Privacy and personal data

Data controller

The data controller is CRICS Association, 48 avenue Claude-Vellefaux, 75010 Paris, France.

For any question or to exercise your rights, use the contact form and select “Personal data / exercising your rights”.

Data collected

Depending on the form used, data may include your first and last names, email address, organisation, position, country, institution or department, telephone number and the content of your message.

Fields marked with an asterisk are required. Without this information, CRICS Association will not be able to process your request.

Purposes and legal basis

Data is used only to respond to enquiries, review applications to join the network or process partnership requests.

Processing is based on the consent given when the form is submitted. You may withdraw your consent at any time without affecting processing already carried out.

Recipients and transfers

Data is accessible only to authorised members of the CRICS-TRIGGERSEP coordination team and the technical providers required to operate the site and email service, including o2switch and Google for Gmail.

Messages are sent by email and are not stored in a WordPress enquiry database. Gmail may involve technical processing outside the European Economic Area under safeguards implemented by Google.

Retention period

Requests and related exchanges are retained for 12 months after the last exchange, then deleted unless a legal obligation or the establishment, exercise or defence of legal claims requires certain information to be kept.

Technical logs required for hosting security and operation are retained for the periods applied by the hosting provider.

Your rights

You may request access to, rectification or erasure of your data, or restriction of its processing. You may also withdraw your consent and, where applicable, exercise your right to data portability.

Use the contact form to exercise these rights. If you believe your rights have not been respected after contacting us, you may lodge a complaint with the CNIL.

Cookies and audience measurement

The site uses no advertising cookies or commercial tracking tools. Cookies strictly necessary for WordPress administration concern only authorised users who sign in to the management interface. A self-hosted Matomo instance is used for audience measurement only after the visitor has given consent, with IP addresses anonymised by two bytes.

Visitors can accept, refuse, change or withdraw their consent at any time through the consent management interface.

Security

The site uses an encrypted HTTPS connection and is protected through regular safeguards, updates and backups. Administration access is restricted to authorised individuals.