The purpose of this Privacy Policy is to inform Visitors and Users of the Website about how their personal data is collected, used, stored and protected.
The Publisher undertakes to process Users’ personal data in compliance with applicable regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978, as amended, relating to information technology, files and civil liberties.
1. Data Controller
The data controller responsible for the personal data collected on the Website is L’Agence du court métrage, whose registered office is located at 77 rue des Cévennes, 75015 Paris, France.
The individuals concerned by the processing of personal data described in this Privacy Policy are Visitors and Users.
For any questions relating to the protection of personal data, you may contact us at the following address: info@agencecm.com.
2. Processing of Personal Data
2.1. Data Collected
In connection with the use of the Website, the Publisher may collect the following data:
- Identification data: surname, first name
- Contact details: email address, telephone number, postal address
- User Account data: username, encrypted password, account preferences
- Kinétoscope subscription data: subscription plan, subscription date, subscription status
- Payment data: information required for payment processing and invoicing. Banking details are processed directly by the payment service provider Stripe and are not retained by the Publisher
- Service usage data derived from cookies and other tracking technologies (subject to the choices made by the User): viewing history, content viewed, selections and interactions with the platform
- Technical connection and browsing data: IP address, browser type, operating system, technical identifiers and connection data
2.2. Purposes of Processing and Legal Basis
The Publisher collects and processes the personal data of Visitors and Users for the following purposes:
- Provision and improvement of the Service
- Creation and management of the Account
- Communication with Users and Visitors in connection with the Services, including providing advice to Users and communicating information relating to the Publisher and all of its products by email, letter or any other appropriate means
- Sending Newsletters
The processing of personal data carried out by the Publisher is based on the following legal grounds:
- Performance of the contract entered into with the User for the provision of the Services
- Compliance with the legal and regulatory obligations applicable to the Publisher
- The Publisher’s legitimate interest in ensuring the security of the Website, improving the Services and preventing fraud
- The User’s consent, where required
2.3. Data Retention Period
Users’ personal data is retained for the entire period during which the Account is used and the Services are provided. Upon closure of the Account, such data is deleted or anonymised within an appropriate period, subject to temporary retention where necessary to comply with legal, tax or accounting obligations.
2.4. Data Sharing
The personal data collected is strictly confidential and may only be accessed by authorised persons within L’Agence du court métrage, within the scope of their respective duties.
It may be disclosed to service providers and processors necessary for the provision of the Services (hosting, maintenance, payment processing, communications, support, etc.). These service providers process personal data in accordance with applicable regulations. Where data is transferred outside the European Union, appropriate safeguards are implemented in accordance with the GDPR.
The Publisher implements the necessary technical and organisational measures to ensure the security of personal data.
The Publisher will notify any personal data breach to the French Data Protection Authority (Commission nationale de l’informatique et des libertés – “CNIL”) and, where required, to the individuals concerned.
2.5. Users’ Rights
The Publisher undertakes to respect the rights of Visitors and Users in relation to their personal data, in accordance with Articles 15 to 23 of the GDPR.
Visitors and Users have, in particular, the following rights:
- Right of access and to obtain a copy of their personal data: to obtain confirmation as to whether personal data concerning them is being processed and to receive a copy of such data, together with information relating to such processing
- Right to rectification: to correct or request the correction of inaccurate, incomplete or outdated personal data concerning them
- Right to erasure: to delete or request the deletion of their personal data, subject to the limitations provided for by applicable regulations
- Right to restriction of processing: to request the temporary suspension of the use of certain data in the circumstances provided for by applicable regulations
- Right to object, restrict processing and withdraw consent: to object to the processing of personal data or request that such processing be restricted. Visitors or Users may also withdraw their consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to such withdrawal
- Right to data portability: to receive the personal data provided to the Publisher in a structured, commonly used and machine-readable format, or to request that such data be transmitted directly to another data controller, where technically feasible
Users may exercise these rights at any time by logging into their personal account or by submitting a request to the Publisher at the following address: info@agencecm.com.
Visitors and Users also have the right to lodge a complaint with the CNIL if they consider that their rights have not been respected.