The company LAURIE CHOTARD pays particular attention to protecting the privacy and personal data of visitors to the website www.lauriechotard.fr.
This policy explains what data may be collected, why it is used, how long it is kept, and what rights the individuals concerned have.
It is established in accordance with the General Data Protection Regulation (“GDPR”) and applicable French law.
1. Data controller
The controller of the personal data collected through the website is:
LAURIE CHOTARD
Simplified joint-stock company (société par actions simplifiée) with share capital of €1,000
Registered office: 47 Passage Mark Twain, 73100 Aix-les-Bains, France
SIREN: 898 669 890
SIRET: 898 669 890 00029
Registration: 898 669 890 RCS Chambéry (Chambéry Trade and Companies Register)
Email: lauriechotard@gmail.com
Website: www.lauriechotard.fr
The company is represented by Laurie Chotard, acting as President. The identification details and the address of the registered office correspond to the data listed in the French business directory (Annuaire des entreprises).
No data protection officer has been appointed. Any question relating to data protection may be sent to:
2. Data that may be collected
Data provided through the contact form
When you use the contact form, the following information may be collected:
- your first and last name;
- your email address;
- the subject of your request;
- the content of your message;
- information relating to your project, your needs, or your activity;
- any other information you voluntarily choose to provide.
You are advised not to provide sensitive data or information that would not be necessary to process your request.
Data provided by email
When you contact LAURIE CHOTARD directly by email, the data contained in your message, your contact details, your signature, and any attachments may be kept in order to respond to your request and follow up on the exchanges.
Client and project data
When you request a quotation or entrust an assignment to LAURIE CHOTARD, the following data may also be processed:
- your personal or professional contact details;
- your company name;
- your postal address;
- information relating to the project;
- quotations, contracts, and correspondence;
- billing and payment data;
- the documents and content needed to carry out the service.
Technical data
When you browse the website, certain technical data may be recorded automatically, in particular:
- the IP address;
- the date and time of connection;
- the pages viewed;
- the browser type;
- the operating system;
- the device type;
- the address of the website or page through which the site was accessed;
- information relating to website errors and security.
This information is used mainly to enable the website to function, ensure its security, and identify any malfunctions.
Cookie-related data
The website may also record your choices regarding cookies and other trackers. The cookies actually used are presented in the consent manager available on the website.
3. Source of the data
Personal data is mainly collected directly from you when you:
- complete the contact form;
- send an email;
- request a quotation;
- book an appointment;
- correspond with LAURIE CHOTARD about a project;
- accept a quotation or conclude a contract;
- browse the website and manage your cookie preferences.
Certain technical data is collected automatically by the hosting server or by the tools needed for the website to function.
4. Purposes and legal bases of the processing
The regulations require, in particular, that individuals be informed of the identity of the data controller, the purposes, the legal bases, the retention periods, the recipients, and their rights.
Responding to contact requests
The data provided through the form or by email is used to:
- take note of your request;
- answer your questions;
- understand your project;
- arrange a discussion or an appointment;
- prepare a commercial proposal or a quotation.
Where your request concerns a possible service, the processing is based on steps taken at your request prior to entering into a contract.
For a general request with no direct link to a future contract, the processing is based on LAURIE CHOTARD’s legitimate interest in responding to the people who contact it.
Preparing quotations and managing the contractual relationship
The data needed to prepare quotations, organise assignments, communicate with clients, and carry out the services is processed on the basis of pre-contractual steps or the performance of a contract.
Managing billing and accounting
The data appearing on quotations, invoices, supporting documents, and accounting records is processed in order to comply with the legal, tax, and accounting obligations applicable to the company.
Ensuring the security and operation of the website
Technical data and connection logs may be used in order to:
- ensure the proper functioning of the website;
- prevent unauthorised access;
- detect errors and attempted attacks;
- combat spam;
- protect the website and the data it contains.
