1: Introduction
This privacy policy applies to the current website: Callistorea.
This privacy policy aims to inform the users of the website about:
- The collection and processing of their personal data. Personal data refers to any information that can identify a user. This includes the first name, last name, age, postal address, email address, user’s location, and IP address;
- Their rights regarding their data;
- The entity responsible for the collection and processing of personal data;
- The recipients of the data;
- The website’s policy regarding “cookies” files, if applicable.
2: General principles for data collection and processing
According to Article 5 of the European Regulation 2016/679, the collection and processing of user data on the website adhere to the following principles:
- Lawfulness, fairness, and transparency: Data can only be collected and processed with the user’s consent. Whenever personal data is collected, the user will be informed of the purpose and reasons for collecting the data;
- Limited purposes: Data collection and processing are performed to achieve specific objectives stated in the terms and conditions;
- Minimization of data collection and processing: Only the necessary data for fulfilling the website’s objectives is collected;
- Limited data retention: Data is retained for a limited period, and the user is informed of this duration. If not possible to provide the specific duration, the user will be informed of the criteria used to determine the retention period;
- Data integrity and confidentiality: The data controller is committed to ensuring the integrity and confidentiality of the collected data.
To be lawful, as per Article 6 of the European Regulation 2016/679, the collection and processing of personal data can only occur if at least one of the following conditions is met:
- The user has given explicit consent;
- The processing is necessary for the performance of a contract;
- The processing is required by law;
- The processing is necessary to protect the vital interests of the data subject or another person;
- The processing is related to a task carried out in the public interest or in the exercise of official authority;
- The processing is necessary for the purposes of the legitimate interests pursued by the data controller or a third party.
3: Collection and processing of personal data during website navigation
Collected and processed data and collection method
The personal data collected on this website includes:
- First name, last name
- Company
- Email address
- Phone number
- Postal address
- CV
This data is collected when the user performs one of the following operations on the website:
- Sending a message via the contact form;
- Sending a job application via one of the recruitment forms.
The data controller will retain all collected data in their computer systems and ensure reasonable security measures for a period of 3 years.
The collection and processing of data serve the following purposes:
- Responding to inquiries sent via the contact form;
- Evaluating and responding to job applications submitted via the recruitment form.
Data transmission to third parties
The personal data collected by the website is not transmitted to any third parties and is processed solely by the website’s publisher.
4: Data controller
The data controller
The data controller responsible for personal data processing is Claire Viale – claire.viale@callistorea.com
The data controller is responsible for determining the purposes and means of processing personal data.
Responsibilities of the data controller
The data controller undertakes to protect the collected personal data, not to transmit it to third parties without the user’s knowledge, and to respect the purposes for which the data was collected.
The website has an SSL certificate to secure the information and data transfer on the site.
An SSL (Secure Socket Layer) certificate ensures the security of data exchanged between the user and the website.
In the event of compromising the integrity, confidentiality, or security of the user’s personal data, the data controller agrees to inform the user through appropriate means.
5: User’s rights
In accordance with the regulations concerning the processing of personal data, the user possesses the following rights:
In order for the data controller to fulfill the user’s request, the user must provide their first name, last name, and email address.
The data controller is obligated to respond to the user within a maximum of 30 (thirty) days.
User rights regarding data collection and processing
- Right to access, rectification, and erasure
The user can access, update, modify, or request the deletion of their data by following the procedure outlined below:
The user must send their request via email to claire.viale@callistorea.com
- Right to data portability
The user has the right to request the portability of their personal data held by the website to another website, following the procedure below:
The user must send their request via email to claire.viale@callistorea.com
- Right to restriction and objection to data processing
The user has the right to request the restriction or object to the processing of their data by the website, unless the website demonstrates compelling legitimate grounds for processing that override the user’s interests, rights, and freedoms.
To request the restriction of data processing or to raise an objection to data processing, the user must follow the procedure below:
The user must send their request via email to claire.viale@callistorea.com
- Right not to be subject to automated decision-making
According to the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision significantly affects them or produces legal effects concerning them.
- Right to determine the fate of data after death
The user is reminded that they can define the fate of their collected and processed data after their death, in accordance with Law No. 2016-1321 of October 7, 2016.
- Right to lodge a complaint with the competent supervisory authority
If the data controller decides not to respond to the user’s request, or if the user believes that their rights as mentioned above are violated, the user has the right to lodge a complaint with the CNIL (National Commission on Informatics and Liberties, https://www.cnil.fr) or any competent court.
- Personal data of minors
In accordance with Article 8 of the European Regulation 2016/679 and the Data Protection Act, only minors aged 15 or older can consent to the processing of their personal data.
If the user is a minor under the age of 15, the consent of a legal representative will be required for the collection and processing of personal data.
The website’s publisher reserves the right to verify through any means that the user is over 15 years of age or has obtained the consent of a legal representative before browsing the site.
6: Use of “cookies” files
The website may use “cookies” techniques.
A “cookie” is a small file (less than 4 KB) stored by the website on the user’s hard drive, containing information about the user’s browsing habits.
To learn more, please consult our cookie policy.
7: Privacy policy modification conditions
This privacy policy can be accessed at any time at the following address:
The website’s publisher reserves the right to modify it to ensure compliance with applicable law.
Therefore, users are encouraged to regularly review this privacy policy to stay informed of any changes.
Please note that the last update to this privacy policy was made on: 21/06/2023