As part of its activies, ONLYLYON collects personal data. Personal data means any information relating to an identified or identifiable natural person, directly or indirectly. For example, a name, an identification number, location data, an online identifier, a picture, an IP adress …
The data collected by ADERLY is collected, saved and stored in compliance with the General Data Protection Regulation (GDPR) and the french law « loi relative à l’informatique, aux fichiers et aux libertés » of january 6th, 1978.
The data controller
ONLYLYON is made operational thanks to an equip linked to l’Agence pour le Développement Economique de la Région Lyonnaise (ADERLY). In this context, ADERLY is the data controller regarding your personal data.
For further inquiries and to exercice your rights you can contact :
Aderly’s Data Protection Officer
By email : firstname.lastname@example.org
Please specify « A l’attention du Délégué à la Protection des Données » in the subject line
By mail : Place de la bourse 69289 Lyon cedex 02
By phone : 04 72 40 57 50
Collection of personal information
For internal needs, ADERLYcollects personal data for purposes such as:
management of customer and prospects contact;
management of contracts;
management of staff and recruitment;
creation of user accounts (extranet ambassadeur);
On this website, your personal data is only collected through forms with specific and limited purposes.
- Contact form
The data is used for the only purpose of responding to your request
- Legal grounds for processing
Your personal data is collected and processed on the basis of your consent.
The personal data collected
In a form, fields marked with an asterik are mandatory. If you decide to not fill these out, we will be unable to provide the services requested.
We collect the following data :
- First name
- Email adress
- Phone number
- How did you find out about ONLYLYON
This document can evolve where necessary in order to implement the obligations imposed by the legislation on personal data protection.
The processing of this data is necessary to provide the services stated on our website.
Data retention period
From its collect or from the last contact from a prospect (request for additional documentation for example) the data is kept as long as necessary for the fulfillment of the purposes described above. The data is deleted after 3 years maximum.
Your data can be retained longer and be archived in compliance with a legal obligation or if it establishes the proof of a right or the proof of a contract. The duration will be in accordance with the legal provisions in force (including those laid down by the commercial code, the civil code or the consumer code).
Your personal data is used by ADERLY, ONLYLYON and its partners. It is also shared with novius, our website host and data processor.
Depending on your request, your data is transferred to the competent body :
ADERLY – Set up a business in Lyon
ONLYLYON tourisme et congrès – Organize an event in Lyon / Visit Lyon
Université de Lyon (UDL) – Find out about higher education/research opportunities in Lyon
ONLYLYON - Other
Data transfer outside the European Union
Your personal data is not transferred outside the European Union.
According to the articles 15 through 22 of the GDPR, you can exercice these following rights by contacting ADERLY’s DPO :
Withdraw your consent
Where the processing of your personal data is based on your previously given consent, you have the right to withdraw your consent at any time. For example : you don’t want your personal information to be in a mailing list anymore.
Right of access
The right to request confirmation of whether ADERLY processes personal data relating to you, and if so, to request a copy of that personal data. It is free and can be requested at any time.
Right to rectify
The right to request that ADERLY rectifies or updates your personal data that is inaccurate, incomplete or outdated. If ADERLY does not comply within a one month period, you may consult with the data protection authority in your country.
Right to erasure
The right to request that ADERLY erase your personal data in certain circumstances provided by law :
- You withdraw your consent to the use of your personal data.
- Your data is used for marketing purposes
- Your data is illegally processed
- Your data was collected when you were under the age of 15
- Your data must be deleted to abide by a legal obligation
- You objected to the process of your data and ADERLY has no legitimate or compelling reason to not comply
Right to object
The right to object can be used for processing that are not based on your consent. It gives you the possibility to definitively stop a processing of your personal data. However, ADERLY can deny your request if we have a legitimate interest to not stop the processing that prevails on yours.
The right to object does not mean that your data will be erased. If you don’t want ADERLY to have your personal data you need to assert your right to erasure.
Right to restriction of processing
The right to restriction of processing is a right that completes your other rights (rectification, erasure…). After your request to exercice this right, it puts the processing on pause for a period of time.
You can ask to restrict the processing of your personal data in these situations :
In addition to the right to rectify : You want to rectify your personal data and restrict the processing at the same time. This means ADERLY will not use the incorrect data you reported during the time it takes to verify your identity and rectify your data.
As an alternative to the right to erasure : This is the situation where the processing is illegal but you do not want to erase your data and would rather restrict the processing.
During a legal action : You can ask ADERLY to keep your personal data if it is useful during your legal action. We will keep it for the required period of time even if it is no longer useful to us.
In addition to the right to object : As explained above,ADERLYcan refuse to stop the processing if we have legitimate reasons. The processing of your data can be restricted for the period of time we need to check if we have legitimate reasons that prevail on yours.
Right to data portability
The right to data portability offers you the possibility to export all the personal data ADERLY collected on you to another company. You will receive your data in a structured, commonly used, machine-readable and interoperable format.
In case of difficulty with managing personal data, the data subject has the right to lodge a complaint with a supervisory authority.
Some non personal data can be collected such as your browser version (Netscape, Internet Explorer, etc…), your operating system (Windows, Mac, Linux, etc…) and your IP adress.
Cookies lifetime ?
Generally speaking, a cookie is valid for 13 months maximum.
Can I disable cookies on my browser ?
External links and social media
Personal information gathered via this website is stored in a secure environment. All of our employees must respect the confidentiality of such information. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received.
To ensure the security of your personal data we use the following measures :
- Computer back-up