This processing is based on LAURIE CHOTARD’s legitimate interest in securing its website and IT systems.
Managing optional cookies
Where cookies or services that are not strictly necessary are used, they are placed on the basis of your consent.
You can withdraw or change this consent at any time via the website’s cookie manager.
Marketing communications
The contact details collected through the contact form are not automatically used to send you a newsletter or regular marketing communications.
Such communications may be sent only where the regulations permit and, where required, after obtaining your consent.
You can object to any direct marketing at any time, without having to give a reason.
5. Mandatory or optional nature of the data
The fields marked with an asterisk in the form are mandatory in order to process your request.
If you do not provide this information, LAURIE CHOTARD may be unable to respond to you, understand your project, or prepare a suitable proposal.
The other fields are optional.
6. Recipients of the data
Personal data is accessible only to those who need to be aware of it in the course of their duties.
It may, in particular, be shared with:
- Laurie Chotard;
- authorised collaborators or service providers involved in carrying out an assignment;
- the website host;
- the email service provider;
- the providers responsible for the maintenance or security of the website;
- accounting, administrative, or legal service providers;
- administrative or judicial authorities where a legal obligation requires it.
Technical service providers are authorised to process the data only to the extent necessary to perform their services and in accordance with their contractual and regulatory obligations.
Personal data is neither sold nor rented to third parties.
7. Website hosting and form records
The website is hosted by:
Infomaniak Network SA
Rue Eugène-Marziano 25 1227 Les Acacias,
Geneva
Switzerland
The data provided to the website, in particular that recorded in the WordPress administration area or in the form module, may be stored on the host’s servers.
Infomaniak states that the data entrusted to it is stored and hosted in data centres located in Switzerland.
Although Switzerland is outside the European Union and the European Economic Area, it benefits from an adequacy decision recognised by the European Commission. Transfers to Switzerland may therefore be carried out without any additional specific safeguards.
8. Use of Gmail
Messages sent to lauriechotard@gmail.com, including those sent automatically by the contact form, are processed using the Gmail service provided by Google.
They may contain your name, your email address, the content of your request, and any attachments you provide.
Google states that it has servers in various countries and indicates that certain information may be processed outside the user’s country of residence, in compliance with the legal mechanisms applicable to data transfers.
For users of its services located in the European Economic Area or Switzerland, Google states that the entity primarily responsible for the processing is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
9. Transfers outside the European Economic Area
The hosting of the website in Switzerland is covered by the adequacy decision applicable to that country.
The use of Gmail or certain external technical services may, however, involve the processing of data on infrastructure located in several countries.
Where data is transferred to a country that does not benefit from an adequacy decision, the provider concerned must use a mechanism recognised by the regulations, such as standard contractual clauses or another applicable legal framework.
10. Retention periods
Data is kept only for as long as necessary to achieve the purposes for which it was collected.
Contact requests and prospects
Contact requests are kept for the time needed to process them.
Where the request may lead to a commercial relationship, the prospect’s data may be kept for a maximum of three years from the prospect’s last contact. This period corresponds to the CNIL’s recommendation for prospecting data.
Client data
The information needed to carry out the service is kept for the entire duration of the contractual relationship.
It may then be archived for the period necessary to establish, exercise, or defend legal claims.
Quotations, contracts, and business correspondence
Accepted quotations, contracts, and business correspondence may be kept for five years.
Invoices and accounting documents
Invoices and accounting records are kept for ten years, in accordance with the obligations applicable to businesses.
Technical data and security logs
Technical data is kept for the period strictly necessary for the operation, maintenance, and security of the website, subject to the periods applied by the host.
Cookie choices
The choices expressed regarding the acceptance or refusal of cookies may be kept for around six months, a period the CNIL considers good practice.
Upon expiry of these periods, the data is deleted, anonymised, or archived where a legal obligation justifies its retention.
11. Cookies and other trackers
A cookie is a small file saved on the user’s device when visiting a website.
