Privacy Policy (GDPR Compliant)

1. Data Controller Identification

The data controller responsible for the processing of your personal information on this portal is:

2. Information We Collect

We adhere strictly to the principle of data minimization under Regulation (EU) 2016/679 (GDPR). We collect:

• Directly Provided Data: Name, email address, and message content submitted voluntarily via our contact and inquiry forms.
• Technical Metadata: Anonymized IP addresses, browser user agent strings, and timestamps strictly necessary for server security and DDoS prevention.
• Calculators & Interactive Tools: Scores calculated on our interactive vitality tool are computed client-side in your browser and are not transmitted to or stored on our servers.

3. Legal Basis for Data Processing

We process personal information under the following legal bases:

• Consent (Art. 6(1)(a) GDPR): When you explicitly submit an inquiry through our contact form.
• Legitimate Interests (Art. 6(1)(f) GDPR): Maintaining network security, fraud prevention, and operational integrity.

4. Data Retention & Security

Inquiry data is retained only for the duration necessary to address your communication (typically not exceeding 12 months). We utilize industry-standard SSL/TLS encryption across all connections.

5. Your Rights Under GDPR

Under European data protection laws, you possess the right to:

• Request access to your stored personal data (Art. 15 GDPR).
• Request rectification of inaccurate data (Art. 16 GDPR).
• Request erasure of your data (“Right to be Forgotten”, Art. 17 GDPR).
• Request restriction of processing or object to processing (Art. 18 & 21 GDPR).
• Lodge a complaint with the French data protection authority (CNIL — Commission Nationale de l'Informatique et des Libertés, www.cnil.fr).

6. Contact for Privacy Inquiries

To exercise your rights, please email our Data Protection officer at [email protected] or write to our physical address in Paris, France.