This policy describes how PromethEUs processes personal data of users and visitors of the prometheus-euro.eu website (the “Site”), in accordance with Regulation (EU) 2016/679 (GDPR).
It applies to processing carried out:
The entity that determines the purposes and means of the processing described below — the “controller” within the meaning of Article 4(7) GDPR — is:
| Controller | PromethEUs |
|---|---|
| Legal form | Non-profit association governed by the French Law of 1 July 1901 |
| Registered office | |
| Identifiers | RNA W923012514 · SIREN 108 025 065 |
| Privacy contact | |
| Data protection officer | None appointed — appointment is not mandatory at this stage (Article 37 GDPR). |
The full identity of the publisher and of the publication director is set out in the Mențiuni Legale.
Depending on the features used, PromethEUs may process:
Note: if certain data (phone/postal address) are exchanged by email in a one-off context, they are not collected via a dedicated Site form.
When accessing the Site and for security purposes, PromethEUs may process:
PromethEUs processes your data only when a legal basis exists (Article 6 GDPR).
| Purpose | Main data | Legal basis |
|---|---|---|
| Account creation and management | email, username, settings | Performance of a contract (requested service) |
| Profile functionality | profile data | Contract + user choice (options) |
| Publishing content (e.g. comments) | content, identifier, timestamp | Contract (feature) + moderation rules |
| Newsletter | email, status | Consent |
| Service notifications (security, account) | Contract or legitimate interest (as applicable) | |
| Security, fraud prevention and moderation | IP, user-agent, events | Legitimate interest (securing the service) |
| Legal obligations (if applicable) | necessary elements | Legal obligation |
Data are accessible:
PromethEUs does not sell your personal data.
Some third-party services (e.g. online fonts, CDNs, embedded videos) may result in access to technical data (including IP address) by entities located outside the EU.
When transfers outside the EU exist, PromethEUs implements appropriate safeguards provided by the GDPR (e.g. standard contractual clauses) and seeks to limit such transfers when possible (e.g. self-hosting resources).
PromethEUs keeps data only for as long as necessary for the purposes pursued.
The targets above must match the settings actually in place. In case of divergence, actual practice prevails and this policy must be updated.
The Site primarily uses strictly necessary cookies (e.g. session cookie) for operation and security.
These cookies do not require prior consent (operation/security). Example:
PromethEUs does not implement advertising or audience measurement cookies to date.
If non-essential cookies are added later, a compliant consent mechanism will be deployed (with refusal as easy as acceptance).
The Europe Live map shows how many people are watching it at the same time, and — only if you choose to share it — roughly which area they are watching from. These are two separate things.
No consent is required and no personal data is processed: a random, opaque token is generated for the browser tab, kept for 90 seconds, and never linked to an account. It is regenerated for every new session and deleted when the tab closes.
PromethEUs implements appropriate technical and organizational measures, including:
In accordance with the GDPR, you have the following rights: access, rectification, erasure, restriction, objection, portability (under the conditions provided by law).
Where processing is based on your consent (e.g. the newsletter), you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3) GDPR). Withdrawal is as easy as giving consent (unsubscribe link in every message or request sent to the address below).
You may also give general or specific directives on the fate of your personal data after your death, in accordance with Article 85 of French Law No. 78-17 of 6 January 1978 (“Informatique et Libertés”).
Exercise of rights: support@prometheus-euro.eu (subject: “GDPR — Exercise of rights”).
PromethEUs may request additional information to verify your identity before processing a request.
A response is provided within GDPR time limits (typically 1 month, extendable in certain cases).
You may lodge a complaint with the competent supervisory authority, notably the CNIL for France.
PromethEUs does not carry out any automated decision-making, including profiling, producing legal effects concerning you or similarly significantly affecting you within the meaning of Article 22 GDPR.
The automated anti-abuse measures described in the “Security” section (anti-bruteforce, anti-spam) may temporarily restrict access to the Site; such measures may be contested at any time via the contact address given in the “Your rights” section.
PromethEUs may update this policy to reflect changes to the Site, its services, or applicable law. The update date appears in the header.
Information relating to the identity of the publisher, the publication director and the hosting provider of the Site is set out in the Mențiuni Legale.
Each option opens your email client with the right subject line already filled in, so your request reaches the right process straight away.
Response within 1 month, extendable by two months where the request is complex — you are then informed, with reasons, within one month of its receipt (Article 12(3) GDPR).
Requests drafted in another official language of the Union remain admissible and are processed; translation may however lengthen the handling time.
RO