1.Why does Alliance Française de Paris need to collect your data?

The data that Alliance Française de Paris collects is necessary to enable it to fulfil the following purposes:

• Inform users about Alliance Française de Paris offers (courses, exams, events, etc.).

• Registration for offers (creation of an account for learners; online ordering and purchasing of activities or materials (manuals, goodies, etc.).

• Newsletter subscription

• Managing contact requests

• Member area management

In general, the Alliance Française de Paris does not process any of your data for purposes incompatible with those for which it was collected, except with your prior consent.

2. What data does Alliance Française de Paris collect? 

The Alliance Française de Paris collects different types of personal data about you:

Personal data that you communicate directly to us:

• When you fill in a contact form;
  

• Lorsque vous vous inscrivez ;
  

• When you wish to subscribe to a sales contract;
  

• When you contact customer service to ask a question or make a complaint;
  

• In general, when you deal with Alliance Française de Paris in any other way.

The provision of your personal data is voluntary. However, certain information, identified by an asterisk, is essential for the Alliance Française de Paris to process your request. Without this information, the Alliance Française de Paris will not be able to process your request.

The personal data we collect automatically :

We automatically collect certain information about you when you access the Alliance Française de Paris Site, in particular, information about your navigation. Alliance Française de Paris uses cookies and other tracking technologies to collect information about you when you interact with the Alliance Française de Paris Site.

To find out more about cookies and how to disable them, please visit the Cookies policy. 

3. What is the legal basis for processing your data?

The Alliance Française de Paris collects your personal data for the purposes described in point 1 of this Policy. In all cases, the Alliance Française de Paris collects your data only when its collection and processing have a legal basis.

Performance of contractual relations with Alliance Française de Paris

Your data is necessary for the performance of the contract to which you have subscribed or wish to subscribe. On this contractual legal basis, any refusal to communicate your personal data will prevent the conclusion and execution of the contract.

Compliance with a legal obligation to which the Alliance Française de Paris is subject

Some of your data is processed by the Alliance Française de Paris to meet its legal obligations.

Your consent

Subject to obtaining your prior consent, the Alliance Française de Paris may process your data in order to : 

• Send you commercial offers on our products and services, 

• Deposit cookies under the conditions described in the Cookies Policy.

At any time, you may reconsider your choice and withdraw your consent, as described in section 5.2 of this Policy, without however calling into question the lawfulness of the processing based on consent and carried out prior to the withdrawal.

The legitimate interests of Alliance Française de Paris

The Alliance Française de Paris may process your personal data in order to pursue its legitimate interests, in particular to improve the quality of the products and services it offers.

4. How long will your data be stored?

Your data will be kept by the Alliance Française de Paris for the time necessary to achieve the purposes set out in point 1 of these terms and conditions, plus any statutory limitation periods.

Registration for Alliance Française de Paris services:

The Alliance Française de Paris may keep the data for 14 months.

Newsletter registration :

Personal data relating to newsletter subscriptions will be kept for a period of three years from the date of collection or from the last contact from the person (for example, a request for documentation or a click on a hyperlink contained in an e-mail).

For contact requests :

The Alliance Française de Paris may keep your data for a period of one (1) year after processing your request for information.

With regard to website navigation and cookie management

Information collected for audience measurement purposes and stored in users' terminals (e.g. cookies), or any other element used to identify users and enable their traceability, will not be kept for longer than thirteen months.

To find out more about how long cookies are retained, please consult our Cookies policy.  

With regard to the management of requests to exercise rights granted to data subjects under the regulations applicable to the processing of personal data:

The data processed is kept for the time required to process your request, then archived in accordance with the applicable statute of limitations (5 years);

Data relating to identity documents will be kept for a period of one (1) year in compliance with applicable legal time limits;

In the event of opposition, the data will be kept for a minimum period of three (3) years for the sole purpose of guaranteeing the effectiveness of your right of opposition;

For further information on how long your data will be kept, please contact the Alliance Française de Paris DPO (see Art. 5.2 of this Policy). 

4.  What are your rights and how can you exercise them? 

Your rights regarding your data

Right to access your data

You may obtain from Alliance Française de Paris confirmation that your data is or is not being processed and, where it is, access to all data and information held by Alliance Française de Paris.

Right to rectify your data 

You may obtain from the Alliance Française de Paris, as soon as possible, the rectification of any data concerning you that may be inaccurate or erroneous. You may also request that your data be completed, if necessary. 

Right to erase your data

Barring legal exceptions, you may ask the Alliance Française de Paris to delete your data as soon as possible if, in particular, you consider that the processing of your data by the Alliance Française de Paris is no longer necessary for the purposes for which it was collected. 

Right to portability of your data 

You have the right to retrieve part of your data in an open, machine-readable format or to ask Alliance Française de Paris to transfer it to another organization. This right only applies to data that you have actively and knowingly provided to Alliance Française de Paris (for example, data that you have entered in an online form) or data generated when using a service or device in the context of concluding or managing your contract, and which is processed automatically, on the basis of consent or the performance of a contract.

Right to object 

You may object to your data being used by an organization for a specific purpose. In this case, you must put forward reasons relating to your particular situation, except in the case of commercial canvassing, to which you may object without giving any reason. If your data is processed for commercial prospecting purposes, you may object at any time (see point 5.2 of this Policy), just as you may object at any time to the deposit of cookies (see Article 10 of this Policy). 

