Data privacy policy

In accordance with European Regulation No. 2016/679 (known as the “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, our data privacy policy is set out below. It covers any data enabling you to be identified directly or indirectly as a natural person.

This data privacy policy (hereinafter the “Policy”) tells you which data we collect, the reason and basis for collecting such data, how we use and store them, and your rights with regard to such data. We urge you to read this Policy carefully in order to understand and familiarise yourself with the practices we implement when processing your personal data.

Please note that we may amend or supplement this Policy at any time in line with any developments in legislation, regulations, case law or technology. You should therefore consult this Policy regularly to familiarise yourself with any changes made to it.

I. Identity of the data controller

The personal data controller is the company LAITA S.A.S., a simplified joint stock company with capital of €1,000,000 – Registered office: ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9, France – Registered on the Brest Trade and Companies Register under number: 380 656 439. Telephone number: 0 800 00 31 36 or email: serviceconsommateur@laita.fr

II. The personal data we process

Some information is automatically collected and stored when you access our services:

  • When you browse our website (IP addresses, types and versions of web browsers used, types and versions of plug-ins used in your browser, operating systems and platforms, data concerning your browsing history on our website, cookies);
  • When you use a telephone number to contact us;
  • When you call or send a message to our customer services department.

III. How data are processed

We process your personal data to help us perform, provide and improve the services we offer. Data may be processed for all or some of the following purposes:

1.   Observing our legal obligations

We have a legal obligation to collect and process some of your personal data.

2.   Upholding your rights

We may process your personal data to satisfy your requests to exercise your rights. Please consult Part VI of this Policy for details of your rights.

3.   Managing and improving our website

When you visit our website, we collect information including your IP address, location, visiting times, etc. to help us understand the habits of individuals using our website and improve their experience.

IV. Time for which data is kept

Your personal data are kept for as long as is necessary to achieve the purpose for which they are collected.

We also keep personal data for a period enabling us to process or respond to complaints or any requests for information regarding purchases.

Your personal data may also be kept for longer periods if required under legal obligations, applicable legal limitation periods, or recommendations of the CNIL (French Data Protection Authority), e.g. for:

  • Cookies: 13 months from them being placed on your computer

V. Data recipients

Your personal data may be forwarded to other companies in our Group established within the European Union. All our companies are bound by the confidentiality and data privacy practices set out in this Policy.

Your personal data may also be forwarded to other companies established in or outside the European Union on the basis of contracts that include standard clauses drawn up by the CNIL laying down requirements to be met with regard to forwarding personal data.

VI. Your rights

You have the following rights regarding your personal data which you can exercise by writing to either the email address serviceconsommateur@laita.fr or the postal address: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France. Please note that the CNIL offers a letter generator to help you make any requests: https://www.cnil.fr/fr/modeles/courrier.

In order for us to satisfy your requests to exercise rights concerning your personal data, you must provide the first name, last name and email address you used to sign up to our newsletter or create an account on our website. If we are unable to identify you with complete certainty based on details provided in your request to exercise your rights, we may need to request a valid copy of an identity document (ID card or passport in the following format: GIF, JPG, PNG, PDF). Finally, if you use different details (different email address, different name) to make your requests, we cannot guarantee that you will be able to fully exercise your rights concerning your personal data without providing further information.

1.   Right of access and communication of data

You have the right to know if and how we are processing your personal data and to have such data provided to you in a form that is easily understood.

However, since we are bound by a duty of security and confidentiality when processing personal data, please note that your requests will be processed subject to you providing proof of your identity, in particular by presenting a copy of a valid identity document (either an electronic copy or signed paper photocopy).

Please note that we shall be entitled, if necessary, to reject any requests that are clearly excessive (in terms of volume, repetitiveness or regularity) and requests infringing third-party rights.

Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.

2.   Right to rectify data

You have the right to request the rectification, updating, restriction of processing, or erasure of any of your personal data that may prove inaccurate, incorrect, incomplete or out of date.

Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.

3.   Right of erasure

You have the right to request that we erase your personal data without undue delay.

Please note that in some rare cases we will not be able to satisfy your requests, particularly where we are bound by a legal obligation (e.g. invoices and the data included in them must be kept for 10 years).

Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.

4.    Right to restrict processing

You have the right to request the restriction of processing.

Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.

