The controller may be required to carry out processing that is not yet provided for in this Policy. In this case, he will contact the user before reusing his personal data, in order to inform him of the changes and give him the possibility, if necessary, of refusing this reuse.

Data recipients and disclosure to third parties

Internal recipients:

The recipients of the data are only the personnel authorized by the data controller, in charge of security and commercial relations and development.

External recipients:



In the event that the data is disclosed to third parties for the purposes of direct marketing or commercial prospecting, the user will be informed beforehand so that he can choose to accept the transfer of his data to third parties.

As soon as this transfer is based on the user's consent, the latter may, at any time, withdraw his consent for this specific purpose.

The data controller complies with the legal and regulatory provisions in force and will in all cases ensure that its partners, employees, subcontractors or other third parties having access to this personal data comply with this Policy.

The data controller discloses the user's personal data in the event that a law, legal procedure or order from a public authority makes such disclosure necessary.

Application of rights

For all the rights listed below, the data controller reserves the right to verify the identity of the user for the application of the rights listed below.

This request for additional information will be made within one month from the introduction of the request by the user.

Data Access and Copy

The user can obtain the written communication or a copy of the personal data concerning him that has been collected free of charge.

The controller may require payment of a reasonable fee based on administrative costs for any additional copies requested by the user.

When the user submits this request electronically, the information is provided in a commonly used electronic form, unless the user requests otherwise.

Unless otherwise provided by the general data protection regulations, the copy of his data will be communicated to the user no later than one month after receipt of the request.

Right to withdraw consent

For all processing based on consent, in this case cookies, the person concerned has the right to withdraw their consent at any time, in particular directly at the bottom of the email.

Right of rectification

The user can obtain free of charge, as soon as possible and at the latest within one month, the rectification of his personal data which would be inaccurate, incomplete or irrelevant, as well as complete them if they prove to be incomplete. .

Unless otherwise provided by the general data protection regulations, the request for application of the right to rectification is processed within one month of the introduction thereof.

Right to object to processing

The user may at any time, for reasons relating to his particular situation, object free of charge to the processing of his personal data, except when:

The processing is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller;

Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (in particular where the data subject is a child).

The data controller may refuse to implement the user's right of opposition when he establishes the existence of compelling and legitimate reasons justifying the processing, which take precedence over the interests or the rights and freedoms of the user. , or for the establishment, exercise or defense of legal claims. In the event of a dispute, the user may lodge an appeal in accordance with the point "complaints and complaints" of this Policy.

The user may also, at any time, object, without justification and free of charge, to the processing of personal data concerning him when his data is collected for commercial prospecting purposes (including profiling).

When personal data is processed for scientific or historical research purposes or for statistical purposes in accordance with the General Data Protection Regulation, the user has the right to object, for reasons relating to his particular situation. , to the processing of personal data concerning him, unless the processing is necessary for the performance of a task in the public interest.

Unless otherwise provided by the general data protection regulations, the controller is required to respond to the user's request as soon as possible and at the latest within one month and to justify his response when he intends not to comply with such a request.

Right to restriction of processing

The user can obtain the limitation of the processing of his personal data in the cases listed below:

When the user disputes the accuracy of data and only for the time that the controller can control it;

When the processing is unlawful and the user prefers the limitation of the processing to the erasure;

When, although it is no longer necessary for the pursuit of the purposes of the processing, the user needs it for the recognition, exercise or defense of his rights in court;

During the time necessary to examine the merits of a request for opposition submitted by the user, in other words the time that the controller carries out the verification of the balance of interests between the legitimate interests of the controller and those of the user.

The controller will inform the user when the restriction of processing is lifted.

Right to erasure (right to be forgotten)

The user can obtain the erasure of personal data concerning him, when one of the following reasons applies:

The data is no longer necessary for the purposes of the processing;

The user has withdrawn their consent for their data to be processed and there is no other legal basis for the processing;

The user objects to the processing and there is no overriding legitimate reason for the processing and/or the user exercises his specific right of opposition in relation to direct marketing (including profiling);

The personal data has been unlawfully processed;

The personal data must be erased to comply with a legal obligation (under Union law or Member State law) to which the controller is subject;

The personal data has been collected in the context of the offer of information society services aimed at children.

However, the erasure of data is not applicable in the following cases:

When the processing is necessary for the exercise of the right to freedom of expression and information;

When the processing is necessary to comply with a legal obligation which requires the processing provided for by Union law or by the law of the Member State to which the controller is subject, or to perform a task in the public interest or falling the exercise of public authority vested in the person responsible;

When the processing is necessary for reasons of public interest in the field of public health;

When the processing is necessary for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes and insofar as the right to erasure is likely to render impossible or seriously compromise the achievement of the purposes of the processing in question;

When processing is necessary for the establishment, exercise or defense of legal claims.

Unless otherwise provided by the general data protection regulations, the controller is required to respond to the user's request as soon as possible and at the latest within one month and to justify his response when he intends not to comply with such a request.

Right to “data portability”

The user may at any time request to receive his personal data free of charge in a structured, commonly used and machine-readable format, in particular with a view to transmitting them to another controller, when:

Data processing is carried out using automated methods; and when

The processing is based on the user's consent or on a contract concluded between the user and the controller.

Under the same conditions and according to the same methods, the user has the right to obtain from the controller that the personal data concerning him be transmitted directly to another controller of the processing of personal data, provided that this is technically possible.

The right to data portability does not apply to processing that is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller.

Security

The data controller implements the appropriate technical and organizational measures to guarantee a level of security of the processing and of the data collected with regard to the risks presented by the processing and the nature of the data to be protected, adapted to the risk. It takes into account the state of knowledge, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks for the rights and freedoms of users.

The data controller has implemented appropriate security measures to protect and prevent the loss, misuse or alteration of the information received on the website.

In the event that the personal data that the controller controls should be compromised, he will act quickly to identify the cause of this violation and take the appropriate remedial measures.

The data controller informs the user of this incident if the law obliges him to do so.

Claim and Complaint

If the user wishes to react to one of the practices described in this Policy, it is advisable to contact the data controller directly.

The user can also lodge a complaint with his national supervisory authority, you can send a complaint online to the CNIL or by post:

National Commission for Computing and Liberties (CNIL)

3 Place de Fontenoy

TSA 80715

75334 Paris cedex 07

Tel: 33 1 53 73 22 22

In addition, the user has the possibility of lodging a complaint before the competent national courts.

Contact data

For any questions and/or complaints relating to this Policy, the user may contact the data controller at the following email address: ceeja@ceeja-japon.com, or by post at the address:

EUROPEAN CENTER FOR JAPANESE STUDIES IN ALSACE

8 route d'Ammerschwihr

68240 KIENTZHEIM

Modification

The controller reserves the right to modify the provisions of this Policy at any time. The changes will be published directly on the controller's website.

Applicable law and competent jurisdiction

This Policy is governed by the national law of the main place of establishment of the controller.

Any dispute relating to the interpretation or execution of this Policy will be subject to the jurisdictions of this national law.

This version of the Policy is dated 01/11/2020.