Privacy Policy
This Privacy Policy describes how Mora Mora Life - 30 avenue Carnot 91300 Massy, France ("the Company" or "we" or "our"), as controller, processes personal data and other information of users ("you" or "your"), in particular within the meaning of the General Data Protection Regulation ("GDPR") when using the website [ https://www.moramora.life ] ("Website").
1. Categories of personal data, purposes of processing, legal basis and source.
1.1. Personal data you actively provide:
If you sign up for the newsletter and consent to receiving newsletters and processing your email address for this purpose, you will be asked to provide your email address. We will use your email address to send you regular newsletters. Providing your email address is voluntary. However, if you do not provide your email address, you will not receive newsletters. The legal basis for processing your personal data for sending newsletters is consent (Art. 6 (1) lit. a GDPR). You can withdraw your consent at any time in the customer area or by clicking on the link to this effect in the newsletter.
We do not perform automated decision making in the context of our website.
1.2. Other information collected on a passive basis:
In addition to the personal data that you actively provide, the website may automatically collect, process and store certain information on the basis of a pseudonym from you:
-
Device and Usage Information - which may include (i) information specific to the device used to access the website (including, but not limited to, model, operating system, IP address, language, medium and similar information) and (ii) information about the use of features, functions or notifications on the device, in order to recognize you and analyze trends.
-
Analytics relating to the Website - such as how often a user uses the Website, aggregate usage, performance data. We use website analytics to help us better understand the functionality and use of our website.
The legal basis for this is our legitimate interests (Art. 6 (1) lit. f of the GDPR) which are as follows: to monitor and maintain the performance of the Website and to analyze trends, use and activities in relationship with our Website.
2. Recipients
2.1. Transfer to service providers
The Company may engage external service providers who act as the Company's data manager to provide certain services to the Company such as the website and marketing and IT service providers. When you provide such services, external service providers may access and / or process your personal data.
These external service providers will be subject to a contractual obligation to implement appropriate technical and organizational security measures to protect personal data and to process personal data only as instructed by us.
2.2. Other recipients
Some of our colleagues who administer the website and provide IT services may be employees of our company. When administering the website, our colleagues may have access to and / or process your personal data. The respective transfer of your personal data is based on our legitimate interests. Our legitimate interests are the transmission of personal data within the Company for administrative and internal support purposes. Access is limited to colleagues who need to know this information.
The Company may also transfer your personal data to law enforcement agencies, government authorities, legal advisers and external consultants in accordance with applicable data protection law. The legal basis for such processing is compliance with a legal obligation to which the Company is subject, or legitimate interests, such as the exercise or defense of legal rights.
2.3. International transfers of personal data
The personal data that we collect or receive about you may be transferred and processed by recipients located inside or outside the European Economic Area ("EEA") and who do not ensure a level adequate data protection. The countries recognized to ensure an adequate level of data protection from the point of view of Community law are Andorra, Argentina, Canada, Switzerland, the Faroe Islands, Guernsey, the State of Israel, the Isle of Man , Jersey, New Zealand and the Eastern Republic of Uruguay. Recipients in the US may be partially certified under the EU-US Privacy Shield and, therefore, be considered to provide an adequate level of data protection from a privacy law perspective. the EU. Insofar as your personal data is transferred to countries which do not ensure an adequate level of data protection from the point of view of Community law, we will base the respective transfer on appropriate safeguards, such as standard privacy clauses. data adopted by the European Commission. You can request a copy of these appropriate safeguards by contacting us as outlined in Section 5. Access is limited to recipients who need to know this information.
3. What are your rights and how can you assert your rights?
If you have declared your consent for any personal data processing activity, you can withdraw this consent at any time with future effect. Such withdrawal will not affect the legality of the processing prior to the withdrawal of consent.
In accordance with applicable data protection legislation, you have the right to: request access to your personal data; request the rectification of your personal data; request the deletion of your personal data; request the restriction of the processing of your personal data; request data portability and oppose the processing of your personal data. Please note that the aforementioned rights may be limited under applicable national data protection law. For more information on these rights, please see the Appendix below “Your Rights”. We will get back to you within 30 days. If necessary, this period can be extended by 2 months, taking into account the complexity and number of requests. We will then inform you of this extension and the reasons for the postponement within 1 month of receipt of the request.
