Privacy Policy
- Publisher
- Anastasija Canajeva — Entrepreneur individuel
- Legal form
- Entrepreneur individuel
- Registered office
- 1 rue de Rennes, 75006 Paris, France
- SIREN
- 109 046 524
- SIRET
- 109 046 524 00012
- APE code
- 7430Z — Traduction et interprétation
- Registration
- Immatriculée au Registre national des entreprises (RNE)
- VAT
- VAT not applicable, Article 293 B of the French General Tax Code
- contact@canajeva.fr
- Telephone
- +33 6 05 84 42 32
1. Controller
The data controller is Anastasija Canajeva — Entrepreneur individuel, whose details appear at the top of this page. No data protection officer has been appointed, as this is not required given the activity and the volume of processing.
2. Processing carried out
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Quotation requests | Name, company, email, language pair, description of the text | Pre-contractual steps at the data subject's request (Art. 6.1.b GDPR) | 3 years from last contact if the request does not proceed |
| Payments made online | Identity, billing details, email, service and word count settled, reference, consents recorded at the point of payment | Performance of the contract (Art. 6.1.b) | 10 years, as accounting records |
| Texts submitted for translation | The content of the document itself, which may contain personal data | Performance of the contract (Art. 6.1.b) | 90 days after delivery, then deletion |
| Accounting obligations | Quotations, invoices, billing details | Legal obligation (Art. 6.1.c) | 10 years (Art. L123-22 French Commercial Code) |
| Complaints | Identity, subject of the complaint, correspondence | Legal obligation and legitimate interest (Art. 6.1.c and 6.1.f) | 5 years from closure |
| Site security | IP address, server connection logs | Legitimate interest in securing the site (Art. 6.1.f) | Set by the hosting provider, 12 months at most |
3. The documents you send
A text to be translated frequently contains personal data: names, addresses, family details, medical or financial information. Three commitments apply to it.
It is disclosed to no one. No text is entered into an online machine translation service, because free tools retain what is pasted into them and that would amount to disclosure to a third party.
It is used for nothing else. No text is reused as a translation memory, as a work sample, or as an example on this site without the Client's written agreement.
It is deleted. Source files and delivered translations are kept for ninety days so that a lost file can be reissued, then deleted. Immediate deletion on request, at any time.
4. Processing on behalf of clients
Where a document belongs to a company and contains personal data relating to its staff or its own customers, the Supplier acts as a processor within the meaning of Article 28 GDPR and the company remains the controller. A data processing agreement can be signed before the work begins, setting out the subject matter, the duration, the security measures and the fate of the data at the end.
5. The enquiry form
Messages sent through the form are forwarded by email and are not stored in the site database. This is deliberate: it avoids building a prospect file kept without a defined retention period. Please do not attach documents to the form — the file is requested in the reply, so that it travels once and knowingly.
6. Recipients and transfers
Data is processed by the Supplier alone. It may be hosted or transmitted by the site hosting provider, the email provider for the domain and, and, where an invoice is settled online, the authorised payment services provider. Accounting data may be shared with the accountant and, on request, with the tax authorities.
No card data is entered on this site or held by the Supplier. Data is hosted within the European Union and no transfer to a third country takes place.
No data is sold, rented or exchanged for marketing purposes.
7. Your rights
Under Articles 15 to 22 GDPR you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions concerning your data after your death. These rights are exercised at the details shown at the top of this page. A reply is given within one month, extendable by two months for complex requests.
If, having contacted the Supplier, you consider your rights are not respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr. A consumer resident in another Member State may also contact the supervisory authority of their own country.
8. Security
The site is served exclusively over HTTPS. Administrative access is authenticated and limited to what is strictly necessary. Documents entrusted by clients are held separately from the site and deleted on the schedule described above.
In the event of a data breach likely to create a risk to your rights and freedoms, the CNIL is notified within 72 hours and you are informed in accordance with Article 34 GDPR.
9. No automated decision-making
No decision producing legal effects concerning you is taken solely on the basis of automated processing, and no profiling is carried out.