This privacy policy explains the purposes for which personal data are collected and the measures in place to ensure their protection.
Sarah Coleman is committed to protecting personal data and respecting privacy.
In accordance with the General Data Protection Regulation (GDPR), the terms governing the processing of personal data are set out below.
Purpose of data collection
Personal data may be collected and retained for the following purposes:
-handling and responding to incoming messages,
-establishing and managing any commercial relationship that may arise from these exchanges,
-drafting and publishing reviews or comments on the website,
-accounting and administrative management,
-handling requests relating to the exercise of data subjects’ rights.
Categories of data
-contact information,
-attachments.
Data sharing
Personal data are not shared with third parties for commercial purposes. Access to the data is restricted to the people directly involved in their processing.
Personal data collected from clients are hosted in France.
Where the company relies on a service provider located outside the European Union, appropriate measures are implemented to ensure that personal data benefit from an adequate level of protection.
Data retention period
Client data are retained for 5 years following the end of the last commercial relationship with the company, in accordance with legal requirements and business management needs.
Data security
Technical and organizational measures are implemented to restrict access to personal data to authorized people only and to protect the data against unauthorized access, alteration, or disclosure.
Users’ rights
In accordance with the GDPR, the following rights apply:
-right of access,
-right to rectification,
-right to erasure,
-right to restriction of processing,
-right to object,
-right to data portability.
These rights may be exercised by contacting info@sarahcoleman.fr.
Any request relating to the exercise of these rights is processed as promptly as possible and, in any event, within 30 days of receipt.
In certain circumstances, the following measures may be applied:
-requesting proof of identity where there is reasonable doubt, in order to protect data confidentiality,
-extending the response period by up to two months, with notification of the extension and the reasons for it within one month of receipt of the request,
-refusing requests that are manifestly unfounded or excessive, in particular due to their repetitive or systematic nature.
Supervisory authority
For any queries or concerns, the Commission Nationale de l’Informatique et des Libertés may be contacted at the following address:
CNIL
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France