Privacy policy
CRD EURES Frontaliers / Grand Est is committed to protecting your personal data. This policy explains what data we collect on www.eures-granderegion.eu, why we collect it and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the French Data Protection Act (Loi Informatique et Libertés).
1. Data controller
CRD EURES Frontaliers / Grand Est
2, rue Augustin Fresnel
57070 Metz Technopôle, France
Tel. +33 (0)3 87 20 40 91
Email: [contact email address to be provided]
2. Data protection officer
You can contact our data protection officer (DPO): [Name or department], [dpo@domain.eu], [postal address if different].
3. Data collected and purposes
| Processing | Data concerned | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Contact form | Last name, first name, email, [phone, country of residence], message | Answer your request and, where needed, forward it to the competent EURES adviser | Legitimate interest (Art. 6(1)(f) GDPR) [or task carried out in the public interest (Art. 6(1)(e)) – to be confirmed] | [3 years from last contact] |
| Audience measurement (Google Analytics 4) | Pseudonymous identifier, pages viewed, visit duration, traffic source, device and browser type, approximate location (city, country) | Traffic statistics and website improvement | Consent (Art. 6(1)(a) GDPR), collected through the cookie banner | [14 months – GA4 retention setting to be confirmed] |
| Consent management (Complianz) | Your cookie choices, date of consent, consent identifier | Record and demonstrate your consent | Legal obligation (Art. 6(1)(c) GDPR) | [12 months] |
| Security and technical logs | IP address, date and time of connection, browser, pages visited | Website security (protection against attacks and spam) and proper operation | Legitimate interest (Art. 6(1)(f) GDPR) | [12 months] |
Mandatory form fields are marked with an asterisk. Without this information, we cannot process your request. We do not knowingly collect sensitive data: please do not include any in free-text fields.
Google Analytics is only activated once you have given your consent. We do not use its advertising features and do not combine these statistics with any other data about you.
4. Recipients of the data
Your data is accessible only to authorised staff of CRD EURES Frontaliers / Grand Est and, where your request requires it, to the EURES advisers and partner public employment services in the Greater Region who are competent to handle it.
It may also be processed by our technical service providers, strictly within the scope of their assignment:
- Hosting: OVH SAS, Roubaix, France
- Website development and maintenance: SARL Webidea, Metz, France
- Audience measurement: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics)
- Consent management: Complianz B.V., Netherlands (plugin installed on our website; choices are stored on our server)
Your data is never sold or transferred for commercial purposes.
5. Transfers outside the European Union
Your data is hosted within the European Union. Audience data collected by Google Analytics may be transferred to Google LLC in the United States. These transfers are covered by the European Commission’s adequacy decision on the EU–US Data Privacy Framework, to which Google LLC has signed up, and by standard contractual clauses.
6. Cookies
We use the Complianz plugin to manage cookies. On your first visit, a banner lets you accept, refuse or customise non-essential cookies. No audience measurement cookie is set before you consent, and refusing is as easy as accepting.
| Cookie | Service | Purpose | Duration | Consent required |
|---|---|---|---|---|
| wp-wpml_current_language | WPML | Remember your chosen language (FR, EN, DE) | [Session – to be checked] | No (strictly necessary) |
| cmplz_* | Complianz | Remember your cookie choices | [365 days – to match the Complianz settings] | No (strictly necessary) |
| _ga | Google Analytics | Distinguish visitors pseudonymously | 13 months | Yes |
| _ga_[ID] | Google Analytics | Keep the state of the visit session | 13 months | Yes |
You can change or withdraw your consent at any time via the “[Manage consent]” link in the footer. Your choice is stored for [6 months], after which you will be asked again. You can also set your browser to block or delete cookies.
7. Security
We implement appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), website firewall, access restricted to authorised staff, regular backups and security updates.
8. Your rights
Under the GDPR, you have the following rights regarding your data:
- right of access and rectification;
- right to erasure;
- right to restriction of processing;
- right to object, in particular to processing based on legitimate interest;
- right to data portability;
- right to withdraw your consent at any time, without affecting processing already carried out;
- right to set instructions regarding your data after your death.
To exercise these rights, use our contact form or write to [dpo@domain.eu], stating the purpose of your request. We will reply within one month, which may be extended by two months for complex requests. Proof of identity may be requested if there is reasonable doubt.
9. Complaints
If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr), or with the supervisory authority in your country of residence.
10. Changes to this policy
We may update this policy, in particular following regulatory changes or the addition of a new service. The version in force is the one published on this page.
Last updated: 8 October 2026
