Privacy Policy

1. Identity of the Data Controller

The data controller for the information collected via the Website is:
Corinne NARDIN
Registered office: IPREM UMR 5254 – EPCP, Helioparc – 2, av. Pdt Angot – 64000 PAU. Email: corinne.nardin@univ-pau.fr

The Data Protection Officer (DPO) is:
Corinne NARDIN
Email: corinne.nardin@univ-pau.fr

2. Purposes and Legal Bases

The personal data collected are used for:

  • Managing contact requests (legal basis: legitimate interest or consent)
  • Managing members and partners (legal basis: contract performance / membership)
  • Sending information and communications (legal basis: consent)
  • Traffic statistics via Google Analytics (legal basis: consent)

3. Data Collected

The data that may be collected include:

  • Identity and contact details (name, first name, email, phone)
  • Professional data (company, position)
  • Connection and browsing data (IP address, cookies)
  • Banking data (if online payment)

4. Recipients

Your data may be transmitted only to:

  • Authorized members of the association
  • Technical service providers (hosting, payment service)
  • Google Analytics (data transferred to the United States, with legal risks linked to Schrems II)

5. Data Retention Periods

  • Contact data: 3 years after the last exchange
  • Member/partner data: for the duration of membership + 3 years
  • Billing data: 10 years (legal obligation – Commercial Code)
  • Cookies: some for 13 → 25 months

6. User Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

  • Right of access, rectification, and deletion
  • Right to object and restrict processing
  • Right to data portability
  • Right to lodge a complaint with the CNIL (www.cnil.fr)
  • To exercise your rights, contact: corinne.nardin@univ-pau.fr

7. Data Security

Corinne NARDIN implements technical and organizational measures to protect your data from unauthorized access, loss, alteration, or disclosure.

8. Cookies and Trackers

The Website uses cookies in order to:

  • Measure audience (Google Analytics, with your prior consent)
  • Improve user experience
  • Store your preferences

When you first visit, a CNIL-compliant cookie banner allows you to choose:

  • Accept all cookies
  • Refuse all cookies
  • Customize your preferences

You may modify your choices at any time.
Retention period: up to 13 months for statistical cookies.

9. Transfers Outside the European Union

Some data collected via Google Analytics may be transferred to the United States.

This transfer is governed by the Standard Contractual Clauses (SCC) adopted by the European Commission, intended to ensure a level of protection equivalent to that in force in the European Union.

This transfer may present compliance risks following the Schrems II decision.