PRIVACY POLICY
1. Data Controller
The data controller for personal data collected on the website https://prezode-initiative.org is:
Institut national de recherche pour l’agriculture, l’alimentation et l’environnement (INRAE) 147 rue de l’Université – 75338 Paris Cedex 07, France SIREN: 180 070 039
(hereinafter “the Data Controller”)
For any question regarding the protection of your personal data, you may contact: contact@prezode.org
2. Purpose of this Policy
The purpose of this privacy policy is to inform users of the website prezode-initiative.org about how their personal data is collected and processed, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR) and French Law No. 78-17 of 6 January 1978, as amended, on information technology, data files and civil liberties.
3. Personal Data Collected
3.1 General Principle
The website prezode-initiative.org is an institutional information website. Browsing the site does not require the creation of a user account and does not involve any collection of personal data, with the exception of newsletter registration as described below.
3.2 Newsletter Registration
When you subscribe to the PREZODE newsletter, the following data is collected:
- Email address
- Where applicable, first name and/or last name (if requested during registration)
- Date and time of registration
- Proof of consent (timestamp and origin of the request)
This collection is based on your consent (Article 6(1)(a) of the GDPR). You may withdraw this consent at any time by unsubscribing via the link provided in each email received, or by writing to contact@prezode.org.
4. Purposes of Processing
Data collected in connection with the newsletter is used exclusively for:
- Periodic distribution of the PREZODE newsletter (news, events, publications)
- Management of subscriptions and unsubscriptions
No data is used for commercial prospecting, profiling, or resale to third parties.
5. Data Recipients
Your data is accessible only to:
- Authorised members of the PREZODE Secretariat responsible for communications
- The technical service provider responsible for sending the newsletter (processor within the meaning of Article 28 of the GDPR)
No personal data is sold, rented, or otherwise disclosed to third parties.
6. Data Transfers Outside the European Union
If the newsletter service provider is established outside the European Economic Area (EEA), data transfers are governed by appropriate safeguards in accordance with Chapter V of the GDPR, including standard contractual clauses adopted by the European Commission or an adequacy decision, where applicable.
7. Data Retention Period
Your data is retained for as long as you are subscribed to the newsletter. In the event of unsubscription, your data is deleted within a maximum of 30 days.
Proof of your consent (timestamp) is retained for 3 years from the date of unsubscription, in accordance with the recommendations of the French Data Protection Authority (CNIL) regarding electronic marketing communications.
8. Cookies and Trackers
8.1 Strictly Necessary Cookies
The website may place cookies that are strictly necessary for its technical operation (WordPress session cookies, WPML language preference cookies). These cookies are exempt from consent in accordance with Article 82 of the French Data Protection Act.
8.2 Analytical Cookies
The website does not place any analytical or advertising cookies. No audience measurement tool is used.
9. Embedded Third-Party Content
Some pages of the website may embed content from third-party services (videos, interactive maps, social media posts). Such content may place cookies specific to those services and collect data about you, independently of PREZODE.
We encourage you to consult the privacy policies of the relevant third-party services.
10. Your Rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
- Right of access to your data (Article 15 of the GDPR)
- Right to rectification (Article 16)
- Right to erasure (Article 17)
- Right to restriction of processing (Article 18)
- Right to data portability (Article 20)
- Right to object (Article 21)
- Right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal (Article 7)
To exercise your rights, send your request by email to: contact@prezode.org
A response will be provided within one month. This period may be extended by a further two months where necessary, depending on the complexity of the request, provided that you are informed within the initial period.
If you encounter any difficulty in exercising your rights, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) – 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr
11. Data Security
The Data Controller implements appropriate technical and organisational measures to ensure a level of security adapted to the risk, in accordance with Article 32 of the GDPR. These measures include, in particular, encryption of communications (HTTPS/TLS protocol) and restriction of access to authorised personnel only.
12. Applicable Law and Jurisdiction
This policy is governed by French law. Any dispute relating to the interpretation or enforcement of this policy shall fall within the exclusive jurisdiction of the French courts.