Privacy policy
Preamble
Each online service limits the collection of personal data to what is strictly necessary (data minimization) and includes information on:
the data controller and the purposes of collecting this data;
the legal basis for data processing;
whether providing data is mandatory or optional for processing your request and a reminder of the categories of data processed;
the source of the data (when data other than that provided via the online service is used to process your request);
the categories of data subjects;
the recipients of the data (generally only the CNIL, unless otherwise specified when transmission to a third party is necessary);
the data retention period;
the security measures (general description);
the possible existence of data transfers outside the European Union or automated decision-making;
your data protection rights and how to exercise them with the CNIL.
1. Introduction
This privacy policy aims to inform you about how we collect, use, and protect the personal data you provide to us when you browse our website.
We are committed to complying with the provisions of the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).
2. Identity of the Data Controller
The data controller for the data collected on this website is:
Slimane OUSSAD
JEANTIL
Tel: +213 29 96 40 40 44
Email: jeantil@jeantil.com
3. Contact the Data Protection Officer (DPO)
For any questions regarding the processing of your personal data, you can contact our Data Protection Officer (DPO):
Name: Slimane OUSSAD
Contact: JEANTIL
Tel: +213 29 96 40 404
Email: jeantil@jeantil.com
4. Data Collected and Purposes of Processing
We collect the following data depending on your use of the site:
Contact Form
Data collected: Last name, first name, email address, phone number, message content. (IP address is not stored).
Purpose of processing: To manage your request, respond to your message, and follow up on your request.
Legal basis (GDPR): Performance of pre-contractual measures/Legitimate interest (depending on the nature of the request).
Retention period: 364 days after receipt for processing the request.
Mandatory nature of data collection: Providing the data marked with an asterisk (*) in the contact form is mandatory for us to process and respond to your request. Without this information, we will not be able to contact you or follow up on your inquiry.
Source of Data: All personal data processed is collected directly from you via the contact form or indirectly via tracking technologies (cookies) if you have consented. No other data sources are used.
Categories of Data Subjects: The data processing described in this policy concerns only website users and visitors who complete the contact form or who accept the use of cookies.
Audience Measurement (Google Analytics 4 – GA4)
Data collected: Browsing identifiers (cookies), behavioral data (pages viewed, time spent, clicks), general geographic location.
Purpose of processing: To analyze website traffic, improve the user experience, and measure the effectiveness of our content.
Legal basis (GDPR): Your consent (collected via Axeptio).
Retention period: User and event data are retained for 14 months (standard GA4 retention period).
Embedded Videos (YouTube / Vimeo)
Data collected: Potentially identifiers (cookies) if you accept their use, and viewing data.
Purpose of processing: To play videos directly on the website.
Legal basis (GDPR): Your consent (collected via Axeptio and activated when the video iframe is displayed).
Retention period: The retention period is defined by Google/YouTube.
5. Cookie Management and Consent
This site uses cookies. Your consent regarding cookies and trackers is managed by our consent management platform (**Axeptio**). On your first visit, a consent banner allows you to accept or refuse the placement of non-essential cookies. You can change your choice at any time by clicking on the cookie management icon on the site.
6. Data Recipients
The collected data is intended for:
The internal team responsible for processing your request.
Our technical subcontractors (hosting provider, WordPress website maintenance provider) who act on our instructions.
Google (via Google Analytics 4 and the YouTube integration) for the data you have expressly consented to share.
In the event of a breach of our legal obligations, public authorities, including the French Data Protection Authority (CNIL), are also recipients of the data.
Data Transfer Outside the European Union: We use Google Analytics 4 and YouTube integrations (provided by Google, an American company). These services may result in data being transferred to the United States. This transfer is governed by appropriate measures, including the Standard Contractual Clauses (SCCs) of the European Commission. By accepting the use of these services via our consent module (Axeptio), you consent to this potential transfer.
7. Data Security
Security Measures: We implement appropriate technical and organizational security measures to ensure a level of security commensurate with the risk, including protection against unauthorized access, disclosure, modification, or destruction of data. This includes encryption of communications (SSL/HTTPS certificate) across the entire site and restricted access measures to the WordPress back-office.
8. Your Rights (User Rights)
In accordance with the GDPR, you have the following rights regarding your personal data:
1. Right of access: Obtain confirmation and a copy of the data concerning you.
2. Right to rectification: Request the correction of inaccurate data.
3. Right to erasure (“Right to be forgotten”): Request the deletion of your data.
4. Right to restriction of processing: Request the suspension of data processing.
5. Right to data portability: Receive the data you have provided to us in a structured format.
6. Right to object: Object to processing based on legitimate interest (Section 4).
7. Right to withdraw consent: Withdraw your consent at any time for processing based on it (e.g., GA4 and cookies).
To exercise these rights, you can contact our Data Protection Officer (DPO) using the contact details provided in Section 3. We will process your request within one month.
9. Right to Lodge a Complaint
If you believe that the processing of your personal data does not comply with legal requirements, you have the right to lodge a complaint with the competent supervisory authority:
The French Data Protection Authority (CNIL)
Address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
Website: [https://www.cnil.fr]