GDPR Policy
1 – PURPOSE OF THE POLICY
La Poterie du Granier attaches great importance to respect for privacy. This is one of the reasons why we have adopted a confidentiality and personal data protection policy.
We are committed to protecting your privacy rights and ensuring that your personal data is protected.
This personal data management policy (the “Policy”) details the types of personal data we collect, how we process and protect it in relation to the services we offer. This includes information collected offline or online through our websites. It also reminds you of your rights and how to exercise them with our services.
We maintain adequate technical and organizational measures to protect the personal data you provide to us against the destruction, loss, alteration, disclosure or unauthorized access to your personal data, whether accidental or unlawful.
This External Policy relating to Privacy and the protection of personal data is published by the micro-enterprise Nadège Miguet Céramique/La Poterie du Granier, whose head office is located at the following address: 835 route de Lovettaz, 73000 Montagnole .
2 – YOUR RIGHTS AND HOW TO EXERCISE THEM?
Law n°78-17 of January 6, 1978 relating to data processing, files and freedoms, as well as the general European regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (general regulation on data protection) supplementing Law No. 78-17, grants you specific rights:
• A right of access: right to question us to find out if we hold Personal Data concerning you and to ask to know them;
• A right of rectification: right to ask us to rectify the information concerning you in the event of errors or inaccuracies;
• A right of opposition: when the Processing is based on our legitimate interests, the right to oppose, for legitimate reasons, the Processing of Personal Data, with the exception of commercial prospecting where the motivation is not required.
• A right to limit processing: right to ask us that some of your Personal Data not be kept for future processing when:
1. You dispute the accuracy of your Personal Data;
2. You consider and can establish that the Processing of the Personal Data is unlawful and you oppose the erasure of the Personal Data and instead demand the restriction of the Processing;
3. We no longer need your Personal Data but they are still necessary for you to establish, exercise or defend legal rights;
4. You oppose the Processing which would be based on our legitimate interest, pending the verification of whether the legitimate grounds pursued prevail over yours;
• A right to erasure: subject to the exceptions provided for by the Regulations, the right to obtain the erasure of your Personal Data, when one of the following reasons applies:
1. Your Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed;
2. You wish to withdraw your consent on which the Processing of your Personal Data was based and there is no other basis justifying this processing;
3. You object to the Processing and there are no overriding legitimate grounds for the Processing or you object to the sending of commercial solicitations;
4. You consider and can establish that your Personal Data has been unlawfully Processed;
5. Your Personal Data must be erased under a legal obligation;
• A right to the portability of your data: when the Processing is based on your consent or a contract, the right to receive from us the Personal Data concerning you in a structured, commonly used format, and to transmit this Personal Data to another data controller without our hindrance;
• A right to withdraw your consent: when the Processing is based on your consent, you have the right to withdraw your consent at any time, without this withdrawal affecting the legality of the Processing carried out before said withdrawal;
• Right to decide the fate of your Personal Data after your death: you have the right to organize the fate of your Personal Data post-mortem by adopting general or specific guidelines. We are committed to adhering to these guidelines. In the absence of directives, we recognize the possibility for the heirs to exercise certain rights, in particular the right of access, if it is necessary for the settlement of the estate of the deceased; and the right of opposition to close the user accounts of the deceased and oppose the Processing of their data;
You can exercise each of these rights by proving your identity:
• By sending an email to our Data Protection Officer at poteriedugranier@gmail.com
• By sending a letter to the following address: Poterie du Granier, 835 route de Lovettaz, 73000 Montagnole
• By following the instructions on the CNIL website at this address: https://www.cnil.fr/agir
If, despite our efforts to preserve the confidentiality of your Personal Data, you believe that you are the victim of a violation of the Regulations, you can submit a complaint to the CNIL.
3 – PERSONAL DATA
Personal data means information that can directly or indirectly identify you (“Personal Data”). They generally include information such as your name, your postal and e-mail address, your telephone number, but also other information such as the IP address, shopping habits, information about your lifestyle or your preferences. , such as your hobbies and interests. Health information is referred to as “Special Categories of Personal Data” and requires special protection due to its level of sensitivity.
We directly collect your personal data in various ways, for example when:
• You browse our Site or use our Services on our Site;
• You create an account, log in to your account or use your account on our Site,
• You subscribe to our newsletter;
• You write a review or comment on our social networks;
• You contact us through various channels, including contact forms, by post or by telephone;
• You participate in a game or contest, satisfaction surveys;
• You visit us;
• You share content on social networks using a hashtag #lapoteriedugranier #nadegemiguetceramic #nadege.ceramic or hashtags that we suggest;
• You have given your consent to third parties for them to transmit personal data concerning you to us;
When you provide us with your personal data, we will treat it in accordance with this Policy. If you do not want us to process your personal data in this way, please do not provide us with any personal information.
We process your personal data in order to provide our services to you, as detailed below. In some cases, we only process your personal data if you have expressly given us your consent, for example in most cases where we process your personal data for marketing purposes or where we process your so-called special personal data. In other cases, we might be relying on other legal grounds to process your personal data, such as the performance of the contract that binds you to us or a legitimate interest, such as the prevention of fraud.
