Privacy Policy

1. Identity of the Data Controller

The Data Controller responsible for the processing of your personal data on this website is:

VANG MO (Entrepreneur individuel)
Represented by: Matthew Robertson
SIREN: 820 836 187 • APE Code: 0124Z
Registered Address: PISTE DE COUNAMAMA, 97350 IRACOUBO, FRANCE
Contact Email: [email protected]
Telephone: +33 5 94 34 81 20

We adhere strictly to the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

2. Personal Data We Collect

We collect and process personal data only when strictly necessary for our educational operations:

• Direct Communication Data: When you complete our contact or inquiry form, we collect your name, email address, inquiry subject, and message content.
• Newsletter Subscription Data: If you voluntarily subscribe to our monthly research dispatch, we store your email address.
• Technical & Log Data: Standard server access logs, including anonymized IP addresses, browser type, operating system, referring URL, and timestamp to maintain site security and prevent malicious bot attacks.
• Interactive Assessment Data: Responses submitted to our self-assessment tools are processed locally in your browser and are not permanently linked to personal identifiers.

3. Legal Bases for Data Processing

Under GDPR Article 6, we process personal data based on:

• Consent (Art. 6(1)(a)): When you freely submit an inquiry form or opt in to receive research bulletins.
• Legitimate Interests (Art. 6(1)(f)): Maintaining server infrastructure security, preventing fraudulent activity, and optimizing website readability.

4. Data Retention Periods

Personal data is retained only for the duration necessary to satisfy the specific purpose for which it was gathered:

• Contact Inquiries: Retained for up to 12 months following resolution of the query, after which it is securely purged.
• Newsletter Subscriptions: Retained until you click the unsubscribe link or submit a withdrawal request.
• Security Server Logs: Rotated and deleted automatically after 30 days.

5. Data Sharing and Third Parties

We do not sell, rent, trade, or monetize your personal information. Data is never shared with third-party advertising brokers. Data is processed exclusively by secure European hosting infrastructure compliant with ISO 27001 and GDPR data processing agreements.

6. Your Statutory Privacy Rights

Under Chapter III of the GDPR, you have the following enforceable rights:

• Right of Access (Art. 15): Request a copy of the personal data we hold concerning you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete records.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal records where no overriding legal obligation exists.
• Right to Restriction of Processing (Art. 18): Request temporary suspension of data processing under certain dispute conditions.
• Right to Data Portability (Art. 20): Receive your submitted data in a structured, machine-readable format.
• Right to Object (Art. 21): Object at any time to processing based on legitimate interest.

To exercise any of these rights, email our data governance team at [email protected]. We respond to all verified requests within 30 days without charge.

7. Supervisory Authority (CNIL)

If you believe your personal data is being processed in non-compliance with applicable law, you have the right to lodge a formal complaint with the French supervisory authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Website: www.cnil.fr

8. Security Safeguards

We utilize 256-bit SSL/TLS cryptographic transport protocols, strict Content-Security-Policy parameters, anti-scraping filters, and hardened access controls to safeguard all data transmission against unauthorized interception or breach.