Privacy

Protection of personal data

By using this Site, you accept the present data protection regulations. The data controller is SARL CDA, with registered office at 6 rue de l’artisanat 11100 Narbonne, France.
Version updated on 13 April 2022

1. Privacy statement

CDA is committed to protecting your online privacy when you visit the cdafrance.com website. The purpose of this privacy policy is to inform you about the types of information we may collect about you when you visit the Site, how we use it, whether we disclose it to others, and to let you know your rights. With the exception of IP addresses and cookies, no personal information is automatically collected about visitors to the Site. Any other personal data you may provide to us is collected for the purpose for which it is provided and/or with your consent. If you choose not to provide us with the personal information necessary for us to provide you with the service offered on the Site, we may not be able to provide that service to you.
If we have collected personal data from you, you have the right to (i) access your personal data, (ii) request that it be corrected, completed, updated, locked or deleted, and (iii) determine the fate of your personal data after your death by contacting us at rgpd@cdafrance.com.
In the event of irregularities, you have the possibility of lodging a complaint with the supervisory authority. The competent authority is the Commission Nationale de l’Informatique et des Libertés. Address: 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07. Telephone: +33 1 53 73 22 22

2. Use of the personal information we collect

We may collect data that you provide to us directly, for example when you sign up for our newsletters, when you contact CDA through the “Contact Us” section, or by any other means of contacting us. This personal data may include: title, surname, first name, email, postal address, telephone numbers and any other information you choose to provide to us.
The data you provide to us to receive newsletters is used by CDA to inform you about offers from our Site or from our partners, depending on your selection. Each email received includes an option to unsubscribe from the newsletter.
The data you provide in the contact forms is used by CDA to respond to your questions or enquiries. Other than in response to an email we have received, it is not our intention to contact you unless you have requested specific information. Although we keep your contact information on our database, we only use it to respond to your requests.
This data, as well as any other data you may provide to us in any other case (e.g. for one-off operations (games), surveys) will also be processed only for the purpose apparent (your participation) and/or communicated to you at the time of collection.
We do not intend to use your telephone number for cold calling. However, we would like to inform you that you can now object to any telephone canvassing. For this you can visit http://www.bloctel.gouv.fr/
We may use Google Analytics or other third party analytical tools to analyse user behaviour, which allows us to measure consumer interest in different areas of our websites or applications for product and website development purposes. These third-party analytics tools provide us with aggregated and collected information, such as how visitors access the site and how long they stay. This information is used for our own internal purposes to improve the content of the site, to enhance the user’s experience during their visit and to customise the content and/or layout. All user behaviour information described herein will be recorded on a collective basis, and this analysis may be shared with our development consultants. This information is aggregated and is not personally identifiable. To learn more about Google Analytics and how it uses your data, please visit http://www.google.com/analytics/learn/privacy.html.
We may also use your personal data for other purposes disclosed to you and agreed to by you, or for any other purpose permitted or required by applicable law.

3. How long we keep the personal information we collect

In accordance with legal obligations, the data collected is kept for a limited period of time, in proportion to the purposes for which it was communicated to us or collected. Thus, the data communicated in the context of newsletter registration will be kept in our mailing list until the user unsubscribes.
The duration of the conservation of the other communicated data will not exceed 3 years from your last registered activity on the Site. You may at any time withdraw or change your consent to our use or disclosure of your personal data, or request that we delete it from CDA’s records, subject to legal and contractual restrictions.

4. Links to or from other websites

The Site may contain links to other websites. YTD has no control over, and assumes no responsibility for, the privacy practices of such websites. You should consult the privacy policy of each website you visit.

5. Use and Collection of Information: Third Party Platforms

The Site may incorporate third party platforms, such as the “like” and “share” features of Facebook or Twitter. We may collect technical information using cookies or other technologies from third party platforms, such as those mentioned in this paragraph. Technical data may include your IP address, clickstream, operating system, and other data. When you interact with third party platforms, for example by using “like” or “share” features, they may record your interaction with the Site. These platforms have their own personal data policies that govern the use of the personal or non-personal data they collect.

6. Cookies

Like most websites, our Site uses a standard technology called “cookies” to collect information that helps us to improve your online experience and deliver personalised services. Please refer to our cookie policy for more details.

A. Server Usage Data

The CDA website collects a certain amount of general data and information each time the site is used and stores it in the server log files. This data is collected anonymously and does not allow any conclusions to be drawn about you. The anonymous data in the server log files is stored separately from any personal data you have entered. Your browser transmits the following data to our server each time you visit the website
– types and versions of browsers used
– the operating system used
– the website from which you access our web offers (called referrer)
– the sub-sites you visit on our website
– the date and time you access the website
– the Internet Protocol address (IP address)
– the internet service provider
– other similar data and information
This data is technically necessary for us to be able to show you our website, to ensure stability and security and to provide the necessary information to law enforcement agencies for the prosecution of cyber attacks.
Art. 6 Part 1. b) GDPR (establishment of the contract or agreement) and Art. 6 Part 1 f) GDPR (legitimate interest) are the legal basis for the data processing.
The recipient of this data is our web hosting service providers who work for us under a data processing agreement.
The information in the log file is kept for a maximum of 90 days for security reasons (e.g. to investigate cases of abuse and fraud) and is then deleted. Data that is to be retained for evidential purposes is excluded from deletion until the final clarification of the respective case.

