PRIVACY POLICY
Personal data - Website management
Activities relating to the "above.fun" website involve the processing of personal data.
What does the personal data use policy cover?
The present policy informs you of the characteristics of this processing and of your rights regarding your personal data.
This privacy policy has been drafted in accordance with Law no. 78-17 of January 6, 1978 (known as the "Loi informatique et libertés" or "LIL") and the General Regulation on the Protection of Personal Data ("RGDP") no. 2016/679.
Who is responsible for this policy?
The data controller is "Above", represented by its legal representative "Jules Gijs Perrin".
The contact details of the data controller are as follows: "1320 chemin de Marfay, 38380, Miribel les Echelles".
The contact can be reached on the following contact form: Contact
Who is this policy aimed at?
This policy is intended for users of the site: Internet users browsing the site.
It also covers :
-newsletter subscribers
-candidates who apply on the site (online recruitment)
-people who contact us using the site's contact form
-people who post opinions and comments on our site
Purposes (what data is collected for)
The purpose of the processing is to manage the website.
This treatment allows :
-newsletter subscription management
-online application management (online recruitment)
-managing inquiries via the contact form
-management of notices and comments published on the site
Legal basis for processing: what gives us the right to process data
The legal bases for processing are as follows:
-to manage newsletter subscriptions, the legal basis is the subscriber's consent
-for the management of online applications (online recruitment), the legal basis is the consent of applicants
for the management of requests for information via the contact form, the legal basis is the legitimate interest (to enable online communication) or the execution of pre-contractual measures (production of quotations at the request of individuals)
-for the management of opinions and comments published on the site, the legal basis is the consent of the persons concerned
What safety measures are in place?
The data controller implements appropriate technical and organizational measures to guarantee a level of security appropriate to the risk.
The controller shall take steps to ensure that any natural person acting under the authority of the controller or the processor, who has access to personal data, does not process them unless instructed to do so by the controller, unless obliged to do so.
Whether or not data is transferred to a country outside the European Union, and associated guarantees
The data controller does not transfer any personal data outside the European Union.
Fate of personal data after death - Right of access, rectification, deletion and portability of data
The person concerned by a processing operation can define directives concerning the conservation, deletion and communication of his or her personal data after his or her death. These directives may be general or specific.
Data subjects also have the right to access, object to, rectify, delete and, under certain conditions, port their personal data. The data subject has the right to withdraw consent at any time if consent is the legal basis for processing.
The request must indicate the first and last name, e-mail or postal address of the person concerned, and must be signed and accompanied by valid proof of identity.
You can exercise these rights by completing this form
Data retention period
Data is kept for no longer than is necessary for the purposes for which it was recorded (principle of minimization of processing).
Maximum shelf lives are as follows:
-to manage newsletter subscriptions: the e-mail address is kept for as long as the person concerned does not unsubscribe
-for online application management (online recruitment): 2 years for unsuccessful applications
-for the management of requests for information via the contact form: 3 years from the date of the request
-for the management of notices and comments published on the site: 5 years from publication
Processed data
The data controller processes the following categories of data:
-Civil status, identity, identification data, images (surname, first name, address, photograph, date and place of birth, etc.)
-Connection data (IP addresses, logs, terminal identifiers, connection identifiers, timestamp information, etc.)
-Professional life (CV, employment status, education, training, awards, diplomas, etc.)
Whether data collection is mandatory or optional
The data collected is mandatory in order to achieve the purposes of processing, except in certain cases:
Job/internship form: website/ebook + resume + cover letter
Data sources
The data is transmitted directly by the data subject.
Data recipients
The personal data collected is reserved for the use of the data controller. No personal data is transferred by the data controller to third parties.