PRIVACY PROTECTION POLICY
1. Who we are
1.1 Data Controller
1.The following information is provided so that you can acquaint yourself with the undertakings made in respect of personal data protection by Valrhona SAS, whose head office is located at 14-16 avenue du Président Roosevelt, 26600 Tain l'Hermitage, France, and which acts as the data controller for the personal data processing mentioned in the present document, hereafter referred to as “the Data Controller” or “we”.
1.2 Our IT and civil liberties policy manager
The Data Controller has appointed a person who is responsible for the company’s IT and civil liberties policy. You can contact them by email at: citeduchocolat@valrhona.fr or by post at: Service communication, Cité du Chocolat 37 avenue du Président Roosevelt, 26600 Tain l'Hermitage. The Data Protection Officer can be contacted by email at: dpo@savencia.com
2. Personal data that we process
Regarding the processing of personal data, the Data Controller collects and processes the following data:
title, surname, forename(s), date of birth, billing address, delivery address, email address, telephone number; customer number; statistics on opening and clicking on emails sent by the Data Controller and on website activity (pages viewed, products viewed, carts abandoned…).
3. Purpose and legal basis of our data processing operations
3.1 Purpose of our processing operations
We carry out data processing operations in order to:
· Manage the content of a website;
· Manage orders;
· Manage marketing communications / communications to customers and prospects;
· Track customer pathways;
· Track customer relationships and claims;
· Analyse our audience;
· Categorise customers;
3.2 Legal basis of our processing operations We only carry out data processing operations if at least one of the following conditions is met:
· your consent for processing operations has been collected;
· our legitimate interest, or that of a third party, justifies that we carry out the relevant processing of personal data;
· performance of a contract between us and you requires us to carry out the relevant processing of personal data;
· we are bound by statutory and regulatory obligations, which require us to carry out the relevant processing of personal data.
3.3. Legitimated interests pursued
The legitimate interests pursued by the Data Controller may consist of enabling the continuity of the company’s business, improving the consumer experience, building consumer loyalty, and understanding consumers’ expectations.
4. Recipients of your data
The personal data that we collect, like data gathered subsequently, are intended for us in our capacity as Data Controller.
We ensure that only authorised people may have access to these data. Our subcontractors / service providers may be recipients of these data to carry out the services we assign to them.
Your personal data may be merged, pooled or shared between all the Data Controller’s parent, sister and subsidiary entities.
Said data may be conveyed to these entities for the purposes listed in the present advisory. These operations are carried out based on instruments that comply with the applicable regulations and are fit to ensure protection of and respect for your rights.
5. Transfers of your data
Within the scope of the services on offer, we transfer your personal data to recipients in the following countries:
· United States of America Each of these transfers is regulated by legal instruments that comply with the applicable legal framework.
The data transferred to our providers in the USA are Privacy Shield EU-US certified, ensuring a sufficient level of protection.
6. Periods for which we retain your data
The retention periods that we apply to your personal data are proportionate to the purpose for which they were collected. Accordingly, our data retention policy is designed as follows:
Purpose of processing Retention period
Prospection 3 years* with effect from the final contact made by you or, should the case arise, with effect from the end of the commercial relationship plus the statutory retention period
Customer within the scope of contracts entered into, data are retained throughout the commercial relationship plus the statutory retention period
Cookies 13 months* with effect from their installation on your device
Sales contract for accounting purposes 10 years** (unchangeable statutory duration) with effect from the signing of the contact
Should the right to access, rectification, deletion and limitation be exercised, the data relative to the ID cards and the information enabling consideration of this right 1 year** with effect from receipt of the request
Should the right to objection be exercised, the data relative to the ID cards and the information enabling consideration of this right 6 years* with effect from receipt of the request
7. Your acknowledged rights
7.1 How to exercise your rights
you can exercise your rights by writing via email to the following address: citeduchocolat@valrhona.fr, or by post to the following address: Service communication Cité du Chocolat Valrhona, 37 avenue du Président Roosevelt, 26600 Tain L'Hermitage.
To do this, you must clearly state your surname(s) and forename(s), and the address to which you want the reply to be sent.
On principle, you can exercise all your rights free of charge. However, regarding the right of access, you may be asked to pay a reasonable charge based on the administrative cost of making any copy of the data you ask for.