B. Use of Cookies

Cookies are used by us directly or by third party providers on our behalf when using the CDA website. Cookies are text files that are placed and stored on a computer system by a web browser. Many cookies contain what is known as a cookie ID. A specific web browser can be recognised and identified by the unique cookie ID.
The following types of cookies are used in connection with our web offerings:
– Technical cookies that are necessary for the operation of our web offers (necessary) serve to be able to identify the accessing browser even after switching to another site. They do not require consent because, in accordance with Art. 6 part 1. f) of the GDPR, CDA, as operator of the website, has a legitimate interest in using these cookies.
– Personalisation cookies are cookies that adapt the website to your needs according to your settings (personalisation). Some functions of the website, such as the contact form, the storage of login data, the storage of the language settings of the website, for example, cannot be used properly without these cookies. You can consent to the use of personalisation cookies. The legal basis is Art. 6 part 1 of the GDPR.
– Analysis and tracking cookies enable us to collect and analyse statistics on the usage behaviour of website visitors, i.e. to carry out coverage measurement and usage analysis for website optimisation purposes (tracking). They are not necessary for the actual functions of the website and the tracking data may be linked or shared with other data and services. You can find more information about the tracking tools we use in the following sections.

C. Opting out – Preventing the use of cookies

You can prevent the installation of cookies by our website:
– by ticking the appropriate section in the cookie banner when you first visit our website.
– by making the appropriate setting in your Internet browser, which can usually be found under “Data Protection” or “Cookies” in the “Internet Options” or “Settings” menu of the browser.

D. Analysis and monitoring tools

We use the following analysis and tracking tools as part of our web presence, which we apply in relation to our specific web offering (website).

(1) Google Analytics
Used for the website.
We use the web analysis service Google Analytics. Google Analytics is operated in the EU by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google).
Google Analytics uses cookies which are stored on your computer or mobile device and which enable analysis of how users use the website. With these cookies, Google Analytics can measure the coverage of our web presence on our behalf. The cookies allow us to know which website you visited before coming to our website and how you used our website. We use the data collected in this way (Google Analytics reports) to analyse the performance of our website and to analyse the success of our marketing campaigns.

By using cookies, Google collects (personal) data such as your IP address, the date and time of the visit, usage data, site information, device information and browser information for ADC. Your IP address is only further processed in an abbreviated form (IP anonymisation) when you access our website from a Member State of the European Union or another Contracting State of the Agreement on the European Economic Community.
The recipient of the (personal) data collected in this way is Google, so that your data may be transmitted to the United States of America and stored there. Google may pass on this data under certain circumstances.
Google will automatically delete your personal data from the cookies after 14 months.
The processing of data by Google Analytics is based on Art. 6 Part 1. a) GDPR (consent).

• Deactivation
In addition to the revocation options described in paragraph C, you have the following options to revoke the data collection by Google Analytics:
– Download and install the browser plugins available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
You can find further information and the applicable data protection regulations of Google at https://policies.google.com/privacy?hl=en&gl=en and https://marketingplatform.google.com/about/analytics/terms/us/.

(2) YouTube
Used on the website
We have integrated YouTube videos on our website with the extended data protection mode activated. YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google Inc.
When integrating YouTube content, YouTube or Google may occasionally collect and process information (including personal data). It cannot be ruled out that YouTube or Google also transfers this information to a server in a third country. According to the specification of the YouTube platform on the activation of the extended data protection mode, the cookie activity and the resulting data collection only come into effect with the use of the video playback function itself.
The purpose of integrating YouTube is to be able to present you with different videos so that you can watch them directly on our website. Art. 6 Part 1. f) GDPR provides the legal basis for the processing of the personal data described here. Our necessary legitimate interest lies in the above-mentioned purpose. The incorporation of external videos also allows us to relieve the load on our servers and to use appropriate resources elsewhere. In particular, this can increase the stability of our servers.

• Deactivation
You can permanently revoke the installation of cookies by our website as already described above in section C. In addition, you can prevent the transmission of information by logging out of your YouTube account before visiting our website.
You can find more information in the data privacy policies of YouTube or Google, which you can find here: www.google.com/policies/privacy/.
Information on Google’s privacy settings can be found at https://privacy.google.com/take-control.html?categories_activeEl=sign-in.

