Privacy policy

As Processor, the Institut Océanographique Paul Ricard undertakes to respect your right to privacy when you use our digital media (such as internet websites, mobile phone applications, social media pages or any online form for registration for our events, etc), and when you correspond with us by email.

The purpose of this Privacy Policy is to inform you of the ways the Institut Océanographique Paul Ricard, a not-for-profit organisation under French legislation (Loi 1901), with its head office at Île des Embiez 83140 Six-Fours-les-Plages, France, (‘IOPR’, ‘we’, ‘our’), collects, stocks, uses and processes Data of a personal nature (‘Personal Data’) about you and which have been provided via the website www.institut-paul-ricard.org run by the IOPR (‘Website’).

What kind of Personal Data do we collect?
How and why do we use cookies and tracing technologies?
For what purposes do we use your Personal Data?
What happens if you refuse to provide us with your Personal Data?
Why and to whom may we disclose your Personal Data?
Where, how and why might your Personal Data be transferred outside the European Union?
For how long do we retain your Personal Data?
How do we protect your Personal Data?
What are your rights?
How can you contact us or lodge a complaint with the French privacy protection authority, the CNIL (Commission Nationale de l’Informatique et des Libertés)?
Changes to our Privacy Policy

What kind of Personal Data do we collect?

We only collect Personal Data for the purposes stated in Section 3 and each time you use one of the functions or one of the services offered by the IOPR website.

The categories and the volume of the Personal Data collected for use of the functions and services may be updated and are likely to change in phase with alterations in our services and activities.

Subject to applicable legal requirements, we may need to use various technologies which collect and store information on the way you access our website and the way you use the website. We may also need to use demographic information which may be obtained from a third party, such as Google or the social networks you subscribe to (‘Usage Information’). The Usage Information may include the pages you have viewed, the time when you viewed them, information on the content you have accessed or which you have provided, the language in which you have consulted our website, including demographic information about you (e.g. your age, sex, interests, as the case may be) and the pages you have consulted before viewing the page in question, etc.

How and why do we use cookies and tracing technologies?

We use tracing technologies such as cookies, IP addresses or connection history. These monitoring technologies help us tailor the website to suit your requirements.

For further information on the cookies we use and the way you can deactivate them, please consult our Cookies Policy by clicking on the link at the bottom of the webpage.

For what purposes do we use your Personal Data?

We collect Personal Data about you for the following purposes:

To respond to your requests for services or to perform a contract: When you register or when you subscribe to the Website, your Personal Data are used to provide you with the functions and services you have subscribed to and to offer you the advantages and privileges which are generally provided following your registration (e.g. the types of communication you have selected at the time of your registration, invitations to attend events, to take part in competitions, etc.).

- To send you operational or administrative messages: (g., an email to confirm your registration (or if you unsubscribe) for a service or a function), as well as certain notifications concerning the services (e.g. update notifications of our privacy notifications, of the interruption of functions or programmes on our Website, of changes regarding our online services or our online assistance policy or relative to other associated changes, etc.).
To enable us to send you marketing information, when you have given your consent:
- In addition to the purpose for which you have communicated your Personal Data to us, you may be asked to give your consent (e.g. by means of a box to tick) for your Personal Data to be used for an activity or service other than the activity or service that was the main purpose of your request. For example, if you register for a competition or other promotional action, you may also be invited to subscribe for newsletters or notifications sent by the Website which hosts the promotional activity or by other websites. If you consent to receive our targeted advertising, emails and text messages, we will use your Personal Data for this purpose.

Because it is also within the legitimate interest of IOPR to offer you better service:
- Subject to having received your consent when required, we may need to combine, update or consolidate your Personal Data collected via our Website with data we receive from external third party sources. For example, we may combine purely demographic information or data from surveys (e.g. age, sex, family information, other interests, etc.) which are not linked to any of your Personal Data with Personal Data collected via our offers (when registering an account, for example). We may use the combined information and/or the aforementioned demographic information for our internal marketing and demographic surveys and for the purpose of constantly improving, customising and tailoring the products and services that we provide in order to better suit your requirements. It is possible that certain of the tools we use involve an automated decision making process under the conditions permitted by the applicable law.
To manage and monitor your requests and comments, via the contact email embiez@institut-paul-ricard.org.

We will make sure that your Personal Data remain accurate and up-to-date or need to be completed with the additional information you have provided. We will also endeavour to avoid duplicates in our database by checking each of your interactions with us and/or with our affiliates and by checking whether the Personal Data about you are still accurate or whether they need to be completed with additional information you have provided.

We may analyse your activities and browsing habits on the Website in order to better understand your preferences and interests and to tailor our communications to your tastes and preferences, unless you opt out of this in accordance with to the conditions indicated in Section 9 of the present Privacy Policy.

We may also have recourse to automated decision-making processes, including as required for the performance of a contract.

We draw your attention to the fact that the automated tools used are regularly checked to ensure that the Personal Data are processed in a lawful manner. Specific measures, such as the minimisation of the data, are deployed during the creation of profiles. You may also contest the result of the automated decision by sending an email to the address indicated in Section 11 below and request further information.

What happens if your refuse to provide us with your Personal Data?

If you refuse to submit the Personal Data requested, you may not be able to take part in certain activities, use certain customised functions, or the Website and the special services which are offered to you may be limited. For example, if you refuse to provide your email address, you will not be able to receive our newsletters or register for the Website. On the other hand, you are not obliged to provide your Personal Data to browse on our Website and to find out about the IOPR and its activities. In any case, we will always indicate which Personal Data are required to use a service.

Why and to whom will we disclose your Personal Data?

