1. Who are we?
1.1 Processor
The following information is provided to you so that you can be aware of the personal data protection obligations of Konstanz Buffet, a VALRHONA company headquartered at 14 Avenue du President Roosevelt 26600 Tain L'Hermitage, France
who acts as controller for the processing of personal data referred to in this document, hereinafter referred to as "the controller" or "we".
1.2 Our responsible for IT policy and freedoms
The Data Controller has designated a person responsible for IT and Freedom Policy that you can contact:
by email at the following address: scvalrhona@valrhona.fr
or by mail to the following address: VALRHONA - Customer Service - 315 Allée du Bergeron 26600 MERCUROL VEAUNES, FRANCE
The data protection officer can be contacted at the following address: dpo@savencia.com
2. The personal data we process
In the processing of personal data, the Data Controller collects and processes the following data:
Activity statistics on the site (page views, duration of sessions, number of downloads, etc.)
3. The purposes and legal bases of our data processing
3.1 The purposes of our treatments
The treatments that we implement are for the following purposes:
Management of the content of a website;
Management of marketing communication to customers and prospects;
Follow-up of the user's journey;
Audience analysis;
3.2 The legal basis of our treatments
We implement data processing only if at least one of the following conditions is met:
your consent to treatment operations has been collected;
the existence of our legitimate interest, or that of a third party, justifies that we implement the processing of personal data concerned;
the execution of a contract which binds us to you requires that we implement the processing of personal data concerned;
we are bound by legal and regulatory obligations that require the implementation of the processing of personal data concerned.
3.3. The legitimate interests pursued
The legitimate interests pursued by the controller may include allowing continuity of business, improving the consumer experience, retaining the consumer, understanding consumer expectations.
4. The recipients of your data
The personal data that we collect, as well as those collected later, are for us as the Data Controller.
We make sure that only authorized people can access this data. Our subcontractors / service providers may be recipients of this data to perform the services we entrust to them.
Your personal data may be reconciled, pooled or shared between all parent, sister and affiliate entities of the Controller.
They may be communicated to these entities for the purposes referred to in this information notice. These transactions are carried out on the basis of instruments compliant with applicable regulations and able to ensure the protection and respect of your rights.
5. Transferring your data
As part of the services offered, we transfer your personal data to recipients in the following countries:
USA: because of cookies used by Google Analytics and Facebook
Each of these transfers is framed by legal instruments that comply with the applicable legal framework.
The controller establishes binding corporate rules (BCR) / internal company rules8 with the various subsidiaries based in countries outside the European Union and whose state does not benefit from a decision of adequacy9. In this case, insert this sentence:
Transfers to other countries are subject to appropriate safeguards. Internal corporate rules (BCR) have been established for all data transfers referred to in this paragraph.
6. The times for which we keep your data
The retention periods we apply to your personal data are proportionate to the purpose for which they were collected. As a result, we organize our data retention policy as follows:
Prospecting: 3 years * from the last contact from you or, if applicable, from the end of the commercial relationship plus the duration of the legal requirements
Customer: in the context of contracts concluded, the data are kept for the duration of the commercial relationship plus the duration of the legal prescriptions.
Cookies: 13 months * from their installation on your device
Contract of an amount greater than 120 € for accounting purposes: 10 years ** (legal period can not be modified) from the conclusion of the contract
In case of exercise of the rights of access, rectification, deletion, limitation, the data relating to identity documents and the information allowing to take into account these rights: 1 year from the reception of the request
In case of exercise of the right of opposition, the data relating to identity documents and information to take into account the right of opposition: 6 years from the receipt of the request
7. The rights that are recognized to you
7.1 How to exercise your rights
You can exercise your rights:
by email at the following address: scvalrhona@valrhona.fr
by mail to the following address: VALRHONA - Customer Service - 315 Allée du Bergeron 26600 MERCUROL VEAUNES, FRANCE. To do this, you must clearly indicate your name (s) and first name (s), the address to which you want the answer to be sent to you.