(3) Google Ads
Used on the website
This website uses Google Ads (formerly: AdWords) and as part of Google Ads Conversion-Tracking, an online advertising service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads and Google Conversion Tracking are analytics services of Google. When you click on one of the advertisements we have placed with Google, a cookie is stored on your device which allows us to analyse the use of the website you visit. The information about the use of this website (including your IP address) generated by the cookie is transferred to a Google server, possibly in the USA or other third countries, and stored there. These cookies become invalid after 30 days. When you visit our site and the stored cookie has not yet expired, Google and we can see that someone has clicked on the ad and been directed to our website. Each Google Ads client receives a different cookie. Cookies can therefore be tracked by the websites of Google Ads clients.
Art. 6 Part 1. a) GDPR (consent) is the legal basis for the processing of personal data described here.

• Deactivation
You can permanently revoke the setting of cookies by our website, as already described above in section C. The following specific revocation options are also available to you for Google Ads:
– You can deactivate the settings for personalised advertising under https://support.google.com/ads/answer/2662922?hl=en.
– You also have the possibility to revoke interest-based advertising by Google. To do this, you must use the link www.google.de/settings/ads from every Internet browser you use and make the desired settings there.
Further information and Google’s data privacy policy can be found at https://policies.google.com/privacy?hl=en&gl=en.

(4) Google reCaptcha
Used on the website
On this website we also use the reCAPTCHA feature of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This feature is primarily used to distinguish whether an entry is made by a real person or abused by a machine or automatic processing. The service includes the transmission to Google of the IP address and any other data required by Google for the reCAPTCHA service.
The legal basis for the data processing is Art. 6 Part 1. f) RGPD due to our legitimate interest in determining individual personal responsibility on the web and in preventing abuse and spam. Within the framework of the use of Google reCAPTCHA, personal data may be transmitted to Google LLC. Servers in the USA.

• Deactivation
You can permanently deactivate the setting of cookies on our website as described above in section C.
Further information on Google reCAPTCHA and Google’s privacy policy can be found at https://policies.google.com/privacy?hl=fr&gl=fr.

7. Disclosure to Third Parties

Except as specified in this Privacy Policy or as permitted or required by applicable law, we do not share your personal information with third parties without your permission and we do not allow third parties to collect personally identifiable information about users of our Site.
This does not include trusted third parties who assist us in operating the Site, conducting our business and logistics, or servicing you, so long as those third parties agree to keep this information confidential and secure. Third party vendors retain the information they need to perform the functions for which they have been appointed and we do not authorize these third parties to use or disclose personal information for their own marketing or other purposes.
We may disclose your personal information when such disclosure is permitted by law or necessary (for example, in response to a search warrant or other legally valid request or as otherwise required or permitted by law), to enforce Site policies, to exercise or defend rights, or to protect our rights, the rights of others, our property, or our safety.
In the event of a sale of all or part of our business or its assets or a merger with another company, personal data may be included in that transaction. Also, we may use or disclose such data to other parties involved in the transaction.
Please note that your personal information may be stored and processed by service providers located in foreign jurisdictions, whose regulations on personal data may differ from those of the jurisdiction to which you are subject.

8. Security of your personal information

We have policies and procedures in place to protect your personal information from loss, unauthorized access, modification or disclosure. In addition, we have implemented technological security features including security software, passwords and firewalls designed to prevent unauthorised access to your computer. We make no claim that our system is impenetrable in unusual circumstances or that it will withstand future attacks.

9. Transfer and storage of information

Your personal information is primarily stored at secure locations and on servers located in the European Union. Any electronic records generated by us or our service providers in connection with your interactions with the Site may be stored on these servers. You may obtain information and ask questions about our privacy policies and practices relating to the processing of your personal data by contacting us using the method indicated below. We retain your personal information for as long as necessary for the purposes identified when you provided the personal information and for any new purposes identified and consented to by you, for an appropriate period of time.
If your data is processed outside the European Economic Area, we will take appropriate steps to ensure that the transfer complies with applicable regulations.

10. Confidentiality of children’s data

We do not intentionally collect or store personal information from children under the age of 13 or any other age limitation defined by local regulations. If we decide otherwise, we will obtain the consent of a legal representative before collecting personal information from children where required by applicable laws and regulations (the age for which consent from a legal representative is required differs from country to country).

11. Contacting us about our privacy policy

Questions about this Privacy Policy, the collection or accuracy of your personal information, the use or disclosure of information, or about the personal information we have on file about you, as well as requests to correct, amend or delete your personal information, if applicable, may be directed to: rgpd@cdafrance.com

12. Changes

This Privacy Policy is subject to change at our sole discretion. You should check this Site periodically for changes to this Privacy Policy. Any changes will be posted as soon as they become effective. Your continued access to and/or use of the Site after such change constitutes your acceptance of the revised Privacy Policy.