Privacy Policy

We look forward to your visit to our website and your interest in our company. We attach great importance to protecting your privacy. Below you will find detailed information on how we use your data.


I. Name and address of the controller

The data controller within the meaning of the General Data Protection Regulation, as well as other national laws of the Member States concerning data protection and any other legal provisions in this matter is:

Marc Duchesne, acting under the commercial name “Pyrenees Cycling Group”, registered auto-entrepreneur RCS Pau 384 873 519, 64000 Pau, France

Telephone:   33 (0) 681 330 960 info@pyreneescycling.cc www.pyreneescycling.cc


II. Name and address of data protection officer

The data protection delegate mandated by the controller is: Marc Duchesne, Quartier St-Michel F-64360 Lucq-de-Béarn France info@pyreneescycling.cc www.pyreneescycling.cc


III. General information regarding data processing

1. Scope of processing of personal data
Basically, we process the personal data of our users only to the extent necessary to provide a functional website, as well as our content and services. The processing of the personal data of our users generally only takes place with their consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and where data processing is permitted under legal provisions.

2. Legal basis for processing personal data
To the extent that we obtain consent from the data subject for the processing of personal data, Art. 6, para. 1, point a. of the General Data Protection Regulation (GDPR) of the European Union serves as the legal basis. When processing personal data which is essential for the performance of a contract of which the data subject is a party, art. 6, para. 1, point b. of the GDPR serves as the legal basis. The same applies to processing operations necessary to carry out pre-contractual measures. To the extent that the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6, para. 1, point c. of the GDPR serves as the legal basis. If vital interests of the data subject or another natural person require the processing of personal data, Art. 6, para. 1, point d. of the GDPR serves as the legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental freedoms and rights of the data subject do not override the aforementioned interests, Art. 6, para. 1, point f. of the GDPR serves as the legal basis for data processing.

3. Data erasure and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose for their storage no longer exists. In addition, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The blocking or deletion of the data also takes place after the expiration of the storage period prescribed by the mentioned standards, unless it is necessary to further retain the data for the conclusion or execution of a contract.


IV. Provision of the website and creation of log files

1. Description and scope of data processing
Each time you visit our website, our system automatically collects data and information from the computer system of the viewing computer. On this occasion, the following data is collected: (1) Information regarding the browser type and version used (2) The user's operating system (3) The user's Internet service provider (4) The user's IP address (5) Date and time of access (6) Web pages from which the user's system accesses our website (7) Web pages visited by the user's system through our website The data is also stored in our system log files. This data is not stored together with other personal data concerning the user.

2. Legal basis for data processing
Article 6(1)(f). GDPR constitutes the legal basis for the temporary storage of data and log files.

3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be activated on the user's computer. To do this, the user's IP address must remain recorded for the duration of the session. Data is stored in log files to ensure site functionality. They are also used to optimize the website and to ensure the security of our IT systems. In this context, the data is not analyzed for marketing purposes. For these purposes, it is also in our legitimate interest to process data in accordance with Article 6(1)(f). of the GDPR.

4. Storage duration
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of the collection of data concerning the provision of the website, these are deleted when the session ends. Data that has been saved in log files is deleted after a period of seven days at the latest. It is possible to retain data beyond this limit. In this case, the IP addresses of the users are deleted or anonymized, so that it is no longer possible to identify the connected client.

5. Possibility of objection and elimination
The collection of data for the provision of the website and the storage of data in log files are absolutely necessary for the operation of the website. Therefore, the user cannot object to this.


V. Use of cookies

1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser of the user's computer system. When a user visits a website, a cookie may be stored on their operating system. This cookie contains a characteristic character string allowing the browser to be clearly identified when reopening the site. We use cookies to make our website more user-friendly. Certain elements of our site require that the calling browser be identified even after a page change. The following data is stored and transmitted in cookies: (1) Language settings (2) Items in a shopping cart (3) Login information

In addition, we use cookies on our web pages that enable an analysis of users' browsing behavior. In this way, the following data may be transmitted: (1) Entered search criteria (2) Frequency of page openings (3) Active use of website functions The user data collected in this way is pseudonymized by means of provisions techniques. Therefore, it is no longer possible to associate the data with the visitor. The data will not be stored together with any other personal data relating to users. 2. Legal basis for data processing
Article 6(1)(f). of the GDPR constitutes the legal basis for the processing of personal data through the use of cookies.