You also have the right to lodge a complaint with the competent data protection supervisory authority. To exercise your rights, please contact us as set out in section 7 below.
4. How long do we keep your personal data?
Your personal data will be kept for as long as necessary to provide you with the services requested. When the Company no longer needs to use your personal data to comply with contractual or legal obligations, we remove it from our systems and records and / or take steps to make it anonymous so that you can no longer be identified. , unless we need to keep your information, including personal data, to comply with legal or regulatory obligations to which the Company] is subject, for example statutory retention periods which may result from the length of time permitted by applicable laws and which usually contain retention periods of 6 to 10 years, or if we need them to preserve evidence within the limitation periods, which are usually three years but can be up to thirty years.
5. Google reCAPTCHA
As part of our online forms, we use the Google reCAPTCHA service, which is offered by Google, Inc., 1600 Amphitheater Parkway, Mountainview, CA 94043, USA (“Google”). Google reCAPTCHA allows you to check whether the data entered in online forms is entered by a person or an automatic program, script or any other such source. For this, Google reCAPTCHA analyzes the behavior of the person entering the data using various functions. This analysis begins automatically as soon as the corresponding web page is accessed. As part of this analysis, Google reCAPTCHA evaluates various information (IP address, identification data of the browser used, browser settings, browser plug-ins, URL of the referring website, time spent on the website, movements of mouse, behavior in terms of inputting data such as input speed, sequence and selection of inputs, etc., CSS and JavaScript languages on the website and Google cookies, for example). The data collected during this analysis is sent to a Google server in the United States, where it is stored and evaluated. No personal data entered in the online forms is read or recorded.
Google adheres to the EU-US Privacy Shield, information you can find here: https://policies.google.com/privacy/frameworks?hl=fr .
Further information on the Google reCAPTCHA service and Google's privacy policy can be found at https://www.google.com/recaptcha/intro/android.html and at
https://www.google.com/intl/de/policies/privacy/ . The processing of personal data by Google reCAPTCHA is based on Art.6 para. (1) lit f) GDPR. Our goal and legitimate interest is to protect our online forms against any attempt to improper automatic use, espionage and spam.
6. Contact us
If you have any questions or concerns about this privacy policy, contact us as follows:
Mora Mora Life - 30 avenue Carnot 91300 Massy, France or by email: contact@moramora.life
7. Supervisory authority
You can contact the supervisory authority in the event of a problem, as follows:
National Commission for Information Technology and Freedoms (CNIL)
3 place de Fontenoy
TSA 80715
75334 Paris Cedex 07
+33 (0) 1 53 73 22 22
https://www.cnil.fr/fr/plaintes/
Annex - Your rights
1. Right of access
You have the right to obtain from us confirmation of whether or not your personal data has been processed and, where applicable, to request access to your personal data. The access information includes, among other things, the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipients to whom the personal data have been or will be communicated. However, this is not an absolute right and the interests of others may limit your right of access. The right of access is limited. The right of access does not apply, for example, if the data (a) has been recorded only because it cannot be erased due to legal or regulatory provisions on retention, or (b) is not used only for the purposes of data protection control or data backup, and the provision of information would require a disproportionate effort, and appropriate technical and organizational measures make processing for other purposes impossible.
You may have the right to obtain a copy of the personal data being processed. For other copies requested by you, we may charge a reasonable fee based on administrative costs.
2. Right to rectification
You may have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by providing an additional declaration.
3. Right to erasure (“right to be forgotten”)
In certain circumstances, you may have the right to obtain from us the deletion of personal data relating to you and we may be obliged to delete such personal data. This right to deletion does not apply, for example, if, in the case of non-automated processing, deletion was impossible or would involve a disproportionate effort due to the specific storage method and if your interest in deletion may be considered minimal. In such a case, you may have the right to restrict the processing.
4. Right to restriction of processing
In certain circumstances, you may have the right to obtain from us a restriction of the processing of your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.
5. Right to data portability
In certain circumstances, you may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit this data to another entity without hindrance. on our side.
6. Right to object
In certain circumstances, you may have the right to object at any time, for reasons related to your particular situation, or where personal data is being processed for direct marketing purposes to the processing of your personal data by us and we may be required to no longer process your personal data.
In addition, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case, your personal data will no longer be processed for such purposes by us.