Personal data means any information relating to an identified or identifiable natural person (the "data subject").
In the context of the BavAR[t] application, the data subjects are the users of the platform.
In Europe, the processing of personal data is subject to a specific legal and regulatory framework, constituted for France essentially by the European General Data Protection Regulation, known as "GDPR" and the law known as "Informatique et Libertés" of January 6, 1978. BavAR[t] complies with all these European regulations.
Underage children: The GDPR specifies that persons under 15 years of age are considered as underage for the purpose of collecting personal data. Minors must have the consent of a legal representative for their data to be collected, processed and used.
AR[t] Studio collects personal data about its users in the following cases, for the following purposes:
When you create your account on the BavAR[t] application, AR[t] Studio collects the following data:
Only the username, email and password are required to use the application. The other fields can be left blank or modified at the user's discretion.
These data are collected and processed for the purpose of managing your user account and allowing access to the features of the BavAR[t] application. This processing is based on the necessity of its implementation for the execution of a contract to which the user is a party, namely the general conditions of use of the BavAR[t] application.
When you connect to the BavAR[t] application, AR[t] Studio collects, through its servers, the following data:
When you fill out the contact form of the BavAR[t] application, AR[t] Studio collects the following data:
In the case where you would enter in the message input field some data likely to be qualified as "sensitive data" according to the applicable regulation, such as for example data relating to your state of health, you explicitly agree, while clicking on the button of sending of the form, that AR[t] Studio can receive these data and treat them in order to answer you. It is clear that AR[t] Studio does not require nor incite its users to communicate data known as "sensitive" within the framework of these free zones of comments.
This data is collected and processed for the purpose of responding to your messages and queries. This processing is based on your consent. The messages sent will not be visible to other users.
The team in charge of this processing is AR[t] Studio, official publisher of the BavAR[t] application.
The personal data collected and processed as described in Article 2 above, are used solely by the competent persons within AR[t] Studio.
They may also be shared with the company hosting our data : AWS Europe, but only to achieve the purposes described above.
The personal data collected and listed are kept by AR[t] Studio and its possible subcontractors for periods not exceeding the achievement of the purposes described above.
In application of the laws and regulations applicable to the protection of personal data, you have the following rights concerning the processing of your personal data.
You can exercise them by contacting AR[t] Studio at the following address: firstname.lastname@example.org.
These rights being purely personal, and being able consequently to be exerted only by the concerned person.
The user can have access to his personal data treated by AR[t] Studio. In the hypothesis where request would be made to him, AR[t] Studio will thus provide to the user a copy of all his personal data as well as all the legally required information, namely:
For those, among the treatments listed in article 2 above, having for legal basis the consent of the user or their necessity for the execution of a contract, the user also has the right to the portability of his personal data.
This right differs from the right of access to personal data in that (i) it concerns only the data provided by the user to AR[t] Studio and (ii) it allows the user to obtain this data in a structured and machine-readable format.
The right to the portability of the personal data of the user opens in addition the possibility that they are transmitted to another controller, with the choice of the user, provided that it is technically possible.
The user can ask to correct his personal data if they are inaccurate, incomplete or obsolete. He can also correct his data directly on his account.
The user may request that his/her personal data be deleted in the following cases:
If the data concerned has been communicated to third parties, AR[t] Studio will inform these third parties of the user's request, as far as possible.
Subject to a legitimate justification relating to the particularity of his or her situation, the user may object to any processing of his or her personal data when his or her personal data are processed on the basis of the necessity of such processing for the performance of a task of public interest or the pursuit of the legitimate interest of AR[t] Studio or of a third party.
The user may also object, without any obligation to give reasons, to the processing of his or her personal data when this is done for the purpose of prospecting.
The user can ask for the limitation of the treatment of his personal data in the following cases:
AR[t] Studio will then cease to process the data concerned and will keep them for the appropriate period.
The user can give to AR[t] Studio directives concerning the modalities of conservation, deletion and communication of his personal data to intervene after his death.
For all the treatments, among those listed in the article 2 above, having for legal base the consent of the user, this last one has the right to withdraw this consent at any time, without having to justify it to AR[t] Studio.
The user has finally the right to introduce a complaint relating to the treatments implemented by AR[t] Studio near the competent authority of control.
For France, this authority of control is the National Commission of Data processing and Freedoms. For more information on this last and the means of contacting it, the user is invited to consult the site https://www.cnil.fr/.