What does the policy on the use of personal data cover?

This policy informs you about the characteristics of data processing and your rights with regard to

your personal data.

Who is responsible for this policy?

The data controller is CORALIE LE MOIGNE, a sole trader.

The contact details of the data controller are as follows: Les Lauriers bât. A - 33 avenue des

Lauriers 06160 JUAN LES PINS.

The contact email address is: coralie.naturopathe.reflexologue@gmail.com

The person responsible can be reached on the following number: +337 56 80 14 83

This privacy policy has been drawn up in accordance with French law no. 78-17 of 6 January 1978

(known as the "Loi informatique et libertés" or "LIL") and the General Regulation on the Protection

of Personal Data ("RGDP") no. 2016/679.

Who is this policy intended for?

This policy is aimed at the practitioner's clients.

Purposes (what the data collected is used for)

The object and purpose of the data processing is the performance of the service contract and the

management of customer relations.

The data is also processed for the following purpose(s):

Sending out pre-appointment questionnaires.

Sending naturopathy files.

Sending advice after the appointment.

Post-appointment follow-up.

Request for publication of advice on the internet with a corresponding link.

Advertising workshops.

Commercial and/or promotional offers.

Diary and booking management.

Legal basis for processing: what gives us the right to process data

The legal basis for processing is the contract concluded with the customer.

For the processing of any health data: the legal basis is the customer's consent.

Data retention period

Data that is processed is kept for no longer than is necessary for the purposes for which it is

recorded (principle of minimisation of processing).

Customer data is kept for 5 years from the end of the contractual relationship.

Data processed

The data controller processes the following categories of data:

Data relating to the identity of customers (surname, first name, postal address, telephone

number, e-mail address)

-Data relating to personal circumstances (lifestyle, eating habits, etc.)

-Health data in certain cases

The data controller also processes the following types of data:

-Information on physical, psycho-emotional trauma;

- Ongoing treatments;

- surgical operations;

- Allergies and intolerances;

- Health compatibility with the methods used for reflexology.

Mandatory or optional nature of data collection

The data collected is mandatory in order to achieve the purposes of processing.

Data sources

Data is provided directly by the data subject, except in certain cases: Minors and the elderly.

Data recipients

Depending on their respective needs, the following are recipients of all or part of the data:

myAE.fr (invoicing software)

Sumup (credit card receipts and invoices)

Nutritional supplement laboratories (for selection, personalised advice and sponsorship)

Appointment scheduling software : Calendly

My Web page

What security measures have been put in place?

The controller shall implement appropriate technical and organisational measures to

guarantee a level of security appropriate to the risk.

The controller shall take measures to ensure that any natural person acting under the

authority of the controller or the processor who has access to personal data shall not

process it unless instructed to do so by the controller or unless obliged to do so.

The following specific security measures have been taken:

ESET NOD32 antivirus

Whether or not data is transferred to a country outside the European Union and

associated guarantees

The data controller does not transfer any personal data outside the European Union.

Automated decision-making

The processing involves automated decision-making.

The data controller undertakes to comply with the conditions of Article 22 of the RGPD.

Fate of personal data after death - Right of access, rectification, deletion and portability

of data

The person concerned by a processing operation may define directives relating to the

conservation, deletion and communication of his/her personal data after his/her death. These

directives may be general or specific.

Data subjects also have the right to access, object to, rectify, delete and, under certain conditions,

port their personal data. The data subject has the right to withdraw consent at any time if consent

is the legal basis for processing.

The request must indicate the surname and first name, e-mail or postal address of the person

concerned, and must be signed and accompanied by valid proof of identity.

These rights may be exercised by contacting : Coralie LE MOIGNE

Les Lauriers bât. A

33 avenue des Lauriers

06160 JUAN LES PINS

07 56 80 14 83

coralie.naturopathe.reflexologue@gmail.com

Complaints

The data subject has the right to lodge a complaint with the supervisory authority (CNIL):

https://www.cnil.fr/fr/webform/adresser-une-plainte

Date signed by customer:

Customer's full name :

By signing this policy, the customer expressly authorises the Service Provider to collect

and store any health data concerning him/her, under the conditions referred to above