Access to personal data and recipients

Access to your personal data is strictly limited to staff and sales agents of the Agency, authorised by virtue of their duties and bound by a duty of confidentiality.

Your data may also be disclosed to the following subcontractors, contractually responsible for carrying out the tasks necessary for the proper functioning of the Site and its services, as well as for the proper management of the relationship with you:

• Google Analytics (Google Ireland Ltd / Google LLC): audience measurement and Site traffic statistics;
• An emailing service provider (Brevo and/or Mailchimp): sending commercial communications and managing emailing campaigns.

These service providers only have limited access to your data and have a contractual obligation to use them in compliance with applicable personal data protection legislation.

Transfers of data outside the European Union

Some of these service providers (in particular Google) may transfer your data outside the European Union, in particular to the United States. These transfers are governed by appropriate safeguards recognised by European regulations (European Commission standard contractual clauses, adequacy decision or any other equivalent mechanism provided by the service provider concerned).

Apart from the cases stated above, the Agency undertakes not to sell, rent, transfer or give third parties access to your data without your prior consent, unless compelled to do so for a legitimate reason (legal obligation, fight against fraud or abuse, exercise of defence rights, etc.).

Your rights

In accordance with applicable legal and regulatory provisions, in particular Law No. 78-17 of 6 January 1978 as amended relating to information technology, files and freedoms and European Regulation No. 2016/679/EU of 27 April 2016, you have the following rights:

• Exercise your right of access, to find out what personal data concern you;
• Request the update of your data if they are inaccurate;
• Request the portability or deletion of your data;
• Request the limitation of the processing of your data;
• Object, on legitimate grounds, to the processing of your data;
• Object to or withdraw your consent to the use, by our services, of your contact details for sending our promotions and solicitations via email, SMS messages, telephone calls and postal mail. This right remains valid whether the information concerning you was transmitted to us directly by you or by third-party partners to whom you communicated it (in this case, you will need to click on the unsubscribe links provided in our SMS or emails or contact us under the conditions set out below).

These various rights may be exercised either directly on the Site in the "Contact" section, by postal mail, or by email at the address available from the "Legal notice" link.

Proof of identity may be requested only when necessary to verify the identity of the applicant. The proof of identity will be destroyed once the request has been processed.

For any further information or complaint, you may contact the Commission Nationale de l'Informatique et des Libertés (more information at www.cnil.fr).