Date: November 2025
Version: 3
Website: The Week
The Week undertakes to ensure that the processing of personal data carried out in the course of its activities complies with European Regulation No. 2016/679, known as the General Data Protection Regulation (GDPR), as well as the French Data Protection Act (Loi Informatique et Libertés).
In this Privacy Policy (the “Policy”), we explain how and why we use your personal data, what your rights are, and how to exercise them.
1. What is Personal Data?
Personal data (“Personal Data” or “Data”) means any information relating to an identified or identifiable natural person:
- Directly (name, first name, email address)
- Indirectly, when associated with other information that makes it possible to identify you (IP address, geolocation)
2. Who does this Policy apply to?
This Policy applies to all of our online services and to third parties.
It is intended to inform users of the Website.
3. Who collects your Data?
The Data Controller, within the meaning of the European Data Protection Regulation, is the association The Week, located at 37 rue François Négrier, 59420 Mouvaux, FRANCE, represented by Pauline Magnat in her capacity as Managing Director.
4. What Data is collected?
Depending on how you interact with The Week and the purpose of this interaction, the following data may be collected:
- Data provided through forms (contact, testimonials, etc.):
The categories of personal data we may collect depend on the context of your interactions with us and our Services, the choices you make, and the products and features you use. Such personal data may include, in particular: names, email addresses, usernames, passwords, and country of residence.
- Browsing data:
These data refer to information relating to the way in which the User navigates on the Website. Such data may include, in particular: IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information on how and when you use our Services, as well as other technical information.
- Connection and usage data:
These data refer to information relating to the service, diagnostics, usage, and performance when you access or use our Services. Such data may include, in particular: IP address, device information, browser type, settings, and information on your activity within our Services (such as timestamps of your usage, pages and files viewed, searches, and other actions performed, including features used), device event information (such as system activity, error reports — sometimes referred to as “crash dumps” — and hardware settings).
- Data related to registration via a social media account:
These data include the details of your social media account provided for the purpose of registering on our Website.
5. How do we collect your Data?
User data is collected via the different online forms available on our Website, through registration on our Website, and, where applicable, via cookies.
6. Why do we collect your Data?
We process your personal information for various purposes, depending on how you interact with our Services, including:
- To facilitate account creation, authentication, and manage user accounts. We may process your information so that you can create and log into your account, as well as maintain your account in working order.
- To provide and facilitate the delivery of services requested by the user. We may process your information in order to provide you with the requested service.
- To send you administrative information. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
- To embed video files in our Services so as to make them more engaging and appealing for visitors.
- To analyze and evaluate the use of our Services and to optimise and improve them accordingly.
- To process and respond to your contact requests.
- To ensure the proper functioning of our Services and their features.
- To protect and secure the integrity of our Services and systems.
- To provide our Services in multiple languages.
- To safeguard or protect the vital interests of an individual. We may process your information when necessary to safeguard or protect the vital interests of an individual, for example, to prevent harm.
7. On what legal bases do we process your Data?
The European General Data Protection Regulation (GDPR) and the United Kingdom GDPR require us to explain the valid legal bases on which we rely to process your personal information. Accordingly, we may rely on the following legal bases to process your personal information:
- Consent. We may process your information if you have given us permission (i.e. your consent) to use your personal information for a specific purpose. You may withdraw your consent at any time.
- Performance of a contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including the provision of our Services or, at your request, prior to entering into a contract with you.
- Legal obligations. We may process your information when we believe it is necessary to comply with our legal obligations, such as cooperating with law enforcement or regulatory authorities, exercising or defending our legal rights, or disclosing your information as evidence in legal proceedings in which we are involved.
- Vital interests. We may process your information when we believe it is necessary to protect your vital interests or those of a third party, such as situations involving potential threats to the safety of any individual.
- Legitimate interests. We may process your information when we believe it is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms requiring the protection of personal data.
When we rely on legitimate interests to process your personal information, we pursue the following interests:
- Ensuring the proper operation of our Services and their features.
- Processing and responding to contact requests you send us.