3. Purpose of data processing
The use of technically necessary cookies aims to simplify the use of the web pages for users. Certain functions of our website cannot be offered without the use of cookies. To be able to use them, the browser must be recognized even after a page change. Cookies are essential for the following applications: (1) Shopping cart (2) Transfer of language settings (3) Storage of search criteria User data collected via technically necessary cookies is not used to create user profiles. 'user. The purpose of using analytics cookies is to improve the quality of our website and its content. Through analysis cookies we learn how the website is used and can therefore continuously optimize our offer.
For these purposes, it is also in our legitimate interest to process personal data in accordance with Article 6(1)(f) GDPR.

4. Duration of storage, possibility of objection and disposal
Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user you also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings of your Internet browser. Cookies already stored can be deleted at any time. This can also be done automatically. When cookies are disabled for our website, some functions of the site may no longer be fully accessible.


VI. Newsletter

1. Description and scope of data processing
If you decide to purchase goods or services from our website and register your email address there, we may then use it to send you our newsletter. In this case, direct advertising in the newsletter will only relate to similar products and services. On our website you have the option of subscribing to a free newsletter. On this occasion, the following data are transmitted to us when registering for the newsletter: (1) Email address (3) First name (4) Last name In addition, the following data are collected during registration: (1) IP address of the consulting computer (2) Date and time of registration For data processing, we always ask for your consent during the registration procedure, with reference to this data protection charter . As part of data processing for sending newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing
If there is consent from the user, Article 6(1)(a) GDPR constitutes the legal basis for the processing of data following registration for the newsletter.

3. Purpose of data processing
The collection of the user's e-mail address is used to distribute the newsletter.

4. Storage duration
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. The user's e-mail address is therefore stored as long as the newsletter subscription is active.

5. Possibility of objection and elimination
The subscription to the newsletter can be canceled at any time by the user concerned. A corresponding link is placed for this purpose in each newsletter.


VII. Save to cart

1. Description and scope of data processing
On our website we offer users the opportunity to register by providing personal data. On this occasion, the data is entered into an input mask, transmitted to our services and stored. No data is transferred to third parties. The following data is collected as part of the registration procedure: (1) Name (2) Email (3) Telephone (4) Address (5) Company/company (6) Intra-community VAT number (7) The where applicable, your billing address (if different) At the time of registration, the following data is also stored: (1) Date and time of registration As part of the registration procedure, consent to the processing of This data is requested from the user.

2. Legal basis for data processing
In the presence of user consent, Article 6, paragraph 1, point a. of the GDPR constitutes the legal basis for the processing of data. If the recording serves the execution of a contract to which the user is a party or the implementation of pre-contractual measures, Article 6(1)(b. of the GDPR constitutes an additional legal basis for data processing.

3. Purpose of data processing
Registration of the user is necessary for the conclusion of a contract with him or for implementing pre-contractual measures. The user has the opportunity to purchase cycling clothing and accessories via our website.

4. Storage duration
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. This is the case for data collected during the registration procedure for the execution of a contract or to implement pre-contractual measures, if the data is no longer necessary for the execution of the contract. Even after conclusion of the contract, it may be necessary to retain personal data concerning the contractual partner in order to comply with contractual or legal obligations.

5. Possibility of objection and elimination
As a user, you have the option to cancel your registration at any time. You can have the data recorded about you modified at any time. If you want to delete your shopping cart data, please write an email to contact@pyreneescycling.cc. The deletion will then be carried out. If the data is necessary for the performance of a contract or to carry out pre-contractual measures, premature deletion of the data is only possible to the extent that there are no contrary contractual or legal obligations.


