Foreword Development abides by the GDPR framework; we recognise personal data to fall under the jurisdiction of fundamental rights that cannot be ceded. Personal data are not, as they are often mistaken to be, commercialisable goods. We respect this commitment in our determinations of what information, on the one hand, is required to ensure the secure functioning of our products and what information, on the other hand, may be exploited by private organisations with little democratic oversight and minimal regulatory constraints.
This privacy policy (the ‘Privacy Policy’) governs the manner in which Foreword Development LLC (‘Group’, the ‘development group’, ‘we’, ‘us’) collects, uses, maintains and discloses information collected from users (each, a ‘User’) of the Foreword Development LLC website (the ‘Site’) and Group’s mobile applications (the ‘Applications’). The Privacy Policy applies to the Site and the Applications and all products and services offered by Group.
Note: all sites and applications of private clients of Foreword Development use their own privacy policies.
2. Personal identification information
We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit the Site, use the Applications, register on the Site or the Applications, fill out a form and in connection with other activities, services, features or resources we make available on the Site and/or Applications. Users may be asked for, as appropriate, name, email address, mailing address or phone number. Personal data that User provides will only be processed for correspondence with User or only for the purpose for which User has made the data available to us.
Users may visit our Site and Applications anonymously. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personal identification information, except that it may prevent them from engaging in certain Site or Applications related activities.
The basis for this data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
3. Non-personal identification information
We may collect non-personal identification information about Users whenever they interact with our Site or Applications. Non-personal identification information may include, but is not limited to the browser name, the type of computer, the type of mobile device and technical information about User’s means of connection to our Site or Applications, such as the operating system and the Internet service providers utilised and other similar information.
5. Collection of user information
Before or at the time of collecting personal information, we will identify the purposes for which information is being collected. We will collect and use personal information of a User solely with the objective of fulfilling those purposes specified by us and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law. We will only retain personal information as long as necessary for the fulfilment of those purposes. We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
6. Group’s protection of user information
- Group asks for personal information only when strictly necessary; the Site and Applications are robust for Users who wish to remain anonymous.
- We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of User’s personal information, username, password, transaction information and data stored on our Site and Applications.
- All data exchange between the Site or Applications and its Users happens over a SSL secured communication channel and is encrypted and protected with digital signatures. Other technical barriers, including one-way hashes, anti-robot challenges, two-factor authentication, remote session closure and session timeouts are in place to ensure unauthorised persons cannot access, modify or destroy user data.
8. Duration of data storage
We delete data as soon as it is no longer required for the aforementioned purposes. User may delete Group’s applications from their device, which will, within one month, trigger deletion of remote data regarding User.
Correspondence sent through the contact forms is kept in our mailbox for as long as the exchange remains relevant, and at most three years after the last contact.
Users may request receipt of all data regarding their usage of Site and the Applications by sending correspondence to the email address above.
9. Your rights under the GDPR
Where the GDPR applies, you may at any time request access to, rectification of, or erasure of your personal data; ask that its processing be restricted; receive it in a portable format; object to processing based on legitimate interest; and withdraw any consent previously given, without affecting the lawfulness of processing carried out before withdrawal. Write to the email address above, and we will answer within one month.
Third-party services on this site are provided by Google LLC (Analytics, reCAPTCHA, the booking calendar) and Microsoft Corporation (Clarity), and the WP FloorMap newsletter, when you opt in to it, is delivered through Mailchimp (Intuit Inc.); all three process data in the United States under the EU–U.S. Data Privacy Framework. You may also lodge a complaint with your supervisory authority; in France, the CNIL.