Who we are
This website, parisinq.com, is run by PARISINQ, a media production and technology company.
We are the controller of the personal data described in this notice. This means we decide why and how it is used, and we are responsible for handling it in line with the EU General Data Protection Regulation (GDPR). To contact us about your personal data, email privacy@parisinq.com.
This notice covers this website and the messages you send us through our contact form or by email. Other websites that we link to have their own privacy policies. Formward, which delivers our contact form, also has a privacy policy for its own activities, but we remain responsible for the messages it delivers to us.
What we collect
We collect only what you choose to send us and the technical data needed to show you this website. It comes directly from you or, in the case of server logs, automatically from your browser.
When you use our contact form
- Required: your first name, last name and email address.
- Optional: your phone number and your message.
- Recorded automatically: the date and time the form was sent.
The form passes this information to Formward, an EU-based form service that stores it for us and emails it to us (see Who receives your data).
Because your browser connects to Formward directly, Formward also receives your IP address and the technical details that browsers normally send, such as your browser type.
According to its privacy policy, Formward immediately turns your IP address into a pseudonymised code (a keyed hash). It keeps this code as long as your message and uses it to filter spam and to stop too many messages being sent in a short time. It also keeps minimal technical logs. Its privacy policy explains this processing and the legal basis Formward relies on for it.
If the form cannot be sent, the page tries to open your own email app with your message already filled in, and shows a link that does the same. Nothing is sent until you press send in your email app.
When you email us
If you email us at any of our addresses, we receive your email address, your name as it appears in your email, your message and any attachments. We also receive the technical details that every email carries, such as the date and time it was sent.
When you visit this website
Each time your browser asks for a page or file, our hosting provider receives the request and may record it in a server log. Such a log can show:
- your IP address and the date and time;
- the page or file requested, and the page you came from (the referrer);
- your browser’s user agent, which describes your browser and operating system;
- the response status and the amount of data sent.
We collect nothing else about how you use this website (see Cookies and tracking).
Purposes and legal bases
We use personal data only for the purposes below. The GDPR requires a legal basis for each one, which we list next to it. The data involved is described in What we collect.
| Purpose | Legal basis |
|---|---|
| Answering your inquiry, sent through the form or by email, and any follow-up questions | Article 6(1)(f) GDPR: our legitimate interest in answering the messages people send us. If you ask about a contract with you personally, Article 6(1)(b) GDPR: steps you ask us to take before entering into a contract. |
| If we work together: agreeing and carrying out the contract and managing our business relationship | Article 6(1)(b) GDPR if the contract is with you personally. If you act for a company or other organisation, Article 6(1)(f) GDPR: our legitimate interest in working with our clients and partners. |
| Meeting our legal obligations, such as keeping business records for tax and accounting | Article 6(1)(c) GDPR: compliance with a legal obligation |
| Delivering this website and keeping it secure (server logs) | Article 6(1)(f) GDPR: our legitimate interest in running a reliable, secure website and in detecting and preventing misuse |
Where we rely on legitimate interests, we do so only when those interests are not overridden by your interests, rights and freedoms. You can object to this processing at any time (see Your right to object).
Who receives your data
We share personal data only with the following recipients, and only as far as each of them needs it.
- Formward (formward.eu), a form service run by EGF Fastighetsservice AB, a company registered in Sweden. It receives what you enter in our contact form, stores it for us and emails it to us. It acts as our processor under a data processing agreement (Article 28 GDPR), so it may use your message only on our instructions.
- Formward stores messages on servers run by Hostup AB in Sweden, and emails them to us through Mailjet in France.
- It deletes messages from our Formward account automatically after 30 days (see How long we keep your data).
- It does not transfer messages outside the European Economic Area (see International transfers).
- Our email provider, which stores the emails and form messages we receive in our mailbox.
- Our hosting provider, which delivers this website to your browser and keeps any server logs.
- Professional advisers and public authorities: for example an accountant who keeps our business records, or the tax authorities, a court or the police when the law requires us to share data with them.
We never sell your personal data, and we do not share it with anyone for advertising. If you would like to know which email and hosting providers we use, just ask us.
International transfers
Under the GDPR, personal data may leave the European Economic Area (EEA) only in one of three cases (Articles 44 to 49 GDPR):
- the European Commission has decided that the destination country protects it adequately (an “adequacy decision”);
- appropriate safeguards are in place, such as the Commission’s standard contractual clauses; or
- one of a few specific exceptions set out in the law applies.
Our contact form
Under its data processing agreement with us, Formward does not transfer messages sent through our contact form outside the EEA. It stores them in Sweden and emails them to us through Mailjet in France. Formward also offers an optional anti-bot check from Cloudflare, a US company, but our form does not use it.