VIII. Disclosure of personal data to third parties

1. Transport company
a) Description and extent of data disclosure
As part of the delivery, we transmit personal data to the transport company responsible for the shipment. On this occasion, the following data is disclosed: (1) Name (2) Address (3) Telephone number (4) Email address

b) Legal basis for disclosure
We disclose the data for the purpose of carrying out a contract to which the user is a party, such that Article 6(1)(b). of the GDPR constitutes its legal basis.

c) Purpose of data disclosure
The disclosure of personal data concerning the contractor is necessary for the performance of a contract with him or for implementing pre-contractual measures.

d) Duration of disclosure
The disclosure of data will cease as soon as it is no longer necessary for the execution of the contract. Even after conclusion of the contract, it may be necessary to transmit personal data concerning the contractor in order to comply with contractual or legal obligations.

e) Opposition and elimination possibilities
As a user, you have the possibility to object to the disclosure of your personal data. You can have the data recorded about you modified at any time. If the data is necessary for the performance of a contract or the fulfillment of pre-contractual duties, premature deletion or blocking of the data is only possible if there are no contrary contractual or legal obligations. .

2. Credit establishment
a) Description and extent of data disclosure
As part of payment processing, we transmit personal data to PayPal. On this occasion, the following data is disclosed: (1) Name (2) Bank details

b) Legal basis for disclosure
We disclose the data for the purpose of carrying out a contract to which the user is a party, such that Article 6(1)(b). of the GDPR constitutes its legal basis.

c) Purpose of data disclosure
The disclosure of personal data concerning the contractor is necessary for the performance of a contract with him or for implementing pre-contractual measures.

d) Duration of disclosure
The disclosure of data will cease as soon as it is no longer necessary for the execution of the contract. Even after conclusion of the contract, it may be necessary to transmit personal data concerning the contractor in order to comply with contractual or legal obligations.

e) Opposition and elimination possibilities
As a user, you have the possibility to object to the disclosure of your personal data. You can have the data recorded about you modified at any time. If the data is necessary for the performance of a contract or the fulfillment of pre-contractual duties, premature deletion or blocking of the data is only possible if there are no contrary contractual or legal obligations. .

3. Other third parties
This data will not be subject to disclosure, processing or use for advertising and market surveys.


IX. Contact form and email contact

1. Description and scope of data processing
On our website there is a contact form which can be used for electronic contact. When a user uses this option to write to us, the data entered in the input mask are transmitted to our services and then stored. These data are: (1) Last name (2) First name (3) If applicable, your address (4) If applicable, your company or association (5) Email address (6) If applicable, your telephone number (7) Entered text When sending the message, the following data is also stored: (1) Date and time of recording For data processing, we always ask for your consent during the sending procedure , with reference to this data protection charter. Alternatively, it is also possible to make contact via the email address provided. In this case, the user's personal data transmitted with the e-mail will be stored. No data is passed on to third parties in this context. The data will be used exclusively for processing the communication.

2. Legal basis for data processing
In the presence of user consent, Article 6, paragraph 1, point a. of the GDPR constitutes the legal basis for the processing of data. Article 6(1)(f) GDPR constitutes the legal basis for the processing of data transmitted when sending an e-mail. If the email contact aims to conclude a contract, Article 6(1)(b) GDPR constitutes an additional legal basis for data processing.

3. Purpose of data processing
The processing of personal data from the input mask serves us only to organize queries. A legitimate interest in data processing can also be invoked when contact is made by email. Other personal data processed during the submission procedure serves to prevent misuse of the contact form and to ensure the security of our IT systems.

4. Storage duration
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. Thus, the personal data coming from the input mask of the contact form and those sent by e-mail are deleted when the current communication with the user is ended. The communication is finished when the circumstances allow it to be deduced that the facts in question have been definitively clarified. Additional personal data collected during the sending procedure will be deleted after a period of seven days at the latest.