- Sending you administrative information about our products, services, and updates to our terms, policies, and similar notices.
- Providing our Services in multiple languages to make them accessible without barriers.
- Protecting and securing the integrity of our Services and systems (for example, against hacking or DDOS attacks).
If you reside in Canada, this section applies to you:
We may process your information if you have given us specific permission (i.e. explicit consent) to use your personal information for a particular purpose, or in situations where your consent can be implied. You may withdraw your consent at any time.
In certain exceptional cases, we may be legally permitted, under applicable law, to process your information without your consent, including, for example:
- Where collection is clearly in the interest of an individual and consent cannot be obtained in a timely manner.
- For investigations and the detection and prevention of fraud.
- For business transactions under certain conditions.
- Where contained in a witness statement and necessary to assess, process, or settle an insurance claim.
- To identify injured, ill, or deceased persons and communicate with their next of kin.
- Where there are reasonable grounds to believe that a person has been, is, or may be a victim of financial exploitation.
- Where it is reasonable to expect that obtaining consent would compromise the availability or accuracy of the information and the collection is reasonable for purposes related to an investigation of a breach of an agreement or a violation of the laws of Canada or a province.
- Where disclosure is required to comply with a subpoena, warrant, court order, or court rules relating to the production of documents.
- Where the information has been produced by an individual in the course of their employment, business, or profession, and the collection is consistent with the purposes for which the information was produced.
- Where the collection is solely for journalistic, artistic, or literary purposes.
- Where the information is publicly available and specified by regulation.
8. Are you required to provide your Personal Data?
Some fields in our data collection forms are not mandatory. The mandatory data fields are identified by an asterisk “*”.
9. How long do we keep your Data?
We retain your Personal Data for as long as necessary to carry out the purposes for which they were collected, unless a different retention period is required by law.
At the end of the retention periods specified below, we will delete or anonymise the Personal Data.
FORMS: 1 year from receipt of the form
BROWSING DATA: 13 months from the placement of cookies.
For more information, you may consult our Cookie Management Policy.
CONNECTION DATA: 3 years from the first connection
USER ACCOUNT REGISTRATION DATA: 6 months from termination of the user’s account
10. With whom do we share your Data?
Depending on the purpose, your data may be shared with the following service providers:
Website creation
Bubble provided by Bubble Group, Inc., 22 W 21st Street, 2nd Floor, New York, NY 10010, United States. Privacy Policy: https://bubble.io/privacy. Legal basis: legitimate interests.
Webflow provided by Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, United States. Privacy Policy: https://webflow.com/legal/privacy. Legal basis: legitimate interests.
Website analytics
Mixpanel provided by Mixpanel Inc., 1 Front Street, Floor 28, San Francisco, CA 94111, United States. Privacy Policy: https://mixpanel.com/legal/privacy-policy. Legal basis: user consent.
Email delivery
Sendgrid provided by Twilio Inc., 101 Spear Street, 5e étage, San Francisco, California, 94105, United States. EU/EEA and UK controller: Twilio Ireland Limited, 3 Dublin Landings, North Wall Quay, Dublin 1, Ireland. Privacy Policy: https://www.twilio.com/en-us/legal/privacy. Legal basis: legitimate interests.
Video hosting
Vimeo provided by Vimeo.com Inc., 330 West 34th Street, New York, New York 10001, United States. Privacy Policy: https://vimeo.com/privacy. Legal basis: user consent.
Website translation
Weglot provided by Weglot SAS, 7 Cité du Paradis, 75010 Paris, France. Privacy Policy: https://www.weglot.com/fr/privacy. Legal basis: legitimate interests.
Automation services
Clever Cloud provided by Clever Cloud SAS, 3 rue de l'Allier, 44000 Nantes, France. Privacy Policy: https://www.clever-cloud.com/privacy-policy/. Legal basis: legitimate interests.
Make provided by Celonis, Inc., One World Trade Center, 87th Floor, New York, NY, 10006, USA. Privacy Policy: https://www.make.com/en/privacy-notice. Legal basis: legitimate interests.