Strictly necessary cookies
Certain cookies are essential to the operation of the website, its security, the display of pages, or the saving of your privacy preferences.
These cookies may be used without consent where they are strictly necessary to provide the service requested.
Audience measurement cookies
The website may use a tool to measure its traffic and better understand how visitors view its pages.
Where an audience measurement tool does not meet the exemption conditions provided for by the regulations, it may be activated only after your consent.
Content from third-party services
Certain pages may embed external content, for example:
- videos;
- interactive maps;
- posts from social media;
- fonts or resources loaded from an external service.
These services may collect technical data or place cookies. Where consent is required, the content concerned must remain blocked until you accept it.
Cookies that are not strictly necessary must not be placed or read before the user’s consent. Refusal must also be as simple as acceptance, and consent must be able to be withdrawn at any time.
You can accept, refuse, or change your choices at any time using the “Manage my cookies” link on the website.
12. Data security
LAURIE CHOTARD implements reasonable technical and organisational measures intended to protect personal data against:
- unauthorised access;
- loss;
- disclosure;
- alteration;
- destruction;
- misuse.
These measures may include, in particular, securing administrative access, using an HTTPS connection, keeping the website and its extensions up to date, limiting authorised persons, and the protection mechanisms offered by the host.
However, no transmission over the internet and no storage system can guarantee absolute security.
In the event of an incident likely to create a risk to the rights and freedoms of individuals, the measures provided for by the applicable regulations will be implemented.
13. Your rights
Depending on the nature of the processing and its legal basis, you may exercise the following rights:
- the right of access to the data held about you;
- the right to have inaccurate or incomplete data rectified;
- the right to request the erasure of your data;
- the right to request the temporary restriction of processing;
- the right to object to certain processing;
- the right to data portability, where the conditions are met;
- the right to withdraw your consent at any time;
- the right to set instructions regarding the fate of your data after your death.
The rights of access, rectification, objection, erasure, portability, and restriction are among the rights granted to individuals by the GDPR.
Withdrawing consent does not affect the lawfulness of processing carried out before that withdrawal.
Certain requests may be refused where the retention of the data is necessary to comply with a legal obligation, to perform a contract, or to defend legal claims.
14. Exercising your rights
To exercise your rights, you may send your request to:
By email: lauriechotard@gmail.com
By post:
LAURIE CHOTARD
47 Passage Mark Twain
73100 Aix-les-Bains
France
The request must specify the right you wish to exercise and contain the information needed to identify you and locate the data concerned.
Proof of identity will be requested only in the event of reasonable doubt about the identity of the person making the request.
A response should, in principle, be provided within one month. In the event of a complex request or numerous requests, this period may be extended under the conditions provided for by the GDPR, subject to informing the individual concerned.
15. Complaint to the CNIL
If, after contacting LAURIE CHOTARD, you consider that your rights are not being respected, you may lodge a complaint with the:
Commission nationale de l’informatique et des libertés — CNIL (the French data protection authority)
3 place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
The right to lodge a complaint with the CNIL is among the information that must be communicated to the individuals concerned.
16. No automated decision-making
The data collected by the website is not used to make a decision producing legal effects, or significantly affecting a person, on the sole basis of automated processing.
No automated profiling is carried out on the basis of the requests received through the contact form.
17. Data concerning minors
The website and the services presented are not specifically aimed at minors.
A minor must not provide personal data through the website without the authorisation of their legal representative where such authorisation is required.
18. Links to third-party websites
The website may contain links to websites or services managed by third parties.
LAURIE CHOTARD does not control their processing of personal data. Users are invited to consult the privacy policies of these services before providing them with any information.
19. Amendment of the privacy policy
This policy may be amended to take account of:
- changes to the website;
- the addition or removal of a service;
- a change in the tools used;
- changes in LAURIE CHOTARD’s activity;
- a legislative or regulatory change.
The applicable version is the one published on the website on the date of consultation.