Version in force on 10/14/2021

1. Purpose

Personal data is information that may allow, directly or indirectly, the identification of a natural person. This includes, for example, surnames, first names, email addresses, telephone numbers, usernames, IP addresses, cookies, etc.

This personal data protection policy applies to personal data collected by Gattefossé Foundation directly from users (the “Users”) of the website https://platform.fondation-gattefosse.org/ (the "Web Platform").

In its capacity as data controller, Gattefossé Foundation undertakes to collect, process and store the personal data of Users in complete confidentiality and in accordance with the provisions of this policy.

By accessing the Web Platform, the User acknowledges having read and accepted, without reservation, the terms of this personal data protection policy.

2. Purposes of processing

Gattefossé Foundation collects the personal data that Users agree to provide. Data is collected and processed for the following purposes:

• Cookies
  • Preferred language is saved;
  • Session cookie is used for session recognition

• Registration form for the Application Section of the Web Platform
  • Validation and management of access to the Application Section of the Web Platform;
  • Management and processing of requests for information, access, rectification, deletion or portability of personal data or requests to oppose or limit data processing.

• Application Form
  • The personal data contained in the application form(s) are processed for the purposes described in the relevant document ‘rules’ and in accordance with the conditions described therein.

The User is informed of the purpose of processing prior to any collection of personal data and has the opportunity to oppose it.

3. Duration of storage

In accordance with legal requirements, the personal data of Users collected on the Web Platform will be stored by Gattefossé Foundation only for the time required to fulfil the intended purpose, namely:

• Cookies:
  • Preferred language cookie will automatically expire 180 days after last visit to the Web Platform.
  • Session cookie will automatically expire when the Internet browser is closed.

• Registration form for the Application Section of the Web Platform: period of validity of access to the Application Section.

The personal data collected will be deleted:

• At the end of the term stipulated above; or
• At the User's request, in accordance with the applicable regulations and the procedures provided for in Article 7 below (subject to any legal retention obligation).

4. Transmission

Personal data collected on the Web Platform may not be sent to third parties for commercial and/or promotional purposes without the User’s prior consent.

On the other hand, this data may be sent to certain service providers/technical subcontractors of Gattefossé Foundation (hosting company in particular) bound to the confidentiality and security of this data and exclusively for the purposes described in Article 2 above.

In the event that the data is transferred to a country that is not a member of the European Union and is not subject to an Adequacy Decision, Gattefossé Foundation will take all necessary measures to ensure that the data is protected with an appropriate level of confidentiality and security.

Gattefossé Foundation may be required to send the data to the competent administrative or judicial authorities, at their request.

5. Confidentiality and security

Gattefossé Foundation undertakes to set up all necessary technical and organisational measures to preserve the confidentiality and security of the personal data collected on the Web Platform.

However, Gattefossé Foundation cannot be held liable for a security failure attributable to the User.

6. Cookies

When browsing the Web Platform, cookies may be placed on the User’s device (computer, tablet, smartphone). A cookie is a small computer file deposited on the User's device through their Internet browser that allows certain data to be stored in order to facilitate browsing on a website and enable certain functionalities.

The User is informed of the use of cookies by a banner that appears when connecting to the Web Platform. The User may choose to authorise or prohibit all or some of the cookies by clicking on the “Customise” button on the banner.

The disabling of certain cookies may alter the operation of the Web Platform. The User is informed of this when personalising cookies. In this respect, the User is informed that he/she must accept at least the session cookie in order to be able to submit an application on the Application Section. In the event that the User decides to prohibit a cookie necessary for the optimal operation of the Web Platform, Gattefossé Foundation cannot under any circumstances be held liable for the consequences relating to the altered or impaired running of the Web Platform.

The User is entitled to withdraw their consent and/or their choice to personalise cookies at any time.

7. User Rights

In accordance with the provisions of Law no. 7817 of 6 January 1978 on Technology, Files and Civil Liberties (known as the “Data Protection Law”) and European Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (known as the “GDPR”), the User has the following rights with regard to their personal data:

• Right to information;
• Rights of access and rectification;
• Right of deletion;
• Right to oppose processing for legitimate reasons;
• Right to oppose, without reason, the processing of data for marketing purposes;
• Right to personal data portability;
• Right to restrict processing.

These rights may be exercised at any time by the User by sending an email to: This email address is being protected from spambots. You need JavaScript enabled to view it., provided that proof of identity is attached.

In the event of an unsatisfactory response from Gattefossé Foundation in exercising the rights mentioned below, the User may lodge a complaint with the French National Commission for Data Protection and Liberties (“CNIL”).

8. Amendments

This personal data protection policy may be updated at any time by Gattefossé Foundation without any formality other than the online publication of a new amended version, the latter prevailing over any previous version.