Company and contact information
This Privacy Policy explains how Alessia Moro collects, uses, stores and protects personal data when you visit alessiamoro.com, request a quote, or order a service. It is provided in accordance with Articles 12 to 14 of Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and the French Data Protection Act no. 78-17 of 6 January 1978 as amended.
The data controller is Alessia Moro, entrepreneur individuel, SIREN 108 364 290, whose registered address is 12 Rue de la Paix, 75002 Paris, France.
Because this is a sole trader business that does not carry out large-scale monitoring or process special categories of data on a large scale, no Data Protection Officer has been appointed. This is permitted under Article 37 GDPR. All data protection matters are handled directly by Alessia Moro, who can be reached at info@alessiamoro.com.
Card numbers and other payment credentials are never collected, seen or stored by Alessia Moro. Payments are processed entirely by the payment service provider, which acts as an independent data controller for that processing. Only the transaction reference, the amount, the status and the billing details necessary for accounting are received.
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to enquiries and preparing quotes | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| Performing the service ordered and delivering the work | Performance of a contract (Art. 6(1)(b)) |
| Issuing invoices and keeping accounting records | Legal obligation (Art. 6(1)(c)) |
| Handling complaints, withdrawal requests and disputes | Legal obligation and legitimate interests (Art. 6(1)(c) and (f)) |
| Website security, fraud prevention and error diagnosis | Legitimate interests in operating a secure website (Art. 6(1)(f)) |
| Analytics and audience measurement cookies | Your consent (Art. 6(1)(a)) |
Where processing relies on legitimate interests, a balancing test has been carried out to confirm that those interests are not overridden by your rights and freedoms. You may object to that processing at any time, as described in section 7.
Personal data is never sold, rented or traded. It is shared only with the following categories of recipient, and only to the extent necessary:
Each processor acts on documented instructions under a contract meeting the requirements of Article 28 GDPR.
Data is stored and processed within the European Economic Area wherever possible. Where a service provider processes data outside the EEA, the transfer is covered by an adequacy decision of the European Commission, or by Standard Contractual Clauses adopted under Article 46 GDPR together with any additional safeguards required. You may request a copy of the safeguards in place by writing to info@alessiamoro.com.
| Data | Retention period |
|---|---|
| Enquiries that do not lead to an order | 12 months from the last contact |
| Client contact and order records | 3 years from the end of the commercial relationship |
| Invoices and accounting records | 10 years, as required by Article L123-22 of the French Commercial Code |
| Commission materials and delivered work | 12 months after delivery, then deleted unless you ask for longer |
| Server logs | 12 months |
| Cookie consent records | 6 months |
If you would like your commission materials deleted sooner than the periods above, ask and they will be removed, except where a legal retention obligation applies.
Under Articles 15 to 22 GDPR you have the right to:
To exercise any of these rights, write to info@alessiamoro.com. A response is provided within one month of receipt, extendable by two further months for complex requests, in which case you will be told within the first month. Proof of identity may be requested where there is reasonable doubt as to who is making the request.
If you consider that your data protection rights have not been respected, you may lodge a complaint with the French supervisory authority:
Commission Nationale de l’Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
www.cnil.fr
You may also complain to the supervisory authority of the EU Member State where you live or work.
Appropriate technical and organisational measures are in place to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include encrypted connections (HTTPS) across the whole website, access controls and strong authentication on all systems used, restricted access to client materials, and regular backups.
No method of transmission or storage is completely secure. In the event of a personal data breach likely to result in a risk to your rights and freedoms, the CNIL will be notified within 72 hours in accordance with Article 33 GDPR, and you will be informed directly where the breach is likely to result in a high risk.
No automated decision-making or profiling producing legal effects, or similarly significantly affecting you, is carried out.
The services offered on this website are directed at businesses and adults. Services are not knowingly provided to children under 15, and personal data relating to children is not knowingly collected. If you believe a child has provided personal data, contact info@alessiamoro.com so that it can be deleted.
This Privacy Policy may be updated to reflect changes to the services or to legal requirements. The current version is always the one published on this page. Where a change materially affects how your data is processed, you will be informed directly wherever contact details are held.
For any question about this policy or about how your personal data is handled, contact Alessia Moro at info@alessiamoro.com, on +33 7 53 43 31 45, or in writing at 12 Rue de la Paix, 75002 Paris, France.