us. It is based on Article 6(1)(b) GDPR. The request for data conditions the conclusion of the contract. It has a contractual character. The data subject is obliged to provide the data. Otherwise, she will not be able to make an appointment online on the site.
Use of Google Analytics
Personal data processed – Google processes the data mentioned in its privacy policy (https://support.google.com/analytics/answer/6004245?hl=fr /https://policies.google.com/privacy?hl=fr#infocollect). This data includes in particular the IP address of the devices used to consult the site.
Purposes – This processing is used for the purposes of analysis and statistical study of the use of our site.
Legal Basis – Processing is necessary for the purposes of the legitimate interests we pursue of improving and optimizing our website for the benefit of users. It is based on Article 6(1)(f) GDPR. The request for data is of a contractual nature. The data subject is not required to provide this data and may object to their processing at any time. To prevent the collection of data relating to its use of the site and the processing of this data by Google, the person concerned must follow the instructions of Google:http://tools.google.com/dlpage/gaoptout.
Marketing and advertising messages
Personal data processed – We process the following data: surname, first name, information on messages opened and links followed, including the date and time of the consultation.
Purposes – The processing is intended to improve our communication and to send you relevant content at appropriate times (consultation, newsletter).
Legal basis – The processing is based on the consent of the data subject (article 6, paragraph 1, point a) of the GDPR) and is necessary for the purposes of the legitimate interests which we pursue, namely to improve our communication and to avoid sending inappropriate communications (article 6, paragraph 1, point f) of the GDPR). The request for data is of a contractual nature. The data subject is not required to provide this data and may object to their processing at any time. If the person concerned does not provide the data or withdraws their consent to the processing of data, they will not be able to: receive appropriate communications, in particular in relation to the appointment made online for the consultation.