Confidentiality policy

About us

Our website address is: https://aemoa.com

The data controller is: Mr Guy Theunynck

Use of personal data collected

Comments

When you leave a comment on our website, the data entered in the comment form, as well as your IP address and your browser’s user agent, are collected to help us detect spam comments.

An anonymised string created from your email address (also known as a hash) may be sent to the Gravatar service (Automattic Inc., USA) to check whether you are using it. The Gravatar service’s privacy policy is available here: https://automattic.com/privacy/. Once your comment has been approved, your profile picture will be publicly visible alongside your comment.

Contact forms

Data submitted via our contact forms is collected solely for the purpose of processing your enquiry and managing our commercial or pre-contractual relationship.

Cookies

If you post a comment on our website, you will be offered the option to save your name, email address and website in cookies. This is solely for your convenience, so that you do not have to re-enter this information if you post another comment at a later date. These cookies expire after one year.

If you have an account and log in to this site, a temporary cookie will be created to determine whether your browser accepts cookies. It contains no personal data and will be automatically deleted when you close your browser.

When you log in, we will set a number of cookies to save your login details and your screen display preferences. A login cookie lasts for two days, whilst a display options cookie lasts for one year. If you tick ‘Remember me’, your login cookie will be retained for two weeks. If you log out of your account, the login cookie will be deleted.

When you edit or publish a post, an additional cookie will be stored in your browser. This cookie does not contain any personal data. It simply indicates the ID of the post you have just edited. It expires after one day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if the visitor were visiting that other website directly.

These websites may collect data about you, use cookies, embed third-party tracking tools, or track your interactions with this embedded content if you have an account logged in on their website.

Statistics and audience measurement

This website uses Matomo Analytics, an open-source audience analytics solution hosted on our own OVH servers located in Roubaix (France). Unlike third-party services, your browsing data is not passed on to any external company and remains stored exclusively on our infrastructure, within the European Union.

When you consent to audience measurement via our cookie banner, Matomo sets first-party cookies that are strictly internal to our domain:

• _pk_id.[siteid].[hash]: visitor identifier (duration: 13 months)
• _pk_ses.[siteid].[hash]: session identifier (duration: 30 minutes)
• _pk_ref.[siteid].[hash]: referring site (duration: 6 months)

These cookies enable us to distinguish unique visitors and analyse browsing patterns (pages viewed, duration of visits, approximate geographical origin following anonymisation of your IP address, type of device and browser used). They do not allow us to track you on other websites.

The placement of these cookies and the collection of your browsing data are based on your prior and explicit consent (Article 6.1.a of the GDPR). You are free to give or withhold this consent without this affecting your access to the website or the availability of our services.

Raw browsing data is retained for a maximum of 13 months from the date of your last visit, after which it is either deleted or irreversibly aggregated for historical statistical purposes. Only our authorised teams have access to this data; no data is transferred to third countries.

Conversion tracking with the Facebook pixel

With your explicit consent, we use the ‘Facebook pixel’ from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States (‘Facebook’) on our website. This is a cookie that is stored on your computer and can be retrieved from it. This tool enables us to track users’ actions after they have viewed or clicked on an advert on Facebook. This allows us to record the effectiveness of Facebook adverts for statistical and market research purposes.

The data collected is transferred to Facebook’s servers in the United States. Facebook may use this data for its own advertising purposes, in accordance with its privacy policy (https://www.facebook.com/about/privacy). This transfer of data to the United States is based on your explicit consent, in accordance with Article 49 of the GDPR.

You may withdraw your consent at any time via our cookie banner. By refusing this cookie, you will only prevent conversion tracking, but will retain full access to the website.

Sharing

The website features ‘Share’ buttons from social media operators such as Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA; XING (XING AG, Dammtorstraße 30, 20354 Hamburg, Germany); LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, and Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. A ‘Share’ button for emails has also been integrated.

The share buttons can be recognised by the corresponding social media logos. All share buttons are configured in accordance with data protection regulations. Only when you click on the ‘Share’ button on this website (and only then) is a direct connection established between your browser and the server of the relevant social media operator. According to the operators of the social media platforms mentioned, no personal data is collected by the social media platforms without you clicking on the relevant ‘Share’ button. Only in the case of logged-in members is this data, including the IP address, collected and processed.

If you do not wish your visit to our website to be linked to your user account with the social media provider, you can log out of the relevant social media account. Please note that we, as the website provider, have no knowledge of the content of the data transmitted or of how this data is used by the social media platforms. Further information on the use of data by social media platforms can be found in the privacy policies of the platforms mentioned.

Newsletter

By ticking the box ‘I would like to receive information from AEMOA’, you agree to subscribe to our newsletter. For this purpose, we use MailPoet (a service provided by Automattic Inc., a US company listed as WordPress.com).

