{"id":3,"date":"2026-05-07T01:42:39","date_gmt":"2026-05-07T01:42:39","guid":{"rendered":"http:\/\/scientifc-acupuncture.eu\/?page_id=3"},"modified":"2026-05-07T11:47:20","modified_gmt":"2026-05-07T11:47:20","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/scientifc-acupuncture.eu\/index.php\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n

Last updated: 7 May 2026<\/em><\/p>\n\n\n\n

Preamble<\/h2>\n\n\n\n

The European Society of Scientific Acupuncture (hereinafter “ESSA<\/strong>” or the “Association<\/strong>“), publisher of the website accessible at the URL https:\/\/www.scientific-acupuncture.eu (hereinafter the “Website<\/strong>“), attaches the utmost importance to the protection of the personal data of the natural persons interacting with the Website (hereinafter the “Data Subjects<\/strong>“) and undertakes to process such data in strict compliance with Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR<\/strong>“), as well as with the French Law n\u00b0 78\u201117 of 6 January 1978, as amended, on Information Technology, Data Files and Civil Liberties (hereinafter the “French Data Protection Act<\/strong>“).<\/p>\n\n\n\n

The present privacy policy (hereinafter the “Policy<\/strong>“) is intended to inform Data Subjects, in a concise, transparent, intelligible and easily accessible form, in clear and plain language, of the conditions under which ESSA collects, processes, stores, transmits and protects their personal data, and of the rights conferred upon them by the applicable regulations.<\/p>\n\n\n\n

\n\n\n\n

Article 1 \u2014 Data Controller<\/h2>\n\n\n\n

The data controller, within the meaning of Article 4(7) of the GDPR, is:<\/p>\n\n\n\n

European Society of Scientific Acupuncture<\/strong>
A non\u2011profit association governed by the French Law of 1 July 1901
Currently undergoing formal declaration with the Pr\u00e9fecture de Police<\/em> of Paris pursuant to Article 5 of the said Law
Registered office: 9, rue Quentin Bauchart – 75008 Paris, France
Email: contact@scientific-acupuncture.eu <\/a><\/strong><\/p>\n\n\n\n

In view of the size of the Association and the nature of its processing activities, ESSA is not required, pursuant to Article 37 of the GDPR, to designate a Data Protection Officer. Any request relating to the processing of personal data, or to the exercise of the rights set out in Article 5 below, shall be addressed to ESSA at the contact details set out hereinabove.<\/p>\n\n\n\n

\n\n\n\n

Article 2 \u2014 Data Processed, Purposes and Legal Bases<\/h2>\n\n\n\n

In its current configuration (a holding page pending the official launch of the full Website, scheduled for autumn 2026), the Website implements the limited processing operations described below, in accordance with the principles of lawfulness, fairness and transparency, purpose limitation and data minimisation set out in Article 5(1) of the GDPR.<\/p>\n\n\n\n

2.1 Subscription to the Launch Announcement List<\/h3>\n\n\n\n

(a) Categories of data processed:<\/strong> the Data Subject’s email address; the date and time of subscription; proof of consent (validation of the double opt\u2011in confirmation link).<\/p>\n\n\n\n

(b) Purposes of processing:<\/strong> (i) to send the Data Subject the official announcement of the launch of the Website; and (ii) where applicable, to send occasional information regarding the Association’s scientific activities, publications and events.<\/p>\n\n\n\n

(c) Legal basis:<\/strong> the consent<\/strong> of the Data Subject, within the meaning of Articles 6(1)(a) and 7 of the GDPR, collected by means of a double opt\u2011in mechanism guaranteeing the free, specific, informed and unambiguous nature of such consent. The Data Subject may withdraw his or her consent at any time, under the conditions set out in Article 5 below.<\/p>\n\n\n\n

2.2 Server Logs and Technical Browsing Data<\/h3>\n\n\n\n

(a) Categories of data processed:<\/strong> IP address; type and version of the browser used; pages consulted on the Website; date and time of connection.<\/p>\n\n\n\n

(b) Purpose of processing:<\/strong> to ensure the security, integrity and proper technical functioning of the Website, and to prevent any fraudulent use or attempted intrusion.<\/p>\n\n\n\n

(c) Legal basis:<\/strong> the legitimate interest<\/strong> of the Association, within the meaning of Article 6(1)(f) of the GDPR, consisting in ensuring the security of its information system, such interest having been duly balanced against the rights and freedoms of the Data Subjects.<\/p>\n\n\n\n

2.3 Email Correspondence<\/h3>\n\n\n\n

(a) Categories of data processed:<\/strong> the email address of the sender and the content of any message addressed to ESSA.<\/p>\n\n\n\n

(b) Purpose of processing:<\/strong> the handling of and response to the requests addressed to the Association.<\/p>\n\n\n\n

