Protection of Personal Data

The protection of personal data on the Compress-Image.net website

Compress-image.net has adopted a proactive policy to ensure compliance with the General Data Protection Regulation (GDPR) which came into effect on May 25, 2018.

The exchange and collection of data have experienced rapid and massive growth due to the development of technologies and practices that facilitate the sharing and significant increase in the circulation of personal data.

France played a pioneering role as early as 1978 with the Data Protection Act "Informatique et Libertés," which established a mechanism for personal data protection and the obligations and formalities to ensure these rights, as well as creating the National Commission for Informatics and Freedoms (CNIL) responsible for ensuring its proper implementation.

The first step towards harmonizing legislation among European Union member states was taken in 1995 with the introduction of a directive.

This legal framework has recently been reinforced to provide better data protection for citizens. This is known as the General Data Protection Regulation (GDPR), which unifies European laws. Adopted on April 27, 2016, this European regulation strengthens the responsibility of economic operators in protecting individuals whose data is processed.

Compliance with these rules constitutes a factor of transparency and trust towards individuals, as well as a guarantee of legal security for the company.

This regulation has two objectives:

  • Strengthening the rights of individuals whose data is collected: For this purpose, new rights have been created.
  • Strengthening the obligations of data controllers to provide better guarantees to individuals regarding the management and retention of their data.

Rights of Data Subjects

GDPR

Enhances requirements for transparency of information and expression of consent by data subjects

It provides for the provision of clear, understandable, and easily accessible information to enable data subjects to be aware of the use of their data, to generally express their consent, and to object to the processing of their data.

Recognizes the right to be forgotten

Data subjects can request the removal of links from search engines or the deletion of information that violates their privacy.

Introduces new rights

  • - The right to data portability allows individuals to obtain the data they have provided in a reusable format and, if necessary, to transfer it to third parties.
  • - Special conditions are established for the processing of data of children under 16 years of age: the provision of information drafted appropriately and obtaining consent from parental authority.

What is Considered Personal Data?

Personal Data

"Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person" (GDPR, Article 4).

If a person can be identified through the combination of various information (age, gender, city, qualifications, etc.) or by using various technical means, the data is always considered personal data.

Examples of Personal Data

  • Marital status, identity, identification data, images...
  • Personal life (habits, marital status, etc.)
  • Economic and financial information (income, financial situation, tax situation, etc.)
  • Connection data (IP address, logs, etc.)
  • Location data (movements, GPS data, GSM data, etc.)

Personal Data Considered "Sensitive"

Information about race or ethnic origin, political, philosophical, or religious beliefs, membership of trade unions, health or sexual life, genetic data, biometric data, including social security numbers, assessments of the social status of individuals, as well as data on criminal convictions or offenses...

In principle, the collection and processing of such data are prohibited.

However, they can be used in exceptional cases if the purpose of the processing requires it and if the processing is justified by a public interest after obtaining authorization from the CNIL or by a decision of the Council of State, or if the individual has given consent. The collection and processing of such data in these cases must be justified based on the purposes pursued.

Examples of Personal Data Considered "Sensitive"

  • Data revealing racial or ethnic origin
  • Data revealing political opinions
  • Data revealing religious or philosophical beliefs
  • Data on trade union membership
  • Genetic data
  • Biometric data for the unique identification of an individual
  • Data on health
  • Data on sexual activity or sexual orientation
  • Data on criminal offenses or convictions
  • National unique identification number

More Information on Personal Data Protection

If you have any questions about this topic, you can contact us using our contact form

Compress-image.net, committed to complying with current French and European regulations, has implemented measures to inform and protect your privacy.

► Information is also available on the "Cookie Information" page.