Objet : Subject : Study on business preparedness for natural disasters
Responsible for processing :

French Red Cross, a state-approved non-profit organization under the law of 1901, with French national business register n° 775 672 272 and headquartered at 98 Rue Didot 75694 Paris Cedex, represented by its chairman Professor Jean-Jacques Eledjam and by delegation, its director general Mr. Jean-Christophe Combe.

PIRAC (Regional intervention platform for the Americas and the Caribbean), 21 Le Caducée building - 97139 les Abymes

Dear Sir or Madam,

This important information concerns you. You are invited to take part in this online study carried out by the French Red Cross on business preparedness for natural disasters.
The aim of this information sheet is to inform you on how your personal information will be handled as well as on your rights, in particular your right to withdraw consent. Please read it carefully.

1. Regulation governing the use of your personal data
Your personal information is handled by the French Red Cross (hereinafter referred to as "the French Red Cross or "we"), acting as a data controller. We supply your personal data to subcontractors who offer sufficient guaranties for the performance and hosting of the study on business preparedness for natural disasters.
The handling of your personal data is performed in accordance with the following provisions:
Regulation (EU) n° 2016/679 denominated "General Data Protection Regulation" (or GDPR);
Act n° 78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties. .

2. Nature of the personal data collected about you
We only collect and process the following types of personal data:
Your gender, line of business, company size range, age range, the municipality where your principal business activities are carried out, business establishment year range and your position (company director or other).
Your email address (only if you disclose it to us).

3. Personal data processing purposes
The French Red Cross handles your personal data to:
Carry out statistical analysis.
Eventually share the results of the study with you if you agreed to be contacted to this end and that you have shared your email address with us.
Eventually contact you again and share further information on our SME support project, provided that you have agreed to be contacted to this end and that you have shared your email address with us.
Data collected in this context will not be used for any other purposes.
These processing activities rely on your consent.

4. Recipient of your personal data
Your personal data collectedin the context of the study on business preparedness for natural disasters are strictly confidential, and intended exclusively for handling by French Red Cross authorized personnel.
However, your personal data will be transferred and processed by our subcontractors (e.g. consultant, data host) in order to carryout the above-mentioned tasks.
Our subcontractors implement appropriate security measures in order to guarantee the confidentiality and integrity of your personal data. They are not entitled to use your personal data for any purpose other than the implementation of services entrusted to them by the French Red Cross and under their control.

5. Retention period of your personal data

When undertaking statistical analysis, your personal data are immediately anonymized.

If you share your email with us to facilitate communication of the study, your personal data will be kept in an active database for two years before being deleted.
If you share your email address to facilitate contact with us in order to receive more information on our SME support project, your personal data will be kept for three years before being archived in accordance with legislative provisions or regulations in effect at the time.

6. Security of your personal data
The French Red Cross implements all the appropriate technical and organizational measures in accordance with the nature of your personal data and the risks presented by their processing. This is done to ensure the security and confidentiality of the information, with a particular view to preventing the data from being distorted, damaged, or accessed by unauthorized third parties.

7. Your rights over your personal data
You can access data about you, amend them or have them deleted. You also have a right to the portability and restriction of processing of your data. You can withdraw consent to the processing of your data at any time.
In order to exercise these rights, you can contact PIRAC using the following email address: pirac@croix-rouge.fr, or by regular mail: PIRAC, 21 Le Caducée bulding - 97139 les Abymes.

Should you experience any difficulties, you can contact our Data Protection Officer (DPO):