The site’s confidentiality policy

Purpose of the site

To communicate with prospects/customers and sell a range of services.

Context of use

The platform used for the www.poppywords.com website is the full version of the WordPress OpenSource CMS.

The WordPress CMS is installed on hosting provided by an external service provider.
Details of the host :

OVH
SAS with capital of €10,069,020
RCS Lille Métropole 424 761 419 00045
Code APE 2620Z
VAT NUMBER: FR 22 424 761 419
Registered office: 2 rue Kellermann – 59100 Roubaix – France

Information technology, files and civil liberties

Poppy Words respects the provisions protecting human rights and fundamental freedoms, the protection of personal data and its free circulation, as well as EU Directive 95/46 and Law 78-17 of 6 January 1978 amended in 2004 relating to information technology, files and freedoms. Users are hereby informed that, in accordance with article 27 of the French Data Protection Act no. 78-17 of 6 January 1978, as amended in 2004, they have an individual right to access, rectify and delete any personal information concerning them. This right may be exercised by e-mail to the following address mcc@poppywords.com or by post addressed to :

Poppy Words
7 Kerhélary 22300 Ploumilliau, France
Tel: (+33) (0)7 66 82 35 33

Protection of personal data

In accordance with the French Data Protection Act n°78-17 of 6 January 1978, as amended, and the European Data Protection Regulation (RGDP), Poppy Words hereby informs the user that it respects the confidentiality, integrity and security of any data that the user may communicate to Poppy Words.
Any personal data that identifies you directly, such as your surname, first name, postal address, e-mail address or telephone number, or indirectly, such as computer traces left by your browsing on the site, IP address (virtual address of the computer), are considered to be personal data and are treated as such, subject to changes in the legal framework on the qualification of personal data.

Processing of data relating to the Services

What data is processed?

Top of the form

Data collected via the www.poppywords.com website:

  • Contact form
    Name, e-mail address, telephone number
  • Newsletter subscription
    Name, e-mail
  • Registration for comments
    Name, e-mail
  • Manager questionnaire
    Surname, first name, telephone, e-mail

Data storage medium
Contact form, newsletter registration and comment submission

This data is stored on the server hosting the OVH site
Server used: Linux Apache Debian version shared server
Database system: MySql
Database administration software: phpMyadmin4 with SSL secure link
php version used: 7.1
Email address used by the www.poppywords.com site: mcc@poppywords.com
Incoming server: IMAP/POP3 port
Outgoing server: SMTP SSL port
Authentication required for IMAP, POP3 and SMTP
Internal data retrieval: Data is retrieved by the Publication Manager from a single computer and processed on Windows 11 using Microsoft Office Excel software. No paper version of this data will be created.
The WordPress CMS installed for the www.poppywords.com website does not use the “JetPack” extension offered by WordPress.org. As a result, WordPress.org has no access to customer data.

Purpose of data processing

Poppy Words undertakes to collect only the necessary data via the various forms and questionnaires on the www.poppywords.com website: surname, first name, e-mail address, telephone number, website URL for the following purposes:

  • For customer follow-up
  • Identification of customers/prospects
  • Reminders, quotation reminders, payment reminders, etc.
  • Post-training trainee follow-up:
  • Maintenance
  • Breakdowns
  • Updates
  • Additional explanations
  • Optimising training courses
  • Get the information you need to organise your courses properly
  • Identifying the source of comments
  • Improve the website
  • Improve the services offered
  • Respond to people who leave comments
  • To keep customers and/or prospective customers informed about the company’s activities.
  • Users may request the rectification or deletion of their data at any time by sending a request to the following address mcc@poppywords.com.

Is the data accurate and kept up to date?

Insofar as the customer requests all updates, it is the customer who contacts us.
If the data collected proves to be inaccurate, it will be modified or deleted.

Retention period of collected data

The data collected is kept indefinitely until the client voluntarily unsubscribes.
Poppy Words reserves the right to unilaterally delete this data at any time.
Each user may at any time request the rectification or deletion of their data by sending their request to the following address mcc@poppywords.com.

Recipient of processed data
The Publication Director

Bottom of the form

Processing

Subscribing to, accessing and/or using certain services involves the processing of personal data, which you accept. The person responsible for processing users’ personal data is described in the “Publication Director” paragraph of this legal notice.

The data collected comes from the voluntary provision of their information by users wishing to access or use a Service requiring such processing, from computer traces left by browsing the site or from the transmission by one of the partners to the other partner of the data thus collected.

This data may be used for the purposes of managing the operations carried out on the Site and the commercial activities of Poppy Words and/or its partners.

It may, for these purposes, be communicated to companies in the aforementioned groups or to third parties in order to satisfy legal or regulatory obligations as well as for the execution of commercial prospecting operations. You accept that this information may be used and/or communicated in accordance with the above terms and conditions.

Right of access, rectification and opposition

You have the right to obtain information about your personal data from Poppy Words and, if necessary, to request that it be rectified or to object to its use for canvassing purposes, in particular commercial canvassing. This right may be exercised by e-mail to the following address: mcc@poppywords.com or by post addressed to:

Poppy Words
7 Kerhélary, Ploumilliau 22300, France
Tel: (+33) (0)7 66 82 35 33
France

Comments

When you leave a comment on our website, the data entered in the comment form, as well as your IP address and your browser’s user agent, is collected to help us detect unwanted comments.

