External data protection policy

1.Introduction

The Root-Me association processes personal data about you as the controller in the context of the use of its website accessible at the following url address : https://www.root-me.org

2. Data controller

The Root-Me Association processes personal data as the data controller.
Address : 29 CHEMIN DE GRAVE 69450 SAINT-CYR-AU-MONT-D’OR
E-mail : contact@root-me.org

3. Object

The purpose of this policy is to inform users of the methods of collection, processing and use of their personal data and of their rights with regard to the protection of this data in accordance with the RGPD and the amended law 78-17 of 6 January 1978 on information technology, files and freedoms.

4. When do we process data ?

Personal data is collected by the Root-Me association through the www.root-me.org website for specific, explicit and legitimate purposes, in the context of

5. What categories of data do we process ?

In the context of the use of the https://www.root-me.org website, several types of personal data may be collected. Mainly, the data collected corresponds to the following categories :

  • identification data (name, first name or pseudo, and password) ;
  • data for communication purposes (e-mail address) ;
  • data resulting from your activities on the site and in particular data resulting from the challenges ;
  • connection data (website name, website URL, IPv4 and IPv6 address, to be completed if applicable) ;
  • other (form message, language, logo, gpg key).

6. For what purposes is the data collected ?

The collection of personal data by the Root-Me association within the framework of the https://www.root-me.org site has the following purposes :

  • managing and improving access and operation of the service ;
  • creation of the Player File ;
  • management and monitoring of the relationship with the user and content marketing ;
  • measuring quality and satisfaction ;
  • making user profiles available to professionals with the consent of the users.
    The legal basis for this processing is the legitimate interest in providing a service of recreational activities to which Internet users freely subscribe or to respond in the best possible way to any possible request. In the context of the transfer of your data to professionals who are members of the Root-Me-Pro services, the legal basis is the consent of the user. The fields identified in the registration or contact forms are strictly necessary for the purpose pursued by the Root-Me association. In the absence of a reply or if the information provided is erroneous, the Root-Me association cannot guarantee the quality of the service provided.

7. To whom are these data transmitted ?

The information communicated by the user is intended for the authorized personnel of the Root-Me association, who are bound by an obligation of confidentiality. Some of the data collected may be communicated to contractual partners, in particular the Root-Me-Pro network, for the purpose of putting consenting users in touch with professionals in the sector. The partners of the Root-Me association identified in the context of the use of the https://www.root-me.org website are

  • ONLINE, hosting company ;
  • Root-Me-Pro is a partner of the Root-Me Association offering the following paid services

The Root-Me Association undertakes not to transfer your personal data outside the EU. In accordance with its commitments, the Root-Me association chooses its subcontractors and service providers with care and requires them to : provide a level of personal data protection equivalent to its own ; implement all appropriate measures to ensure the protection of personal data that they may be required to process. The Root-Me association undertakes to conclude contracts with its subcontractors defining the terms and conditions of personal data processing.

8. How long is the data kept ?

The Root-Me association keeps the data collected as part of the use of the website <https://www.root-me.org> for a period of time proportional to the purpose for which they are collected. In this respect, cookie data is kept for 13 months and player data is kept for the entire duration of your registration.

9. What are your rights ?

You are informed that you have a right of access, query, limitation, portability, deletion and rectification in relation to all your data which allows you, if necessary, to have personal data concerning you rectified, completed, updated, locked or deleted if they are inaccurate, incomplete, equivocal, out of date or if their collection, use, communication or storage is prohibited. Furthermore, you have the right to formulate specific and general directives concerning the conservation, deletion and communication of your data post-mortem. The Root-Me association is available to provide any necessary clarification concerning its personal data protection policy. You can exercise your rights or ask any questions to the internal data protection manager Adam TAGUIROV by e-mail at : contact@root-me.org. In the interests of confidentiality and protection of personal data, the Root-Me association must ensure the identity of the user before responding to his/her request. Also, any request to exercise these rights must be accompanied by a signed copy of a valid identity document. Finally, the user is required to comply with the provisions of the French Data Protection Act of 6 January 1978 as amended, the violation of which is subject to criminal sanctions.
You also have the right to object to the processing of your data for legitimate reasons, as well as the right to object to the use of your data for commercial prospecting purposes.

11. Cookies and other tracers

You are informed that, when you visit the site and if you accept it, a cookie may be installed on your browser. You can configure cookies by visiting our "Cookie Management Policy" page.

12. Security of personal data

The Root-Me association has implemented technical and organizational measures adapted to the degree of sensitivity of the personal data, in order to ensure the integrity and confidentiality of the data and to protect them against any malicious intrusion, loss, alteration or disclosure to unauthorized third parties. The Root-Me association undertakes to take the physical, technical and organizational security measures necessary to : protect its activities ; preserve the security of users’ personal data against any unauthorized access, modification, distortion, disclosure, destruction or access to the personal data it holds. Nevertheless, the security and confidentiality of personal data depend on the good practices of each individual, so the person concerned is invited to remain vigilant on this issue.