PERSONAL DATA PROTECTION POLICY

What is personal data?

Personal data is information that directly or indirectly identifies you. For example, your last name, first name, e-mail address or the IP address of your computer.

Personal data processing is any operation or set of operations performed on personal data. For example, the collection, storage, viewing and analysis of your personal data are data-processing operations.

What is the purpose of this Policy?

Our Green Impact Index Association would like to remind you of its commitment to respect the trust you place in it and to apply the regulations in force in France and in the European Union regarding the protection of personal data (General Data Protection Regulation or "GDPR").

This Policy informs you of the conditions under which Green Impact Index, in its capacity as data controller, collects and uses your data. It supplements the information provided to you when you send it your data by filling out a form.

This Policy applies to data collected when you use our site.

It is openly accessible at all times at https://www.greenimpactindex.com/privacy-policy

Please read it carefully and refer to it regularly.

What data is processed?

We may process the following categories of personal data:
Data relating to your identity: Title, Last Name, First Name
Contact Details: e-mail Address, etc. 
Technical Data: Connection Data, IP Address

These data depend on your interactions with our association: Data collected via the contact section and your use of our services and website.

You will be informed whether your data is mandatory or optional at the time of collection. Failure to provide information marked as mandatory will prevent us from executing your request. For example, we need your e-mail address to send you a response.

We remind you that the Green Impact Index Association does not engage in commercial canvassing for donations from individuals or professionals.

Why do we process your data?

For each processing operation, we collect and use only the data that is relevant and necessary for the intended purpose.

We use your data, on the legal basis of legitimate interest, to:
- Answer all your questions

We use your data, on the legal basis of consent, to:
- Carry out statistical analyses

Your data may also be used to meet our legal or regulatory obligations.

How long do we keep your personal data? 

We will only retain your personal data for as long as is necessary to fulfill each of the purposes set out in this Policy.

We apply retention periods adapted to each purpose, for example: 
- We store the data processed to answer your questions for a period of 1 year
-- We store your connection data for a period of 13 months 

Who is your data intended for?

The recipients of personal data are the duly authorized personnel of the Green Impact Index Association, its service providers and subcontractors.

Data may also be transmitted to the competent public authorities, at their request, or in order to comply with other legal obligations.

How do we ensure that your data is secure?

We take all necessary measures to ensure the security and confidentiality of your data in order to prevent loss, accidental destruction, misuse and unauthorized access. The security of your data is ensured by measures such as anonymization, encryption, protection of our information systems, data backup, etc.

Where is your data stored?

We have chosen to support data hosting providers committed to storing data within the European Union.

In the event that, by way of exception, a service provider is required to transfer data outside the territory of the European Union, we ensure that the processing implemented complies with a level of personal data protection corresponding to that required by regulations (GDPR), supplemented by Green Impact Index's internal rules.

What are your rights?

In accordance with the applicable regulations, you have various rights that you may exercise at any time.

You have the right to access, rectify and delete data concerning you, as well as the right to request the portability of the data you have provided to us. 

You have the right to object to the processing of your data on legitimate grounds, or to request the restriction of such processing. 

You have the right to issue instructions concerning the fate of your data after your death.

How to exercise your rights

To exercise any of your rights, simply contact us at this e-mail address: privacy@ymet.com

Please enter your last name, first name and e-mail address. We will respond to your request within one month of receiving your complete request. We reserve the right to refuse requests that are manifestly unfounded or excessive. 

The Green Impact Index Association has appointed a Data Protection Officer (DPO) whose mission is to ensure compliance with applicable regulations and the rules described in this Policy.

If you have any questions or comments about the processing of your personal data, you can also contact the Data Protection Officer at the following e-mail address: privacy@ymet.com and by using the following form.

We undertake to do our utmost to respect your rights with regard to your personal data. If, however, you consider that these rights have not been respected, you have the possibility of lodging a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French supervisory authority whose mission is to ensure compliance with the regulations applicable to personal data: www.cnil.fr

How can you stay informed about changes to our Data Protection Policy?

We undertake to update this Policy as necessary. It is openly accessible on our website and its application covers the relationship between you and Green Impact Index, regardless of the framework of this relationship.