Preamble
The François RABELAIS Interdisciplinary Legal Research Institute (IRJI, EA 7496) is committed to ensuring that the processing of personal data carried out on https://www.nihoneuropa.fr/en/ complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés). This data protection policy applies to data processing carried out via the website https://www.nihoneuropa.fr/en/. It informs you of the purposes of the processing, the legal basis, the recipients of the data, the retention periods, security measures (general description), any transfers of data outside the European Union or automated decision-making, the use and management of cookies, your data protection rights, and how to exercise them.
Who is responsible for data processing carried out by this website ?
The data controller for the processing carried out by the website https://www.nihoneuropa.fr/en/ is the François Rabelais Interdisciplinary Legal Research Institute (IRJI, EA 7496), located at 50 Avenue Jean Portalis, 37206 TOURS.
For more information, see the lega notice : https://www.nihoneuropa.fr/en/mentions-legales
Does this website collect personnal data ?
According to Article 4(1) of the GDPR, personal data means any information relating to an identified or identifiable natural person. This website collects personal data via its various contact forms. The personal data are freely provided to the Group for Studies and Research on International and European Cooperation (GERCIE) – EA 2110 by the data subjects, who consent to the processing and acknowledge the information notice displayed beneath the contact forms. The data collected are adequate, relevant, and limited to what is necessary. These include identification data (name, surname), professional data (company), and contact data (email address).
What are the purposes of data collection?
Personal data collected via the website’s various contact forms are used for the following purposes :
– Responding to messages from website visitors;
– Receiving and processing your request related to our activities;
– Creation and management of client accounts;
– Sending marketing and commercial information ;
– Satisfaction surveys ;
– Management of prospects and clients ;
– Preparation of commercial statistics ;
– Recruitment
– Technical administration related to service providers (application maintenance subcontractors, hosting, domain name registrar, certification authority);
– Website security management.
What are the legal basis for processing carried out by this website ?
The processing of your personal data by the François RABELAIS Interdisciplinary Legal Research Institute (IRJI, EA 7496) is based on:
- Your consent, for all cases where you voluntarily provide your personal data. You may withdraw your consent at any time.
- The performance of contractual or pre-contractual measures related to your request for a quote and any subsequent commercial relationship.
- Compliance with a legal obligation, notably concerning the exercise of your rights under the GDPR and the French Data Protection Act.
The website owner considers that, except for marketing operations which require user consent, all other processing is necessary for the performance of a contract or for pre-contractual measures. Marketing activities rely on the data subject’s consent.
What categories of data are processed ?
The categories of data processed are :
- Identity ;
- Contact details (e-mail address) ;
- Date and subject of the request ;
- Follow up actions ;
- Cookies ;
- Activity statistics.
Mandatory nature of these provisions :
The contact form for the Group for Studies and Research on International and European Cooperation (GERCIE) – EA 2110 requires mandatory data provision to ensure proper handling of your request.
Does this website use cookies ?
When you visit this website, cookies (tracking cookies) may be placed on your computer, tablet, or smartphone. The François RABELAIS Interdisciplinary Legal Research Institute (IRJI, EA 7496) may use cookies to enhance the relevance of content and information displayed on the website and adapt them to your personal needs. Under no circumstances can cookies be used to personally identify users. Practically, cookies are used to measure audience statistics. Cookies used by the Institute on this website are therefore functional, technical, and audience measurement cookies.
You may accept or refuse cookies via the cookie consent banner or manage cookie settings through the « Cookie Management » menu at the bottom of the page. For more information on cookies, you may consult the CNIL website.
To improve service performance, the Institute uses the following cookies:
- Session cookies
- Consent cookies
- Audience measurement cookies
Can I object to these cookies ?
Yes, in several ways. If you do not want this website to place cookies on your device, you may block them by:
- Using a browser that rejects cookies by default;
- Configuring your browser settings or installing a browser add-on specifically designed to manage cookies;
- Configuring your browser to send a « Do Not Track » signal to websites. This website respects your choice.