Regarding the right to be informed, the Data Controller is not obligated to respond favourably if you already have the information that you are asking to be sent to you.
The Data Controller will inform you that they cannot satisfy your request.
These rights are not absolute, and are subject to various conditions under:
· the applicable local right to protection of personal data or privacy; and the laws and regulations that apply to you.
The Data Controller informs you that not supplying your data, or modifying them, is liable to have consequences on the processing of certain requests within the scope of performing the contractual relations; and that your request in respect of exercising your rights will be retained for tracking purposes for six years in respect of exercising the right to object, and one year in respect of exercising the other rights.
All the rights you enjoy are set out below.
7.2 Your right to be informed
You acknowledge that the present advisory notice informs you of the purposes, the statutory framework, the interests, the recipients or categories of recipients in respect of the sharing of your personal data, and of it being possible to transfer data to a third country or to an international organisation.
In addition to this information, and with the objective of ensuring fair and transparent processing of your data, you declare that you have received additional information regarding:
· the period of retention of your personal data;
· the existence of the rights that you are acknowledged to enjoy, and how they are exercised.
If we decide to process data for purposes other than those stated, any information relative to these new purposes will be sent to you.
7.3 Your right of access to, and rectification of, your data
By exercising this right, you have confirmation that your personal data are, or are not, processed; and when they are, you have access to your data and to information regarding:
· the purposes of processing;
· the relevant categories of personal data;
· the recipients or categories of recipients, particularly recipients based in third countries;
· when possible, the expected period of personal-data retention; or when this is not possible, the criteria used to determine this period;
· the existence of the right to ask the Data Controller to rectify or erase your personal data; of the right to request a restriction of processing of your personal data; and of the right to object to this processing;
· the right to lodge a complaint with a supervisory authority;
· information relating to the source of the data when they are not collected directly from the people in question;
· the existence of automated decision-making, including, profiling; and, in the latter case, useful information regarding the underlying rationale, as well as the importance and the expected consequences of this processing for the people in question.
You can ask us for your personal data to be, depending on the case, rectified or supplemented if they are inaccurate, incomplete, ambiguous or outdated.
7.4 Your right to erase your data
You can ask us to erase your personal data where one of the following grounds applies:
· the personal data are no longer necessary in relations to the purposes for which they were collected or otherwise processed;
· you withdraw the consent that you previously gave;
· you object to the processing of your personal data when there is no legal ground for said processing;
· the processing of personal data does not comply with the provisions of the law and of the applicable regulations;
· your personal data were collected when you were a minor.
However, you cannot exercise this right when the retention of your personal data is necessary with regard to the law or regulations, particularly, for example, for the establishment, exercise or defence of legal claims.
7.5 Your right to restrict data processing operations
You can request that processing of your personal data be restricted in the cases provided by the law and regulations.
7.6 Your right to object to data processing operations (unsubscribing)
You have the right to object to processing of your personal data when processing is based on the Data Controller’s legitimate interest.
In the event of direct communication, this right may be exercised by any means, and particularly by clicking on the unsubscribe links at the end of the communications sent.
7.7 Your right to data portability You have the right to the portability of your personal data.The data on which this right can be exercised are:
· your personal data only, which excludes anonymised personal data and data that does not concern you;
· declarative personal data and operating personal data;
· personal data that do not infringe third parties’ rights and freedoms, such as data with trade-secret protection.
This right is restricted to processing operations based on consent or a contract, and to personal data that you have generated personally.
This right includes neither derived data nor inferred data, which are personal data created by the Data Controller.
7.8 Your right to withdraw your consent
When data processing operations that we carry out are based on your consent, you can withdraw it at any time. We then cease processing your personal data, without this affecting the lawfulness of processing based on consent before its withdrawal.
7.9 Your right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority without prejudice to any other administrative or judicial remedy.
7.10 Your right to draw up post-mortem directives
You can draw up directives regarding the retention, erasure and communication of your personal data after your death, to a trusted third party, who is certified and tasked with enforcing the deceased’s wishes, in compliance with the requirements of the applicable legal framework.
