Privacy Policy (GDPR & CCPA Compliance)

2. Principles of Data Processing

In conformity with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the French Data Protection Act (Loi Informatique et Libertés), PAK HAY MO guarantees that personal data is collected fairly, lawfully, transparently, and strictly for specified legitimate purposes.

3. Categories of Data Collected

We may collect and process the following categories of data:

• Direct Communications Data: Full name, email address, telephone number, and message content submitted voluntarily via our contact and consultation request forms.
• Interactive Assessment Inputs: Anonymized responses to the lifestyle quiz. These inputs are computed purely client-side or transmitted as aggregate parameters solely upon explicit user submission.
• Technical & Log Data: Internet Protocol (IP) address, browser user-agent, operating system, and timestamp logs generated automatically for web server security and DDoS defense.

4. Legal Bases for Processing

We process personal data based upon:

• Article 6(1)(a) GDPR (Consent): When you explicitly submit an inquiry or agree to non-essential cookie storage.
• Article 6(1)(b) GDPR (Contractual Performance): When you request delivery of specialized research monographs or advisory dossiers.
• Article 6(1)(f) GDPR (Legitimate Interest): Ensuring server infrastructure integrity, preventing fraudulent abuse, and maintaining editorial quality standards.

5. Data Retention Periods

Personal contact records transmitted via inquiry forms are retained for a maximum period of twenty-four (24) months from the last active correspondence, after which they are systematically purged. Server security logs are rotated and deleted automatically every thirty (30) days.

6. Your Rights Under European Law

Under Chapter III of the GDPR, you have the right to:

• Right of Access (Art. 15): Request confirmation and copies of your stored personal information.
• Right to Rectification (Art. 16): Demand correction of inaccurate or incomplete personal records.
• Right to Erasure (Art. 17): Request the permanent deletion of your contact data ("Right to be forgotten").
• Right to Restriction of Processing (Art. 18): Restrict processing under specified legal conditions.
• Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): Object to data processing predicated upon legitimate interest grounds.

To exercise any of these rights, submit your written request to [email protected] or by registered mail to our Paris office at 56 Rue du Temple, 75004 Paris, France. You also have the right to lodge a complaint with the French data supervisory authority (CNIL – Commission Nationale de l'Informatique et des Libertés).

7. Third-Party Sharing & Commercial Non-Disclosure

PAK HAY MO does NOT sell, rent, trade, or commercially monetize user data. Personal details are never transferred to third-party marketing entities. Data is only accessible by authorized editorial staff and strictly bound technical hosting providers bound by GDPR Data Processing Agreements (DPA).