1. Data controller
IFRS 360 Expert — [Adresse du siège / registered address — à compléter] — [email protected].
2. Data we collect
Account: name, e-mail address, organisation (optional), preferred language, password (stored as an irreversible hash).
Security and access: sign-in sessions (date, IP address, browser, country), security event log, reading history (sections viewed) used to resume reading and to protect the content.
Contact: information you send through the contact form.
Payments: order number, amount, date, status, payer e-mail address, masked card number (e.g. 4111**1111) and authorisation code. The full card number is never received or stored by the publisher.
3. Purposes and legal bases
Providing the service and managing access to the digital library (performance of contract); securing the service and protecting the content against unauthorised copying and sharing (legitimate interest); answering your requests (legitimate interest).
To protect the work, displayed content is marked visibly and invisibly with your account identifier. This marking is used solely to trace the origin of any unauthorised distribution.
4. Retention
Account data is kept while the account is active and then deleted. Sessions expire after 30 days of inactivity. Security logs are kept for a maximum of 12 months.
Payment data is kept for the legal retention period of accounting records, including after the account is deleted.
5. Cookies
The website only uses strictly necessary cookies: a secure session cookie (sign-in) and a cookie remembering your language. No advertising or third-party analytics cookies are used. Reading preferences (text size, theme) are stored locally in your browser.
6. Processors
Hosting and database: Cloudflare, Inc.. Data may be processed outside your country subject to appropriate safeguards.
Payment: Société Monétique Tunisie (ClicToPay platform) and your bank process payment data to carry out and secure the transaction.
7. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. You can delete your account at any time from the “My account” page or write to [email protected]. You may also lodge a complaint with your data protection authority.