Business France is the national agency supporting the international development of the French economy, responsible for fostering export growth by French businesses.
Business France is also in charge of the tastefrancebusiness.com website. A “contact us” section allows to link the users with Business France teams.
Our Data Protection Officer
- Business France has designated a Data Protection Officer whose contact details are as follows: firstname.lastname@example.org
The Personal data that we process
2. In the context of processing personal data, Business France collects and processes the following data:
– Identification data (first name, last name, email, company and country)
– Your request made on the section “contact”
in order to answer to your information query as formulated on the website https://tastefrancebusiness.com/ on the sections “contact”
The purposes of our data process
3. We are processing data for the following purposes:
– management of the requests in connection with press or others;
– statistical analysis of the navigation on http://tastefrancebusiness.com/ as well as the number and type of requests made (activity indicators, piloting).
– Promotion of events in the framework of Taste France
The legal bases of our data processing
4. We implement data processing only if at least one of the following conditions is met:
– your consent to the processing operations has been obtained;
– the existence of our legitimate interest, or that of a third party, which justifies that we implement this processing of personal data;
– the execution of a contract binding us to you requires that we implement this processing of personal data;
– we are subject to statutory and regulatory obligations that require this processing of personal data.
The recipients of your data
5. The personal data we collect, and those we obtained subsequently, are intended for us in our capacity as controller, that is for Business France corporate services.
6. We ensure that only authorized persons have access to this data. Our service providers can be recipients of this data to perform the services we entrust to them. Some personal data may be sent to third parties as our cooperation partners in the framework of Taste France promotion or to legally authorized authorities in order to meet our legal, regulatory or contractual obligations.
7. Your personal data can be subject to convergence, mutualization or a sharing between all Business France entities.
Transfer of your data
9. When it is necessary for the processing of your request, we can be led to transfer your personal data out of European Union to Business France offices abroad located within the French Embassy and to Business France abroad offices located out of French Embassy in the following countries:
– Cameroun, South Africa, Japan, United States (Boston, Detroit, NewYork, San Francisco), Turkey, India, Australia, China (and Taiwan) Switzerland.
10. Each of these transfers is governed by legal instruments that comply with the applicable legal framework. Indeed, Switzerland benefits from an adequacy decision, which means that they offer your personal data a level of protection equivalent to the one which is applied on the European Union territory. Transfers made to other countries are covered by the following appropriate safeguards: standard contractual clauses approved by the European Commission.
The duration for which we keep your data
11. The periods for which we keep your personal data are proportionate to the purposes for which your data were processed, that is for the duration mentioned below:
– for three (3) years as from the last contact with Business France
increased, when applicable, by the legal prescriptions and also to ensure the respect of legal or regulatory requirements compulsory for Business France.
12. You can exercise your rights, by justifying your identity, by email to email@example.com or by post at the following address:
To the Data Protection Officer
77 Bd Saints Jacques
13. To do so, you have to clearly indicate your surname and first name, the address you want the reply to be sent and to join the copy of an identity document containing your signature.
14. As a principle, you can exercise freely all your rights. However, concerning the right of access, Business France may ask for the payment of reasonable fees based on the administrative costs for any copy of data required.
15. Concerning the right of information, Business France will not have to answer if you have already the information you ask for.
16. Business France will inform you whether it cannot answer your request.
17. The failure to provide information or modification of data can have consequences in the process of your query formulated on the section “contact” related to Taste France initiative. Your request related to your rights will be kept for monitoring purposes.
Your rights are the followings:
a) Your right of information
18. The present document provides you with information related to the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data were shared, and the possibility of a data transfer to a third country or international organization.
19. In addition to this information and with the aim of ensuring fair and transparent processing of your data, the present document provides additional information concerning:
– the period for which your personal data will be kept;
– the existence of the rights which are granted to you and the terms and conditions to exercise them.
20. If we decide to process data for purposes other than those indicated, all information relating to those new purposes will be communicated to you.
b) Your right of access to and rectification of your data
- You have the right to access and rectify your personal data, which you can exercise at the following address: firstname.lastname@example.org
- In this respect, you have the confirmation as to whether or not your personal data are being processed and where this is the case, access to your data and the following information:
– the purpose of the processing;
– the categories of personal data concerned;
– the recipients or categories of recipient as well as the international organisations to whom the personal data have been or will be disclosed, in particular recipients in third countries;
– where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
– the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
– the right to lodge a complaint with a supervisory authority;
– where the personal data are not collected from the data subjects, any available information s to their source;
– the existence of automated decision-making, including profiling, and in this case, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
- You can ask us to, as the case may be, rectify or complete your personal data that are inaccurate, incomplete, equivocal or expired.
c) Your right to the erasure of your data
- You can ask us to erase your personal data where one of the following grounds applies:
- Nevertheless, the exercise of this right will not be possible when the retention of your personal data is necessary for compliance with statutory or regulatory provisions and in particular for example for the establishment, exercise or defense of legal claims.
d) Your right to restriction of processing
- You may request the restriction of processing of your personal data where one of the following applies:
– the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
– the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
– the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
– the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
e) Your right to object to data processing
- You have the right to object to the processing of personal data concerning you when the processing is based on the legitimate interest of the controller or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- Business France does not process anymore the personal data, except if Business France can demonstrate there are legitimate and compelling interests to process prevailing on your interests and rights and liberty, or for the contestation, exercise or defense of legal rights.
f) Your right to data portability
- Since the 25th of May 2018, you have the right to portability of your personal data. The data on which this right can be exercised are:
– only your personal data, which excludes anonymized personal data or data that does not concern you;
– declarative personal data and personal data relating to our functioning, as mentioned above;
– personal data does not adversely affect the rights and freedoms of others such as those protected by trade secrets.
- This right is limited to processing based on consent or contract as well as to personal data that you have personally generated.
- This right does not include derived or inferred data, which are personal data created by Business France.
g) Your right to withdraw your consent
- When the data processing we carry out is based on your consent, you may withdraw it at any time. We will then stop processing your personal data but this will have no impact on the previous transactions to which you have consented.
h) Your right to lodge a complaint with a supervisory authority
- You have the right to lodge a complaint with the French data protection authority (the Cnil) on the French territory without prejudice to any administrative or judicial remedy.
i) Your right to define post-mortem directives
- You can give instructions in relation to the storage, erasure and communication of your personal data after your death to a certified trusted third party in charge of enforcing the wishes of the deceased in compliance with the applicable legal framework.