If you become a customer, we could transparently infer that you want us to process your personal data for marketing purposes. You can always opt out of marketing communications without it affecting your benefits as a customer.
When we process your personal data on the basis of your consent, we will explicitly ask for your consent, and only for a particular purpose. We will also ask you to provide us with additional consent if we need to use your personal data for purposes not covered by this Policy.
Please see the following section for details of the different types of personal data we may collect, the purposes involved and the legal basis for such processing.
4 – PROCESSING OF PERSONAL DATA
La Poterie du Granier takes into account the principles of data minimization, data protection by design and data protection by default. Consequently, Personal Data that is relevant, adequate and limited to what is necessary with regard to the purposes for which it is processed is collected.
This Personal Data is collected in particular when you pass when you create or modify your customer account, when you browse our site, when you contact us, when you participate in an event, when you fill out forms.
When you fill in input fields on a form, the mandatory nature of an answer is indicated by the use of an asterisk (*) at the end of the question. Failure to answer a question marked with an asterisk will prevent the processing of your request.
When you choose to send us your Personal Data spontaneously, without being asked to do so, you agree to assume full responsibility for the Personal Data transmitted.
You are informed of the existence of the “Bloctel” telephone canvassing opposition list, on which you can register here: https://conso.bloctel.fr/
4.1 – NATURE OF PERSONAL DATA
We are required to collect and process in particular the surname, first name, title, delivery address, telephone number, e-mail or your possible complaints.
It may also include other information such as your IP address, shopping habits, lifestyle information or preferences.
These data are collected fairly; no collection is carried out without people's knowledge and without their being informed.
4.2 – PURPOSES
La Poterie du Granier always processes your Personal Data for specific purposes and only implements relevant Processing to achieve these purposes.
Any processing of your personal data that would have a purpose other than those set out below will require your consent if it is not justified by a legitimate interest.
In particular, we process your Personal Data for the following purposes:
• Respond to your requests for information, questions, comments, satisfy your requests and provide you with effective assistance;
• Improve the relevance of the information sent;
• Manage your customer account;
• Establish, maintain and manage the customer relationship and ensure its follow-up;
• Provide accounting;
• Manage invoicing and collections;
• Manage payment or unpaid incidents and debt collection;
• Send promotional solicitations relating to products or services similar to those provided. At any time, you can object, free of charge, to your Personal Data being used for prospecting purposes, without having to justify this request by following the instructions in the section “Your rights and how to exercise them”. We draw your attention to the fact that exercising the right of opposition does not prevent us from continuing to contact you for other purposes, in particular under a legal obligation or for the performance of the contract;
• Manage the operation and optimization of our website, help accelerate your future activities and experiences on our website, evaluate the use of our website, our products and services and analyze the effectiveness of our communication campaigns and promotions, to personalize your experience on our site and other platforms and to anonymously and globally evaluate the activity on our site and other platforms (in particular, we take into account the time at which you visited it, if you have already visited and which site referred you to it), to make our site easier to use and to better tailor our site, our products and services to your interests and needs;
• Manage our customer relationship through our CRM, in order to get to know you better, personalize our products and services and contact you regarding products and services that may be of interest to you (promotional offers, promotional events, PR events, VIP gatherings, announcements/events, etc. .), provided that you have given your consent, (or have not expressed your refusal) or that you have previously requested a product or service from us and that the communication is relevant or related to this prior request and made within the time limits set by the applicable laws;
• Provide customer service accessible by telephone or email;
• Provide sharing tools on our Site and/or social networks;
• Proceed with the verification, identification and authentication of the personal data that you have transmitted to us;
• Prevent and detect fraud, malware (malicious software or malicious software) and manage security incidents;
• Manage any disputes and disputes.
• Manage your requests for access, rectification, opposition, erasure, limitation and portability of Personal Data;
• Send you satisfaction surveys or conduct internal analyses;
• Invite you to events;
• Manage subscriptions to newsletters and events offered;
• Carry out analytical studies and commercial statistics;
• Establishing, exercising or defending a right in court, whether in the context of judicial, administrative or extrajudicial proceedings of any kind whatsoever;
• Manage the archives;
• Ensure the compliance of our activities;
• And all other purposes imposed by law and the authorities.
4.3 – PROCESSING LIMITS
La Poterie du Granier collects and processes Personal Data if:
• We have obtained your prior consent;
• The processing is necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures taken at your request;
• The Processing is necessary to comply with our legal or regulatory obligations;
• The Processing is necessary for the purposes of our legitimate interests and does not unduly affect your interests or fundamental rights and freedoms.
4.4 – STORAGE TIMES
La Poterie du Granier keeps your Personal Data for the time necessary to fulfill the purposes pursued, subject to the legal possibilities of archiving, obligations to retain certain Personal Data and/or anonymization.
Customer Personal Data that is not related to a specific contract is kept for a period of three years from your last interaction. Personal Data relating to a specific contract is kept for the duration of the contract.