5. Possibility of objection and elimination
The user has the possibility to withdraw consent to the processing of personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. In such a situation, communication cannot continue. Subsequently, it is appropriate to describe all the reasons which made it possible to establish the revocation of consent as well as the opposition to the storage of data. In this case, all personal data stored during the contact process will be deleted.


X. Google Analytics

On this website, the controller has integrated the Google Analytics component (with anonymization function). Google Analytics is a web traffic analysis service which collects, compiles and evaluates data relating to the behavior of visitors to websites. A web traffic analysis service stores, among other things, information about the website (so-called referrer) from which a data subject accessed another website, which subpages of the website were visited or how often and the duration of consultation of a subpage. Web traffic analysis is mainly used for the optimization of a website and to carry out a cost-benefit analysis of online advertisements. The operating company of the Google Analytics component is Google Inc. located at 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, United States. To carry out the analysis of web traffic via Google Analytics, the controller uses the “_gat. _anonymizeIp”. Through Google, this functionality abridges the IP address of the Internet connection of the data subject and anonymizes it when accessing our Internet pages from a member state of the European Union or another. signatory state to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information collected in this way, among other things, to evaluate the use of our website, to compile online reports for us which show us the activities on our Internet pages, and for the purpose of providing other services relating to the use of our site. Google Analytics places a cookie on the information technology system of the data subject. See details above for the definition of cookie. Setting this cookie allows Google to analyze the use of our website. Each time the data subject visits one of the pages of this website, managed by the controller and on which a Google Analytics component has been integrated, the Internet browser installed on his or her information technology system automatically receives, through the said Google Analytics component , the order to transmit data for the purposes of online audience analysis by Google. As part of this technical process, Google receives personal data, such as the IP address of the data subject, which may, among other things, serve to trace the origin of the visitor and clicks and thus result in the charging of commissions. . The cookie is used to store personal information, such as the access time, the location from which the access took place, and the frequency of visits of our website by the data subject. Each time we visit our Internet pages, this personal data about the data subject, including the IP address of the Internet connection used, will be transmitted to Google in the United States of America. Such personal data is stored by Google in the United States of America. Google may transmit this personal data, collected via this technical process, to third parties. The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the information technology system of the data subject. Furthermore, cookies already placed by Google Analytics can be deleted at any time using the Internet browser or other software. In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to prevent such processing. To do this, the data subject must download a browser add-on from https://tools.google.com/dlpage/gaoptout?hl=en and install it. This browser add-on informs Google Analytics through Java Script that any data and information about visits to Internet pages may not be transmitted to Google Analytics. Installation of the browser add-on is considered an objection to data collection by Google. If the information technology system of the data subject is subsequently deleted, formatted or reinstalled, the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on has been uninstalled or deactivated by the data subject or any other authorized person in their area of expertise, it is possible to reinstall or reactivate the browser add-on. Further information and the applicable data protection provisions of Google may be retrieved under https://policies.google.com/privacy?hl=en and under https://www .google.com/analytics/terms/fr.html. For detailed explanations of Google Analytics, please click on the link https://marketingplatform.google.com/about/.


