Personal data protection policy

The « Atelier parisien d'urbanisme » (Apur) is committed to protecting the personal information and privacy of its websites visitors and anyone using its Services.

The purpose of our Personal Data Protection and Cookies Policy is to inform you about :

  • The types of personal data we collect about you  
  • How your personal data is processed by Apur and by its possible partners and subcontractors 
  • The conditions and modalities of use of your personal data and your rights in compliance with the European and French legislation applicable to the Apur.

All operations on your personal data are processed in compliance with the regulations in place, notably with the regulation n°2016/679 of the European Parliament and of the Council of 27 of April 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data, which repealed Directive 95/46/EC (the “GDPR”).

1. DEFINITIONS

  • Personal data - Any information that directly or indirectly identifies an individual.
  • File - any structured and stable set of personal data accessible according to specific criteria.
  • Data subject - Individuals whose Personal Data is processed.
  • Data controller - The natural or legal person, public authority, agency or any other body, which alone or jointly with others, determines the purposes and means of the processing of personal data.Data processing - Any operation or set of operations applied to Personal Data, such as data collection, recording, organisation, structuring, storage, adaptation, modification, extraction, consultation, use and transmission.
  • Processing – Any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated or by manual means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of the data.
  • Recipient - any person entitled to receive communication of the data other than the Data Controller, the Subcontractor, and the persons who, by virtue of their functions, are responsible for processing the data (data processing team)
  • Authorized third parties - the authorities legally entitled, in the context of a particular mission or the exercise of a right of communication, to ask the Data Controller to communicate personal data to them;

2. BASIC PRINCIPLES OF PERSONAL DATA PROCESSING

The Apur’s staff respects and applies the following basic principles when processing personal data:

  • Legitimate and fair processing
  • Purpose specification
  • Necessity and proportionality
  • Accuracy
  • Respect data subject’s rights  
  • Confidentiality
  • Security
  • Accountability and supervision

3. IDENTITY OF THE DATA CONTROLLER

The Apur, a non-profit association governed by the law of July first 1901, based at 15 rue Jean-Baptiste Berlier, 75013 Paris, France
Represented by Mr. Christophe NAJDOVSKI, President of the Atelier parisien d'urbanisme.

4. PROCESSING OF PERSONAL DATA

Whilst using the www.apur.org web site, Apur may collect data concerning you. 
This data is processed in accordance with the purposes for which it was collected, some information being obligatory and others optional, as indicated in the collection forms.
According to the purpose it was collected for. As informed in our data collection forms, some information is mandatory and others optional.

The data processing on our web site allows:

  • You to contact us by form; The information collected by the form (recipient, name, e-mail, message) is subject to computerized processing by the Apur. This is based on your consent and its purpose is to manage responses to requests made. The processing of your data is based on your consent, its purpose is to aid in the management of our requests and increase response efficiency This information is exclusively intended for the Apur services concerned/ (Management, International, data and open data, communication, publication distribution, documentation, photo libraries, applications, accounting, DPO). Your information is kept during the necessary time to process your request, a maximum of six months after the request is made.  
  • The management of spontaneous applications via the contact form; The information collected specifically by the application section of the form (recipient, name, e-mail, message and CV and cover letter attachment with, depending on the case, marital status, address, telephone, e-mail, training, experience, CV, etc.) is subject to computerized processing by the Apur. This processing is based on your consent and is intended for the purpose of managing applications. This information is intended exclusively for Apur's services. The processing is based on your consent, its intent is to aid the management of applications. The data is kept during the necessary time to process your application and will be kept for a maximum period of 12 months. 
  • The management of newsletter subscriptions; The e-mail address collected when subscribing to the newsletter is processed by Apur in the intent of managing and sending the newsletter via email. This processing is based on your consent. Otherwise, the Apur will not be able to answer your request. This information is for the exclusive use of the Apur and will be kept until you unsubscribe, which is possible at any time via a link provided in each newsletter received.
  • Elaboration of statistics relative to the frequentation, traffic of the site (management of cookies for audience measurement); Apur uses the services of the American company Google Inc / Google Analytics in order to count visitors and identify the way they use the Apur website. These cookies are deposited and read on the user's terminal equipment as soon as the user accesses a website using the "Google Analytics" service. In the course of this data processing, your navigation data may be shared outside the European Economic Area. Your consent is obtained by offering the possibility of refusing via a "cookie banner" and that your data protection rights are respected.

