Personal data
PREAMBLE
As part of its activities, Pierre de l'Est (hereinafter the "Company") is a simplified joint-stock company (SAS) with a capital of 100,000.00 euros, whose registered office is at 44 Rue de Nancy 57915 WOUSTVILLER, registered under RCS Sarreguemines number B 794 310 672, under SIREN number 794310672, and is required to collect and process personal data concerning you.
Personal data processing is governed by:
- Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms (hereinafter "IEL law");
- Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, which came into force on May 25, 2018 ("GDPR").
Pierre de l'Est is committed to protecting your privacy and personal information by complying with current legislation. This Policy informs you of our data processing practices and how your personal information is protected.
DEFINITIONS
• Personal data: Any information directly or indirectly identifying a natural person. Examples: name, registration number, phone number, photograph, date of birth, town of residence, fingerprint, etc.
• Processing: Refers to any operation or set of operations performed on your personal data.
• Data controller: Refers to the entity that determines the means and purposes of personal data processing.
• Processor: Any person processing personal data on behalf of the data controller.
• Terminal: Refers to all electronic devices that allow the exchange and processing of data (tablet computers, mobile phones, computers, etc.).
IDENTITY OF THE DATA CONTROLLER
Your personal data is collected and processed by Pierre de l'Est.
1. What categories of personal data may be collected and processed?
Pierre de l'Est may collect and process several types of personal data:
• Identification data: title; name; first names; date of birth; email; phone number (landline and/or mobile); fax number; address; internal processing code allowing client identification; professional activity; SIREN number; and, where applicable, a copy of the identity card, for proof of exercising a right of access, rectification or opposition or to comply with a legal obligation.
• Payment method data: postal or bank account statement; check number.
• Transaction data: such as transaction number, details of the purchase, product or service subscribed to;
• Data relating to commercial relationship monitoring: requests for documentation, trial requests, product purchased, quantity, amount, frequency, delivery address, purchase history, product returns, correspondence with the client and after-sales service, exchanges and comments from clients and prospects, person(s) in charge of the client relationship;
• Data relating to invoice payments: payment methods, discounts granted, receipts, balances and unpaid amounts not leading to the exclusion of the person from the benefit of a right, service or contract. Where applicable, information relating to subscribed credits (amount and duration, name of the lending organization) may also be processed by the merchant in case of order financing by credit;
• Data necessary for carrying out loyalty actions, prospecting, studies, surveys, product testing, and promotion;
• Data relating to contributions from individuals who post reviews on products, services or content, particularly their pseudonym;
• Connection data: IP addresses, cookies, trackers (date/time/duration of visit to our website, pages viewed) device identifiers, browser type.
When personal data is requested from you, you may refuse to provide it. However, if this is your choice, we may be unable to provide you with the product or service concerned.
2. How are your personal data collected?
Personal data concerning you is collected directly from you only when you:
- consult our website when you accept web browsing cookies (to learn more: see article 7 of this policy);
- use forms, for example: contact and application forms;
- purchase and supply our products;
- manage the administrative and financial aspects of client relationships;
- engage in our oral and written communications: the content of your messages, emails, letters, or phone calls;
- receive commercial offers, satisfaction surveys, prospecting, and/or newsletters, or participate in a contest, if applicable.
Where required by law, Pierre de l'Est undertakes, depending on the case, to obtain your consent and/or allow you to object to the use of your data for certain purposes.
Pierre de l'Est may send commercial solicitations to individuals.
If, subsequently, individuals no longer wish to receive such solicitations by email, they can at any time send an email free of charge and without providing any other reason via the contact form on our website.
3. What are the purposes of processing your personal data?
Your various data may be collected by Pierre de l'Est for explicit, legitimate, and defined purposes to ensure:
➢ Client relationship management: contracts, orders, deliveries, invoices, accounting and in particular client account management, a loyalty program, monitoring of client relations such as conducting satisfaction surveys, managing complaints and after-sales service if applicable, credit management;
➢ Management of unpaid debts and disputes;
➢ Improvement of our product and service offerings: surveys, analyses, and commercial statistics if applicable;
➢ The proper functioning and continuous improvement of our website;
➢ Operations related to prospecting;
➢ Updating its prospecting files by the body responsible for managing the cold calling opposition list, in application of the provisions of the consumer code;
➢ Management of requests for the right to access, rectification, opposition, erasure, restriction, portability;
➢ Legal obligations to which we are generally subject, for example: accounting and tax obligations.
In any event, and for each defined purpose, Pierre de l'Est will use all means at its disposal to ensure the security and confidentiality of the personal data entrusted to us, in compliance with applicable laws and regulations.