8- Use of data when you create your account
The personal data requested from you are necessary to create your account, track your orders, track the customer relationship, and manage newsletter sign-ups. These data are intended for the Data Controller, the Cité du Chocolat Valrhona, and are based on your consent. They can be communicated for the same purposes to the customer relations department, the marketing department, the sales department, to our subcontractors and partners. They are retained for a period of three years with effect from our last contact with you, plus the statutory retention period. To stop receiving promotional content or being in our customer database, you can withdraw your consent at any time. You can exercise these rights by sending an email to scvalrhona@valrhona.fr or a letter with your contact details (forename and surname, full postal address, proof of ID such as a copy of your ID card or passport) to: Délégué à la protection des données, 315 allée du Bergeron 26600 MERCUROL VEAUNES. You also have the right to draw up general and special directives on how you want these rights to be exercised after your death. As required, and to obtain more details, or should you make a claim regarding your rights, you can contact the DPO by email at this address: dpo@savencia.com. You have the right to lodge a complaint with the Commission on Information Technology and Liberties (Cnil), the French supervisory authority in charge of enforcing obligations in respect of personal data.
9 -Signing up to the newsletter
The personal data requested from you are necessary for managing your sign-up to Cité du Chocolat Valrhona newsletter.
They are intended for the communications department of the Data Controller, the Cité du Chocolat Valrhona, and are based on your consent.
They may be communicated for the same purposes to Valrhona’s marketing department.
They are retained as long as you do not unsubscribe.
To stop receiving our newsletter, you can unsubscribe at any time by clicking on the unsubscribe links in the newsletter.
You enjoy rights (right to access, rectification, erasure, objection; right to portability of your information; right to restricting processing operations) that you can exercise by sending an email to citeduchocolat@valrhona.fr or a letter stating your contact details (forename and surname, full postal address, proof of ID such as a copy of your ID card or passport) to: Service communication, Cité du Chocolat Valrhona, 37 avenue du Président Roosevelt, 26600 Tain l’Hermitage, France.
You also have the right to draw up general and specific directives stating how you want these rights to be exercised after your death.
As required, and to obtain more details, or should you make a claim regarding your rights, you can contact the DPO by email at this address: dpo@savencia.com.
You have the right to lodge a complaint with the Commission on Information Technology and Liberties (Cnil), the French supervisory authority in charge of enforcing obligations in respect of personal data.
10 -Contact form
The personal data requested from you are necessary to answer any questions, provide further details, or be contacted by an adviser.
They are intended for the communications department of the Data Controller, the Cité du Chocolat Valrhona, and are based on the Cité du Chocolat’s legitimate interest in order to offer a high-quality customer service.
They may be communicated for the same purposes to all Valrhona departments involved in customer relations and satisfaction.
They are retained for the statutory retention period.
You enjoy rights (right to access, rectification, erasure, objection; right to portability of your information; right to restricting processing operations) that you can exercise by sending an email to citeduchocolat@valrhona.fr or a letter stating your contact details (forename and surname, full postal address, proof of ID such as a copy of your ID card or passport) to: Service communication, Cité du Chocolat Valrhona, 37 avenue du Président Roosevelt, 26600 Tain l’Hermitage, France.
You also have the right to draw up general and specific directives stating how you want these rights to be exercised after your death.
As required, and to obtain more details, or should you make a claim regarding your rights, you can contact the DPO by email at this address: dpo@savencia.com.
You have the right to lodge a complaint with the Commission on Information Technology and Liberties (Cnil), the French supervisory authority in charge of enforcing obligations in respect of personal data.
11 - Wording in informational and commercial emails
The Cité du Chocolat Valrhona, which is the Data Controller, processes your personal data for the purposes of:
- managing and sending the newsletter;
- managing and sending prospecting materials.
The collected data are intended for the Data Controller, the Cité du Chocolat Valrhona, and are based on your consent.
Your personal data are retained until you unsubscribe. To stop receiving our newsletter, you can unsubscribe at any time by clicking on: http://www2.valrhona.com/unsubscribe/
Under the French law of 6 January 1978 in information technology and civil liberties, amended by EU regulation 2016/679 dated 27 April 2016 on personal data protection, you have a right to access, erase, modify, rectify, object to and restrict processing operations and the portability of the information pertaining to you. Lastly, you have the right to draw up general and special directives stating how you want these rights to be exercised after your death. You can exercise these rights by sending an email to citeduchocolat@valrhona.fr or a letter, stating your contact details (forename and surname, full postal address, proof of ID such as a copy of your ID card or passport) to : 37 avenue du président Roosevelt, 26600 Tain l'Hermitage, France.
