Data Protection Policy

Use of your personal data

Your personal data is only used in the context of our commercial relationship. I do not share your personal information with third parties without your prior consent, unless such sharing is required by law.

The information collected may be communicated to a third party linked to my company by contract for the execution of subcontracted tasks (such as invoicing, accounting management or the sending of bulk emails).

In this case, I ensure that the subcontractor meets the requirements of the European Data Protection Regulation (GDPR).

Retention of your personal data

Your contact details will be retained for 5 years from the end of the last contractual relationship, if I issue a quote/invoice on your behalf. Data collected for accounting or tax purposes is kept for 10 years in accordance with French legislation (article L123-22 of the French Commercial Code).

I am committed to ensuring the protection of your personal data. In order to prevent unauthorised access or disclosure, I have put in place appropriate electronic procedures (encryption, passwords) to protect and secure the personal data I collect from you.

In the event of a data breach, I will inform you as soon as possible and, within 72 hours of becoming aware of the breach, I will notify the Commission Nationale de l’Informatique et des Libertés (CNIL).

Legal disclosure

I will disclose any information I collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when I believe in good faith that disclosure is necessary to protect my rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights related to your personal data:

• The right to be informed.

• The right of access.

• The right to rectification.

• The right to erasure.

• The right to restrict processing.

• The right to data portability.

• The right to object.

• Rights in relation to automated decision-making and profiling.

To exercise your rights, you may send an email to contact@nativewordsby elsa.fr, enclosing valid proof of your identity.

For more information and in the event of a complaint, you can contact the French National Commission for Information Technology and Civil Liverties.