The owner of the website (hereinafter the “Website”), LES GRANDS CHAIS DE FRANCE SAS (hereinafter the “Company“), undertakes, as the Data Controller within the meaning of the General Data Protection Regulation No. 2016/679 of 27 April 2016 (GDPR), to respect the right to privacy, and in particular the personal data, of any person visiting and/or communicating and/or receiving information on the Company’s websites and pages on social networks as well as by e-mails (including newsletters) and contact forms (hereinafter the “Users“).
The purpose of this Privacy Policy is to inform Users of the manner in which the Company processes their personal data (hereinafter the “Personal Data“), and in particular to specify the methods of collection, use, storage and archiving relating to such Personal Data.
The Privacy Policy also informs Users of their rights and where to exercise them.
The Company reserves the right to update its Privacy Policy at any time. Any new version will take effect as soon as it is posted online.
1. What Personal Data do we collect and how is it collected?
Personal Data is any information relating to an identified or identifiable natural person. It may include, for example, a surname, a first name, a nationality, an e-mail address, a telephone number, a photograph, a job title, an identification number, a postal address, beneficiaries, a person’s gender, location data or an IP address.
The Company does not collect Personal Data from minors.
The Company collects Personal Data either directly from the User when he/she makes a request via the Website’s contact form and/or sends a letter to the Company: title, surname, first name, postal address, e-mail address, telephone number.
The Personal Data collected is necessary and not excessive in relation to the purpose of the processing.
The Company may also collect Personal Data indirectly, when Users use the Company’s digital platforms from their electronic devices, including IP address or other browsing data (including browser, operating system, device model), social networks and the Company’s contact forms, through cookies or browsing tracking technologies.
For more information on Cookies, the Company invites Users to read its Cookie Policy.
2. Why do we collect your Personal Data?
The Personal Data collected is used to manage requests made by Users via the Website’s contact form, and/or postal mail sent to the Company.
The Company, as the Data Controller, collects and uses Personal Data on one or more of the following legal grounds:
- Processing is made necessary to respond to correspondence sent by the User to the Company, for example when the User contacts the Company via its contact forms and/or via postal mail;
- The Company has obtained the User’s prior consent (by ticking a box) to the use of his or her Personal Data for marketing purposes, communications (e.g. newsletters, invitations to events, competitions, etc.) or commercial prospecting (commercial and promotional offers, etc.);
- The Company has a legitimate interest in processing the Personal Data collected, provided that this legitimate interest respects the interests or fundamental rights of the User (e.g. guaranteeing network and information security, fraud prevention, etc.).
3. Who are the recipients of your Personal Data?
Users’ Personal Data may be disclosed to the recipients indicated below, who undertake to keep it confidential:
- the Company and its employees who need to have access to Users’ Personal Data, authorized to process it for the aforementioned purposes;
- other GRANDS CHAIS DE FRANCE Group affiliates involved in the processing of Personal Data;
- the Company’s subcontractors acting on the Company’s behalf and approved by the latter, in compliance with applicable French and European standards, in particular for hosting and IT support, the implementation of marketing campaigns, etc.
The Company, in its capacity as data controller, ensures that data recipients provide serious guarantees of security and confidentiality of the Personal Data transmitted.
The Company may also disclose your Personal Data if required to do so by law or in the good-faith belief that such disclosure is reasonably necessary to comply with legal process, respond to claims, or protect the safety or rights of the Company, its customers or the public.
4. Is your Personal Data transferred outside the European Union?
In principle, Personal Data is processed exclusively within the European Union. In the event that they are transferred outside the European Union or to a country deemed suitable by the European Commission, the Company will take all necessary measures to ensure their protection.
Thus, the Company will ensure that the User’s Personal Data is protected during the transfer, and that third parties respect a high level of protection of the User’s Personal Data, in accordance with European requirements.
5. How and for how long is your Personal Data stored?
Personal Data is stored in compliance with the applicable French and European standards.
Personal Data will be processed for the period necessary for:
- The purposes specified in article 2;
- Comply with legal and regulatory constraints;
- The period necessary to resolve disputes and to obtain performance of our contracts.
Thus, Personal Data will be kept for six (6) years from the date of collection. However, at the end of this period of six (6) years, or where applicable, from the date of the User’s request for deletion, his or her Personal Data may be destroyed, anonymized or archived in order to meet the Seller’s legal, accounting and tax obligations (such as the obligation to retain invoices for a period of ten (10) years, laid down by article L.123-22 of the French Commercial Code)..
In the event of pre-litigation or litigation, the retention period is extended for the legal prescription period as evidence for the duration of the dispute.
The Company will implement all technical and organizational measures necessary to protect the confidentiality and security of the User’s Personal Data collected via the Website.
These measures include keeping Personal Data in secure operating environments, which are not accessible to the public and which are only accessible to authorized Company personnel, as well as to specially authorized agents and contractors.
6. What are your rights with regard to the processing of Personal Data?
In accordance with French and European standards relating to the protection of Personal Data, and in particular the General Data Protection Regulation No. 2016/679 of April 27, 2016 (GDPR), the User may exercise a number of rights listed below at any time:
- The right of information concerning the use and storage of their Personal Data.
- The right of access to the processed Personal Data enables the User to know whether Personal Data concerning him or her is being processed and to obtain free communication of such data in an understandable format.
- The right to rectification of the Personal Data collected allows the User to correct inaccurate Data or to complete Data relating to the purpose of processing.
- The right to restriction of processing of Personal Data enables the User to request the Company to limit the processing of his or her Personal Data, in certain circumstances, for example if he/she wishes to rectify Data or object to it being processed.
- The right to erasure (“right to be forgotten”) of Personal Data enables the User to ask the Company to erase Personal Data concerning him/her, collected and used by the Company, within the limits provided by law.
- The right to object to processing of Personal Data enables the User to object to his or her Personal Data being used by the Company for a specific purpose, in particular for commercial prospecting or any communication resulting from the collection of Personal Data.
- The right to data portability of Personal Data enables the User to recover the Personal Data he or she has provided to the Company, in a structured, commonly used and machine-readable format, and/or to transmit this Data to a new data controller, by requesting the original data controller to proceed with the transfer, in certain situations.
In the event of a request by the User to exercise one of the aforementioned rights, the Company will consider said request as soon as possible, and will process it within one (1) month of the User’s request at the latest.
The User also has the option of withdrawing his or her consent at any time for processing operations requiring it. In this case, the data will be anonymized or deleted.
In such cases, the User will be asked to specify which of his or her rights he or she wishes to exercise, and to provide the Company with information for identification purposes in order to process the request and protect the User against any fraudulent requests from third parties.
Users are reminded that deletion or anonymization are irreversible operations and that the Company is not subsequently able to restore them.
7. How to exercise your rights?
The User who wishes to make requests for the exercise of any of the rights relating to his or her Personal Data indicated above, may contact the Company’s Data Protection Officer:
- By email using the contact form available here
- Or by post to the following address:
Les Grands Chais de France
Data Protection Officer
1, rue de la Division Leclerc
67290 PETERSBACH
The User also has the possibility to submit complaints to the authority in charge of controlling Personal Data:
- In France, the User may contact the Commission Nationale de l’Informatique et des Libertés (the “CNIL”), whose website is accessible here: https://www.cnil.fr/
- For other states, the full list of local data protection authorities can be found on the following institutional website
http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
Update date: May 22, 2024