Right to limit the processing of your data 

You can ask Alliance Française de Paris to keep your data without being able to use them, in one of the following cases:

• you contest the accuracy of the data used by Alliance Française de Paris
  

• you object to your data being processed,
  

• in the event of unlawful use, but you object to their deletion, 
  

• you need your data for the establishment, exercise or defense of legal claims.
  

Right to withdraw your consent to the processing of your data

When the processing of your personal data is based on your consent (e.g. the sending of our electronic commercial offers), you may withdraw your consent at any time (see point 5.2 of this Policy).

Similarly, if you wish to withdraw your consent to cookies, you may do so in the manner described in the Cookies Policy.

The right to give post-mortem instructions

You have the possibility of defining directives relating to the conservation, deletion and communication of your data after your death. These directives define the way in which you wish your rights to your data to be exercised after your death. You can send us these directives by sending a letter to the DPO of the Alliance Française de Paris (Cf. Art. 5.2) with "Post-mortem directives" in the subject line. You may modify or revoke your directives at any time.

Right to lodge a complaint with the CNIL

If you consider that your rights are not respected or that the protection of your data is not ensured in accordance with the RGPD, you may, at any time, lodge a complaint with a competent supervisory authority (in France, the CNIL), directly on the CNIL Website or by post to: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

Exercising your rights

To exercise any of your rights, please send your request to: dpo@alliancefr.org or to the following postal address: Alliance Française de Paris- A l'attention du DPO - 101 boulevard Raspail 75270 Paris cedex 06.

All requests must specify, in the subject line, the reason for the request (exercise of right of access, opposition, etc.) and the company concerned by the request. The request must also be accompanied by proof of identity (customer number, member number, etc.) and specify the address to which the reply should be sent.

The Alliance Française de Paris will reply within a maximum of one (1) month from the date of receipt of your request. However, this deadline may be extended by two (2) months due to the complexity and number of requests.

If, after contacting Alliance Française de Paris, you feel that your rights with regard to data processing, data files and individual liberties have not been respected, you may submit a complaint to the CNIL.

Prospecting and targeted advertising

Once you have agreed to receive commercial offers from the Alliance Française de Paris, you may, at any time, change your mind by clicking on the unsubscribe link at the bottom of each e-mail. If you have agreed to receive newsletters from the Alliance Française de Paris, you may, at any time, opt out of receiving them by clicking on the unsubscribe link in each newsletter.

In general, if you have any questions about this data protection policy or any request relating to the management of your personal data by the Alliance Française de Paris, you can send your request by email or by post, as indicated above.

5.  With whom does Alliance Française de Paris share your data?

The Alliance Française de Paris does not share your collected data and remains the exclusive recipient of your data.

Your data is hosted on secure servers located in France.  Should your data be transferred outside the EU, in particular via our subcontractors, we will take particular care to ensure that these subcontractors process your data in strict compliance with current regulations on the protection of personal data. In the event that these subcontractors are located in a country that has not been granted an adequacy decision by the European Commission, recognizing a level of protection equivalent to that provided by the European Union, a standard contract will be drawn up in order to comply with the model established by the European Commission.

7. How does Alliance Française de Paris secure the processing of your data?

Alliance Française de Paris implements all technical, physical and organizational measures to ensure the security and confidentiality of your data when collecting, processing and transferring your data.

Alliance Française de Paris infrastructures are protected against malicious software (viruses, spyware, etc.). Physical and remote access to servers hosting data is controlled. Intrusion tests are carried out, as well as regular backups with restore tests. You are responsible for the security of your terminal, from which you connect to our Site.

In the event that the Alliance Française de Paris is likely to call upon service providers to process part of your data, it undertakes to verify that they present sufficient guarantees to ensure the protection of the personal data entrusted to them and to have them sign confidentiality clauses in compliance with Article 28 of the RGPD.

In the event of a personal data breach, i.e. a security incident, whether malicious or not and whether intentional or unintentional, which results in the integrity, confidentiality or availability of your personal data being compromised, we undertake to comply with the following obligations:

Obligations and risks	No risk	A risque	High risque
Internal documentation, in the "violation register
Notification to CNIL, within a maximum of 72 hours
We will inform you as soon as possible.

• The "Violation Register" contains the following information:

• the nature of the violation ;

• the categories and approximate number of persons concerned;

• categories and approximate number of files involved ;

• probable consequences of the violation ;

• the measures taken to remedy the violation and, where appropriate, to limit the negative consequences of the violation;

• where applicable, justification for not notifying the CNIL or informing the persons concerned.

However, in accordance with the regulations in force, the Alliance Française de Paris is not obliged to inform you of a violation in the following cases:

• Your personal data is protected by measures that make it incomprehensible to anyone not authorized to access it;

• Measures have been taken to ensure that the risk is no longer likely to materialize;

• This communication requires disproportionate efforts on the part of the Alliance Française de Paris, which has no means of contacting you to inform you of this.

Fields marked with an asterisk are mandatory. If you fail to reply, your request will not be processed. The obligation to provide the requested data is contractual, as it is necessary for the performance of the contract to which you are a party or for pre-contractual measures carried out at your request, in particular in the event of a request for information or a quotation concerning our products and services.

9. Cookies Policy

Cookies Policy

11.   Privacy by Design/by Default

The Alliance Française de Paris is committed to integrating the protection of personal data right from the conception of a project, a service or any other tool related to the handling of personal data, in particular the minimization of personal data, the limitation of the purposes of data collection, the respect of data integrity and confidentiality, and the limitation of retention periods.