Owner and Data Controller
Bird on the wire
Céline Hennu
10 rue Condorcet
81400 CARMAUX
FRANCE
Owner’s contact email: contact@botw.fr
Types of Data Collected
The personal data that the data controller collects refers to information that personally identifies users, such as:
Identification data: surname, first name, email address, postal address, telephone number;
Data relating to the management and security of the user account: email address;
Data relating to the management of the commercial relationship: order number, invoices, delivery address;
Connection data: IP address, connection logs, browser, etc.
Cookies:
Cookies are text files, often encrypted, stored in your browser. They are created when a user's browser loads a given website: the site sends information to the browser, which then creates a text file. Each time the user returns to the same site, the browser retrieves this file and sends it to the website server
Full details on each type of Personal Data collected are provided in the relevant sections of this privacy policy or by specific explanatory texts published prior to data collection.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, all Data requested by this Application are mandatory and their absence may make it impossible to provide the Services by this Application. Where this Application specifies that some Data are not mandatory, Users are free not to communicate such Data without consequences to the availability or functioning of the Service.
Users who have doubts about which Personal Data are mandatory are encouraged to contact the Owner.
Any use of Cookies — or other tracking tools — by this Application or by the owners of third-party services used by this Application aims to provide the Service requested by the User, as well as for other purposes described in this document and in the Cookie Policy.
Users are responsible for any Personal Data of third parties obtained, published, or communicated through this Application.
Method and Place of Data Processing
Processing Methods
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of Data.
Data processing is carried out using computers or IT tools, following organizational procedures and modes strictly related to the purposes indicated. Besides the Owner, in certain cases, Data may be accessible to certain categories of persons in charge of the operation of this Application (administration, sales, marketing, legal service, system administration) or to external parties (such as third-party technical service providers, messaging services, hosting providers, IT companies, communication agencies) appointed, if necessary, as Processors by the Owner. The updated list of these parties may be requested at any time from the Owner.
Place of Processing
Data are processed at the Owner’s headquarters and at all other places where the parties responsible for processing are located.
Depending on the User’s location, Data transfers may involve transferring Users’ Data to a country other than theirs. To learn more about the location of processing of these transferred Data, Users can consult the section containing details on Personal Data processing.
Retention Time
Unless otherwise specified in this document, Personal Data are processed and stored as long as required for the purpose for which they were collected and may be retained for longer due to a legal obligation or on the basis of User consent.
Cookie Policy
This Application uses Trackers. To learn more, Users can consult the Cookie Policy.
Additional Information for Users in the European Union
Legal Basis of Processing
The Owner may process Personal Data relating to Users if one of the following applies:
Users have given their consent for one or more specific purposes;
the provision of Data is necessary to perform a contract with the User or to pre-contractual obligations thereof;
processing is necessary to comply with a legal obligation to which the Owner is subject;
processing is related to a public interest task or exercise of official authority vested in the Owner;
processing is necessary for the purposes of legitimate interests pursued by the Owner or by a third party.
In all cases, the Owner will gladly help clarify the specific legal basis that applies to processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement or a requirement necessary to enter into a contract.
Additional Information on Data Retention
Unless otherwise specified in this document, Personal Data are processed and kept as long as necessary for the purposes for which they were collected and may be stored for longer periods due to legal obligations or on the basis of the User’s consent.
Therefore:
Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until the contract’s full performance;
Personal Data collected for the purposes of legitimate interests pursued by the Owner shall be retained as long as needed to fulfill such purposes. Users can find specific information about legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner directly;
The Owner may be allowed to retain Personal Data for longer whenever the User has given consent to such processing, as long as such consent is not withdrawn. In addition, the Owner may be obliged to retain Personal Data for a longer period whenever required to comply with a legal obligation or by order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after the retention period has expired.
Users’ Rights under General Data Protection Regulation (GDPR)
Users may exercise certain rights regarding their Data processed by the Owner.
