Privacy Policy

PRIVACY POLICY

Last updated: 13 July 2026

1. Purpose of this Policy

This Privacy Policy explains how Alban Orin collects, uses, retains and protects personal data processed through albanorin.com and the services offered through the website.

These services include contact requests, consultations, functional or respiratory assessments, courses, certification programmes, online programmes, workshops, retreats, immersive programmes, events and educational content.

This Policy is intended to provide information. It does not replace consent where consent is required by law, in particular for certain cookies, certain marketing communications, the use of testimonials or images and, depending on the circumstances, the processing of health data.

2. Data Controller

The data controller is:

Alban Orin, sole trader (entrepreneur individuel)
SIRET: 794 822 213 00011
7 rue Professeur Dubuisson
44100 Nantes, France
Email: hello@albanorin.com
Telephone: +33 6 67 74 41 70
Website: https://albanorin.com

Alban Orin has not appointed a Data Protection Officer. Questions concerning personal data may be sent directly to the contact details above.

3. Personal Data We May Collect

The categories of data actually collected depend on your relationship with Alban Orin and the service requested.

3.1 Identification and contact data

first name and surname;

email address and telephone number;

postal and billing address;

company name, profession, role and VAT number where necessary;

an emergency contact for certain in-person services.

3.2 Enquiries, registration and contractual data

the content of enquiries submitted by form, email or telephone;

the selected service, dates, location, organisational preferences and registration history;

experience level, qualifications or previous certifications where prerequisites apply;

contracts, quotations, confirmations, invoices and communications relating to performance of the contract;

attendance, progress and completion of a course or certification programme where necessary.

3.3 Payment data

amount, currency, payment method, transaction status and transaction reference;

information required for invoicing and fraud prevention.

Full payment-card details are processed directly by Stripe. Alban Orin does not retain the full payment-card number.

3.4 Retreat and event data

dietary preferences, allergies or accessibility needs where necessary for organisation;

accommodation choices and logistical information;

information necessary for participant safety and coordination with relevant providers.

3.5 Health data and other sensitive data

Certain consultations, assessments or activities may require the limited collection of health-related information, such as contraindications, current treatments, relevant medical history, pregnancy, symptoms, fitness to participate, or responses to a respiratory or functional questionnaire.

This information is collected only where necessary for safety, adaptation or delivery of the service. It is not used for advertising, commercial profiling or sale.

Depending on the service, processing is based either on the individual’s explicit consent or on the legal provisions permitting processing that is necessary for healthcare or related services provided by a professional subject to a duty of confidentiality, where those provisions genuinely apply.

Refusal to provide health information that is essential for safety may make participation in certain activities impossible.

3.6 Technical and usage data

IP address, device type, browser, operating system and technical identifiers;

pages viewed, date and time of access, referral source and interactions with the website;

cookie and communication preferences.

This information is collected through technical logs, cookies or similar technologies as described in the Cookie Policy.

3.7 Testimonials, photographs and submitted content

Where a person voluntarily provides a testimonial, photograph, video or other content, it is used for communication or promotional purposes only on the basis of a valid authorisation specifying the purpose, media and, where necessary, the duration of use.

4. Sources of Personal Data

Personal data may be collected:

directly from you, including through a contact request, registration, payment, consultation or questionnaire;

automatically when you browse the website, subject to your cookie choices;

from technical providers acting on Alban Orin’s behalf;

from a partner or funding body where you have requested its involvement and disclosure is necessary;

from a person or organisation registering you for a service, provided that you are appropriately informed.

5. Purposes and Legal Bases

5.1 Enquiries and pre-contractual communications

Purposes: responding to enquiries, providing information, arranging a preliminary discussion, preparing a quotation and checking suitability or prerequisites.

Legal basis: steps taken at your request before entering into a contract and, for internal organisation and follow-up, Alban Orin’s legitimate interests.

5.2 Registration, orders and delivery of services

Purposes: recording registrations, entering into and performing contracts, organising consultations, courses, certification programmes, immersive programmes and events, managing access to content and communicating necessary information.

