This policy explains what personal data Covenant Associates collects when you use the website covenant-associates.com, why, and what your rights are.

1. Data controller

The data controller is Covenant Associates, a simplified joint-stock company whose registered office is located in Clichy (Hauts-de-Seine), France (see the legal notice). For any question about your data: [email protected].

2. Data collected, purposes and retention period

• Contact form : first name, last name, email address and the content of your message. This information is necessary to process your request; without it, we cannot reply to you. Purpose: to reply to your request. Legal basis: Covenant Associates’ legitimate interest in responding to the inquiries addressed to it, or the performance of pre-contractual measures taken at your request. Retention period: 2 years from the last exchange.
• Technical connection data : IP address, date and time of connection, browser type. Purpose: site security, abuse detection and proper operation. Legal basis: Covenant Associates’ legitimate interest in protecting its website. This data is kept by our hosting provider and by Cloudflare for the period strictly necessary for these purposes.

3. Cookies and trackers

The site uses no advertising cookies, no audience measurement tool and no third-party tracking service. Only trackers strictly necessary for the operation and security of the site may be set (for example by Cloudflare); they do not require your consent.

4. Recipients

Your data is intended for the Covenant Associates teams authorized to process your request. It may be processed, on our behalf, by OVH SAS (website hosting), Cloudflare, Inc. (site security and delivery) and our email service provider. We do not sell your data.

5. Transfers outside the European Union

As Cloudflare, Inc. is established in the United States, some technical data may be transferred there. These transfers are covered by the safeguards provided for by the GDPR (the European Commission’s standard contractual clauses or certification under the EU–US Data Privacy Framework).

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, the right to object to its processing, and the right to set instructions for the fate of your data after your death. To exercise them, write to [email protected]; we reply within one month. You may also lodge a complaint with the CNIL: 3, place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.