XI. Using Facebook social media plugins

Due to our legitimate interests in the analysis, optimization and operation of our online offering (within the meaning of Article 6(1)(f) GDPR), this website uses the Facebook social plugin operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). Contributions to the Facebook logo, in particular to the terms “Like”, “I like”, “Share”, are identifiable by the Facebook colors (blue and white). You can find information on all Facebook plugins at the following link: https://developers.facebook.com/docs/plugins/?locale=fr_FR Facebook Inc. respects data protection law and is certified by the agreement on the “Privacy Shield”: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active The plugin establishes a direct link between your browser and Facebook servers. The website operator has absolutely no influence on the nature and volume of the data that the plugin transmits to the servers of Facebook Inc. You can find information about this here: https://fr-fr.facebook.com /help/186325668085084 The plugin informs Facebook Inc. that you have visited this site as a user. It is therefore possible that your IP address has been recorded. If, while viewing this website, you are connected to your Facebook account, said information will be linked to your Facebook account. If you use the functions of the plugin (for example by sharing or clicking "like" on an article), the corresponding information is transmitted to Facebook Inc. If you want to prevent Facebook Inc. from establishing the link between these data and your Facebook account, please log out of Facebook before visiting this website and delete stored cookies. You can make further data protection settings for advertising purposes in your Facebook profile or object to the use of your data for advertising purposes. Here's how to access the settings: • Profile settings in Facebook: https://fr-fr.facebook.com/login.php?next=https://www.facebook.com/ads/preferences/?entry_product =ad_settings_screen • Cookie opt-out page for US websites: http://optout.aboutads.info/?lang=EN&c=2#!/ • Cookie opt-out page for European websites: http:/ /optout.networkadvertising.org/?c=1#!/ You can find out in Facebook's data protection guidelines which data Facebook collects, uses and processes for what purposes and to what extent and what rights and possibilities of settings available to you to protect your privacy. You will find this information here: https://fr-fr.facebook.com/about/privacy/


XII. Twitter (“tweet button”)

Concerning the instant messaging service offered to you here, we use the technical platform and services of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, in the United States. Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, is responsible for processing the data of persons residing outside the United States. We draw your attention to the fact that you use the instant messaging service offered here and its functions under your own responsibility. This principle applies in particular to the use of interactive functions of Twitter (e.g. sharing, rating).

1. Data processed by Twitter:
To find out what data is processed by Twitter and for what purposes it is processed and used, please consult Twitter's privacy policy: https://twitter.com/fr/privacy Twitter Inc. is committed to respecting the principles of the Privacy Shield of the European Union and the United States. The following link will provide you with further information on this subject: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active Pyrenees Cycling Group has no influence on the nature and extent of the data processed by Twitter , the nature of the processing and use or disclosure of this data to third parties. Our society also has no effective control options. When you use Twitter, your personal data is collected, transmitted, stored, disclosed and used by Twitter Inc., regardless of where you reside in the United States, Ireland or any other country where Twitter Inc. has activities. They will be transferred there, then stored and used. On the one hand, Twitter processes your voluntarily entered data, such as name and username, e-mail address, telephone number or contacts from your address book when you download or synchronize them. But, on the other hand, Twitter also identifies the content you share on topics that interest you, stores and processes sensitive messages that you send directly to other users. It may locate your location based on GPS data, determine information over wireless networks or through IP address in order to send you advertising or other content. Twitter Inc. may use analysis tools such as Twitter or Google Analytics for data evaluation. Pyrenees Cycling Group has no control over Twitter Inc.'s use of these tools and has not been informed of this potential use. If tools of this type are used by Twitter Inc. on behalf of Pyrenees Cycling Group, our company has not ordered, approved or even supported this type of practice. Furthermore, the data obtained during the analysis will not be made accessible to our services. Only certain non-personal information regarding tweet activity, such as the number of link or profile clicks through a particular tweet, may be viewed by Pyrenees Cycling Group through its account. Furthermore, Pyrenees Cycling Group has no way of preventing or disabling the use of such tools on its Twitter account. Finally, Twitter also obtains information when you view content, for example, even if you have not created an account. This information called “log data” may include IP address, browser type, operating system, information about the previously visited website and pages you visited, your location, your mobile service provider , the device you are using (including its ID and application number), the search terms you use and cookie information. Via Twitter buttons or widgets integrated into websites and through the use of cookies, Twitter is able to record your visits to these websites and assign them to your Twitter profile. Based on this data, it becomes possible to offer you advertising or tailor-made content. As Twitter Inc. is a non-European provider which only has a European branch in Ireland, this entity is not subject to French data protection regulations. This concerns, for example, your rights to information, blocking or deletion of data or the possibility of refusing the use of connection data for advertising purposes. You can find ways to limit the processing of your data in the general settings of your Twitter account as well as in the “Data protection and security” section. Additionally, you can restrict Twitter's access to contact and calendar data, photos, location data, etc. in mobile devices (smartphones, tablets) in local settings. However, it depends on the operating system used. You can find more information on these topics on the following Twitter support pages: https://help.twitter.com/en/safety-and-security/twitter-privacy-settings https://help.twitter.com/ fr/search?q=Politique de confidentialité As for the option to display your own data on Twitter, you can find out about it here: https://help.twitter.com/fr/managing- your-account/accessing-your-twitter-data You can find information about Twitter's findings about you here: https://twitter.com/your_twitter_data Here you can find information about the available personalization and privacy settings ( with other references): https://twitter.com/personalization You also have the option to request information via Twitter's privacy form or archiving requirements: https://help.twitter.com/forms /privacy https://help.twitter.com/fr/managing-your-account/how-to-download-your-twitter-archive