(c) Legal basis:<\/strong> the legitimate interest<\/strong> of the Association, within the meaning of Article 6(1)(f) of the GDPR, in responding to the requests addressed to it.<\/p>\n\n\n\n

\n\n\n\n

Article 3 \u2014 Recipients of the Data<\/h2>\n\n\n\n

3.1 The personal data collected through the Website shall under no circumstances be sold, rented, exchanged or transferred to third parties for commercial purposes.<\/p>\n\n\n\n

3.2 Such data may be disclosed to the following service providers, acting in the capacity of “processors<\/strong>” within the meaning of Article 4(8) of the GDPR and bound to ESSA by a contract complying with the requirements of Article 28 of the GDPR, providing in particular sufficient guarantees as to the implementation of appropriate technical and organisational measures:<\/p>\n\n\n\n

Processor<\/th>Subject\u2011matter of the processing<\/th>Hosting location<\/th><\/tr><\/thead>
Brevo<\/strong> (Sendinblue SAS)<\/td>Management of the subscription list and dispatch of electronic communications<\/td>France \/ European Union<\/td><\/tr>
OVH Cloud<\/strong><\/td>Hosting of the Website<\/td>France \/ European Union<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

3.3 Personal data may further be communicated, where applicable, to any administrative or judicial authority duly empowered to request access thereto, in accordance with the legal and regulatory provisions in force.<\/p>\n\n\n\n

3.4 In the current state of its operations, the Association does not carry out any transfer of personal data outside the European Union or the European Economic Area. Should such transfers become necessary in the future, they shall be carried out exclusively to (i) third countries benefiting from an adequacy decision adopted by the European Commission pursuant to Article 45 of the GDPR or, failing that, (ii) on the basis of the appropriate safeguards provided for in Articles 46 and 47 of the GDPR, in particular standard contractual clauses adopted by the European Commission.<\/p>\n\n\n\n

\n\n\n\n

Article 4 \u2014 Retention Periods<\/h2>\n\n\n\n

In accordance with the principle of storage limitation set out in Article 5(1)(e) of the GDPR, personal data shall be retained for no longer than is necessary for the purposes for which they are processed, in accordance with the following retention periods:<\/p>\n\n\n\n

Category of data<\/th>Retention period<\/th><\/tr><\/thead>
Email address (subscribers having validated the double opt\u2011in)<\/td>Until withdrawal of consent, or, at the latest, three (3) years from the last active contact with the Data Subject<\/td><\/tr>
Email address (double opt\u2011in not validated)<\/td>Thirty (30) days, after which automatic deletion shall occur<\/td><\/tr>
Server logs<\/td>Twelve (12) months from their collection<\/td><\/tr>
Email correspondence<\/td>Three (3) years from the last exchange with the Data Subject<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Upon expiry of the applicable retention period, personal data shall be deleted or anonymised in such a manner that the Data Subject can no longer be identified, whether directly or indirectly.<\/p>\n\n\n\n

\n\n\n\n

Article 5 \u2014 Rights of Data Subjects<\/h2>\n\n\n\n

5.1 In accordance with Articles 15 to 22 of the GDPR and Articles 49 et seq.<\/em> of the French Data Protection Act, Data Subjects shall have the following rights with respect to their personal data:<\/p>\n\n\n\n

(i) the right of access<\/strong> to personal data concerning them (Article 15 GDPR);
(ii) the right to rectification<\/strong> of inaccurate or incomplete data (Article 16 GDPR);
(iii) the right to erasure<\/strong>, also known as the “right to be forgotten” (Article 17 GDPR);
(iv) the right to restriction<\/strong> of processing (Article 18 GDPR);
(v) the right to data portability<\/strong> (Article 20 GDPR);
(vi) the right to object<\/strong> to processing (Article 21 GDPR);
(vii) the right to withdraw consent<\/strong> at any time, without affecting the lawfulness of processing carried out on the basis of such consent prior to its withdrawal (Article 7(3) GDPR); and
(viii) the right to formulate directives<\/strong> concerning the fate of one’s personal data after death, in accordance with Article 85 of the French Data Protection Act.<\/p>\n\n\n\n

5.2 Exercise of rights.<\/strong> Any request for the exercise of the foregoing rights shall be addressed to ESSA at the email address dpo@scientific-acupuncture.eu<\/strong>, accompanied, where reasonable doubt exists as to the identity of the requester, by any document enabling such identity to be verified. ESSA shall reply within a maximum period of one (1) month from receipt of the request, in accordance with Article 12(3) of the GDPR. This period may be extended by a further two (2) months, having regard to the complexity and the number of requests, in which case the Data Subject shall be informed of such extension and of the reasons for the delay within one (1) month from receipt of the request.<\/p>\n\n\n\n