As a matter of principle, you can exercise all your rights at no cost. However regarding the right of access, you may be asked to pay a reasonable fee based on administrative costs for any copy of the data you request.
Regarding the right of information, the data controller will not be obliged to act on it when you already have the information you are requesting13.
The controller will inform you if it can not respond to your requests.
These rights are not absolute and are subject to different conditions under:
the local law of protection of personal data or of the applicable private life; and
the laws and regulations that apply to you.
The controller wishes to inform you that the non-information or the modification of your data may have consequences in the processing of certain requests in the framework of the execution of the contractual relations and that your request for exercise of your rights will be retained for monitoring purposes for 6 years regarding the exercise of the right of opposition and 1 year for the exercise of other rights.
All the rights you enjoy are detailed below.
7.2 Your right to information
You acknowledge that this information notice informs you of the purposes, the legal framework, the interests, the recipients or categories of recipients with whom your personal data are shared, and the possibility of a transfer of data to a third country or to an international organization.
In addition to this information and in order to ensure a fair and transparent treatment of your data, you declare that you have received additional information regarding:
the retention period of your personal data;
the existence of rights that are recognized for your benefit and the terms and conditions of their exercise.
If we decide to process data for purposes other than those indicated, all information relating to these new purposes will be communicated to you.
7.3 Your right of access and rectification of your data
By exercising this right, you have the confirmation that your personal data are or are not processed and when they are, you have access to your data as well as information about:
the purposes of the treatment;
the categories of personal data concerned;
the recipients or categories of recipients, in particular recipients who are established in third countries;
where possible, the retention period of the personal data envisaged or, where this is not possible, the criteria used to determine this duration;
the existence of the right to request from the controller the correction or erasure of your personal data, the right to request a limitation of the processing of your personal data, the right to oppose this treatment;
the right to lodge a complaint with a supervisory authority;
information about the source of the data when it is not collected directly from the data subjects;
the existence of automated decision making, including profiling, and in the latter case, useful information about the underlying logic, as well as the significance and expected consequences of this treatment for the data subjects.
You may request that your personal data be, as the case may be, corrected or supplemented if they are inaccurate, incomplete, equivocal or out of date.
7.4 Your right to erase your data
You can ask us to erase your personal data when one of the following reasons applies:
personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
you withdraw the previously given consent;
you oppose the processing of your personal data where there is no legal reason for such processing;
the processing of personal data does not comply with the provisions of the applicable legislation and regulations;
your personal data was collected when you were a minor.
Nevertheless, the exercise of this right will not be possible when the conservation of your personal data is necessary with regard to legislation or regulations and in particular for the recognition, exercise or defense of rights in court.
7.5 Your right to limitation of data processing
You may request the limitation of the processing of your personal data in the cases provided for by law and regulations.
7.6 Your right to object to data processing (unsubscription)
You have the right to object to the processing of your personal data when the processing is based on the legitimate interest of the controller.
In case of direct communication, this right can be exercised by any means including by clicking on the unsubscribe links at the bottom of the communications sent.
7.7 Your right to portability of your data
You have the right to the portability of your personal data.
The data on which this right may be exercised are:
only your personal data, which excludes anonymized personal data or data that does not concern you;
declarative personal data as well as personal operating data;
personal data that does not affect the rights and freedoms of third parties such as those protected by business secrecy.
This right is limited to treatments based on consent or a contract and personal data that you have personally generated.
This right does not include derived data or inferred data, which is personal data created by the Data Controller.
7.8 Your right to withdraw your consent
When the data processing we implement is based on your consent, you may withdraw it at any time. We then stop processing your personal data without the prior transactions for which you consented to be called into question.
7.9 Your right to appeal
You have the right to lodge a complaint with the competent supervisory authority without prejudice to any other administrative or judicial remedy.
7.10 Your right to set postmortem guidelines
You have the possibility to define guidelines for the preservation, erasure and communication of your personal data after your death and this from a trusted third party, certified and responsible for enforcing the will of the deceased, in accordance with the requirements of the applicable legal framework.