An anonymised string created from your email address (also known as a hash) may be sent to the Gravatar service to check whether you are using it. The Gravatar service’s confidentiality clauses are available here: https://automattic.com/privacy/. Once your comment has been validated, your profile photo will be publicly visible alongside your comment.

Media

If you are a registered user and you upload images to the website, we advise you to avoid uploading images containing EXIF data of GPS coordinates. Visitors to your website can download and extract location data from these images.

Contact and booking forms

The information collected in the contact form and possibly in a booking form is only intended to facilitate exchanges between visitors and Poppy Words. The information collected in this way is only kept for the duration of the transaction.

To guarantee the security of our contact form, we use the “Recaptcha” service, whose confidentiality policy you will find below:

You acknowledge and understand that the reCAPTCHA API collects hardware and software information (such as data on device type and applications) and sends it to Google for analysis. The information collected as a result of your use of the service will be used to improve reCAPTCHA and for general security purposes. It will not be used by Google to serve personalized ads. In accordance with section 3(d) of the Google API Terms of Service, you agree to provide Google with the necessary acknowledgements and permissions to collect and share this data when you use the Google API. For users in the European Union, you and your API clients must comply with the rules relating to user consent in the EU (which you can currently consult on this page: http://www.google.com/about/company/user-consent-policy.html).

Commercial solicitations by electronic means (newsletter)

We comply with the rules set out in article L.34-5 of the French Post and Electronic Communications Code (Code des postes et des communications électroniques), which requires your express prior consent to be obtained for the sending of commercial canvassing by electronic means (e-mail).

Thus, on the form that you fill in when you subscribe to the newsletter, you are expressly asked for your consent :

to receive information from our site
Exception: your express prior consent is not required if you are already a client of Poppy Words and the purpose of our request is to offer you products or services similar to those we already provide.

In any case, you always have the possibility of objecting to receiving such solicitations by carrying out the following actions:

For e-mail, by clicking on the unsubscribe link provided in each e-mail, or by contacting us at the following address: mcc@poppywords.com

Technical data processing – Cookies

Poppy Words also automatically records certain technical data.

When the site is consulted, the technical data likely to be recorded in connection with access to or use of the site is the user’s Internet Protocol (IP) address and information relating to the user’s configuration (type of machine, browser, etc.) and browsing (date, time, pages consulted, occurrence of errors, etc.).

The latter information may be stored, via your browser software, in short text files (cookies), subject to your choices, in a dedicated space on the disk of Poppy Words and/or its partners process this technical data in a completely anonymous manner, not linking it to any information that could identify the user and not passing it on to third parties.

Each cookie is assigned an anonymous identifier. The cookie file enables its issuer to identify the terminal in which it is stored for the duration of the validity or storage of the cookie concerned.

Depending on their category, cookies are used for the following purposes:

A first category of cookies is strictly necessary for the use of the Site. They are essential for browsing the site and taking advantage of all its functions (support for the user’s operating system, display, etc.). They enable certain functions and the presentation of the Site to be adapted to your browser and hardware. These are essentially technical cookies that do not identify you as an individual.
Another category of cookies concerns those used to measure performance. These cookies make it possible to establish statistics and volumes of visits to and use of the various services on the Site. Their purpose is to enable Poppy Words to improve user comfort. These cookies do not identify you as an individual.
These first two categories of cookies are only used for the purposes of compiling usage statistics, preventing errors, preventing infringement and counterfeiting of the site or improving the conditions of access or use of the Site.

A third category of cookies concerns functionality. They are used to simplify your browsing. They enable us to record some of your choices (language, user name, country, information relating to a previously entered form, etc.).
Another category of cookies comes from social networks: these third-party cookies enable users to share the content of the Site with other people. This is the case, for example, with Facebook’s “Share” or “Like” buttons.

For “Social Network” cookies

The social network that provides this type of application button is likely to identify you thanks to this button, even if you have not clicked on it when visiting the Site. In fact, certain cookies enable the social network concerned to track your browsing on the Site, provided that your account with this social network is activated on your terminal during your browsing on the Site. Poppy Words has no control over the process used by social networks to collect information relating to your browsing of the Website.

Poppy Words invites you to consult the personal data protection policies of these social networks. These should enable you to exercise certain privacy choices with these social networks, in particular by configuring your user accounts for each of these networks.

Without prejudice to the foregoing, Poppy Words and/or its partners may however use this information in co-operation with the user’s internet service provider to identify the user for the purposes of enforcing all or part of these general terms and conditions or additional contractual terms and conditions or at the request of the competent administrative or judicial authorities.

We use several sharing buttons on our site.