XIII. Instagram (embedded images)

The functionality and content of the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, may be incorporated into our online offering. For this purpose, we will find e.g. content such as images, videos or text and buttons that allow users to share content from this online offer on Instagram. When users are members of the Instagram platform, Instagram may assign viewing of such content and features to their respective local profiles. Instagram Privacy Policy: https://help.instagram.com/519522125107875.


XIV. Rights of the data subject

When processing your personal data, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right of access
You have the right to obtain confirmation from the controller whether personal data concerning you are or are not processed by our services. If such processing takes place, you may request from the controller access to the following information: (1) the purposes for which the personal data are processed; (2) the categories of personal data processed; (3) the recipients and categories of recipients to whom the personal data concerning you have been or will be communicated; (4) the envisaged duration of storage of your personal data or, in case concrete indications are not possible on this subject, the criteria used to determine the duration of storage; (5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of their processing by the controller or a right to object to the against this processing; (6) the existence of a right to complain to a supervisory authority; (7) all available information as to the origin of the personal data when it is not collected from the data subject; (8) the existence of automated decision-making, including profiling, in accordance with Art. 22, para. 1 and 4 GDPR and – at least in such cases – meaningful information about the logic underlying it, as well as the significance and intended consequences of such processing for the data subject. You have the right to be informed whether or not personal data concerning you are transferred to a third country or to an international organization. In this context, you can obtain information about the appropriate guarantees regarding this transfer in accordance with Art. 46 of the GDPR.

2. Right of rectification
With respect to the person responsible, you have the right to obtain the rectification and/or completion of personal data concerning you to the extent that said data is inaccurate or incomplete. The person responsible is required to make the rectification as soon as possible.

3. Right to restriction of processing
Under the conditions set out below, you can obtain the limitation of the processing of personal data concerning you: (1) when you contest the accuracy of the personal data concerning you, for a period capable of allowing the person responsible to verify the accuracy of personal data; (2) when the processing is unlawful and you object to their erasure and instead demand restriction of the use of these personal data; (3) if the controller no longer needs the personal data for the purposes of the processing, but you still need them for the assertion, exercise or defense of legal claims, or (4) when you have objected to the processing in accordance with Art. 21, para. 1 GDPR and it has not yet been established whether or not the legitimate grounds of the controller override your own grounds. If the processing of personal data concerning you has been restricted, this data may – with the exception of storage – only be processed with your consent, or to assert, exercise or defend legal claims, or to the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. If the restriction of processing obtained under the aforementioned conditions has been revoked, you will be informed of this by the controller before the restriction is lifted.