Who are the recipients of data processed by this website ?
Your personal data are primarily intended for the Group for Studies and Research on International and European Cooperation (GERCIE) – EA 2110, the data controller. They are processed solely for the aforementioned purposes. Personal data may occasionally be processed by subcontractors of GERCIE (as defined by Article 4(8) of the GDPR) under strict conditions. Data are never disclosed to third parties for commercial purposes.
Are personnal data transferred outside the European Union ?
Personal data collected via this website are not transferred to recipients outside the European Union. In the event of contractual data transfers, the François RABELAIS Interdisciplinary Legal Research Institute ensures recipients are based within the EU and that their processing complies with the GDPR.
How is the personal data processed on this website secured ?
The Institute is committed to protecting personal data processed on this website in line with the state of the art. Key security measures include:
-
All pages of the Institute’s website are served via HTTPS protocol;
-
Deletion of personal data is performed upon request by the data subject or at the end of the retention period;
-
An internal password management policy is implemented according to the National Cybersecurity Agency of France (ANSSI) guidelines;
-
Data are stored on servers located in France, complying with maximum technical security standards.
What is the retention period for personnal data processed by this website ?
Personal data collected from « client » users are retained for the duration of the commercial relationship and for 5 years following its termination (e.g., from the date of last purchase). Personal data collected from « prospects or referees » are retained for 3 years from the last contact initiated by the user (e.g., inquiry about a product, clicking a hyperlink).
Is the website secure ?
Security measures are implemented in accordance with the Information Systems Security Policy (PSSI) of the Group for Studies and Research on International and European Cooperation (GERCIE) – EA 2110.
What rights do data subjects have regarding the processing carried out by this website ?
You may browse our website without revealing your identity or providing personal information. However, you may request to be contacted via a specific form. We collect personal data that you provide through contact forms and emails.
Under the GDPR (effective 25 May 2018), the French Data Protection Act (No 2018-493 of 20 June 2018 on data protection LIL3, modifying the bill No 78-17 of 6 January 1978 on IT, files and freedoms), and related legislation, you have the following rights:
- Access to your personal data and related information;
- Rectification, erasure, and portability of your personal data;
- Restriction and objection to the processing of your personal data;
- Withdrawal of your consent.
Where applicable, you also have the right to issue instructions regarding the preservation, erasure, or communication of your personal data after your death (right to be forgotten).
How can I exercise my rights under the GDPR and the French Data Protection Act ?
You may submit your requests by:
- Emailing contact@nihoneuropa.univ-tours.fr;
- Visiting in person the reception of the François RABELAIS Interdisciplinary Legal Research Institute at 50 Avenue Jean Portalis, 37206 TOURS, France;
- Sending a postal letter to the Group for Studies and Research on International and European Cooperation (GERCIE) – EA 2110, 50 Avenue Jean Portalis, 37206 TOURS, France;
- Filing a complaint with the CNIL if you consider that your rights have not been respected after contacting us.
Please make each request by one of the above means and include a copy of your identity document.
Requests for rectification:
If you believe that information concerning you is inaccurate or incomplete, please specify the data to be corrected and provide supporting information (Article 15 GDPR).
Requests for erasure:
Specify precisely the data you want erased and the reasons for your request (Article 17 GDPR). Note: This right is not absolute; the Institute may need to retain certain data for commercial management (invoicing, litigation) or for evidence relating to your rights.
Requests for restriction of processing:
Specify which data you want restricted and why. Note: This right is not absolute; the Institute may continue processing under Article 18.3 GDPR. If restriction applies, some services (access to works and deliverables, information reception) may be suspended. You will be informed of any consequences upon acknowledgment of your request.
Requests to object:
Specify the processing to which you object and the reasons. Note: This right is not absolute (Article 21 GDPR).
Requests for data portability:
You may request your personal data in a standard format for transfer to another controller, particularly for data processed on consent or contract bases. Please specify the recipient’s contact details.