Privacy
policy

• Account. Email address, password (stored in hashed form by Firebase Authentication, never in clear text), sign-in provider (email or Google), display name, first and last name where the Google account provides them, email verification status, preferred language, role, creation and update dates. Purpose: to create the account, authenticate you and open the Observatory. Legal basis: performance of the contract formed by the terms of use (GDPR, Art. 6(1)(b)).
• Session. A session cookie (__session) set after sign-in, inaccessible to the page’s scripts. Purpose: to recognise a signed-in account on pages served by the server. Legal basis: performance of the contract; this cookie is strictly necessary and does not require consent.
• Contact requests. Email address, name if entered, subject and message sent through the contact form, and the account identifier if you are signed in. Purpose: to answer your request. Legal basis: our legitimate interest in answering people who write to us (GDPR, Art. 6(1)(f)).
• Purchases. An order records on your account the study and edition ordered, the language, the account’s email address, the version of the terms of sale accepted, the proof of your consent to immediate performance (wording, fingerprint, timestamp — terms of sale, article 5), then, once Stripe confirms payment, the Stripe references of the transaction (payment session, payment), its amount and currency, the access right opened and its end date, the sending status of the delivery email, and, for each PDF delivered, its delivery reference, generation identifier and SHA-256 fingerprint (the file itself is not kept); any refund or payment dispute is logged there. To create the payment page, we send Stripe the account’s email address, the order reference, the study and the edition. We receive neither your card details nor your billing address. After payment, the delivery and order-confirmation email is sent to the account’s address. Purposes: to open and deliver the purchased content, to prove the order, delivery and consent, and to handle refunds and disputes. Legal bases: performance of the sales contract and our legal obligations.
• Technical and security logs. Application server request logs (IP address, page requested, browser, date) kept by Google Cloud, and a log of administrators’ sensitive actions. Purposes: security, abuse prevention, diagnostics. Legal basis: our legitimate interest in securing the service (GDPR, Art. 6(1)(f)).
• Audience measurement (Google Analytics 4), only if you accept it. Pages and content viewed, usage events (account creation, sign-in, opening a study or an analysis, viewing the Observatory), technical information about the device and browser, approximate location derived from the IP address, and, for a signed-in account, a pseudonymous identifier — an irreversible hash of the internal identifier. Neither your email, nor your name, nor your account identifier is sent to Google. Purpose: to know whether the service is actually used. Legal basis: your consent (GDPR, Art. 6(1)(a)), which you may withdraw at any time from the cookie policy.
• Local preferences. Language, appearance and your audience-measurement choice, kept in your browser. They do not leave your device, except the language, sent to the server in a cookie so that the right version of the pages is served.

No data is sold, used for advertising, or combined with other sites. No automated decision producing legal effects is taken concerning you.

• Google Cloud and Firebase (Google), processor for hosting the application server, the database, authentication and technical logs.
• Google Analytics (Google), for audience measurement, only if you have accepted it.
• Hostinger (Visionary Edition’s mailbox provider), processor for sending the delivery and order-confirmation email: it receives the account’s email address and the content of that email.
• Stripe (Stripe Managed Payments) and Link, merchant of record for the transaction (terms of sale, article 3). The data you enter on the payment page — payment method, name, billing address and, if you use it, your Link account — are collected and processed by Stripe for payment, taxes, invoicing, fraud prevention, disputes and transaction support, under the Stripe and Link privacy policy presented on that page, which also states where the data are processed and the transfer safeguards. Stripe allows buyers to request deletion of their transaction data from Link.

Apart from you for your own data, only France ÉcoScan administrators access account data and contact requests, to the extent necessary.

• Application server: Google Cloud, europe-west4 region (Netherlands).
• Account database (Cloud Firestore): us-central1 region (United States). Account, contact and order data are stored there.
• Authentication (Firebase Authentication): a service Google operates from data centres located in the United States.
• Audience measurement (Google Analytics): Google states that it collects data from devices located in the European Union through servers located in the Union, where the IP address is used to derive an approximate location and is then discarded without being stored, before sending the data to its analytics servers, which may be located outside the Union, in particular in the United States.

This processing therefore involves transfers of personal data to the United States. They rely on the European Commission’s adequacy decision on the EU–U.S. Data Privacy Framework (EU-U.S. Data Privacy Framework), to which Google LLC has certified its adherence, and, failing that, on the European Commission’s standard contractual clauses incorporated into Google’s data processing terms. You may request a copy at the contact address below.

• Account: until it is deleted, which you may request at any time. After deletion, Google states that it erases authentication data from its active and backup systems within 180 days; it keeps the IP addresses logged by authentication for a few weeks.
• Session cookie: 5 days at most, and deleted on sign-out.
• Language cookie: 1 year.
• Server request logs: 30 days.
• Audience measurement: event and user data are kept by Google Analytics according to the property’s retention period, 14 months at most. The lifetime of the trackers is detailed in the cookie policy.
• Audience-measurement choice: kept in your browser until you change it, clear the site’s data, or the cookie policy changes version.
• Contact requests: for as long as it takes to handle the request and keep a record of it in case of follow-up.
• Orders and purchases: for the thirty days of access to the purchased edition, then for the limitation periods and the durations required by law. If you delete your account, each order is kept without your email address, as a commercial record and proof of consent.

You have the rights of access, rectification, erasure, restriction, portability and objection within the limits set by the GDPR, the right to withdraw a consent at any time, without affecting the lawfulness of earlier processing, and the right to set instructions regarding what happens to your data after your death. We reply within one month. You may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL, www.cnil.fr).

Exercise your rights: Contact the publisher

The domain name is managed through HOSTINGER operations, UAB.