Testimonial privacy
This notice covers testimonials on the public website, not accounts in the private app. Version: 19 October 2026.
Controller and contact
OR-LIMIT, French association, Pavillon 5, 19 rue de l’Orme, 66400 Oms, France. Data protection contact: association@or-limit.fr.
Purposes and legal grounds
Your chosen display name, email, rating and text are used to receive, moderate and publish your testimonial. Photos are optional. Publishing your name, rating, text and, separately, photos relies on consent. Email is required for follow-up and request verification and is never published. Not submitting a review does not affect your relationship with the association. Rights requests are handled to meet GDPR obligations; security and abuse prevention rely on legitimate interests.
Publication and recipients
Approved display names, ratings, texts and authorised photos are public across the language versions and may be indexed by search engines. Do not include private contact information or sensitive data. Only authorised association staff access non-public details; OVHcloud hosts the site and email service providers may process follow-up messages. This form does not authorise email advertising.
Photos
Only attach photos you can authorise us to use. Obtain permission from recognisable people, including the necessary parental permission for children. You can request removal of a photo alone. Photos are checked before publication and may be refused.
Retention
Unpublished testimonials must be deleted within 90 days of submission. Published testimonials are kept while useful, relevant and authorised, reviewed at least annually and withdrawn following a verified consent withdrawal. Minimal consent evidence is linked to the testimonial and deleted with it unless a dispute justifies separate limited retention. Rights requests are kept during processing and for up to one year after closure unless a legal duty or dispute justifies limited separate retention. These are OR-LIMIT management rules, not universal statutory periods.
Your rights
Request access, rectification, erasure, restriction and, where applicable, objection or portability, and withdraw consent without retrospective effect using this form or association@or-limit.fr. Proportionate verification may be needed; do not send identity documents unsolicited. Replies are normally due within one month; any permitted extension will be explained. You may complain to the French CNIL (cnil.fr). Copies held by third parties or search caches may require additional steps.
Security and international processing
A session cookie protects forms. Cloudflare Turnstile processes technical signals including IP address and browser information against bots. Cloudflare acts as processor for site protection and as a separate controller to improve detection. Its network involves international processing; see the linked privacy and transfer information. Our server verification request does not include your testimonial or email. Publication is not decided solely by automated means.
Backups and Google reviews
Active database deletions must also be honoured when restoring restricted-access backups; backup rotation is managed separately on the hosting account. Reviews labelled Google come from that platform rather than this form; reuse of reviews and photos requires separate checks. Contact OR-LIMIT to request removal of a copy from this site.
CNIL · Cloudflare Turnstile · Cloudflare — DPA · OVHcloud