Our company LA MAISON DE L'ARGOUSIER is involved in the protection of your personal data and ensures compliance with the European Regulation No. 2016/679 on the protection of individuals with regard to the processing of personal data ("RGPD Regulation") and the French Data Protection Act No. 78-17 of January 6, 1978.
In order to ensure that every individual concerned is fully informed of our personal data protection policy, we have drawn up this document (hereinafter referred to as "the Policy") in which you will find information on how we collect, use and store your personal data, as well as the rights you have with regard to your data.
1. Purpose of processing and controller
The company MAISON DE L'ARGOUSIER (SASU registered in the Bordeaux Trade and Companies Register under number 919 836 247, headquartered at 16 route de Pauillac 33320 EYSINES) has an online sales website at www.maison-argousier.fr.
This site enables us to receive orders from our customers, and the data collected in this way is recorded and processed in a customer file.
This file is used to:
- Manage orders, payment and delivery.
- Carry out marketing operations (loyalty, promotions) and send advertising by
e-mail to our customers who have not objected or who have accepted:
o On products similar to those they have ordered.
o On other products offered by the company.
LA MAISON DE L'ARGOUSIER is the data controller of the personal data we collect and process for our business.
2. Legal basis for processing
The legal basis for the processing of your data is determined as follows:
- Order management: the legal basis is the contract. The processing of personal data is necessary for the execution of the contract(s) concluded with our company. This applies primarily to purchases made online via our website.
- Sending commercial e-mail solicitations on products similar to those ordered by customers, compiling statistics, improving our services and browsing, preventing and combating computer fraud and piracy: the legal basis for processing is the company's legitimate interest (Cf. article 6.1.f) of the European Data Protection Regulation), namely to promote our products to our customers.
- Sending commercial e-mail solicitations about other products offered by our company: the legal basis for processing is consent (Cf. article 6.1.a) of the European Data Protection Regulation), as required by article L. 34-5 of the French Post and Electronic Communications Code.
- Bookkeeping involving data retention for a period of 10 years: the legal basis for processing is the legal obligation (Cf. article 6.1.c of the European Data Protection Regulation).
3. Purposes of processing
We collect personal data for specific purposes, in particular:
- For commercial prospecting purposes, notably when we carry out communication campaigns by e-mail or on social networks.
- To conduct customer satisfaction surveys in order to improve our products and services, - To fulfill orders placed on our website, and more generally to
carry out all the tasks incumbent upon us under our contract (delivery, invoicing, etc.).),
- To enable and improve navigation on our site by collecting your connection data when you visit our website www.maison-arhousier.fr to obtain information about our company, discover our products, consult our blog,
- To answer your questions and contact requests when you contact us, in particular via our online contact form.
- To prevent and combat computer fraud and piracy.
4. Type of data collected
We collect only the data necessary for the purposes of processing.
This data falls into the following categories:
- Identity: title, surname, first name, address, delivery address, telephone number, e-mail address, date of birth, internal processing code enabling customer identification, data relating to registration on opposition lists.
- Order data: transaction number, purchase details, purchase amounts, invoice payment data (payments, outstanding payments, discounts), product returns.
- Payment details: credit card number, expiry date, visual cryptogram (which is immediately deleted).
- Data required for loyalty and prospecting campaigns: purchase history
- Technical information on connection to our website and audience measurement
5. Shelf life
In accordance with current legislation and regulations, the data collected is kept for the time strictly necessary to achieve the purposes described above.
Thus, for data collected as a result of contact requests, we keep the data for a period of 36 months from our last exchange following your request if you are a prospect.
If you are one of our customers, the data is kept for the duration of the commercial relationship, plus 36 months for prospecting purposes.
In order to comply with our legal obligations, for example in the context of establishing, exercising or defending legal claims, or to meet legal obligations such as accounting, tax or archiving, we may need to keep your data for longer than the periods mentioned below.
Accounting documents relating to your purchases and orders are kept for a period of 10 years, in accordance with our legal obligations.
In this case, we will archive your data with access restricted to authorized departments/recipients only.
Connection data and statistical and analysis cookies collected to improve the user experience are kept for a maximum of 13 months.
6. Recipients of collected data
LA MAISON DE L'ARGOUSIER does not transfer or market your data.
The data you provide is intended only for the persons authorized to process your requests within our internal departments.
In order to perform our contracts, supply our products or services, we may also need to pass on some of your data to our subcontractors or partner service providers. Contracts are systematically signed with these subcontractors or service providers in order to secure the way in which data is processed, whether in IT, legal or organizational terms.
7. Securing the data collected
The data we collect is hosted in Europe in a secure datacenter located in Switzerland. Apart from this hosting, no data is transferred outside the EU.
We ensure data security and confidentiality through a variety of physical, electronic and administrative procedures.
Only authorized persons have access to personal data, and only those necessary for the processing concerned. All employees with access to data are made aware of the confidentiality and security of personal data and, more generally, of IT security, and make contractual commitments in this respect.
8. Exercising the rights of data subjects
We are committed to respecting the rights of each individual concerned under the conditions defined by the French Data Protection Act and the RGPD.
Each data subject has the following rights:
- a right to access data ( Article 15 RGPD),
- a right to rectification ( Article 16 RGPD),
- a right to erasure ( Article 17 RGPD),
- a right to limitation (Article 18 RGPD),
- the right to data portability ( Article 20 RGPD)
- the right to withdraw consent at any time for processing subject to individuals' consents ( Article 13 RGPD)
- as well as the right to define directives concerning the fate of one's data after one's death.
Each data subject also has the right to object, for reasons relating to his or her particular situation, to processing based on legitimate interest, as well as a right to object to commercial prospecting ( Article 21 of the RGPD).
For more information about exercising your rights: https: //www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles
All these rights may be exercised by contacting LA MAISON DE L'ARGOUSIER by sending an e-mail or a letter to the following address: La Maison de l'Argousier, 16 Route de Pauillac 33320 EYSINES.__________
Proof of identity may be requested in order to verify that the applicant is indeed the person
concerned by the right exercised.
Each person also has the right to lodge a complaint with the CNIL:
wwww.cnil.fr.
***
This policy was updated on May 10, 2023 and will be updated as necessary to take into account changes in our needs and activities, and if necessary to meet the requirements of applicable regulations on the protection of personal data.
For any information on the protection of personal data, we invite you to consult the website of the Commission Nationale Informatique et Libertés www.cnil.fr.