Exercising your rights

This page describes, in full, the procedures for exercising the rights granted to the User over their personal data, pursuant to the General Data Protection Regulation (hereinafter the "GDPR") and French Act No. 78-17 of 6 January 1978 as amended. It supplements the Privacy Policy.

Article 1 - Your rights

1.1 Right of access

You may obtain confirmation as to whether data concerning you is being processed and obtain a copy of it, together with information about the processing.

1.2 Right to rectification

You may obtain the correction of inaccurate data and the completion of incomplete data.

1.3 Right to erasure

You may obtain the erasure of your data in the cases provided for by law, subject to retention obligations.

1.4 Right to restriction

You may request the restriction of processing in certain situations, in particular where the accuracy of the data is contested.

1.5 Right to object

You may object, on grounds relating to your particular situation, to processing based on legitimate interest.

1.6 Right to data portability

You may receive the data you have provided, in a structured, commonly used and machine-readable format, and transmit it to another data controller.

1.7 Withdrawal of consent

Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

1.8 Post-mortem directives

You may set directives concerning the retention, erasure and communication of your data after your death.

Article 2 - Self-service exercise

You may export your data (JSON, CSV or PDF formats) and delete your account directly from the Service. Deletion results in the erasure of the data within thirty days, subject to legal retention obligations.

Article 3 - Exercise by request

3.1 Procedures

Other requests are to be sent to legal@noryo.app from the email address associated with the account, specifying the nature of the right being exercised.

3.2 Identity verification

The Publisher may request additional information in order to verify your identity, for the sole purpose of preventing any improper disclosure of data to a third party. Such information is retained only for as long as necessary to process the request.

3.3 Response times

A response is provided within one month of receipt of the request, extendable by two months for complex or numerous requests, the User being informed of this within one month of receipt.

3.4 Request by a third party

A request made by an authorised representative must be accompanied by proof of the power of representation.

Article 4 - Third-party data

Where the exercise of a right is likely to adversely affect the rights and freedoms of third parties, the Publisher may have to limit its scope, in compliance with the regulations.

Article 5 - Limits and exceptions

Certain requests may not be satisfied, in whole or in part, where the law so provides, in particular under a legal retention obligation or for the establishment, exercise or defence of legal claims. Any limitation is reasoned.

Article 6 - No charge

The exercise of rights is free of charge, except for manifestly unfounded or excessive requests, in particular by reason of their repetitive nature, in which case the Publisher may charge a reasonable fee or refuse to act on the request, giving reasons.

Article 7 - Complaint

Without prejudice to any other remedy, you may lodge a complaint with the CNIL (the French data protection authority), 3 place de Fontenoy, 75007 Paris, www.cnil.fr.