To third parties

We may transmit your Personal Data to third parties, but only in the following cases:

For marketing purposes if you have given us your consent for this;
For purposes of assistance: we may have recourse to service providers, mandated representatives or contractors to provide support and maintenance services for our Website and to help us to administer the Website or the various functions, programmes or promotions that are featured there. These third parties undertake to guarantee that your Personal Data will enjoy the same levels of security as those offered by IOPR;
For jointly-run and co-sponsored programmes and for promotional purposes: when we carry out joint or co-sponsored promotion actions on our Website in partnership with other organisations, or other trustworthy third parties, and when in the framework of this event, we collect and process Personal Data, we may need to share your Personal Data, subject to having obtained your consent when this is required by the law. In cases where the Personal Data about you may be collected by an organisation other than IOPR in the framework of this promotion action, we will inform you at the time of collection of the Personal Data about you;
For purposes related to disputes and security: we may need to disclose your Personal Data if the law requires it or if we consider, in good faith, that such disclosure is reasonably necessary to comply with legal procedures, to respond to claims or to protect the security or the rights of IOPR, its clients or the public.

In the event of the acquisition or all or part of IOPR by another organisation or association, the acquirer will have access to information that may include Personal Data, subject to the governing legislation.

Where, how and why might your Personal Data be transferred outside the European Union?

It is possible that your Personal Data might be transferred abroad, notably to countries which dispose of data protection laws of a different level than those of the country in which you submitted your Personal Data. IOPR takes appropriate measures to ensure the security of the Personal Data, both during the transfer and at the destination, by implementing contractual clauses such as those prescribed by the European Commission, in accordance with the governing law.

When our service providers for the running of the Website are based in the United States, the transfers of Personal Data to these service providers are carried out in accordance with the governing laws and are based on standard contractual clauses such as those prescribed by the European Commission, or on the Privacy Shield. These service providers are also bound by a contract which guarantees a high level of privacy protection and which obliges them (among other requirements) to only act in accordance with instructions from IOPR and to constantly deploy all necessary technical measures to protect the security of the Personal Data that concerns you.

For how long do we retain your Personal Data?

We will store your Personal Data in our databases for as long as your account is active, for the duration mentioned in the contract into which we have entered with you or, when necessary, to provide you with the services that you seek, to respond to your questions or to resolve issues or provide improved services and new services. We may also retain your Personal Data in accordance with our internal retention procedures insofar as this is necessary to comply with legal and regulatory obligations, to resolve disputes and to achieve the performance of our contracts.

We may thus need to retain the Personal Data about you after you have ceased to use the services of IOPR or our Website, in accordance with the legal time limit.

How do we protect your Personal Data?

IOPR will deploy all the technical or organisational measures necessary to protect the privacy and the security of your Personal Data collected via the Website. These measures include, but are not limited to: (i) storing your Personal Data in secure exploitation environments which are not accessible to the public and which are only accessible to authorised members of the IOPR staff and to our mandated representatives or contractors, and (ii) to check the identity of registered users before they can access your Personal Data.

What are your rights?

If your Personal Data have been processed with your consent, you have the right to withdraw your consent at any time without that affecting the consent given before the withdrawal.

You can request access to your Personal Data.

You can ask to rectify your Personal Data if they are inaccurate, incomplete or out of date.
You can require that your Personal Data be deleted when: (i) the Personal Data about you are no longer required for purposes of data processing, (ii) you have withdrawn your consent to the processing of the data based exclusively on this consent, (iii) you have objected to the processing of the data, (iv) the processing of your Personal Data is illegal, (v) the Personal Data should be deleted to respect a legal obligation applicable to IOPR. IOPR will deploy any reasonable measures to inform the other entities of Groupe Pernod Ricard that such a deletion has been carried out.
You can require the restriction of the processing of the data: (i) in case of contestation regarding the accuracy of your Personal Data in order to enable us to verify the accuracy of the data, (ii) if you wish to restrict your Personal Data rather than deleting them in case of illegal processing, (iii) if you wish IOPR to retain the Personal Data about you because your need them for your defence in the framework of legal proceedings, (iv) if you have objected to their processing but IOPR is carrying out an inquiry to verify whether it has legitimate grounds for implementing such processing which may override your own rights, if this processing is well-founded with regard to the legitimate interests of IOPR.
You can request the portability of the Personal Data about you that you have provided if the processing of the personal Data is based on your consent or on the performance of a contract and is automatically implemented (which excludes hard copies of files).
You can always choose not to transmit your Personal Data to us. In this case, there may be limitation of the activities and functions that we will be able to provide you with.
You have the right to dispute at any time the processing of your personal data for direct marketing purposes, for marketing based on profiling or if the processing of the data is based on the legitimate interest of IOPR (unless we can prove the existence of a legal obligation).
You also have the right to give general and specific instructions regarding the fate of your Personal Data after your death.

How can you exercise your rights, contact us or lodge a complaint to the French privacy protection authority, the CNIL?

For all questions or comments, please contact us by email at embiez@institut-paul-ricard.org or to exercise your rights, please contact us by email at contact-rgpd@pernod-ricard.com.

We undertake to reply within a maximum of one month from receipt of your request. This period may be extended by two months for reasons of complexity or a large number of requests.

Please note that you may also lodge a complaint with the supervisory authority of the country where you are located in case of doubt regarding the conditions of processing by IOPR of your Personal Data.

In France, you can contact the Commission Nationale de l’Informatique et des Libertés (CNIL), at the following website: https://www.cnil.fr/ .

Changes to our Privacy Policy

We regularly review our Privacy Policy and all updates to this Policy will be posted on this website.