ONLYLYON collects personal data as part of its business activity. A personal data item is defined as any information item relating to a natural person who can be directly or indirectly identified, such as the surname, first names, email address or postal address of a natural person, their image on a photograph, an IP address, a location data item, etc. Personal data are collected, saved and stored in compliance with the provisions of the French data protection law of 6 January 1978 (version currently in force) and with those of the General Data Protection Regulation (GDPR).
ONLYLYON is a brand name registered by ADERLY (Lyon Area Economic Development Agency). ADERLY is therefore responsible for processing your data.
For any questions about your rights, or in order to exercise them, you may contact the data protection officer (DPO), stating in the subject field: “À l’attention du Délégué à la Protection des Données” or in English: “FAO the data protection officer”
- by email: firstname.lastname@example.org
- by post: Place de la Bourse 69289 Lyon cedex 02 France
- by telephone: 04 72 40 57 50
Collection of personal data
For its internal needs, ADERLY chiefly collects personal data for the purposes of:
- Managing its client and prospect contacts;
- Managing its contracts;
- Managing staff and recruitment;
- Creating user accounts (ambassador extranet).
On this website, your personal data are collected via a form that has precise and limited purposes:
The collected data are used to best process your requests and to respond to them.
Your personal data are collected and processed on the basis of your consent.
Collected personal data
The items marked with an asterisk are required for us to provide the services described on our website:
- First name
- Email address
- Telephone number
- How you heard about ONLYLYON
If you decide not to complete these fields, we will be unable to provide the requested services. This document is liable to change, particularly when required to meet the obligations of the personal data protection law.
Data are retained, from the date of their collection by the data controller or of the most recent contact (a request for documentation, for example), for the period necessary to provide the proposed services. Data making it possible to establish the proof of a right or a contract, or which are retained for compliance with a statutory obligation, may be retained for a longer period and be archived pursuant to current provisions (notably those stipulated by France’s commercial, civil and consumer codes).
Data transfer outside of the European Union
Your personal data are not transferred outside of the European Union.
Pursuant to articles 15 to 22 of the GDPR, you may exercise the following rights by contacting the DPO or the data controller:
Right of withdrawal
This is understood to be the possibility offered to web users to request that their personal information is no longer included, for example, in a distribution list. You may withdraw your consent at any time.
Right of access
The right of access allows you to know if personal data relating to you are collected and processed, and to have them sent to you in a comprehensible format. You have the right to view your data at any time, free of charge. You may obtain the following information:
- Type of processing
- Personal data collected
- Recipients or categories of recipients to which these data have been, or will be, sent.
Right to rectification
The right to rectification allows you to rectify inaccurate or incomplete information relating to you. If ADERLY refuses, or does not take action within one month, you may file a complaint with the CNIL (the French data protection regulator).
Right of erasure
The right of erasure allows you to request that your personal data be erased if your situation includes at least one of the following cases:
- You withdraw your consent to use your data (this is your right of withdrawal, as described above)
- Your data are used for prospection
- Your data are not, or no longer, necessary for the purposes for which they were collected or processed
- Your data are subject to illegal processing.
- Your data were collected when you had not reached the age of digital consent (in France: 15 years)
- Your data must be erased to meet a statutory obligation that may concern ADERLY.
- You objected to the processing of your data, and ADERLY had no legitimate or overriding grounds to not satisfy this request
Right of objection
The right of objection is used for processing operations that are not based on consent. It is understood to be the possibility for web users to permanently stop an operation to process their personal data. ADERLY may however refuse your request if we have a legitimate interest in not ceasing the operation that overrides your own. The right of objection does not mean that the data will be erased. If you want ADERLY to no longer hold your personal data, you may exercise your right to erasure.
Right to restrict data processing
The right to restrict processing of your data supplements your other rights (rectification, objection, etc.). It aims to pause the processing of your personal data during a certain period after your request to exercise a right.
You may request that the processing of your personal data be restricted in the following situations:
To supplement the right to rectification: You contest the accuracy of your personal data and wish to exercise your right to restriction. ADERLY shall no longer use the incorrect data that you notified to it until it has had time to check your identity and rectify the data;
As an alternative to the request for erasure: A situation where your data is illegally processed but you object to their erasure and prefer to implement restriction;
When taking legal action: You may ask ADERLY to retain your personal data during legal action if this is of use to you. We retain the data for the required period, even if they are no longer useful to us.
To supplement the right of objection: Your have exercised your right of objection. ADERLY may refuse, but to do so must have legitimate grounds that override your own. In this case, the processing of your data may be restricted during this checking period.
Right to portability of your data
The right to portability offers you the possibility to obtain all your personal data that ADERLY has collected. You may subsequently send them to another data controller. You will receive your personal data in a structured and common format – legible on a computer – so that you may transfer them to other data controllers.
Should a difficulty arise regarding the management of a person’s personal data, the person in question has the right to file a claim with the CNIL or with any other competent supervisory authority.
Cookies may load automatically in your browser program or your terminal when you access our website. A cookie is a file that does not allow a person to be identified but which is used to record information about a person’s browsing on the ONLYLYON website.
The sole purpose of the collected traffic data is to enable us to analyse how our news pages are visited in order to improve their content. The data relating to visitors’ browsing are not exploited by name. These data are aggregated statistics telling us which are the most and least popular pages, the preferred paths, the activity levels per day of the week and per hour of the day, and the main client or server errors.
Generally, the lifetime of a cookie is 13 months at most.
May I refuse the loading of cookies on my computer?
How can cookies be configured and deleted?
For instructions, refer to the relevant browser link below:
Links to other websites and social media
The personal information that we collect is kept in a secure environment. The people working for us are required to comply with the privacy of your information. To keep your personal information secure, we use the following measures:
- SSL (Secure Sockets Layer) protocol
- Data back-up
We undertake to maintain a high degree of privacy by incorporating the latest technological innovations. However, as no mechanism ensures maximum security, there is always an element of risk when the Internet is used to transmit personal information.