5.3 Unsubscription.<\/strong> Each electronic communication sent by ESSA includes a one\u2011click unsubscription link, accessible at the foot of the message.<\/p>\n\n\n\n

5.4 Right to lodge a complaint.<\/strong> Without prejudice to any other administrative or judicial remedy, every Data Subject shall have the right to lodge a complaint with a supervisory authority, in particular with the Commission nationale de l’informatique et des libert\u00e9s (CNIL)<\/strong>, situated at 3 place de Fontenoy \u2014 TSA 80715 \u2014 75334 Paris Cedex 07, www.cnil.fr<\/a>, where he or she considers that the processing of personal data concerning him or her infringes the GDPR or the French Data Protection Act.<\/p>\n\n\n\n

\n\n\n\n

Article 6 \u2014 Cookies and Similar Technologies<\/h2>\n\n\n\n

6.1 In its current version (a holding page), the Website does not deposit any audience measurement, advertising, profiling or third\u2011party cookie on the User’s terminal equipment.<\/p>\n\n\n\n

6.2 Only cookies which are strictly necessary for the provision of an online communication service expressly requested by the User may be deposited (in particular: session cookies, security cookies, language preference cookies). In accordance with Article 82, paragraph 2, of the French Data Protection Act, such cookies are exempt from the requirement of prior consent.<\/p>\n\n\n\n

6.3 Upon the official launch of the full Website, the present Article shall be updated and, where applicable, a cookie consent management interface shall be implemented in order to obtain, in compliance with Article 82 of the French Data Protection Act and the recommendations of the CNIL, the prior, free, specific, informed and unambiguous consent of Users for the deposit of any cookie not falling within the exemption referred to in paragraph 6.2 above.<\/p>\n\n\n\n

\n\n\n\n

Article 7 \u2014 Security Measures<\/h2>\n\n\n\n

7.1 In accordance with Articles 5(1)(f) and 32 of the GDPR, ESSA implements appropriate technical and organisational measures to ensure a level of security appropriate to the risks presented by the processing, in particular against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.<\/p>\n\n\n\n

7.2 Such measures include in particular:<\/p>\n\n\n\n

(i) the encryption of communications between the User’s terminal and the Website by means of the HTTPS protocol (TLS);
(ii) restricted access to the administration interfaces of the Website and of the email service provider, on a need\u2011to\u2011know basis;
(iii) the implementation of robust authentication procedures for administrator accounts, including, where the service so permits, multi\u2011factor authentication;
(iv) the regular updating of the WordPress content management system and of the extensions installed thereon.<\/p>\n\n\n\n

7.3 In the event of a personal data breach likely to result in a risk to the rights and freedoms of natural persons, ESSA shall notify the CNIL within seventy\u2011two (72) hours of becoming aware of the breach, in accordance with Article 33 of the GDPR. Where such breach is likely to result in a high risk, the Data Subjects concerned shall be informed without undue delay, in accordance with Article 34 of the GDPR.<\/p>\n\n\n\n

\n\n\n\n

Article 8 \u2014 Amendments to the Policy<\/h2>\n\n\n\n

ESSA reserves the right to amend the present Policy at any time, in particular to take account of changes in legislation, case law or technology, or upon the official launch of the full Website scheduled for autumn 2026. Any substantial amendment shall be brought to the attention of Data Subjects by means of a notice on the present page, accompanied by an update of the date set out at the head of the Policy. Data Subjects are invited to consult the Policy regularly. Continued use of the Website after such amendments shall be deemed to constitute acknowledgement thereof.<\/p>\n\n\n\n

\n\n\n\n

Article 9 \u2014 Contact<\/h2>\n\n\n\n

For any question relating to the present Policy or to the processing of personal data carried out by ESSA, the Data Subject may contact the Association at the following address:<\/p>\n\n\n\n

European Society of Scientific Acupuncture<\/strong>
contact@scientific-acupuncture.eu <\/strong><\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Last updated: 7 May 2026 Preamble The European Society of Scientific Acupuncture (hereinafter “ESSA” or the “Association“), publisher of the website accessible at the URL https:\/\/www.scientific-acupuncture.eu (hereinafter the “Website“), attaches the utmost importance to the protection of the personal data of the natural persons interacting with the Website (hereinafter the “Data Subjects“) and undertakes to […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/scientifc-acupuncture.eu\/index.php\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scientifc-acupuncture.eu\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/scientifc-acupuncture.eu\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/scientifc-acupuncture.eu\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/scientifc-acupuncture.eu\/index.php\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":1,"href":"https:\/\/scientifc-acupuncture.eu\/index.php\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":16,"href":"https:\/\/scientifc-acupuncture.eu\/index.php\/wp-json\/wp\/v2\/pages\/3\/revisions\/16"}],"wp:attachment":[{"href":"https:\/\/scientifc-acupuncture.eu\/index.php\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}