Information
Privacy Policy
Who is responsible for your data
Last updated: [TO BE COMPLETED: go-live date]
The data controller is [TO BE COMPLETED: company name], [TO BE COMPLETED: registered office address].
Contact: [contact@gab-agency.fr] [TO BE CONFIRMED].
What data we collect
Only what you enter in the contact forms.
Creator form
- name or stage name;
- email address;
- message.
Brand form
- company or project name;
- name;
- email address;
- message.
We do not collect any other data. We do not ask for any sensitive data.
Why we use it
To reply to your request. Nothing else. Your data is not used for marketing or profiling.
Legal basis
Your consent (Article 6(1)(a) of the GDPR). It is given by ticking the box on the form. You may withdraw it at any time by writing to the address given below.
How long we keep it
12 months from receipt of your message. It is then deleted.
Who has access
- The administrators of GAB AGENCY, and no one else.
- Our technical processor, Google Cloud (Google Cloud EMEA Limited, Ireland), which hosts the data. It is stored in Belgium (region europe-west1), within the European Union.
We do not transfer or sell your data. We do not disclose it to any third party for commercial purposes.
[TO BE CONFIRMED: no transfer outside the European Union, including for the host's support services. If a transfer exists, state it and specify the safeguards (standard contractual clauses).]
Your rights
You have the following rights:
- access to your data;
- rectification;
- erasure;
- objection;
- restriction of processing;
- portability;
- withdrawal of your consent at any time.
To exercise them, write to [contact@gab-agency.fr] [TO BE CONFIRMED]. We reply within one month. We may ask you for proof of identity if in doubt.
You may also lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Minors
The application form is reserved for adults. It contains a box by which you confirm that you are 18 or over. If we learn that a message comes from a minor, we delete it.
Security
We take reasonable measures to protect your data: encrypted connection (HTTPS), hosting on a secure infrastructure, access limited to authenticated administrators.
No system is infallible. In the event of a data breach likely to put you at risk, we will inform you, as well as the CNIL where the law requires it.
Changes to this policy
We may update it. The date of the last update appears at the top of this page.