Privacy Policy

1. Data controller

The controller for the processing described in this policy is RESAMA — Health Monitoring Network for Model Aquatic Animals and Wild Aquatic Fauna.

Administrative and scientific contact:
Laurent Legendre
EGCE — Évolution, Génomes, Comportement, Écologie
UMR 9191 CNRS — UMR 247 IRD
Email: contact@resama.fr
Phone: +33 1 69 15 50 30

2. Privacy by design

RESAMA seeks to limit personal data to what is strictly necessary. Public content can be viewed without an account and without voluntarily providing personal information.

The website is not intended for targeted advertising, commercial profiling or the sale of personal data. Data is used only for the purposes described below.

3. Website browsing, hosting and security

The static website is hosted and delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, United States. Every visit requires technical data to be processed, including the IP address, request date and time, requested address, possible referring page, and information about the browser, device and protocol used.

This data is processed to deliver pages, maintain service availability, prevent abuse, secure communications and diagnose incidents. The processing is based on RESAMA’s legitimate interest in publishing and protecting its website.

Cloudflare relies on a global infrastructure, so processing may take place outside the European Economic Area under the transfer mechanisms and contractual safeguards offered by Cloudflare. Technical data is retained for the periods necessary to provide and secure the service, in accordance with service configuration and the provider’s applicable obligations.

4. Newsletter subscriptions

Newsletter subscription is optional. The form collects the professional email address entered, together with technical data and evidence needed to manage the subscription. A valid email address is required to process the subscription.

This data is used to register the request, send RESAMA’s scientific and institutional news, manage unsubscribes and demonstrate consent. Processing is based on your consent, which you may withdraw at any time using the unsubscribe link in each message or by emailing contact@resama.fr.

The form and messages are operated through Brevo, a service provided by Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France. The address is retained until you unsubscribe or withdraw consent. Evidence of consent and rights-related requests may be retained for longer where needed to comply with a legal obligation or establish, exercise or defend legal claims.

Brevo acts as a processor for RESAMA. Details of its processing are provided in Brevo’s Privacy Policy.

5. Form protection with reCAPTCHA

The subscription form uses Google reCAPTCHA to detect automated submissions and protect the mailing list from abuse. The service may analyse technical data and interaction signals, including the IP address, browser and device characteristics, page URL and interaction with the page.

This processing serves RESAMA’s legitimate interest in securing the form and preserving the quality of its mailing list. Google processes the data under its Privacy Policy and Terms of Service. Transfers outside the European Economic Area may take place under the safeguards implemented by Google.

6. Direct communications

When you contact RESAMA, your contact details and message are processed to answer and follow up your request and, where necessary, retain communications relevant to the network’s activities. The legal basis is the legitimate interest in handling incoming requests or, depending on their subject, taking steps at your request.

Messages are available only to authorised recipients. They are retained for as long as required to follow up the request, then archived or deleted according to their administrative or scientific usefulness and applicable obligations.

7. Cookies and similar technologies

RESAMA does not intentionally place advertising cookies and does not use the website for cross-site advertising tracking. Cookies or similar technologies may nevertheless be used by the third-party services described in this policy, in particular by Brevo and reCAPTCHA.

Where a tracker is not strictly necessary and requires prior consent, its activation must be subject to the user’s choice. You can also limit or delete cookies in your browser settings, although blocking some third-party services may prevent newsletter subscription.

8. Recipients and transfers

Depending on the processing involved, data may be accessed by authorised RESAMA members, website administrators and strictly necessary providers: Cloudflare for hosting and delivery, Google for reCAPTCHA, and Brevo for the newsletter.

Data is neither sold nor rented. Where a provider’s services involve processing outside the European Economic Area, it must be covered by a mechanism recognised under the GDPR, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, supplemented where necessary by additional safeguards.

9. Your rights

Depending on the processing and its legal basis, you may exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time without affecting the lawfulness of earlier processing.

Send your request to contact@resama.fr, providing the information required to identify the processing concerned. Proof of identity will be requested only where there is reasonable doubt about the requester’s identity.

If, after contacting RESAMA, you believe your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL) or the supervisory authority in your country of residence.

10. Security

RESAMA and its providers implement technical and organisational measures appropriate to the nature of the data and identified risks. As no online service can guarantee absolute security, incidents or suspicious messages related to the website may be reported to contact@resama.fr.

11. External services and policy changes

Links and documents from third-party websites are governed by those websites’ policies when you access them. RESAMA recommends reviewing their personal-data information.

This policy may be amended to reflect functional, technical, contractual or regulatory changes. The update date shown at the top identifies the current version.