Introduction
This privacy policy explains how the LIGUE de l’enseignement Nouvelle-Aquitaine (hereinafter referred to as “we,” “our,” or “us”) collects, uses, protects, and shares your personal data in connection with the use of our website and services. We are committed to respecting the privacy and security of your personal data in accordance with the European Union’s General Data Protection Regulation (GDPR).

1. Data Controller
The information collected is processed by the LIGUE de l’enseignement Nouvelle-Aquitaine, located at 33 rue Saint-Denis, 86000 Poitiers, as the data controller.
The Data Protection Officer (DPO) can be reached at the following email address: dpo@liguenouvelleaquitaine.org.

2. Data Collected
We collect the following data through our contact and training registration forms:
• First Name
• Last Name
• Email Address
• Subject of the request
• Message
• Statistical Data
• Pages viewed
• Sessions
• Visitors
• Bounce rate
• Devices used

The collected data is analyzed using Burst Statistics to extract relevant insights.
We do not use contact forms, but this data is collected automatically as you browse our site.
We do not collect sensitive data, such as information about your health, religious beliefs, or political opinions. However, if such data were to be collected in the future, explicit consent would be required.

3. Purposes of Data Processing
The data collected is used for the following purposes:
• Responding to your requests via the contact form.
• Analyzing and improving the performance of the site: We use Burst Statistics to gather statistical information about browsing on our site. This data helps us understand how our site is used, identify the most visited pages, improve the user experience, and optimize the content of our website.

The processing of data is based on your consent for the contact form and the execution of a contract for registration in our training courses.

4. Legal Basis for Processing
The collection and processing of your personal data are based on:
• Your consent for the processing of your data in connection with the contact form.

5. Mandatory or Optional Data
The collection of certain information (first name, last name, email, subject, message) is mandatory to process your request. Without this data, we will not be able to respond to your requests or complete your registration for training.

6. Recipients of Personal Data
The personal data collected is only accessible to our administrative services and is not shared with third parties, except where required by law.

7. Data Retention Period
• The data collected through the contact form is retained for the duration necessary to process your request, then deleted within six months.

8. Data Security
We implement appropriate technical and organizational measures to ensure the security of your personal data and prevent its loss, misuse, or unauthorized access.

9. Your Rights Regarding Data Protection
Under the GDPR, you have the following rights:
Any individual concerned by the processing of their personal data can exercise the following rights under the European Regulation 2016/679 and the French Data Protection Act (Law 78-17 of January 6, 1978):
• Right of access, rectification, and erasure of data (as per Articles 15, 16, and 17 of the GDPR);
• Right to data portability (Article 20 of the GDPR);
• Right to restrict processing (Article 18 of the GDPR) and the right to object to data processing (Article 21 of the GDPR);
• Right not to be subject to a decision based solely on automated processing;
• Right to determine the fate of data after death;
• Right to file a complaint with the competent supervisory authority (Article 77 of the GDPR).

To exercise your rights, please send your request to Irfrep, 33 rue Saint-Denis, 86000 POITIERS, or by email to dpo@liguenouvelleaquitaine.org. In order for the data controller to comply with your request, you may be required to provide certain information such as your full name, email address, and account, personal space, or subscriber number.
You also have the right to file a complaint with the CNIL (French Data Protection Authority) at the following website: www.cnil.fr.

10. Data Transfers
We wish to clarify that the data collected via Burst Statistics is not transferred outside the European Union. The information is exclusively stored in our own WordPress database, and Burst Statistics has no access to it. Additionally, we minimize the collection of data and offer features that allow for the archiving or automatic deletion of old data to ensure your information remains under your control.

Our hosting provider, OVH, guarantees that your data is stored exclusively on servers located in Europe. They comply with GDPR regulations and do not transfer data outside the European Union, thus ensuring the security and confidentiality of your information. You can be assured that your data remains under European control and is not shared with entities in other regions.

11. Intellectual Property and Image Rights
The content of the site, including texts, images, logos, and other visual or audio elements, is protected by intellectual property rights. Any unauthorized use of these elements is prohibited. Furthermore, any photograph or image used on this site may not be reproduced without the prior consent of the individuals concerned.

12. Revision of the Privacy Policy
This privacy policy will be reviewed at least once a year. Any substantial changes will be notified to users via communication channels such as an update on the website or email notification.

13. Cookie Policy
This site uses cookies and similar technologies to improve your user experience and collect statistical information on how our site is used. A cookie is a small text file that is stored on your device when you visit a site.
You can manage your cookie preferences using the consent banner.
For more information on the use of cookies on our site, please refer to our Cookie Policy.

14. Data Hosting
The website www.youtransition.eu is hosted by:
OVH SAS
• Registered office address: 2 rue Kellermann, 59100 Roubaix, France
• Phone: 09 72 10 10 07 (non-premium rate call)
• Website: https://www.ovh.com

15. Data Breach
In the event of a data breach, we are committed to informing the competent authorities within 72 hours, as required by the GDPR, and notifying the individuals concerned if the breach presents a high risk to their rights and freedoms. We will take all necessary actions to limit the impact of the breach and ensure the protection of your data.

16. Withdrawal of Consent
You have the right to withdraw your consent at any time. To do so, simply contact us by email at: dpo@liguenouvelleaquitaine.org. The withdrawal of consent will not affect the legality of data processing based on your consent prior to this withdrawal.

17. Complaint to the CNIL
If you believe your rights are not being respected, you have the right to file a complaint with the CNIL (French Data Protection Authority). You can file a complaint on their website: www.cnil.fr.