Privacy Policy

1. Principles of Data Processing

At LA CERISE, we uphold the highest standards of data governance. All personal information gathered through this portal is processed strictly in accordance with Article 5 of the General Data Protection Regulation: lawfully, fairly, and transparently; collected solely for explicit, legitimate research and communication purposes; kept accurate and limited to what is strictly necessary; and safeguarded using state-of-the-art cryptographic and technical measures.

2. Categories of Information Collected

We process the following categories of data when you interact with our website or advisory services:

• Direct Inquiry Data: Full name, professional or academic affiliation, email address, contact telephone number, and the textual contents of research inquiries submitted via our forms.
• Technical & Telemetry Logs: Anonymized Internet Protocol (IP) address, browser client user-agent string, access timestamps, referral URLs, and cryptographic TLS session parameters.
• Analytical & Preference Data: Cookie identifiers and local storage preferences regarding cookie consent and interface accessibility configurations.

3. Lawful Bases for Processing

Under Article 6(1) of the GDPR, our legal grounds for processing personal data include:

• Article 6(1)(b) — Contractual Necessity: Processing required to deliver requested research dossiers, monographs, or advisory consultations.
• Article 6(1)(f) — Legitimate Interests: Maintaining portal cybersecurity, preventing malicious automated abuse, and conducting non-invasive statistical analysis of reading trends.
• Article 6(1)(a) — Consent: Explicit opt-in consent for newsletter subscriptions, analytical cookies, or customized educational briefings.

4. Data Retention Schedule

We retain personal data only for as long as necessary to fulfill the specific purposes for which it was gathered:

• Inquiry & Consultation Records: Stored for a maximum of 24 months from the date of the last active correspondence.
• Server Security Telemetry: Rotated and irreversibly overwritten after 90 days.
• Financial & Grant Documentation: Retained for 10 years pursuant to French commercial and fiscal statutory requirements (Code de Commerce).

5. Your Rights as a Data Subject

Under the GDPR and French law, you possess enforceable legal rights regarding your personal information:

• Right of Access (Art. 15 GDPR): Request a complete copy of the personal data held about you.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete records.
• Right to Erasure / “Right to be Forgotten” (Art. 17 GDPR): Request permanent deletion of your data when retention is no longer justified.
• Right to Restriction of Processing (Art. 18 GDPR): Limit how we process your information during verification disputes.
• Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): Object at any time to processing based on our legitimate interests.

To exercise any of these statutory rights, please submit a written request to our Data Protection Officer at [email protected]. We respond to all formal requests within 30 days without charge.

You also maintain the legal right to lodge a complaint with the French supervisory authority: Commission Nationale de l’Informatique et des Libertés (CNIL) at www.cnil.fr.

6. Third-Party Disclosures & International Transfers

LA CERISE never sells, rents, or commercializes personal contact details. Information is disclosed solely to trusted technical infrastructure processors (such as secure cloud hosting providers located within the European Economic Area) bound by strict Data Processing Agreements (DPAs) under Article 28 GDPR.

7. Policy Amendments

We may update this Privacy Policy periodically to reflect technological or statutory evolutions. The latest version will always be published on this page with an updated effective date.