As required, and to obtain more details, or should you make a claim regarding your rights, you can contact the DPO by email at this address: dpo@savencia.com.
Lastly, you have the right to lodge a complaint with the Commission on Information Technology and Liberties (Cnil), the French supervisory authority in charge of enforcing obligations in respect of personal data.
12 Use of customer data
The personal data requested from you are necessary for managing and tracking the customer relationship. They are intended for Valrhona SAS, the Data Controller, and are based on the preparation and/or performance of a contract. They can be communicated for the same purposes to various departments such as: customer service, marketing, logistics, etc. They are retained throughout the customer relationship, plus the statutory retention period.
You enjoy a right to access, rectification, erasure and objection; a right to portability of your information; right to restrict processing operations) that you can exercise by sending an email to citeduchocolat@valrhona.fr or a letter stating your contact details (forename and surname, full postal address, proof of ID such as a copy of your ID card or passport) to: Service communication, Cité du Chocolat Valrhona, 37 avenue du Président Roosevelt, 26600 Tain l’Hermitage, France.
You also have the right to draw up general and specific directives stating how you want these rights to be exercised after your death.
As required, and to obtain more details, or should you make a claim regarding your rights, you can contact the DPO by email at this address: dpo@savencia.com.
You have the right to lodge a complaint with the Commission on Information Technology and Liberties (Cnil), the French supervisory authority in charge of enforcing obligations in respect of personal data.
13 Cookie policy
13.1 Cookie management
When you go on a website, information may be stored on your browser or retrieved from it, generally in the form of cookies. This information may pertain to you, your preferences or your device, and is mainly used to ensure that the site is working properly. The recorded data generally enable you not to be directly identified, but to benefit from a personalised web experience. You can choose to block certain types of cookie by managing your cookie settings for this website (see below).
13.2 List of cookies used on our website
Strictly necessary cookies
These cookies are essential for the website to work properly, and cannot be disabled. Generally, they are only enabled in response to actions that you carry out and that involve a request for a service, such as configuring your confidentiality preferences, logging on, or completing a form. You can configure your browser to block these cookies or be alerted to their use. However, if this category of cookies – which stores no personal data – is blocked, some parts of the site cannot function.
Cookies used:
- OptanonConsent
- OptanonAlertBoxClosed
- frontend
- external_no_cache
Performance cookies
These cookies let us see how many visits our website receives and what the traffic sources are, so that we can measure and improve the site’s performance. They also help us to identify the most/least visited pages and to assess how visitors browse the site. All the information collected by these cookies is aggregated and therefore anonymised. If you don’t accept this category of cookies, we cannot know when you visited our website.
Cookies used
- mailchimp_landing_page
- __utmz
- __utmb
- _ga
- __utmv
- __utmc
- __utma
- _gat_UA-36823161-8
- _gid
|
Categories |
Cookies |
|
p.travelsmarter.net |
|
|
tripadvisor.fr |
|
Functional cookies
These cookies help improve the functionality and personalisation of our site, for example through using videos and instant-messaging services. They can be enabled by us, or by third parties whose services are used on our website’s pages. If you do not accept this category of cookies, some or all of these features may not work properly.
Cookies used
- has_js
Targeted advertising cookies
These cookies can be enabled on our website by our advertising partners. These companies can use them to make profiles of your interests, in order to show you targeted ads on other websites. They operate only by identifying your browser and your device. If you do not accept this category of cookies, you will be shown ads that are less tailored to your interests when you browse other websites.
Cookies used
- _fbp
|
Categories |
Cookies |
|
facebook.com |
|
|
tripadvisor.com |
|
|
youtube.com |
|
|
yieldoptimizer.com |
|
|
tapad.com |
|
|
adnxs.com |
|
|
google.com |
|
|
m.youtube.com |
|
|
doubleclick.net |
|
|
agkn.com |
|