4. What is the legal basis for processing your personal data?
Depending on the case, Pierre de l'Est processes your personal data on the following legal bases:
- the processing is necessary for the performance of a contract to which you are a party or for the execution of your request (particularly when making contact);
- the processing meets the legitimate interests pursued by Pierre de l'Est (e.g., fraud prevention);
- in some cases, we must retain your data because the law requires us to do so (e.g., to ensure general security, for tax reasons, etc.);
- and if required, based on your consent.
5. To whom are personal data transmitted?
Authorized persons within our company are recipients of your data.
We may also share your personal data with partners and/or subcontractors for any of the purposes listed above. Our subcontractors and partners must comply with our personal data confidentiality and security rules and are not authorized to use them for other purposes.
We commit not to sell or rent your personal information to a third party without your authorization.
6. How long is personal data stored?
Pierre de l'Est undertakes that the collected data will be kept for a period not exceeding what is necessary for the purposes for which these data are collected and processed.
Personal data may be kept to comply with contractual and legal obligations. The natural person is also informed that Pierre de l'Est will retain the transmitted data according to the CNIL's criteria and recommendations available in its reference standard: simplified standard n°48.
Client data is kept for the duration of the commercial relationship and may be stored for commercial prospecting purposes for a maximum of 3 years from the end of the commercial relationship. Beyond that, the data is archived for the period during which our company's liability may be invoked.
Personal data relating to a non-client prospect is kept for a period of 3 years from their collection or the last contact from the prospect.
7. Cookies
This page helps you better understand how cookies work and how to use current tools to configure them.
7.1 - What is a cookie?
A cookie is a small data file, also called a tracker, transmitted from a website to the hard drive of your computer, tablet, or mobile device. It is stored in your browser while you browse a website. Its purpose is to facilitate your navigation, to offer you personalized services by collecting information during your visits to this site, and this, for the duration of the cookie's validity.
Cookies stored by a site or by third parties when you visit a website do not personally identify you as an individual; they only recognize the device you are using. Cookies do not cause any damage, of any kind whatsoever, to your device, but they allow you to benefit from certain functionalities of a website. They also help the publisher keep the website secure, remember your preferences, and personalize content.
7.2 - The different categories of cookies used on our site
The types of cookies we use may be:
· either session or persistent cookies:
· Session cookies only persist during the browsing session; they are deleted when you close your browser.
· Persistent cookies are installed for a specific duration.
· Either internal or third-party cookies:
· Third-party preference cookies
A third-party cookie is a cookie placed on the user's computer by a server from a domain other than that of the visited site. Preference cookies collect information about your choices and preferences and allow the site to remember your language or other local settings.
Cookie name
Purpose(s)
Cookie retention period
lang
This cookie distinguishes users and is used to retain and remember the language in which the user navigates. Installed by LinkedIn when a web page contains an embedded "Follow us" panel.
Expires after session.
· Third-party statistics cookies (performance analysis, audience measurement)
These cookies are used to anonymously distinguish users and to generate statistics and volumes of visits and use of the various elements composing our site (number of page views, number of visits, activity, frequency of return, etc.).
List of statistics cookies
Cookie name
Cookie retention period
Description - Categories of data collected
_ga
Expires after 24 months
Google Analytics is a Google internet audience analysis tool that allows website and application owners to better understand their users' behavior. This tool uses cookies to collect information and generate reports on traffic (number of visits, time spent on the site, average number of page views, device and browser used, geographical location), traffic origin (sources and campaigns generating visits) and navigation (pages viewed, actions performed).
_gid
Expires after 1 day.
_gat
Expires after 1 day.
· Third-party marketing cookies intended to improve site interactivity
These cookies are used to track visitors across websites. Our site relies on certain services offered by third-party sites. This particularly includes LinkedIn share buttons. They help improve site usability and aid in its promotion via sharing.
Cookie name
Provider(s) and Purpose(s)
Cookie retention period
Jsessionid
Cookie installed by LinkedIn. Retains user settings across page requests.
Expires after session.
Bcookie
Browser identification cookie installed by LinkedIn. It is used to identify the visitor and strengthen interactions. For example, it allows the visitor to connect to a website via their LinkedIn application.
Cookie requiring user consent (13 months).
Bscookie
This cookie is associated with LinkedIn. It is used to identify secure browsing and track the use of integrated services.
Cookie requiring user consent (13 months).
Lidc
Used by the social service, LinkedIn. Used for redirection from Share buttons.