Our hosting and email providers
If our hosting or email provider processes personal data outside the EEA, we make sure this is covered by an adequacy decision (such as the one for US companies certified under the EU–US Data Privacy Framework) or by the Commission’s standard contractual clauses.
You can ask us which safeguard applies, or for a copy of it, at privacy@parisinq.com.
How long we keep your data
We keep personal data only for as long as we need it for the purposes above, or for as long as the law requires. After that, we delete it.
| Data | How long we keep it |
|---|---|
| Inquiries sent through the form or by email | As long as we need them to answer you and deal with any follow-up. If no business relationship follows, we delete them once we no longer need them, and at the latest 12 months after our last contact with you. |
| Correspondence and records from a business relationship | As long as the relationship lasts and we need them for it. Records that the law requires us to keep, such as those for tax and accounting, are then kept for as long as that law requires. |
| Copies of messages held by Formward | 30 days. Formward then deletes them from our account automatically, and we can delete them sooner. A deleted message can remain in Formward’s encrypted backups for up to 30 days, until the backup is replaced. |
| Server logs | Only as long as our hosting provider needs them to run this website and keep it secure, typically a few weeks. |
Your rights
Under the GDPR you have the rights listed below. Some of them apply only in certain situations, and the law allows some exceptions.
- Access (Article 15): ask whether we hold personal data about you, and receive a copy of it.
- Rectification (Article 16): have inaccurate data corrected and incomplete data completed.
- Erasure (Article 17): have your data deleted, for example when we no longer need it.
- Restriction (Article 18): have us limit what we do with your data, for example while we check whether it is accurate.
- Data portability (Article 20): receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another organisation. This applies where we process the data by automated means on the basis of a contract or your consent.
- Objection (Article 21): object to processing that is based on our legitimate interests (see Your right to object).
- Withdrawal of consent (Article 7(3)): we do not ask for your consent for anything at present. If we ever do, you can withdraw it at any time; this does not affect what we did before you withdrew it.
- Complaint (Article 77): lodge a complaint with a data protection authority (see below).
Your right to object
Where we process your data on the basis of our legitimate interests (Article 6(1)(f) GDPR), you can object at any time, on grounds relating to your particular situation. We will then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims. To object, email privacy@parisinq.com.
How to exercise your rights
Email privacy@parisinq.com. Exercising your rights is free of charge. If we have reasonable doubts about who you are, we may ask for information to confirm your identity.
We will respond without undue delay and in any case within one month of receiving your request. If a request is complex, or we receive many requests, we may extend this by up to two further months; if so, we will tell you within the first month and explain why. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse it. If we do not act on a request, we will tell you why within one month, and you can then complain to a data protection authority or go to court.
Complaints
If you are unhappy with how we handle your data, please tell us and we will try to put it right. You also have the right to lodge a complaint with a data protection authority, in particular in the EU or EEA country where you live or work, or where you believe the infringement took place. The European Data Protection Board publishes a list of all national data protection authorities.
Do you have to give us your data?
No. No law or contract requires you to give us personal data, and whether you contact us is up to you. Our contact form does need your first name, last name and email address (the fields marked “required”) so that we know who you are and can reply; without them, the form cannot be sent. Your phone number and message are optional.
If you later enter into a contract with us, we will need some details, such as your name and contact details, to conclude and carry out that contract.
When you visit this website, your browser automatically sends technical data, such as your IP address. Without it, the website cannot be shown to you.
Automated decisions and profiling
We do not make decisions about you based solely on automated processing (Article 22 GDPR), and we do not profile you.
To keep out spam, our contact form contains a hidden field that only automated programs fill in. Formward also uses a pseudonymised code of your IP address to detect spam and to stop too many messages being sent in a short time. This screening is only meant to stop automated spam and abuse. It has no legal or similarly significant effect on you, and we do not use it to profile you.
Cookies and tracking
This website sets no cookies, uses no analytics or other tracking, and loads nothing from other websites, so there is no cookie banner. Our Cookie Policy gives the details, including what happens if you send the contact form with JavaScript switched off.
Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we limit access to it to the people who need it to deal with your inquiry. For example:
- the contact form sends your message to Formward over an encrypted HTTPS connection;
- this website has no user accounts or passwords, and no third-party code runs on its pages.
No way of sending or storing data over the internet is completely secure, and ordinary email is not always encrypted from end to end. We do not ask for sensitive information, such as health information, passwords or payment details, so please do not send it to us through the form or by email.
Children
This website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe that a child under 16 has sent us personal data, please contact us and we will delete it.
Changes to this notice
We will update this notice when the way we handle personal data changes, for example if we change service providers. The date at the top of this page shows when it was last updated.
Contact us
For questions about this notice or your personal data, or to exercise your rights, email us at privacy@parisinq.com.