1.   Purpose of the data protection policy
This Data Protection Policy aims to inform visitors of the Gabriel Greenfield website about how their personal data is collected, used and protected.

​

2.   Role of Gabriel Greenfield
As data controller, Gabriel Greenfield determines the purposes and means of processing your personal data collected via this website. 
 
 3.   Collection of personal data 
Personal data can be collected:
 -   Directly via forms: for example, when requesting contact or writing comments on the blog
 -   Indirectly via cookies, the latter make it possible to collect navigation data and offer personalized advertisements. For more details, see our cookie policy [link to the cookie policy].
 
4.   Purposes and duration of storage of personal data 
The table below summarizes all the processing operations for which Gabriel Greenfield is likely to use your personal data. 

​

​

 
2.    Rôle de Gabriel Greenfield

En tant que responsable de traitement, Gabriel Greenfield détermine les finalités et les moyens du traitement de vos données personnelles collectées via ce site. 
 
3.    Collecte des données personnelles 

Les données personnelles peuvent être collectées :
-    Directement via des formulaires : par exemple, lors de la demande de contact ou lors de rédaction de commentaires sur le Blog
-    Indirectement via des cookies, ces derniers permettent de collecter des données de navigation et de proposer des publicités personnalisées. Pour plus de détails, consultez notre politique cookie [lien de renvoi vers la politique de cookies].
 

4.    Finalités et durée de conservation des données personnelles 

Le tableau ci-dessous récapitule l’ensemble des traitements pour lesquels Gabriel Greenfield est susceptible d’utiliser vos données personnelles. 

​​​​​​

5.   Recipients of the personal data collected   
The personal data collected may be communicated to the following categories of recipients, in compliance with applicable regulations:
-   Within Gabriel Greenfield (internal recipients)
 Your personal data is processed by authorized members of the staff of Gabriel Greenfield.
 -   Outside of Gabriel Greenfield (external recipients)
 Several categories of third parties listed below may have access to your Personal Data. Only the strictly necessary Personal Data is transmitted to them. 
 -   IT service providers: we use subcontractors for the hosting and maintenance of the [WIX] website.
 -   Email: Your data may be stored in tools for customer relationship management and communication sending [Microsoft].
 We ensure that, in terms of Personal Data, these subcontractors contractually undertake to implement a level of protection equivalent to ours and in accordance with the Regulations. 
-   Special case of data sharing: 
 Gabriel Greenfield undertakes not to transmit your Personal Data to service providers unless:  
 1.   You have given your prior consent to the sharing of your Personal Data with these service providers,  
 2. The sharing of your Personal Data with these service providers is necessary for the provision of the requested products or services, 
 3. A competent judicial or administrative authority requires that the Data be forwarded to it. 

​

6.   Transfer outside the EU 
We strive to keep your Personal Data within the European Union, however some of the services we use involve potential transfers. Concerned about the security and confidentiality of your Data, we inform you that when your Data is transferred outside the EU, we ensure that it is sent to: 
 -   From a country recognised by the European Commission as providing an adequate level of protection; 
 -   Or to a country that does not offer adequate protection but whose transfer is permitted, in particular by being governed by the standard contractual clauses of the European Commission, which the CNIL has recognized as ensuring a sufficient level of privacy and data protection fundamental rights of persons.

​

7.   Your rights over your data 
a)   Right of access
You may request and obtain information about the personal data we hold about you.
b)   Right to rectification
You have the right to request the correction of your inaccurate or incomplete personal data.
c)   Right to erasure
Also called "right to be forgotten", it allows you to request the deletion of your personal data unless the data must be kept:
 -   To comply with a legal obligation, 
 -   To the establishment, exercise or defence of legal rights. 
d)   Right to restriction of processing
This right allows you to request that the use of your personal data be restricted in certain circumstances:
 -   You have requested the rectification of your data; the processing may then be limited to a certain period during which the necessary verifications can be carried out;
 -   The processing is unlawful and you object to the erasure of your data;
 -   The data controller no longer needs your data, but you need it to establish, exercise or defend a legal claim;
 -   You have objected to the processing and we are checking whether the legitimate grounds pursued prevail over your reasons.
e)   Right to data portability
You may receive your personal data in a structured, machine-readable format for transfer to another organisation.
f)   Right of objection
You have the right to object to the processing of your personal data on legitimate grounds, unless there are compelling legitimate grounds for further processing.
Several processing operations of your personal data are subject to your consent. You can withdraw it at any time.
g)   Right to make a complaint to the CNIL
You also have the right to lodge a complaint with the CNIL, the supervisory authority (www.cnil.fr).

​

8.   Terms and conditions for exercising your rights
You can address your requests through the following means: 
 -   Email address: rgpd@gabrielgreenfield.com
Gabriel Greenfield has a period of one month to respond to you from the receipt of your request. This period may be extended by two months due to the complexity of your request and the number of requests made to us; in this case, you will be informed. 

​

9.   Changing the Policy
 This data protection policy is subject to updates.
Last Updated: 23/06/2026.