In particular, Users have the right to:
Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given consent to the processing of their Personal Data;
Object to processing of their Data. Users have the right to object where the processing is based on a legitimate interest or the performance of a task in the public interest/exercise of official authority;
Access their Data. Users have the right to know if Data are being processed by the Owner, to obtain information about certain aspects of the processing, and to obtain a copy of the Data undergoing processing;
Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected;
Restrict the processing of their Data. Users have the right to restrict the processing of their Data; in this case, the Owner will not process their Data for any purpose other than storing them;
Have their Personal Data deleted or removed. Users have the right to obtain the erasure of their Personal Data from the Owner;
Receive their Data and have them transferred to another controller. Users have the right to receive their Personal Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without any hindrance;
Lodge a complaint. Users have the right to lodge a complaint with their competent data protection authority.
Users also have the right to know the legal basis for transfers of Data to foreign countries and in particular to any international organization governed by public international law or established by two or more countries, such as the UN, as well as the security measures taken by the Owner to safeguard their Data.
Information About the Right to Object to Processing
Where Personal Data are processed for a public interest task, exercise of official authority vested in the Owner or the purposes of legitimate interests pursued by the Owner, Users may object to such processing by providing a reason related to their particular situation to justify the objection.
Users must know that if their Personal Data are processed for direct marketing purposes, they can object to that processing at any time, without any cost, and without giving any reason. When Users object to processing for direct marketing purposes, Personal Data will no longer be processed for such purposes. To find out if the Owner processes Personal Data for direct marketing purposes, Users can refer to the relevant sections of this document.
How to Exercise These Rights
Any request to exercise User rights can be addressed to the Owner using the contact details provided in this document. Such requests shall be free of charge and will be addressed by the Owner as soon as possible and always within one month. Any rectification or erasure of Personal Data or restriction of processing will be communicated by the Owner to each recipient to whom the Personal Data have been disclosed, unless this proves impossible or involves disproportionate effort. Upon request by the Users, the Owner shall inform them about these recipients.
Additional Information on Data Processing and Collection
Legal Action
Personal Data of Users may be used for legal purposes by the Owner in courts or in the stages leading to possible legal action arising from improper use of this Application or related Services.
Users acknowledge that the Owner may be required to reveal Personal Data upon request of public authorities.
Additional Information Regarding User’s Personal Data
Besides the information contained in this privacy policy, this Application may provide Users with additional information and contextual details concerning particular Services or the collection and processing of Personal Data.
System Logs and Maintenance
For operation and maintenance purposes, this Application and any third-party Services may collect files that record interactions with this Application (system logs) or use other Personal Data (such as IP addresses).
Information Not Included in This Policy
Further information about the collection or processing of Personal Data may be requested at any time from the Owner. Please consult the contact details at the beginning of this document.
Changes to This Privacy Policy
The Owner reserves the right to make changes to this privacy policy at any time by notifying Users on this page and possibly within this Application or - to the extent technically and legally feasible - by sending a notification to Users through the contact details available to the Owner. It is strongly recommended to check this page frequently, referring to the date of the last modification listed at the bottom.
If the changes affect processing activities based on the User’s consent, the Owner shall collect new consent from the User where required.
Definitions and Legal References
Personal Data (or Data)
Any information relating directly, indirectly or in connection with other information — including an identification number — that allows the identification or identifiability of a natural person.
Usage Data
Information automatically collected by this Application (or by third-party Services used by this Application), which may include IP addresses or domain names of the computers used by Users who visit this Application, URI (Uniform Resource Identifier) addresses, time of request, method used to submit the request to the server, file size received in response, numeric code indicating server response status (successful outcome, error, etc.), country of origin, browser and operating system characteristics of the User, various details about time spent on each page within the Application, details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters related to the User’s operating system or computing environment.
User
The person using this Application who, unless otherwise specified, corresponds to the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Processor
The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Data Controller, as described in this privacy policy.
Data Controller (or Owner)
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including security measures concerning the operation and use of this Application. Unless otherwise specified, the Data Controller is the Owner of this Application.
This Application
The means by which the User’s Personal Data is collected and processed.
Service
The service provided by this Application as described in the applicable terms (if any) and on this site/application.
European Union (or EU)
Unless otherwise specified, all references in this document to the European Union include all current member states of the European Union and the European Economic Area.
Legal Information
This privacy policy applies only to this Application, unless otherwise specified in this document.
If you need a formatted document or help with another translation, feel free to ask!