The collection of data is based on your consent or on the legitimate interest of the Apur.

5. RETENTION PERIODS

Apur will keep your personal data in a secure environment only for as long as necessary to the purposes for which it was collected or for the maximum period allowed by the applicable legislation in France. 

  • Management of requests via the contact form : 6 months from the receipt of the requests
  • Management of applications via the contact form : 12 months from receipt of the application
  • Newsletter : until you unsubscribe (duration of the subscription)
  • Audience measurement and personalization of websites and mobile applications, cookie management: 6 months

 

6. RIGHTS OF INDIVIDUALS

In compliance with (the) Regulation (EU) 2016/679 on the protection of personal data, you have the right to ask the Apur DPO for access to your personal data, rectification, deletion, as well as a right to object to and limit the processing of your personal data.

In addition, you have the right to define general and specific directives defining the way in which you intend these rights to be exercised after your death.

If you believe, after contacting us, that your rights regarding your personal data are not being respected, you may submit a complaint to the CNIL or to the supervisory authority of your place of residence.

To exercise these rights or for any question about the processing of your data by our system, you can contact our Data Protection Officer (or DPO), providing proof of your identity or any element that allows your identification, by e-mail to dpo@apur.org or by post to DPO Apur, 15 rue Jean-Baptiste Berlier 75013 Paris.

7. RECIPIENTS

The recipients of your personal data are the relevant departments of the Apur and its possible subcontractors within the framework of their functions.

These personal data are not communicated to third parties. However, Apur reserves the right to transmit personal data to authorized third parties in order to meet its legal obligations, and in particular if it is obliged to do so by judicial requisition.

Apur requires all its service providers and partners to handle personal data according to its confidentiality and security liabilities and commitments.

8. SECURITY

Taking into account the evolution of technologies, the costs of implementation, the nature of the data to be protected as well as the risks for the rights and freedoms of individuals, Apur established all appropriate technical and organisational measures to guarantee the confidentiality of the personal data collected and processed and to ensure a level of security adapted to the risk.

Apur ensures the security of your personal data by implementing reinforced data protection through the use of physical and logical security measures.

Apur has defined a personal data protection policy and informs any person acting under its authority who has access to this information of its confidential nature. In addition, Apur ensures that its technical service providers who may have knowledge of personal data respect the same confidentiality.

9. COOKIES

Definition
Cookies are data stored in a user's terminal equipment and used by the site to send information to the user's browser, allowing the browser to send information back to the originating site (e.g., a session identifier, language choice or date).

Cookies allow to keep, for the duration of the validity of the concerned cookie, status information when a browser accesses different pages of a website or when this browser returns later to this website.

Only the sender of a cookie can read or modify the information contained in it.

Several types of cookies are used by the Apur website:

  • So-called application or technical cookies : banner cookie management, drupal session management "has_js". These cookies are necessary for the functioning of our site. They allow you to use the main features of our site and do not require the information and prior consent of the user to be deposited on his terminal.
  • Audience measurement cookies : Google Analytics (*), google tag manager (*). These are cookies that allow us to know the use, the volumes of frequentation and use as well as the performance of our site (for example, the most frequently consulted pages).
  • Cookies related to targeted advertising : doubleclick (*) via the integration of videos from our "YouTube" channel on certain pages of our site.

(*) Google Analytics, Google Tag Manager and Doubleclick
Apur uses the services of the American company Google Inc.
The Google Analytics service allows us to count visitors and identify the way they use the site. These cookies are deposited and read on the user's terminal equipment as soon as the user accesses a website using the "Google Analytics" service.
When this data processing is carried out, your navigation data may be shared outside the European Economic Area. The Apur ensures that your consent is obtained via a "cookie banner" and that your data protection rights are respected.

Consent
You have the choice to authorize or not the deposit of cookies used by our site that are not essential to its operation. They will only be deposited if you accept their use. To configure or modify your choice at any time, you can use our cookie management tool.

By setting your browser to refuse cookies, certain features, pages and areas of the site will not be accessible, for which we cannot be held responsible.

We would also like to draw your attention to the fact that, when you oppose the installation or use of a cookie, a refusal cookie is installed on your terminal equipment.

10. UPDATES

his Policy is effective as of March 26, 2021.

To check for updates to our Policy, please visit this page regularly.

DO YOU HAVE ANY QUESTIONS?

Apur is at your disposal for any further information regarding the use of your data.