5.    Right to data portability

You have the right to data portability, entitling you to receive personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller. Please note that this right can only be exercised if your data are processed by automated means (paper records are not eligible) and with your prior consent or in accordance with a contract entered into with you. To exercise this right, please contact us using our online contact form, the email address serviceconsommateur@laita.fr, or our postal address: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France.

6.    Digital will

You have the right to provide us with specific instructions regarding what happens to your personal data after your death, particularly with regard to how they are stored, erased and passed on in connection with the processing we carry out.

You should provide these instructions to us using our online contact form or by writing to: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France.

These instructions may be amended at any time. Unless otherwise instructed or indicated, the heirs of a deceased individual may exercise the rights of the deceased.

7.    Response time

We undertake to respond to your access, rectification or objection requests or any other additional information requests within a reasonable period of time not exceeding ONE (1) month of receipt of your request.

However, we may extend this period by two additional months if required based on the complexity and volume of the request. In such cases, you will be informed of such an extension of the response time during the month following your request.

8.    Right to contact the competent supervisory authority

Should you experience any difficulties, you are entitled to make a complaint to the CNIL: https://www.cnil.fr/fr/plaintes.

9.    Withdrawal of consent

You also have the right to withdraw your consent to any personal data processing that is subject to you giving your consent. If, for example you have agreed to us sending marketing emails, you may unsubscribe from these emails at any time by clicking on the unsubscribe link at the bottom of any marketing emails you receive. You may also close your user account at any time and without giving any reasons, either directly online or by contacting our customer services department. For all other withdrawals of your consent, please contact us using our online contact form, the email address serviceconsommateur@laita.fr , or our postal address: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France.

VII. Cookies and other technologies

This paragraph explains how cookies work and how to adjust cookie settings.

1.    What is a cookie ?

A cookie is a text file placed on your computer when you visit a website or view an advertisement. Its purpose is to collect information concerning your browsing patterns and provide you with services appropriate to your device (computer, smartphone or tablet). Cookies are mainly managed by your web browser.

2.    Our use of cookies

When you visit our website, cookies or other trackers are placed on your computer, smartphone or tablet.

The information that we collect in this way allows us to provide more appropriate, higher quality content on our website, analyse your browsing patterns, and identify and resolve any problems.

3.    What are the different types of cookies ?

This website includes various types of cookies for which you can give and withdraw your consent at any time using the [cookie manager] at the bottom of each web page. However, this option is not available for strictly necessary cookies.

  • Strictly necessary cookies:
    These cookies are essential for ensuring that our website functions properly and cannot be disabled from our systems. They are generally only enabled in response to your actions constituting service requests such as configuring your confidentiality preferences, logging in, or completing forms. You can configure your browser to block such cookies or alert you to their use. However, if you block this category of cookies that store no personal data, some parts of the website will not work. 

  • Marketing cookies:
    These cookies allow us to determine the number of visits and sources of traffic on our website with a view to measuring and improving its performance. They also help us to identify the most and least visited pages and assess how visitors browse our website. All the information collected by these cookies are aggregated and anonymised. If you reject this category of cookies, we will be unable to determine when you visit our website.

4.    How to change cookie settings

When you first visit this site a banner is displayed informing you of the cookies used and prompting you to set your preferences using the [cookie manager]. You can access information about cookies and change your cookie settings at any time on the [cookie manager] page which can be found at the bottom of each page of the website. For further information on cookie settings, please visit the dedicated page of the CNIL website by clicking on: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

VIII. PERSONAL DATA SECURITY

We are committed to taking all steps to ensure the security of your personal data. This involves us taking appropriate technical and organisational measures to guarantee a suitable level of security. These include:

  • pseudonymisation and encryption of data;
  • means to ensure consistent confidentiality, integrity, availability and resilience of systems and processing services;
  • means to restore data availability and access within an appropriate time frame in the event of physical or technical incidents;
  • a procedure for regularly testing, analysing and assessing the effectiveness of technical and organisational measures to ensure processing security;

IX. DATA PROTECTION OFFICER

The contact details of our data protection officer are: LAITA – DPO (Délégué à la protection des données personnelles) – ZI de Kergaradec – 4 rue Henri Becquerel – 29806 Brest Cedex 9, France dpo@laita.fr

XI. Personal data of minors

Our websites, products and applications are not designed for minors (people aged under 18 years) and we ask any concerned minors to refrain from providing us with personal data. If we discover that we have collected personal data from a minor, we will take all necessary steps to erase this information without undue delay.

Last updated: 28/07/2023