Legal basis: performance of a contract or steps taken before entering into a contract.

5.3 Payments, invoicing and accounting

Purposes: processing payments, issuing invoices, maintaining accounts and complying with tax obligations.

Legal basis: performance of a contract and compliance with legal obligations.

5.4 Health, safety and adaptation of services

Purposes: identifying contraindications, adapting activities, ensuring participant safety and, where relevant to the professional service concerned, providing an individual consultation or assessment.

Legal basis: performance of a contract for organisational aspects; explicit consent where required for sensitive data; or the specific legal basis applicable to health data processed by an authorised professional subject to a duty of confidentiality.

5.5 Educational communications and follow-up

Purposes: sending documents, instructions, reminders, educational resources, certificates, results or information necessary for follow-up.

Legal basis: performance of a contract.

5.6 Marketing communications

Purposes: sending information about Alban Orin’s activities, courses, events, content or offers.

Legal basis: prior consent where required; or legitimate interests where the law permits contacting an existing customer about similar services, with a simple and free right to object at any time.

Health data are never used to personalise marketing communications.

5.7 Security, fraud prevention and legal claims

Purposes: securing the website, preventing abuse and fraud, retaining necessary evidence, and managing unpaid amounts, complaints and disputes.

Legal basis: Alban Orin’s legitimate interests in securing the services and establishing, exercising or defending legal claims; compliance with legal obligations where applicable.

5.8 Cookies and audience measurement

Purposes: operating the website, remembering choices, measuring audience and, where used, personalising certain content.

Legal basis: legitimate interests or a consent exemption for strictly necessary technologies; consent for other tracking technologies.

6. Mandatory and Optional Data

Mandatory fields are identified at the time of collection. Failure to provide them may prevent Alban Orin from responding to an enquiry, entering into or performing a contract, processing a payment or ensuring the safety of a service.

Other information is optional. Not providing it has no consequence unless it is necessary for a form of personalisation specifically requested by the individual.

7. Recipients and Processors

Personal data are accessible only to persons and providers who need them to perform their duties, within the scope of their responsibilities.

Depending on the services used, recipients may include:

Alban Orin and authorised instructors or assistants directly involved in organising or delivering a service;

Rogue Hosting, operated by Christian Cerdan, for the relevant hosting or technical-support services;

Fillout, for certain forms and registrations;

Stripe, for secure payment processing;

Brevo, for transactional, educational or marketing emails;

video-conferencing, content-hosting or online-learning providers used for the relevant service;

hotels, venues, caterers, guides, assistants and other logistics partners, only for information required for the event;

accountants, advisers, insurers and legally authorised authorities where necessary or required.

Personal data are not sold or rented. They are not disclosed to third parties for their own direct-marketing purposes without a valid legal basis and without information or consent where required.

8. Transfers Outside the European Economic Area

Certain technical providers or their subprocessors may process data from countries outside the European Economic Area, including the United States.

Where an international transfer takes place, Alban Orin ensures that it relies on a mechanism recognised under the GDPR, such as an adequacy decision applicable to the recipient, the European Commission’s Standard Contractual Clauses together with supplementary safeguards where necessary, or another safeguard provided by law.

Further information about the safeguards applying to a specific provider may be requested at hello@albanorin.com.

9. Retention Periods

Personal data are retained only for as long as necessary for the purposes for which they were collected and, where necessary, for applicable statutory or limitation periods.

Contact enquiries that do not lead to a contract: up to three years from the individual’s last active contact.

Customer and service-performance data: for the duration of the contractual relationship, then in restricted archives for the applicable limitation period, generally five years.

Unaccepted quotations: up to three years from issue or the last active contact, unless evidence must be retained for a particular reason.

Invoices, accounting records and tax evidence: ten years from the end of the relevant financial year.

Prospect data used for marketing: three years from collection or from the prospect’s last active contact.

Customer data used for marketing: during the commercial relationship and for three years after it ends or after the customer’s last active contact.

Marketing suppression lists: for as long as necessary to ensure that the objection is respected, generally at least three years.

