Data privacy policy
In accordance with European Regulation No. 2016/679 (known as the “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, our data privacy policy is set out below. It covers any data enabling you to be identified directly or indirectly as a natural person.
This data privacy policy (hereinafter the “Policy”) tells you which data we collect, the reason and basis for collecting such data, how we use and store them, and your rights with regard to such data. We urge you to read this Policy carefully in order to understand and familiarise yourself with the practices we implement when processing your personal data.
Please note that we may amend or supplement this Policy at any time in line with any developments in legislation, regulations, case law or technology. You should therefore consult this Policy regularly to familiarise yourself with any changes made to it.
I. Identity of the data controller
II. The personal data we process
Some information is automatically collected and stored when you access our services:
- When you browse our website (IP addresses, types and versions of web browsers used, types and versions of plug-ins used in your browser, operating systems and platforms, data concerning your browsing history on our website, cookies);
- When you use a telephone number to contact us;
- When you call or send a message to our customer services department.
III. How data are processed
We process your personal data to help us perform, provide and improve the services we offer. Data may be processed for all or some of the following purposes:
1. Observing our legal obligations
We have a legal obligation to collect and process some of your personal data.
2. Upholding your rights
We may process your personal data to satisfy your requests to exercise your rights. Please consult Part VI of this Policy for details of your rights.
3. Managing and improving our website
When you visit our website, we collect information including your IP address, location, visiting times, etc. to help us understand the habits of individuals using our website and improve their experience.
IV. Time for which data is kept
Your personal data are kept for as long as is necessary to achieve the purpose for which they are collected.
We also keep personal data for a period enabling us to process or respond to complaints or any requests for information regarding purchases.
Your personal data may also be kept for longer periods if required under legal obligations, applicable legal limitation periods, or recommendations of the CNIL (French Data Protection Authority), e.g. for:
- Cookies: 13 months from them being placed on your computer
V. Data recipients
Your personal data may be forwarded to other companies in our Group established within the European Union. All our companies are bound by the confidentiality and data privacy practices set out in this Policy.
Your personal data may also be forwarded to other companies established in or outside the European Union on the basis of contracts that include standard clauses drawn up by the CNIL laying down requirements to be met with regard to forwarding personal data.
VI. Your rights
In order for us to satisfy your requests to exercise rights concerning your personal data, you must provide the first name, last name and email address you used to sign up to our newsletter or create an account on our website. If we are unable to identify you with complete certainty based on details provided in your request to exercise your rights, we may need to request a valid copy of an identity document (ID card or passport in the following format: GIF, JPG, PNG, PDF). Finally, if you use different details (different email address, different name) to make your requests, we cannot guarantee that you will be able to fully exercise your rights concerning your personal data without providing further information.
1. Right of access and communication of data
You have the right to know if and how we are processing your personal data and to have such data provided to you in a form that is easily understood.
However, since we are bound by a duty of security and confidentiality when processing personal data, please note that your requests will be processed subject to you providing proof of your identity, in particular by presenting a copy of a valid identity document (either an electronic copy or signed paper photocopy).
Please note that we shall be entitled, if necessary, to reject any requests that are clearly excessive (in terms of volume, repetitiveness or regularity) and requests infringing third-party rights.
Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.
2. Right to rectify data
You have the right to request the rectification, updating, restriction of processing, or erasure of any of your personal data that may prove inaccurate, incorrect, incomplete or out of date.
Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.
3. Right of erasure
You have the right to request that we erase your personal data without undue delay.
Please note that in some rare cases we will not be able to satisfy your requests, particularly where we are bound by a legal obligation (e.g. invoices and the data included in them must be kept for 10 years).
Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.
4. Right to restrict processing
You have the right to request the restriction of processing.
Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.
5. Right to data portability
6. Digital will
You have the right to provide us with specific instructions regarding what happens to your personal data after your death, particularly with regard to how they are stored, erased and passed on in connection with the processing we carry out.
You should provide these instructions to us using our online contact form or by writing to: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France.
These instructions may be amended at any time. Unless otherwise instructed or indicated, the heirs of a deceased individual may exercise the rights of the deceased.
7. Response time
We undertake to respond to your access, rectification or objection requests or any other additional information requests within a reasonable period of time not exceeding ONE (1) month of receipt of your request.
However, we may extend this period by two additional months if required based on the complexity and volume of the request. In such cases, you will be informed of such an extension of the response time during the month following your request.
8. Right to contact the competent supervisory authority
9. Withdrawal of consent
VII. Cookies and other technologies
This paragraph explains how cookies work and how to adjust cookie settings.
1. What is a cookie ?
A cookie is a text file placed on your computer when you visit a website or view an advertisement. Its purpose is to collect information concerning your browsing patterns and provide you with services appropriate to your device (computer, smartphone or tablet). Cookies are mainly managed by your web browser.
2. Our use of cookies
When you visit our website, cookies or other trackers are placed on your computer, smartphone or tablet.
The information that we collect in this way allows us to provide more appropriate, higher quality content on our website, analyse your browsing patterns, and identify and resolve any problems.
3. What are the different types of cookies ?
This website includes various types of cookies for which you can give and withdraw your consent at any time using the [cookie manager] at the bottom of each web page. However, this option is not available for strictly necessary cookies.
- Strictly necessary cookies:
These cookies are essential for ensuring that our website functions properly and cannot be disabled from our systems. They are generally only enabled in response to your actions constituting service requests such as configuring your confidentiality preferences, logging in, or completing forms. You can configure your browser to block such cookies or alert you to their use. However, if you block this category of cookies that store no personal data, some parts of the website will not work. - Marketing cookies:
These cookies allow us to determine the number of visits and sources of traffic on our website with a view to measuring and improving its performance. They also help us to identify the most and least visited pages and assess how visitors browse our website. All the information collected by these cookies are aggregated and anonymised. If you reject this category of cookies, we will be unable to determine when you visit our website.
4. How to change cookie settings
VIII. PERSONAL DATA SECURITY
We are committed to taking all steps to ensure the security of your personal data. This involves us taking appropriate technical and organisational measures to guarantee a suitable level of security. These include:
- pseudonymisation and encryption of data;
- means to ensure consistent confidentiality, integrity, availability and resilience of systems and processing services;
- means to restore data availability and access within an appropriate time frame in the event of physical or technical incidents;
- a procedure for regularly testing, analysing and assessing the effectiveness of technical and organisational measures to ensure processing security;
IX. DATA PROTECTION OFFICER
XI. Personal data of minors
Our websites, products and applications are not designed for minors (people aged under 18 years) and we ask any concerned minors to refrain from providing us with personal data. If we discover that we have collected personal data from a minor, we will take all necessary steps to erase this information without undue delay.
Last updated: 28/07/2023