Privacy policy

1. Data controller

FY FACULTY (Faculty), 55 rue Grignan, 13006 Marseille, France, registered under SIREN 934 818 881, is the controller of personal data collected through this website and in the course of its commercial relationships.

Privacy contact: contact@faculty-france.com. No Data Protection Officer has been appointed; requests are handled by the president, Ali Guerroui.

2. Data collected

We only collect data that is necessary for the purpose it is collected for:

• Identification and contact data: first name, last name, company, role, email address, telephone number, postal address.
• Project data: the content of your brief, deadlines, budget range, files and documents you send us.
• Commercial data: quotations, orders, invoices, and the history of our exchanges.
• Technical data: IP address, browser type, pages viewed and approximate location, collected only through measurement tools where you have consented.

3. Purposes and legal bases

• Answering enquiries and producing quotations — pre-contractual measures taken at your request (art. 6.1.b GDPR).
• Performing and following up projects, deliveries, installations and invoicing — performance of a contract (art. 6.1.b).
• Accounting and legal record keeping — legal obligation (art. 6.1.c).
• Business development, portfolio references and newsletters — legitimate interest or consent, with an unsubscribe link in every message (art. 6.1.f / 6.1.a).
• Audience measurement and site improvement — consent given through the cookie banner (art. 6.1.a).

4. Retention periods

• Prospect and enquiry data: 3 years from the last contact.
• Client contract, project and delivery records: for the duration of the relationship, then 5 years.
• Invoices and accounting documents: 10 years, as required by the French Commercial Code.
• Consent records and cookie preferences: 6 months to 13 months depending on the tool.

5. Recipients and transfers

Data is accessible to Faculty staff on a need-to-know basis and to processors acting on our instructions: hosting and email providers, printing and production partners, freight and installation partners, accounting and payment providers.

Where a processor is located outside the European Economic Area, transfers are covered by the European Commission's standard contractual clauses or an adequacy decision. Data is never sold or rented.

6. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, to withdraw consent at any time, and to define directives on the fate of your data after death. Write to contact@faculty-france.com or to 55 rue Grignan, 13006 Marseille, France; we answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

7. Security

We apply technical and organisational measures proportionate to the risk: encrypted transport (HTTPS), access control, strong authentication on business tools, restricted permissions, and confidentiality commitments from our partners.