Health, fitness or safety data collected for a course, workshop, retreat or immersive programme: only for the time necessary to prepare, deliver and immediately follow up the service, after which the data are deleted or anonymised unless a legal obligation or documented evidential need applies.

Data forming part of a consultation record connected with healthcare activity: for the retention period required by the professional obligations and limitation rules applicable to that activity.

Payment data: according to statutory periods and Stripe’s applicable retention rules; Alban Orin does not retain full card data.

Technical security logs: for a period proportionate to the risk and generally no longer than twelve months, unless an incident or evidential need justifies longer retention.

Cookies and tracking technologies: for the periods stated in the Cookie Policy and consent-management tool.

Testimonials, photographs and videos: for the period stated in the relevant authorisation or until withdrawal where withdrawal is legally possible.

10. Security and Confidentiality

Alban Orin implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Depending on the processing, these measures include access restrictions, secure providers, account protection, backups, software updates and confidentiality obligations for authorised persons.

No system can guarantee absolute security. Individuals are therefore encouraged not to send sensitive information through an insecure channel and to report any suspected issue promptly.

11. Cookies and Similar Technologies

Strictly necessary cookies may be placed without consent where they are essential for operating the website or providing a service requested by the user.

Audience-measurement, personalisation or third-party cookies requiring consent are placed only after the user has made a choice.

You may accept, refuse or change your preferences at any time using the cookie-management tool on the website. Withdrawing consent is as easy as giving it.

The Cookie Policy, available from the website footer, identifies the technologies used, their purposes, providers and retention periods.

12. Marketing Communications

Each electronic marketing communication contains a simple unsubscribe method.

Withdrawal of consent or an objection to marketing does not affect communications that are necessary for performance of a contract, safety, invoicing or service follow-up.

Alban Orin does not sell users’ contact details and does not disclose them to partners wishing to use them for their own marketing without complying with applicable information and consent requirements.

13. Children’s Data

The website and services are not primarily intended for children.

Where a minor participates in an authorised service, necessary data are collected from the legal representative or with their authorisation, and only to the extent required for registration, organisation and safety.

Requests concerning a child’s data may be sent to hello@albanorin.com.

14. Automated Decision-Making and Profiling

Alban Orin does not make decisions producing legal effects or similarly significantly affecting an individual solely on the basis of automated processing.

Tools may be used to segment communications according to simple criteria such as language, expressed interest or previous participation. This segmentation does not use health data and may be objected to where it is based on legitimate interests.

15. Your Rights

Subject to the conditions laid down by law, you may exercise the following rights:

the right of access;

the right to correct inaccurate or incomplete data;

the right to erasure;

the right to restriction of processing;

the right to object, including to direct marketing;

the right to data portability where the statutory conditions are met;

the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal;

the right, under French law, to provide instructions concerning the retention, erasure and disclosure of your personal data after death.

To exercise your rights, email hello@albanorin.com or write to Alban Orin, 7 rue Professeur Dubuisson, 44100 Nantes, France.

The request must provide enough information to identify the requester. Proof of identity may be requested only where there is reasonable doubt about the requester’s identity.

Alban Orin normally responds within one month of receiving the request. This period may be extended in the circumstances permitted by the GDPR, in which case the individual will be informed.

16. Complaint to the CNIL

If, after contacting Alban Orin, you believe that your rights have not been respected, you may lodge a complaint with the French supervisory authority, the Commission nationale de l’informatique et des libertés (CNIL): https://www.cnil.fr.

17. Third-Party Links and Services

The website may contain links or integrations to services operated by third parties.

When you leave albanorin.com or use a third-party service, the processing of your data may be governed by that third party’s privacy policy. You should review it before providing information.

18. Changes to this Policy

This Privacy Policy may be amended to reflect changes in services, tools, law or practices.

The revision date appears at the beginning of the document. Where a material change requires it, appropriate notice will be given to affected individuals.

19. Contact

For questions about this Policy or the exercise of your rights:

Alban Orin
7 rue Professeur Dubuisson
44100 Nantes, France
Email: hello@albanorin.com
Telephone: +33 6 67 74 41 70

‍