Privacy Policy

ARTICLE 1: PREAMBLE

This privacy policy aims to inform users of the website:

On the manner in which their personal data is collected. Personal data is considered any information that allows the identification of a user. This may include their full name, age, postal or email address, location, or IP address (non-exhaustive list). ;
On the rights they have regarding this data ;
On the person responsible for the processing of personal data collected and processed ;
Regarding the recipients of this personal data ;
On the website's cookie policy.

ARTICLE 2: PRINCIPLES REGARDING THE COLLECTION AND PROCESSING OF PERSONAL DATA

According to Article 5 of the European Regulation 2016/679, personal data

are:

Treated lawfully, fairly and transparently in relation to the data subject; collected for specified, explicit and legitimate purposes, and not processed in a manner incompatible with those purposes. ;
Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed ;
Accurate and, if necessary, kept up to date. All reasonable measures must be taken to ensure that personal data that is inaccurate, considering the purposes for which it is processed, is erased or rectified without delay. ;
Stored in a form allowing the identification of the individuals concerned for a period not exceeding that necessary for the purposes for which they are processed ;
Treated in a way that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing, as well as against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Remplie : - La personne concernée a donné son consentement explicite au traitement de ses données à caractère personnel. - Le traitement est nécessaire à l'exécution d'un contrat auquel la personne concernée est partie, ou à l'exécution de mesures précontractuelles prises à la demande de celle-ci. - Le traitement est nécessaire au respect d'une obligation légale à laquelle le responsable du traitement est soumis. - Le traitement est nécessaire à la sauvegarde des intérêts vitaux de la personne concernée ou d'une autre personne physique. - Le traitement est nécessaire à l'exécution d'une mission d'intérêt public ou relevant de l'exercice de l'autorité publique dont est investi le responsable du traitement. - Le traitement est nécessaire aux fins des intérêts légitimes poursuivis par le responsable du traitement ou par un tiers, à moins que ne prévalent les intérêts ou les libertés et droits fondamentaux de la personne concernée, qui exigent une protection des données à caractère personnel. Il est important de noter que ces conditions doivent être respectées pour que le traitement des données à caractère personnel soit considéré comme licite selon la législation en vigueur.

filled

The person in question has consented to the processing of their personal data for one or more specific purposes. ;
The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject's request. ;
The processing is necessary for compliance with a legal obligation to which the data controller is subject ;
The processing is necessary to protect the vital interests of the data subject or another natural person ;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. ;
The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, especially when the data subject is a child.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING WEBSITE NAVIGATION During your navigation on our website, we may collect and process personal data. This data is collected and processed in accordance with the applicable laws and regulations, as well as our privacy policy. The personal data that may be collected includes: - Information provided by you voluntarily, such as your name, email address, and any other information you choose to provide when contacting us or subscribing to our newsletter. - Technical data, such as your IP address, browser type, operating system, and other similar information that is automatically collected when you access and navigate our website. - Cookies and similar technologies may also be used to collect and store certain information about your browsing activities on our website. The purposes for collecting and processing personal data during your website navigation may include: - Providing you with the requested information or services. - Improving and personalising your browsing experience on our website. - Analysing website traffic and usage to understand our audience and improve our website's performance. - Sending you promotional communications, newsletters, or other marketing materials if you have subscribed to them. We may also share your personal data with third parties who provide services to us, such as website hosting, data analysis, and marketing. By navigating our website, you consent to the collection and processing of your personal data as described in this article. You have the right to access, rectify, and delete your personal data, as well as the right to object to its processing. To exercise these rights or for any questions regarding the collection and processing of your personal data, please contact us using the contact information provided on our website. We take the necessary measures to ensure the security and confidentiality of your personal data. However, please note that no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security. By accepting our privacy policy and continuing to navigate our website, you acknowledge that you have read and understood the terms of this article regarding the collection and processing of your personal data.

Article 3.1: Data collected The data collected refers to any information that is obtained or recorded by an individual, organization, or entity. This can include personal data such as name, address, email address, phone number, date of birth, and any other information that can be used to identify an individual. In addition to personal data, other types of data that may be collected include demographic information, preferences, interests, browsing behavior, and any other data that is voluntarily provided by the individual. It is important to note that the collection of data should always be done in a lawful and fair manner, with the individual's knowledge and consent. The purpose for collecting the data should also be clearly stated and should be limited to what is necessary for the intended purpose. Data protection measures should also be implemented to ensure the security and confidentiality of the collected data. This includes safeguarding against unauthorized access, disclosure, alteration, or destruction of the data. Overall, the data collected should be relevant, accurate, and up-to-date. It should also be used in a manner that is consistent with the individual's expectations and rights regarding data privacy and protection.

The personal data collected as part of our activity are as follows:

Last name / First name / Email / Mailing address / Phone number

The collection and processing of this data serve the following purposes:

Contract management, management of advertiser/buyer space, monitoring of service quality, sending newsletters and SMS.

They are kept by the data controller in reasonable security conditions and deleted after three years of inactivity.

The company may keep certain personal data beyond the deadlines mentioned above in order to fulfill its legal or regulatory obligations.

