Date: November 2025
Version: 3
Website: The Week
The Week undertakes to ensure that the processing of personal data carried out in the course of its activities complies with European Regulation No. 2016/679, known as the General Data Protection Regulation (GDPR), as well as the French Data Protection Act (Loi Informatique et Libertés).
In this Privacy Policy (the “Policy”), we explain how and why we use your personal data, what your rights are, and how to exercise them.
1. What is Personal Data?
Personal data (“Personal Data” or “Data”) means any information relating to an identified or identifiable natural person:
- Directly (name, first name, email address)
- Indirectly, when associated with other information that makes it possible to identify you (IP address, geolocation)
2. Who does this Policy apply to?
This Policy applies to all of our online services and to third parties.
It is intended to inform users of the Website.
3. Who collects your Data?
The Data Controller, within the meaning of the GDPR, is:
The Week
37 rue François Négrier
59420 Mouvaux, FRANCE
Represented by Pauline Magnat in her capacity as Managing Director.
4. What Data is collected?
Depending on how you interact with The Week and the purpose of this interaction, the following data may be collected:
Data provided through forms (contact, testimonials, etc.)
The categories of personal data collected depend on the context of your interactions, the choices you make, and the services you use.
This may include: names, email addresses, usernames, passwords, and country of residence.
Browsing data
Information relating to how you navigate the Website, including: IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and technical usage information.
Connection and usage data
Service, diagnostic, usage, and performance data when you access or use our Services.
This may include: IP address, device information, browser type, settings, timestamps, pages viewed, searches, features used, system activity, error reports (“crash dumps”), and hardware settings.
Social media registration data
Details of your social media account provided for the purpose of registering on our Website.
5. How do we collect your Data?
User data is collected:
- Through online forms available on our Website
- Through registration on our Website
- Through cookies, where applicable
6. Why do we collect your Data?
We process your personal information for various purposes, including:
- Facilitating account creation and authentication
- Managing user accounts
- Providing and delivering requested services
- Sending administrative information (products, services, policy updates)
- Embedding video files
- Analyzing and improving our Services
- Processing and responding to contact requests
- Ensuring proper functioning of our Services
- Protecting the integrity and security of our systems
- Providing multilingual services
- Safeguarding the vital interests of individuals
7. Legal Bases for Processing
We rely on the following legal bases under GDPR:
- Consent
- Performance of a contract
- Legal obligations
- Vital interests
- Legitimate interests
When relying on legitimate interests, we pursue:
- Proper operation of our Services
- Processing contact requests
- Sending administrative information
- Providing multilingual access
- Protecting against hacking or DDoS attacks
If you reside in Canada
We may process your information based on explicit or implied consent.
In certain exceptional cases permitted by law, processing may occur without consent (fraud prevention, legal obligations, insurance claims, public information, etc.).
8. Are you required to provide your Data?
Some fields in our forms are not mandatory.
Mandatory fields are identified by an asterisk (*).
9. How long do we keep your Data?
Forms: 1 year from receipt
Browsing data: 13 months from cookie placement
Connection data: 3 years from first connection
User account data: 6 months from account termination
After these periods, Data is deleted or anonymized.
10. With whom do we share your Data?
(Structured format replacing tables for Webflow compatibility)
Website creation
Bubble – https://bubble.io/privacy
Webflow – https://webflow.com/legal/privacy
Legal basis: legitimate interests
Website analytics
Mixpanel – https://mixpanel.com/legal/privacy-policy
Legal basis: user consent
Email delivery
Sendgrid (Twilio) – https://www.twilio.com/en-us/legal/privacy
Legal basis: legitimate interests
Video hosting
Vimeo – https://vimeo.com/privacy
Legal basis: user consent
Website translation
Weglot – https://www.weglot.com/fr/privacy
Legal basis: legitimate interests
Automation services
Clever Cloud – https://www.clever-cloud.com/privacy-policy/
Make – https://www.make.com/en/privacy-notice
Legal basis: legitimate interests
Cookie management
Elfsight – https://elfsight.com/privacy-policy/
Legal basis: user consent
11. Social Media Logins
We offer login via Google:
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU/EEA Controller: Google Ireland Limited, Dublin, Ireland
Privacy Policy: https://policies.google.com/privacy
We only use the information received for purposes described in this Policy.
We are not responsible for additional uses by the social media provider.
12. Are your Data transferred outside the EU?
Our servers are located in the United States.
Data may be transferred and processed in the United States and other countries.
For EU/UK residents:
Transfers rely on the EU–US Data Privacy Framework (TADPF) adequacy decision.
All service providers are certified under this framework.
13. Security Measures
We implement appropriate technical and organizational measures to protect your Personal Data.
14. Your Rights
In accordance with GDPR and French law, you have:
- Right of access
- Right to rectification
- Right to erasure
- Right to object (including profiling)
- Right to withdraw consent
- Right to restriction of processing
- Right to data portability
You will be informed in case of a Data Breach likely to result in high risk.
You may also provide instructions regarding your Data after death (Article 85 of French Law No. 78-17 of 6 January 1978).
15. How to exercise your rights?
By post:
The Week
37 rue Négrier
59420 Mouvaux
France
By email: community@theweek.ooo
Response within one (1) month, extendable by two (2) additional months if necessary.
You may also contact:
Commission Nationale de l’Informatique et des Libertés (CNIL)
https://www.cnil.fr/fr/agir
By post:
3 Place de Fontenoy – TSA 80715
75334 PARIS CEDEX
France
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The updated version becomes effective once published.
If material changes occur, we may notify you prominently or directly.
17. Contact
The Week
37 rue Négrier
59420 Mouvaux
FRANCE
Email: community@theweek.ooo