Data processing

The information collected (surname, first name, email address, registration page) is first stored in our local database hosted by OVH (Roubaix, France), then transmitted to Automattic Inc. (United States) solely for the purpose of sending emails and tracking open rates. This transfer outside the EU is governed by the European Commission’s Standard Contractual Clauses (SCCs) and Automattic’s adherence to the EU-US Data Privacy Framework, which guarantees a level of protection equivalent to that of the GDPR.

Your rights

Each email contains an unsubscribe link allowing your data to be immediately deleted from our local database and from Automattic’s systems. You may also exercise your rights of access, rectification or erasure by contacting us directly (see the ‘Contact details’ section).

Retention

Your data is retained solely for the duration of your subscription and is permanently deleted within a maximum of one month following your unsubscribe request.

Use and disclosure of your personal data

Data collected through the processing carried out on this website is not disclosed to third parties for commercial use, with the exception of explicitly mentioned international transfers (Gravatar, Facebook, social media platforms) which are based on your specific consent.

International data transfers

Certain data processing operations involve data transfers to third countries, notably the United States:

1. Gravatar: when you post a comment, a hash of your email address is transmitted to Automattic’s servers (USA) to display your profile picture.
2. Facebook Pixel: browsing data is transmitted to Facebook’s servers (USA) for the purpose of measuring advertising conversion.

These transfers are based on your explicit consent (Article 49 of the GDPR), as the United States does not have an adequacy decision from the European Commission. You may opt out of these transfers by disabling the relevant cookies via our preferences banner or by contacting us directly.

Retention periods for your data

If you leave a comment, the comment and its metadata are retained for the entire lifetime of the website. This allows subsequent comments to be automatically recognised and approved rather than being held in the moderation queue. After this period, the data is deleted or anonymised, unless otherwise required by law.

For users who register on our website (where possible), we also store the personal data provided in their profile. All users can view, edit or delete their personal information at any time (with the exception of their username). Website administrators can also view and edit this information.

The data collected is retained:

• for customers: for the duration of the commercial relationship. It will be retained for marketing purposes for a maximum of 5 years from the end of this commercial relationship,
• for non-customer prospects: for a maximum of 5 years from the date of collection by the data controller or from the prospect’s last contact.

With regard to technical security, server logs (IP addresses, connection timestamps) are retained for 12 months for the prevention and detection of cyber-crimes (legal basis: legitimate interest in security).

Your rights regarding your data

In accordance with the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access: to obtain confirmation as to whether data concerning you is being processed, and to access that data
• Right to rectification: to have inaccurate or incomplete data corrected
• Right to erasure (‘right to be forgotten’): to request the deletion of your data in the cases provided for by law
• Right to restriction of processing: to obtain the temporary suspension of the processing of your data
• Right to object: to object to the processing of your data, in particular to commercial marketing (including profiling related to such marketing)
• Right to data portability: to receive your data in a structured and commonly used format, and to transmit it to another data controller
• Right to withdraw your consent at any time, where the processing is based on consent (without affecting the lawfulness of processing based on consent carried out prior to withdrawal)

If you have an account or have left comments on the website, you may request a file containing all the personal data we hold about you, including that which you have provided to us.

To exercise these rights, please contact us at the address given below. We undertake to respond within one month of receiving your request. This period may be extended by a further two months in the event of a complex request or a large number of requests.

If, after contacting us, you feel that your rights have not been respected, you have the right to lodge a complaint with the CNIL (www.cnil.fr).

Transfer of your personal data

Visitors’ comments are checked using an automated service to detect spam (Akismet or an equivalent solution).

Further information

How we protect your data

All data stored on this website is hosted in the OVH data centre in Roubaix. Access to the premises is strictly controlled and physical security of access to the servers is guaranteed by OVH (see https://www.ovh.com/fr/protection-donnees-personnelles/gdpr.xml).

We implement appropriate technical and organisational measures to ensure the security of your data: encrypted connections (HTTPS), strong passwords, restricted access to data, and regular backups.

Backup

This website uses backup and security tools hosted on the cloud infrastructure of OVHcloud, a SAS with a share capital of €10,069,020, registered with the Lille Métropole Trade and Companies Register under number 424 761 419, whose registered office is situated at 2 rue Kellermann, 59100 Roubaix, France.

Data is stored and processed exclusively on OVH data centres located in mainland France, in accordance with their security and privacy policy available here: https://www.ovhcloud.com/fr/personal-data-protection/

The backed-up data includes all data provided whilst visiting or creating an account on this website. Backup data is retained for 1 month on the website’s local storage and for 1 year on OVH’s redundant backup infrastructure, which is distributed across several sites in France. As the data does not leave French territory, no international data transfers take place.

Contact details

Guy Theunynck, Data Controller