Article 3.3: Data hosting The data hosting refers to the storage and management of data on servers, whether physical or virtual, owned or rented by a company or organization. Data hosting can be done internally, within the company's premises, or externally, by outsourcing it to a specialized service provider. The choice of data hosting is crucial, as it determines the security, accessibility, and reliability of the data. Companies must ensure that the hosting service meets their specific needs and requirements. In addition, data hosting may be subject to legal and regulatory obligations, especially when it comes to the protection of personal data. Companies must comply with applicable laws and regulations, such as the General Data Protection Regulation (GDPR) in the European Union, which sets out strict rules for the processing and storage of personal data. It is also important to consider the geographical location of the data hosting, as some countries may have different data protection laws and regulations. Companies must assess the risks and benefits of hosting data in different jurisdictions. Furthermore, companies should have appropriate measures in place to protect the data hosted, such as encryption, access controls, and regular backups. They should also have contingency plans in case of data loss or breach, including disaster recovery plans and incident response procedures. Overall, data hosting is a critical aspect of data management, and companies must carefully consider their options to ensure the security, accessibility, and compliance of their data.

The website greenmusicians.com is hosted by:

Google Cloud

8 London Street, 75009 Paris 9th arrondissement

Article 3.4: Transmission of data to third parties: The company may transmit personal data to third parties under certain conditions. This transmission can only take place if it is necessary for the execution of a contract between the company and the data subject, or if the data subject has given their explicit consent. In the event that the company transmits personal data to a third party, it must ensure that the third party provides an adequate level of protection for the data. The company must also inform the data subject of the identity of the third party and the purpose of the data transmission. The company may also be required to transmit personal data to third parties in order to comply with legal obligations or respond to requests from competent authorities. In any case, the company remains responsible for ensuring the security and confidentiality of the data transmitted to third parties. It must also ensure that the transmission is carried out in accordance with applicable data protection laws.

The data can be transmitted to our partners.

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER In accordance with the General Data Protection Regulation (GDPR), the data controller is responsible for determining the purposes and means of the processing of personal data. The data controller is the entity or individual who determines the purposes and means of processing personal data. They are responsible for ensuring that the processing is carried out in compliance with applicable data protection laws. The data protection officer (DPO) is a designated individual responsible for overseeing the data protection strategy and implementation within the organization. The DPO acts as a point of contact for data subjects and supervisory authorities, ensuring compliance with data protection laws and regulations. The data controller must appoint a DPO under certain circumstances, such as when the processing is carried out by a public authority or body, or when the core activities of the data controller or processor involve regular and systematic monitoring of data subjects on a large scale. The DPO's responsibilities include advising the data controller on data protection obligations, monitoring compliance with data protection laws, raising awareness and training staff on data protection issues, and acting as a contact point for data subjects and supervisory authorities. The data controller and DPO work together to ensure that personal data is processed lawfully, transparently, and in accordance with the rights of data subjects. They play a crucial role in safeguarding individuals' privacy and protecting their personal information.

Article 4.1: The data controller

Personal data is collected by Green Musicians, a limited liability company with a capital of 22,000 euros and registration number B 948 243 894.

The data controller can be contacted in the following way:

By mail to the address: Green Musicians - 13 bis Boulevard Babin Chevaye - 44200 Nantes ;

By email: [email protected]

Article 4.2: The data protection officer

The data protection officer of the company or the controller is:

Hubert Chauvin - 13 bis Boulevard Babin Chevaye - 44200 Nantes

ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING 1. The user has the right to be informed about the collection and processing of their personal data. The data controller must provide clear and transparent information regarding the purposes for which the data is collected and processed, the categories of data collected, the recipients of the data, and the duration of data retention. 2. The user has the right to access their personal data. They may request a copy of the data collected about them and information about how it is being processed. 3. The user has the right to rectify any inaccuracies in their personal data. If they find that the data collected about them is incorrect or incomplete, they may request its correction or completion. 4. The user has the right to erasure of their personal data. They may request the deletion of their data if it is no longer necessary for the purposes for which it was collected, if they withdraw their consent, if the data is being processed unlawfully, or if there is a legal obligation to delete the data. 5. The user has the right to restrict the processing of their personal data. They may request the limitation of data processing if they contest the accuracy of the data, if the processing is unlawful, if the data is no longer needed, or if they have objected to the processing. 6. The user has the right to data portability. They may request to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller. 7. The user has the right to object to the processing of their personal data for direct marketing purposes. They may request that their data no longer be used for marketing communication. 8. The user has the right to withdraw their consent at any time. If the processing of their data is based on consent, they may withdraw it without affecting the lawfulness of the processing carried out prior to the withdrawal. 9. The user has the right to lodge a complaint with the relevant data protection authority if they believe that their rights regarding the collection and processing of their personal data have been violated.

Any user concerned about the processing of their personal data can claim the following rights, in accordance with European Regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):

Right of access, rectification, and right to erasure of data (set out respectively in articles 15, 16, and 17 of the GDPR) ;
Right to data portability (Article 20 of the GDPR) ;
Right to restriction (Article 18 of the GDPR) and right to object to data processing (Article 21 of the GDPR) ;
Right not to be subject to a decision based solely on automated processing ;
Right to determine the fate of data after death ;
Right to lodge a complaint with the relevant supervisory authority (Article 77 of the GDPR).

To exercise your rights, please send your letter to Green Musicians or by email to [email protected]

In order for the data controller to process his request, the user may be required to provide certain information such as: his first and last name, email address, as well as his account number, personal space, or subscriber number.

ARTICLE 6: CONDITIONS FOR MODIFYING THE PRIVACY POLICY

The website's publisher greenmusicians.com reserves the right to modify this Policy at any time in order to ensure compliance with applicable law for site users.

Any potential modifications shall not affect purchases previously made on the website, which remain subject to the Policy in force at the time of purchase and as accepted by the user upon validation of the purchase.

The user is invited to read this Policy each time they use our services, without the need for formal notification.

This policy was updated on May 22, 2023.

what are you looking for?