At the end of the aforementioned periods, the Personal Data is subject to Intermediate Archiving for the periods of legal or regulatory prescription.
At the end of the legal or regulatory limitation period, we undertake to erase the Personal Data from its databases or to anonymize them.
The Personal Data of prospects is kept for a period of three years from your last interaction and then deleted or anonymized.
4.5 – RECIPIENTS AND TRANSFER OF YOUR DATA
All this personal information is confidential and is only accessible by our services. They are not intended to be transferred or sold.
We are required to share your personal data with the service providers who help us carry out the above processing and in particular:
• Our advertising, marketing and promotion agencies to help us deliver and analyze the effectiveness of our advertising campaigns and promotions,
• Third parties required to deliver a product or service to you, such as a delivery or postal service delivering a product you have ordered,
• Third-party service providers, such as website hosting service providers,
• Providers of web analytics tools, such as Google,
• Our service providers and/or economic partners when sharing is necessary to meet the purposes mentioned above,
We require these processors to comply with strict requirements under applicable data protection law, under which they may only process your personal data on our behalf and must meet high standards of computer security.
Please note that we never share your personal data with social media platforms. When we grow our audience or conduct customer matchmaking activities with social media platforms like Facebook or Google, your personal data is anonymized prior to transfer.
If there are any changes in the future and we need to share your personal data with a social media platform, we will ask for your consent.
Please note that we may share your personal data with law enforcement or other agencies when we have a legal obligation to do so or in the case of a letter rogatory, summons or a court order requiring us to disclose your personal data.
5 – PERSONAL DATA SECURITY
La Poterie du Granier undertakes, within the framework of its activities and in accordance with the Regulations, to ensure the protection, confidentiality and security of Personal Data.
We take the necessary precautions taking into account the state of knowledge, the costs of implementation and the nature, scope, context and purposes of the Processing as well as the probability of each risk in order to preserve the security and the confidentiality of the Personal Data that you communicate to it and in particular to prevent them from being distorted, damaged or communicated to third parties (unless you agree).
Therefore, we implement all technical, logical, physical and organizational measures to guarantee a level of security adapted to the risk and to prevent any loss, alteration, disclosure of Personal Data or access to unauthorized third parties.
However, given the intrinsic characteristics of the Internet, any transmission of information via the Internet is not completely secure. The Personal Data transmitted is subject to measures which cannot protect against all the risks of misappropriation and/or piracy. The transmission of your Personal Data therefore takes place at your own risk.
In the event of a Personal Data breach and in accordance with the Regulations, we undertake to notify the CNIL.
6 – TRANSFERS OF PERSONAL DATA TO A COUNTRY LOCATED OUTSIDE THE EUROPEAN UNION
To date, La Poterie du Granier only transfers outside the European Union Personal Data of Persons Concerned who are located outside the European Union, under the terms and according to the procedures provided for in the Regulations.
In the event that we are required to transfer Personal Data concerning Data Subjects located within the European Union, we undertake, as of today, to verify that appropriate guarantees in accordance with the Regulations will be put in place by the Importer and that you have enforceable rights and effective legal remedies, in order to ensure that your Personal Data benefits from an adequate level of protection.
Personal Data may, within the framework of the aforementioned purposes, be transferred to a country located within the European Union, to a country located outside the European Union which has been the subject of a adequacy decision of the European Commission, as well as to countries outside the European Union that have not been the subject of an adequacy decision by the European Commission, subject to having provided appropriate guarantees in accordance with to GDPR.
7 – PROTECTION OF CHILDREN'S PRIVACY
Our products and services are not intended for children and do not target children under the age of fifteen. If you are under the age of fifteen, you are prohibited from ordering products or services and sending any information about yourself to us.
8 – SOCIAL NETWORKS / HYPERTEXT LINKS
Granier Pottery is present on Social Networks, and in particular on Facebook, YouTube and Instagram.
We remind you that processing is implemented by the Social Network when you access or use this Social Network, which requires that you consult and accept the privacy policy of each of the Social Networks you use.
Depending on the Social Network used, you will be able to have access to many features such as registering for the events we offer, following our news, commenting on or sharing content published on your personal page within the Social Network, etc. .
For these purposes, we will process some of your Personal Data, and in particular your surnames, first names and all information made public on your personal page.
As a service to our visitors, our Site may contain hypertext links to other websites which are not operated or controlled by us.
La Poterie du Granier will therefore not be held responsible for the content of such websites, nor for the data protection practices of the third parties who operate them. We draw your attention to the fact that the data protection practices of third parties may differ from those presented in this Policy. We urge you to check and understand their practices in this area before entrusting them with your personal data.
9 – ADVERTISING AND UPDATING OF THE POLICY
This policy comes into effect on April 1, 2022.
La Poterie du Granier reserves the right to modify its Privacy Policy. Any modification will be published on the Sites, the Social Networks and, where applicable, will be notified to you by e-mail. Any browsing on the Sites and on the Social Networks, any subscription to a product and a service after the date of notification presumes your unreserved acceptance of the new Privacy Policy thus notified.