To manage your data on Facebook
https ://www.facebook.com/help/cookies/
To manage your data on Twitter
https ://support.twitter.com/articles/20170518-use-of-cookies-and-similar-technologies-by-twitter
To manage your data on Pinterest
https ://policy.pinterest.com/en/cookies
To manage your data on LinkedIn
https ://www.linkedin.com/legal/cookie-policy?_l=fr_FR
To manage your data on Google +
https ://policies.google.com/technologies/cookies?hl=en
Deactivating these cookies prevents any interaction with social networks.

Audience measurement

Poppy Words uses Google Analytics, a web analytics service provided by Google, Inc (“Google”).

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

See the privacy policies of Google tools

If you do not want our website to save cookies in your browser for audience measurement purposes, you can click on the following link for further information:

Google Analytics cookies
https ://tools.google.com/dlpage/gaoptout

How long your data is stored

If you leave a comment, the comment and its metadata are stored indefinitely. This makes it possible to automatically recognise and approve subsequent comments instead of leaving them in the moderation queue.

For users who register on our site (where possible), we also store the personal data indicated in their profile. All users can view, modify or delete their personal information at any time (with the exception of their user name). If you wish to make a request to this effect, please use the following e-mail address: mcc@poppywords.com.

How can you exercise your rights?

We inform you that you can set your browser parameters at any time in order to modify your choices with regard to cookies. Setting your browser parameters is an effective and free way of determining how cookies are managed in advance. You can thus decide:

  • Accept the storage of all cookies embedded in the pages and content you visit. Note that on the one hand, these cookies will only be readable by their originators. Secondly, this process is not definitive, and you will always be able to delete these cookies at a later date;
  • Refuse to save cookies on your terminal. In this case, your visit to the site will no longer be counted in the traffic measurement tools, but you will no longer be able to enjoy the same browsing comfort, as certain functions require the use of cookies. Consequently, Poppy Words declines all responsibility for any inconvenience caused by any malfunctioning of our services resulting from the impossibility of consulting the necessary cookies;
  • Your browser will ask you to agree or refuse before a new cookie is installed on your terminal.

Cookie management settings depend on your browser (for more information, visit
https://www.youronlinechoices.com/fr/controler-ses-cookies).

For example, you can prevent cookies being stored by configuring your browser as follows:

Internet Explorer

Go to Tools > Internet Options.
Click on the confidentiality tab.
Click on the advanced button and tick the “Ignore automatic cookie management” box.
To find out more: http://windows.microsoft.com/fr-FR/windows7/Block-enable-or-allow-cookies

Firefox

At the top of the Firefox window, click on the Firefox button (Tools menu on Windows XP), then select Options.
Select the Privacy panel.
Set Retention Rules: to use personalised settings for history.
Uncheck Accept cookies.
To find out more: https://support.mozilla.org/fr/kb/activer-desactiver-cookies?redirectlocale=fr&redirectslug=Activer+and+d%C3%A9opt+the+cookies

Chrome

Click on the spanner icon in the browser toolbar.
Select Settings.
Click on Show advanced settings.
In the “Confidentiality” section, click on the Content Settings button.
In the “cookies” section, you can block cookies and data from third-party sites.
To find out more: https://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647

Safari

Go to Settings > Preferences
Click on the Confidentiality tab
In the “Block cookies” section, tick the “always” box
To find out more: https://support.apple.com/kb/HT1677?viewlocale=fr_FR

Opera

Go to Settings > Preferences
Click on the Advanced tab
In the “cookies” area, tick the “Never accept cookies” box
To find out more: https://help.opera.com/Windows/10.20/fr/cookies.html

Further information

How we protect your data

Our site uses the WP Cerber Security extension
Convenient security features

WordPress connection attempt limit protection against brute force attacks
Allow or restrict connections by whitelisting and blacklisting IP access
Rename wp-login.php and hide /wp-admin/
Make custom connection URL
Stop user enumeration
Completely disable XML-RPC, WP API REST and feed any type
fail2ban support

See the full list of features

How does WP Cerber protect sites?

By default WordPress allows unlimited login attempts either through the login form or by sending special cookies. This allows passwords to be cracked with relative ease by brute force attack.

WP Cerber blocks intruders by IP or subnet as soon as a large number of connection attempts are made by limiting the number of attempts, making brute force attacks or distributed brute force attacks from botnets impossible.

It creates Black or White access lists to block or authorise connections from a particular IP address.

A custom login page is created to avoid automatic attacks on the default wp-login.php, which requires constant attention and consumes significant server resources. If an attacker tries to access wp-login.php they will get a 404 error response.

WP Cerber tracks time, IP addresses and usernames for successful and failed login attempts, logins, logouts, password changes, blocks IPs and actions taken by itself.

The WordPress dashboard is hidden (/ wp-admin /) when a user is not logged in. If a user is not logged in and tries to access the dashboard by requesting / wp-admin /, WP Cerber will return a 404 Error.

Massive botnet brute force attack? This is no longer a problem. Citadel Mode will be automatically activated for a given period after several unsuccessful connection attempts, thus preventing the intruder from making further connection attempts with a user name.

Procedures in the event of a data leak

In the event of a data leak, the CNIL will be notified within a maximum of 72 hours and all users of the site will be notified within the same period.

Automated marketing and/or profiling operations using personal data

No automated marketing and/or profiling operations are carried out by our site.