Version 1 dated 20/01/2020

The company Mercator Ocean in the form of a civil company, whose registered office is at 2, avenue de l'Aérodrome de Montaudran 31 400 TOULOUSE and its sub-contractors are keen to protect your private life.

The purpose of this privacy policy is to explain the processing of personal data carried out by MERCATOR OCÉAN on the Copernicus Coastal Hub website on which you are browsing.

What is personal data?

Personal data are data that can identify an individual directly or indirectly, for example:

• A civil registration data (name, address, date and place of birth)
• An e-mail address
• An IP address

What personal data do we collect?

We collect the following data:

• Last name
• First name
• E-mail address
• IP address
• Professional or personal belonging to a type of organisation (company, association, university, etc.)
• Choices of using other resources from the Copernicus programme.
• How the user became aware of the existence of the site.
• The subject of your request if you send us an email via the contact form

The data we collect is necessary to process your requests or to provide you with the services you request.

In addition, certain data may be collected to perform a service or contract to which you are a party.

At what point do we collect personal data about you?

We may collect personal data about you in the following cases:

• When browsing the website
• When you create a Coastal Hub account via the registration form

It is your responsibility to provide personal data that you certify to be correct and adequate.

On what legal ground(s) do we process your personal data?

We process your personal data because you have given your consent to the processing of your personal data for one or more specific purposes described in this privacy statement, in line with Article 5(1)(d) of Regulation (EU) 2018/1725.

What are your rights?

In accordance with applicable law, you have a number of rights:

• Access. You can request access to your personal data.
• Rectification or modification. You can ask to modify the data concerning your person.
• Right to object on legitimate grounds. You can at any time object to processing for which there is a compelling and legitimate reason.
• Right to erasure (right to be forgotten). You can ask to erase the data concerning you as soon as they are no longer necessary having regard to the purposes for which they were collected.
• Right to portability. We can, on request, make your personal data available to you in a structured, and commonly used machine-readable format.
• Right to limit processing. Within the limits permitted by law, you can request to limit the processing of personal data concerning your person.
• Right to define directives relating to the fate of personal data after death. You can contact us to define the fate of your personal data in the event of death.

How to exercise your rights?

To exercise your rights, contact us by email at the following address: dpo@mercator-ocean.fr

We ask you to attach a photocopy of your identity card to your request and to specify the right you wish to exercise.

In the absence of a response within 1 month, you can file an action with the CNIL National Commission for Information Technology and Freedoms via the following link: https://connexion.services.cnil.fr/

How long is your data kept for?

Your personal data is stored in a technical secure environment.

Depending on the purpose and processing of the personal collected data, the retention period may be different.

Most personal data is kept for a period that cannot exceed three (3) years after your last use of the website or your last contact with MERCATOR OCEAN.

The IP address is kept for a period that can’t exceed one year.

Cookies are retained for a period that doesn’t exceed 13 months (see below).

By the end of the retention period, the concerned personal data are deleted from our database.

What is a cookie?

The word cookie is used here in the broad sense to designate all of the computer tracers and other files deposed on the terminal equipment of a user during the consultation of the website or the opening of an email.

The cookies placed make possible to ensure the proper functioning of the website and to perform the following operations:

• Memorise information relating to a form that you have filled out on the website.
• Allow the technical and administrative functioning of the website
• Measure the audience of people browsing the website
• Collect statistics

What cookies do we use?

See the Cookies Policy pages for details (a link can be found in the footer of the website).

Some cookies may also be placed by third parties, in particular for cookies allowing the playback of multimedia content (video, etc.).

Who are the recipients of your personal data?

The recipients of your personal data are the following:

• The employees and company executives
• The police authorities in the context of the judicial requisitions
• The administrative and judicial authorities authorised to search for and identify the offender in strict compliance with the legal provisions
• The Europeans authorities in the context of statistics on the use of data from the Copernicus Programme.

The company also calls on subcontractors to carry out the following operations according to the instructions indicated:

• Hosting Services
• Statistical analysis
• Instant messaging service

Is your data transferred outside the European Union?

Your data is only transferred to subcontractors located:

• If you’re using the Intercom messaging system, your data are stored in the United States, as the data centre of our subcontractor is placed here.

How do we protect your personal data?

We take various technical security measures to ensure the security of your personal data and prevent its disclosure, destruction or loss, including:

• Passwords are subject to encryption in database.
• TLS is used when you use a form containing personal data
• Access to the database containing personal data is strictly limited to persons authorised by the company
• The persons authorised by the company are made aware of the protection of personal data

Modification of the confidentiality policy

The company reserves the right to modify the present confidentiality policy and to warn the users by any means.

Contact

For any question relating to the privacy policy, you can contact us by email at the following address: dpo@mercator-ocean.fr