Privacy Policy
Last updated on
We only collect the data we need to respond to your requests and carry out our studies. It is never sold or used for advertising purposes.
This English version is provided for convenience. In case of discrepancy, the French version prevails.
Data controller
Physique-Chimie Avenir (PCA), a non-profit association governed by the French law of 1901, 10 rue Vauquelin, 75005 Paris, France, represented by Christine El Aawar, its president.
For any question about your data: rgpd@pca.je.
Data collected and purposes
Contact and quote requests
When you fill in the contact form, we collect:
- your first and last name;
- your professional email address and, if you wish, your phone number;
- your company name;
- the description of your needs, the services or pathway chosen, the budget, the timeline and the attachments you send us.
The form sends this data by email to Physique-Chimie Avenir’s mailbox; it is not stored on the site. It is used to review your request, reply to you, draw up a quote and, if a study is started, to follow it up. This processing is based on pre-contractual measures taken at your request (article 6.1.b of the GDPR). Exchanges by email or phone are handled in the same way.
Protecting the form against bots
The contact form is protected by Cloudflare Turnstile, which analyzes technical information (IP address, browser characteristics) to tell a human from a bot. This processing is based on our legitimate interest in securing the site (article 6.1.f of the GDPR).
Technical logs
Like any website, our host records connection logs (IP address, date and time, page requested, browser) to ensure the security and proper functioning of the site. This processing is based on our legitimate interest (article 6.1.f of the GDPR).
Audience measurement
To understand how the site is used and improve it, we use two tools that only produce anonymous statistics:
- the statistics of our host OVH, computed from the connection logs described above;
- Matomo, open-source software installed on our servers at OVH: the data is not sent to any third party. It works without cookies, masks part of your IP address (the last two bytes) and does not track your browsing on other sites.
In line with CNIL guidance, this audience measurement is exempt from consent, which is why no banner asks for it. It is based on our legitimate interest in understanding how the site is used (article 6.1.f of the GDPR). You can object to it at any time on the cookie settings page.
Retention periods
| Data | Duration |
|---|---|
| Request with no follow-up | 3 years from the last contact |
| Client (completed study) | Duration of the relationship, then 5 years (statute of limitations) |
| Accounting records (signed quotes, invoices) | 10 years |
| Connection logs | 1 year |
| Audience measurement (Matomo) | 13 months, then anonymous statistics only |
| Cookie choices | 6 months |
Recipients
Your data is intended only for the members of Physique-Chimie Avenir in charge of handling your request and, if a study is started, for the engineering students who take part in it, for the information needed for their assignment.
It may be processed by our technical service providers, strictly within the limits of their assignment:
- OVH SAS (hosting of the site and of the Matomo audience measurement tool, France);
- Google LLC (email and document storage, including contracts);
- Cloudflare, Inc. (protection of the form against bots);
- Digital Science UK Ltd (Overleaf, quote drafting);
- LiveConsent SAS (electronic signature and archiving of contracts, France).
Your data is not sold, rented or transferred to third parties, and is not subject to any automated decision-making or profiling.
Transfers outside the European Union
Google LLC and Cloudflare, Inc. are based in the United States. These transfers are covered by the EU–US Data Privacy Framework, to which these companies are signatories.
Digital Science UK Ltd (Overleaf) is based in the United Kingdom, which benefits from an adequacy decision of the European Commission.
Your rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your data:
- right of access and rectification;
- right to erasure;
- right to restriction of processing;
- right to object, in particular to processing based on our legitimate interest, such as audience measurement;
- right to data portability;
- right to withdraw your consent at any time;
- right to set guidelines for what happens to your data after your death.
To exercise them, write to us at rgpd@pca.je or by post to: Physique-Chimie Avenir – Personal data, 10 rue Vauquelin, 75005 Paris, France. We will reply within one month. If there is reasonable doubt about your identity, we may ask you for proof of identity.
If, after contacting us, you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr, in French).
Security
The site is only accessible over HTTPS. Access to data is limited to the people who need it, and we take reasonable measures to protect it against loss, disclosure or unauthorized access. In the event of a breach likely to present a risk to your rights, we would inform you and the CNIL, under the conditions set out in the GDPR.
Cookies
The site does not use any advertising cookies, and its audience measurement works without cookies. The list of trackers and the option to object to audience measurement are on the cookie settings page.
Changes
This policy may change, in particular to reflect changes to the site or to regulations. The update date is shown at the top of this page.
