GDPR — Your rights
The General Data Protection Regulation (GDPR) came into force on 25 May 2018. It governs the collection and processing of the personal data of European citizens. OpenRecourse complies with these obligations.
Your rights as a user
- Right to information — to know what data is collected and why (see Privacy Policy).
- Right of access — to obtain a copy of all your data held by OpenRecourse.
- Right to rectification — to correct inaccurate information.
- Right to erasure ("right to be forgotten") — to request the deletion of your data.
- Right to data portability — to retrieve your data in a structured, machine-readable format.
- Right to object — to refuse certain processing activities (in particular profiling).
- Right to lodge a complaint with the CNIL.
How to exercise your rights
Send your request to openrecourse@gmail.com, specifying:
- Your identity (or the pseudonym used on the site);
- The right you wish to exercise;
- The email address to which we should reply.
Response time: 1 month maximum (Article 12 GDPR). Response provided free of charge, except in the case of a manifestly unfounded or excessive request.
Data Protection Officer (DPO)
Appointing a DPO is not legally required for OpenRecourse at this stage: the processing of personal data is limited to the contribution form (optional email) and does not fall within the categories of large-scale processing referred to in Article 37 GDPR. This appointment will be reassessed if the audience grows significantly or if partner referral forms are deployed.
Data security
OpenRecourse implements appropriate technical and organisational measures to ensure data security: HTTPS encryption, anonymisation of contributions, restricted access for the editorial team, and regular backups.
Complaint to the CNIL
If, after contacting us, you believe that your rights are not being respected, you may submit a complaint to the Commission Nationale de l'Informatique et des Libertés (CNIL):
- Online: www.cnil.fr/fr/plaintes
- By post: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07