Expires after 4166 days
R/collect
This cookie is used to send data to Google Analytics about the visitor's device and behavior. It tracks the visitor across devices and marketing channels.
Expires after 4166 days
7.3 - How to accept or refuse cookies?
Upon your first visit to our site, a banner will inform you of the use of cookies and offer you the choice to accept or refuse them. The banner will remain active until you have made your choice. You can configure cookies via the banner displayed during your first navigation on the site or via your web browser (see below).
You can choose to delete or disable cookies at any time through your browser. Each browser offers a setting solution to:
· notify you of cookies placed on your computer,
· Allow you to accept or refuse them, on a case-by-case basis or systematically.
Each browser's configuration is different. We invite you to consult your browser's help menu to configure it according to your wishes.
· For Mozilla Firefox
managing cookies on Mozilla Firefox
· For Google Chrome
managing cookies on Google Chrome
· For Safari
managing cookies on Safari
To go further, you can visit the CNIL website pages dedicated to this purpose and, in particular, "Cookies: tools to control them".
8. What measures are used for the security of your personal data?
Pierre de l'Est commits to implementing all technical and organizational measures to ensure the security of personal data processing and the confidentiality of your data, in application of the French Data Protection Act and the European General Data Protection Regulation (GDPR) and Law n°2018-133 of February 26, 2018 "on various provisions for adapting to European Union law in the field of security".
In this regard, Pierre de l'Est takes the necessary precautions, considering the nature of your data and the risks presented by our processing, to preserve data security and, in particular, to prevent them from being distorted, damaged, or accessed by unauthorized third parties (physical protection of premises, connection logging, encryption of certain data, etc.). We regularly review the technical and organizational measures in place to protect our information and communication systems.
Nevertheless, the security and confidentiality of personal data rely on everyone's good practices, and we invite you to be vigilant. Furthermore, Pierre de l'Est does not control all risks related to the functioning of the Internet, and we draw your attention to the existence of potential risks inherent in its use and operation. We disclaim all responsibility for any damage caused by accessing or using our site, including in the event of a virus infecting your computer or any other material damage.
9. Do we transfer personal data outside the EU?
Pierre de l'Est commits not to transfer your personal data outside the European Union. Should Pierre de l'Est need to do so, it would fulfill its duty of information by indicating the measures taken to control this transfer and ensure the confidentiality of their data.
10. What are your rights?
You have the following rights:
· Right of access: you have the right to know the personal data concerning you that we hold and to request a copy, as well as to request information on the purpose of this processing. Nevertheless, if these requests are manifestly unfounded or excessive, particularly due to their repetitive nature, Pierre de l'Est is not obliged to respond to them;
· Right to rectification: you have the right to obtain the rectification of personal data concerning you that are inaccurate, and in certain cases, the erasure or restriction of their processing;
· Right to erasure: you can ask us to erase your personal data under certain conditions (in particular when they are inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or retention is prohibited);
· Right to object: you have a right to object to the processing of personal data concerning you, especially if they are used for commercial prospecting purposes;
· Right to restriction of processing: you have the right to ask us to freeze the use of your data in certain cases;
· Right to data portability: if applicable, you have the right to receive a copy of the personal data you have provided to us (in a machine-readable format) or to have this data transmitted to another company;
· Right to withdraw your consent: you can at any time withdraw the consent you have given for the use of your personal data when this is required.
· Right to lodge a complaint with the French data protection authority (CNIL) by visiting their website.
· Right to define the fate of your data after your death and to choose whether or not we communicate your data to a third party you have previously designated. In the event of death and in the absence of instructions from you, we undertake to destroy your data, unless their retention proves necessary for probative purposes or to comply with a legal obligation.
11. How to exercise your rights?
These rights can be exercised, by simple request, by email or by mail: Société Pierre de l'Est 44 Rue de Nancy 57915 WOUSTVILLER, indicating your contact details (surname, first name, address), specifying your request, justifying your identity and mentioning a legitimate reason when required by law (especially in case of opposition to processing).
To find out more about your rights, you can also consult the website of the Commission Nationale de l'Informatique et des Libertés (CNIL), accessible at the following address: http://cnil.fr.
12. Use of data in case of change of control of the company
Personal data collected by Pierre de l'Est may be transferred to third parties in the context of a change of control of the company, an acquisition, a collective procedure or a sale of the company's assets.
13. Update of the personal data policy
Our policy may be modified at any time, notably to take into account the evolution of the technologies used, the release of new services and new regulations, in which case the new version will be published on our website and in store. We therefore advise you to consult this page regularly to stay informed of any changes.