4. Right to erasure

a) Obligation to erase
You can obtain from the controller the erasure, as soon as possible, of personal data concerning you, and the controller has the obligation to erase this data as soon as possible when one of the following reasons applies: ( 1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed. (2) You withdraw your consent on which the processing is based in accordance with Art. 6, para. 1, point a., or Art. 9, para. 2, point a. of the GDPR, and there is no other legal basis for the processing. (3) You object to the processing pursuant to Art. 21, para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Art. 21, para. 2 of the GDPR. (4) Personal data concerning you has been processed unlawfully. (5) Personal data concerning you must be erased for compliance with a legal obligation which is provided for by Union law or the law of the Member State to which the controller is subject. (6) The personal data concerning you were collected as part of the offer of information society services in accordance with Art. 8, para. 1 of the GDPR.

b) Information to third parties
If the controller has made personal data concerning you public and is obliged to erase it in accordance with Art. 17, para. 1 GDPR, the controller – taking into account available technologies and implementation costs – takes appropriate measures (including technical measures) to inform third party controllers processing these personal data that you have requested, as that the person concerned, the erasure by these responsible persons of all links to this personal data and of all copies or reproductions thereof.

c) Exceptions
The right to erasure does not exist where processing is necessary: (1) to exercise the right to freedom of expression and information; (2) to comply with a legal obligation requiring processing under Union law or the law of the Member State to which the controller is subject, or to carry out a task in the public interest or relating to the exercise of the public authority vested in the person responsible; (3) for reasons of public interest in the field of public health in accordance with Art. 9, para. 2, dots h. and i., and Art. 9, para. 3 of the GDPR; (4) for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Art. 89, para. 1 GDPR, insofar as the right referred to in point a) is likely to make it impossible or seriously compromise the achievement of the purposes of this processing, or (5) to assert, exercise or defend legal claims.

5. Right to notification
If you have asserted your right to rectification or erasure of data or restriction of processing vis-à-vis the controller, the latter is then required to notify this rectification or erasure of data or restriction of processing. to each recipient to whom the personal data concerning you have been communicated, unless this proves impossible or requires disproportionate effort. You have the right to be informed by the controller about these recipients.

6. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, where (1) the processing is based on consent in accordance with Art. . 6, para. 1, point a. of the GDPR or Art. 9, para. 2, point a of the GDPR or on a contract in accordance with Art. 6, para. 1, point b of the GDPR; and (2) the processing is carried out using automated processes. If you exercise this right to data portability, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, where technically feasible. This does not infringe the rights and freedoms of third parties. The right to data portability does not apply to the processing of personal data necessary for the execution of a mission of public interest or relating to the exercise of public authority vested in the controller.

7. Right to object
You have the right to object at any time, for reasons relating to your particular situation, to the processing of personal data concerning you pursuant to Art. 6, para. 1, point e. or f. GDPR; this also applies to profiling based on these provisions. The controller no longer processes the personal data concerning you, unless he or she demonstrates that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or to assert, exercise or defend legal rights. Where personal data concerning you is processed for direct advertising purposes, you have the right to object at any time to the processing of your data for such direct advertising purposes, including profiling to the extent that it is linked to such direct advertising. If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes. In the context of the use of information society services – and notwithstanding Directive 2002/58/EC – you can exercise your right of opposition using automated processes using technical specifications.

8. Right to withdraw consent regarding data protection
You have the right to withdraw your data protection consent at any time. Withdrawal of consent does not compromise the lawfulness of processing based on consent given before such withdrawal.

9. Automated individual decision, including profiling
You have the right not to be subject to a decision based exclusively on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply where the decision: (1) is necessary for entering into or the performance of a contract between you and the controller, (2) is authorized by Union law or the law of the Member State to which the controller is subject and which also provides for appropriate measures to safeguard your rights and freedoms and legitimate interests, or (3) is based on your explicit consent. These decisions cannot, however, be based on the special categories of personal data in accordance with Art. 9, para. 1 GDPR, unless Art. 9, para. 2, point a. or g. of the GDPR applies and appropriate measures to safeguard your rights and freedoms and your legitimate interests are in place. In the cases referred to in points (1) and (3), the controller implements appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least your right to obtain human intervention from the from the controller, to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which your habitual residence is located, your place of work or the place where the violation would have been committed, if you consider that the processing of personal data concerning you constitutes a violation of the GDPR. The supervisory authority to which the complaint was lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of legal recourse in accordance with Art. 78 of the GDPR.


Latest version: MARCH 2022