Cookie management
Elfsight provided by Elfsight LLC, 0015, Armenia, Yerevan, Paronyana str., 19/3, 201. Privacy Policy: https://elfsight.com/privacy-policy/. Legal basis: user consent
11. Social Media Logins
Our Services offer you the ability to register and log in using your social media account details. When you choose to do so, we will receive certain information from your social media provider.
The profile information we receive may vary depending on the provider but often includes your name, email address, and other information.
We provide social login for the following provider:
- Google, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. EU/EEA controller: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Privacy Policy: https://policies.google.com/privacy?hl=en-US.
We will use the information we receive only for the purposes described in this Privacy Policy or as otherwise disclosed to you in the relevant Services. Please note that we do not control, and are not responsible for, any other uses of your personal information by your social media provider.We recommend reviewing their privacy policy to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their websites and applications.
12. Are your Data transferred outside the EU?
Our servers are located in the United States. If you access our Services from outside the United States, please note that your information may be transferred to, stored, and processed by us at our facilities, as well as by third parties with whom we may share your personal information (see “With whom do we share your Data?” above), in the United States and in other countries.
If you reside in the European Economic Area (EEA) or the United Kingdom, these countries may not have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.
- European Commission Adequacy Decision:
The European Commission has adopted an adequacy decision for the United States in connection with the conclusion of the EU–US Data Privacy Framework (“TADPF”). The framework (and the corresponding adequacy decision) ensures that data transferred to U.S. companies certified under the framework are adequately protected.
Further information can be found on the official TADPF website here. All our service providers have obtained such certification. Additional details can be provided upon request.
13. What security measures have we implemented to protect you?
We are committed to implementing all necessary technical and organizational measures to ensure the protection of your Personal Data.
14. What are your rights regarding your Personal Data?
In accordance with the French Data Protection Act (“Informatique et Libertés”) and subject to the legal obligations applicable to The Week in the course of its activities, each individual may exercise the following rights:
- Right of access: Request a copy of the Data concerning you that is held by the Data Controller.
- Right to rectification: Correct or complete any inaccurate Data concerning you.
- Right to erasure: Request the deletion of all or part of your Data.
- Right to object: Object to our processing of your Data, including in the context of profiling activities; please note that such a request is incompatible with the processing of your contact or quotation request.
- Right to withdraw consent: Decide at any time to withdraw your consent.
- Right to restriction of processing: Request that the use of your Data be limited while your request is being processed.
- Right to data portability: Request to recover part of your Data processed by The Week in a machine-readable format.
Where a Data Breach likely to result in a high risk to your rights and freedoms is detected, you will be informed of this breach as soon as possible.
You may also issue instructions concerning the retention, erasure, and communication of your Personal Data after your death, in accordance with Article 85 of French Law No. 78-17 of 6 January 1978.
15. How to exercise your rights?
These rights and instructions may be exercised by contacting us:
- By post:
The Week
37 rue Négrier
59420 Mouvaux, France
or
- By email: community@theweek.ooo
Depending on the type of request and in case of doubt about your identity, we may ask you to provide proof of identity upon receipt of your request.
A response will be sent to you within one (1) month from receipt of the request. In certain cases, depending on the complexity or number of requests, this period may be extended by two (2) additional months.
You may also contact the Commission Nationale de l’Informatique et des Libertés (CNIL), the regulatory authority responsible for ensuring compliance with data protection legislation in France:
- Online: https://www.cnil.fr/fr/agir
- Or by post:
Commission Nationale de l’Informatique et des Libertés
3 Place de Fontenoy – TSA 80715, 75334 PARIS CEDEX, France
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “revision date,” and it will become effective as soon as it is made accessible.
If we make material changes to this Privacy Policy, we may inform you either by prominently posting a notice of such changes or by sending you a direct notification.
We encourage you to regularly review this Privacy Policy to stay informed about how we protect your information.
17. Contact
For any questions concerning this Privacy Policy, you may contact us:
- By post:
The Week
37 rue Négrier
59420 Mouvaux, FRANCE
or
- By email: community@theweek.ooo
