Personal data – Website management
Activities relating to the website www.totalreset.fr involve the processing of personal data.
What does this personal data policy cover?
This policy informs you about the characteristics of these data processing activities and your rights regarding your personal data.
This privacy policy is drafted in accordance with French Law No. 78-17 of 6 January 1978 (“Data Protection Act”) and the General Data Protection Regulation (GDPR) No. 2016/679.
Who is responsible for this policy?
The data controller is the company Allergyfree, represented by its legal representative, Andrea Kuper.
Address: 15 rue de l’Annonciade, 69001 Lyon, France
Telephone: +33 (0)4 72 73 03 68
Email:
Who is this policy intended for?
This policy applies to users of the website, including visitors browsing the site.
It also concerns:
- individuals providing technical services (hosting, maintenance, website security);
- practitioners and trainers listed on the website;
- individuals contacting us via the website contact form;
- individuals whose testimonials are published on the website.
For training or seminar activities organised by Allergy Free, participants and individuals wishing to pre-register for a training programme are invited to consult the “personal data protection policy for training participants”.
Purposes of data processing
The processing is intended for the management of the website.
It allows:
- technical management of the website (maintenance, hosting, security);
- website administration;
- management of the listing of professionals who have followed the Total Reset method;
- handling enquiries submitted via the contact form;
- management of testimonials published on the website;
- creation and management of practitioner accounts on the website.
Legal basis for processing
The legal bases for processing are:
- legitimate interest for technical website management;
- legitimate interest for website administration;
- legitimate interest or performance of pre-contractual measures for enquiries via the contact form;
- contractual basis for the listing of professionals and trainers;
- legitimate interest for practitioner account management;
- legitimate interest for testimonials published on the website.
Data retention periods
Personal data is retained only for as long as necessary for the purposes for which it is processed.
Maximum retention periods are:
- technical website management: 12 months for IP addresses and connection logs;
- website administration: for as long as the individuals administer the site;
- contact form enquiries: 3 years from the request;
- listing of professionals and trainers: duration of the contract;
- practitioner accounts: duration of the contract;
- published testimonials: 5 years from publication.
Data processed
The following categories of data are processed:
- identity and identification data, images (name, address, photograph, email);
- connection data (IP addresses, logs, device identifiers, login identifiers, timestamps);
- professional information (professional situation, training, etc.).
Mandatory nature of data collection
The data collected is required to fulfil the processing purposes.
Data sources
Data is provided directly by the data subject.
Data recipients
Depending on their needs, all or part of the data may be accessed by:
- technical service providers (hosting, maintenance, website security): Ionos – webmaster.
Security measures
Appropriate technical and organisational measures are implemented to ensure a level of security appropriate to the risks.
Measures are taken to ensure that individuals with access to personal data process it only on the data controller’s instructions, unless legally required otherwise.
Transfers outside the European Union
No personal data is transferred outside the European Union.
Automated decision-making
No fully automated decision-making is carried out.
Personal data after death – Data subject rights
Data subjects may define instructions regarding the retention, deletion and communication of their personal data after death.
They also have the right to access, object to, rectify and erase their data, and, under certain conditions, to data portability. Consent may be withdrawn at any time where it constitutes the legal basis for processing.
Requests must include the data subject’s name, contact details, signature and valid proof of identity.
Requests may be addressed to:
Andrea Kuper, 15 rue de l’Annonciade, 69001 Lyon, France
Complaints
Data subjects may lodge a complaint with the supervisory authority (CNIL):
https://www.cnil.fr/fr/webform/adresser-une-plainte
