Section 1
Controller and data protection contact
RISING CORPORATION is the controller for the processing described here. For questions about personal data or to exercise your rights, you may contact Rising Corporation at contact@risingcorporation.com.
- Registered name
- RISING CORPORATION
- Registered office
- 1987 avenue Président John Kennedy, 83140 Six-Fours-les-Plages, France
- Data protection contact
- contact@risingcorporation.com
Section 2
Processing activities
The processing activities below correspond to functions currently active on the website and its infrastructure. Retention states a maximum duration or the criterion determining retention.
Technical data needed to deliver and secure the website is collected automatically. Information sent by email is optional, although a reply address and relevant details may be necessary to handle the request. Google account data is necessary only when a person chooses to sign in.
Visits and HTTP access logs
- People and data
- Visitors; IP address, date and time, method, URL, status, user agent and error or security information associated with the request.
- Purpose
- Deliver the website, diagnose incidents, prevent abuse and protect systems.
- Legal basis
- Rising Corporation’s legitimate interest in operating and securing its website.
- Recipients
- Authorised personnel responsible for operations and security.
- Transfers
- No intentional transfer to a third party; infrastructure is self-hosted in France.
- Retention
- No more than 14 days from the time the request is recorded.
- Applicable rights
- Access, rectification, erasure, restriction and objection subject to applicable conditions; portability generally does not apply to this basis.
Voluntary emails
- People and data
- Senders; email address, stated identity, content, attachments and message metadata.
- Purpose
- Receive the request, respond to it and provide necessary follow-up.
- Legal basis
- Legitimate interest in responding; pre-contractual steps where the request concerns a contemplated relationship.
- Recipients
- Authorised personnel concerned by the request.
- Transfers
- No third-party mail hosting provider is declared; email is operated by Rising Corporation.
- Retention
- For the time needed to process and follow up the request, then only where an obligation or the defence of legal rights justifies it.
- Applicable rights
- Applicable rights depend on the basis and include access, rectification, erasure, restriction and objection.
Google sign-in, accounts and sessions
- People and data
- Signed-in users; Google identifier, name, email address and optional profile image obtained through the openid, profile and email scopes, together with signed session data.
- Purpose
- Authenticate the user and apply authorisations for user and administration areas.
- Legal basis
- Legitimate interest in providing and securing access requested by the user.
- Recipients
- Authorised personnel; Google for the authentication operation chosen by the user.
- Transfers
- Google may process certain data outside the EEA under the applicable transfer mechanisms described in its privacy policy and international data transfer documentation.
- Retention
- The session token expires after no more than thirty days of inactivity. Transient OAuth checks expire after approximately fifteen minutes.
- Applicable rights
- Access, rectification, erasure, restriction and objection subject to applicable conditions.
Administration operations
- People and data
- Authorised users; email address, action, target, result, duration and request identifier. Editorial operations also retain their functional history.
- Purpose
- Control access, provide traceability, diagnose errors and protect administration functions.
- Legal basis
- Legitimate interest in securing and administering systems and establishing accountability for operations.
- Recipients
- Administrators and authorised personnel responsible for security or operations.
- Transfers
- No intentional transfer; self-hosted systems.
- Retention
- Technical events follow log rotation. Editorial history remains linked to the relevant records; technical backups are retained for seven days.
- Applicable rights
- Access, rectification, restriction and objection subject to applicable conditions; some data may be retained for security and evidence.
Vulnerability reports
- People and data
- Reporters; supplied contact details, description, technical evidence, correspondence and email metadata.
- Purpose
- Assess, coordinate and remediate vulnerabilities affecting risingcorporation.com.
- Legal basis
- Legitimate interest in securing the website and documenting incident response.
- Recipients
- Personnel strictly authorised to handle the report.
- Transfers
- No intentional transfer; self-hosted email and services.
- Retention
- During assessment, coordination and remediation, then only as long as needed to document security or defend legal rights.
- Applicable rights
- Access, rectification, erasure, restriction and objection subject to applicable conditions.
Language preference
- People and data
- Visitors; selected language in the NEXT_LOCALE cookie.
- Purpose
- Present the website directly in the chosen language.
- Legal basis
- Legitimate interest in providing the requested interface and consent exemption for a preference necessary to the service.
- Recipients
- Rising Corporation only.
- Transfers
- None.
- Retention
- Session cookie, deleted at the end of the browser session.
- Applicable rights
- The preference can be changed using the language selector or deleted in the browser.
Theme preference
- People and data
- Visitors who use the button; light or dark value stored locally.
- Purpose
- Remember the theme explicitly selected on the device.
- Legal basis
- Legitimate interest in providing the requested preference; functional storage triggered by the user.
- Recipients
- No external recipient; the value remains in the browser.
- Transfers
- None.
- Retention
- Until the user deletes local storage.
- Applicable rights
- The value can be replaced with the theme button or deleted in the browser.
Section 3
Recipients
Data is accessible only to Rising Corporation personnel who need it for operations, administration, responding to requests or security.
The website is self-hosted by Rising Corporation. Google acts only as the identity provider when a user chooses Google sign-in; no third-party provider hosts the website or its domains.
Section 4
Transfers outside the European Economic Area
Google sign-in requests only the OpenID Connect openid, profile and email scopes. For users in the European Economic Area, the relevant services are generally provided by Google Ireland Limited. Google may process certain data outside the EEA using, depending on the circumstances, an adequacy decision, the EU–US Data Privacy Framework or the standard contractual clauses described in its international data transfer documentation.
Rising Corporation does not arrange any other international transfer for currently active public functions. Any new provider or transfer must be assessed and documented before activation.
Section 5
Your rights
You may write to contact@risingcorporation.com. Applicable rights depend on the processing and its legal basis; proportionate identity verification may be requested.
- Request access to personal data concerning you and receive a copy.
- Request correction of inaccurate or incomplete data.
- Request erasure where the legal conditions are met.
- Request restriction of processing in the circumstances provided by the GDPR.
- Object to processing based on legitimate interests for reasons relating to your particular situation.
- Receive or transmit data covered by portability where that right applies.
- Withdraw consent at any time for processing based on consent, without affecting prior operations.
- Lodge a complaint with the French data protection authority, the CNIL, including through www.cnil.fr.
Section 6
Features currently absent
The current version of the website does not implement the following functions:
- No audience measurement or analytics service is loaded.
- No public contact form is displayed; communications are voluntarily initiated by email.
- No newsletter or marketing list is operated.
- No advertising pixel, retargeting or marketing profiling is used.
Section 7
Changes to this policy
This policy will be reviewed before any new form, provider, measurement tool, processing activity, sale or subscription is enabled. The date displayed above identifies the applicable version.