- How useful is this policy?
We attach great importance to the protection and confidentiality of your personal data which represents for us a guarantee of seriousness and trust.
The data confidentiality policy demonstrates precisely our desire to ensure compliance with the applicable data protection rules and, in particular, those of the General Data Protection Regulation ("GDPR").
In particular, the Privacy Policy aims to inform you about how and why we process your data in connection with the services we provide.
- Who is this policy aimed at?
The policy applies to you , regardless of your place of domicile, as long as you are at least 15 years old, whether you are a customer , a potential customer (“prospect”) , a candidate for a position at within Plaq Chocolat or even a visitor to the website www.plaqchocolat.com .
If you are under 15 years of age, you are not authorized to use our services without the prior and explicit consent of one of your parents which must be sent in writing to privacy@plaqchocolat.com . If you believe that we may have information about one of your children under the age of 15 without your consent, you can ask us to delete it at service privacy@plaqchocolat.com .
- Why do we process your data?
As part of the services offered, we are necessarily required to process your personal data for the following reasons and bases :
- So that you can benefit from our services (e.g.: create an online account, access our store, order our products, pay online, collect your orders, etc.) and to respond to your requests (e.g.: requests for information , complaints, etc.) on the basis of our general conditions of sale, our general conditions of use, and our legitimate interest in providing you with the best possible service.
- So that you can follow us on social networks and share your opinions based on the general conditions of use of the platform used (eg: Facebook, LinkedIn, etc.) and our legitimate interest in benefiting from a dedicated page on social networks.
- So that you can register and receive our newsletter which will inform you of all news regarding our services based on your consent.
- So that you can apply for a position at Plaq Chocolat based on the discussions we have with you during the recruitment process and our legitimate interest in recruiting and selecting candidates.
- To guarantee and strengthen the security and quality of our daily services (e.g. statistics, data security, etc.) on the basis of the legal obligations weighing on us, our general conditions of sale and our legitimate interest in ensuring the proper functioning of our services.
- To ensure your security within our premises by using video surveillance cameras on the basis of our legitimate interest.
- Finally, we can also install “ Cookies ” on your terminal. To obtain more information on the use of “Cookies”, we invite you to consult our “Cookies Policy”.
We undertake to only process your data for the reasons described above and we guarantee that none of your data will ever be sold to a partner or third party.
On the other hand, as soon as you voluntarily publish content on the pages that we publish on social networks, you acknowledge that you are entirely responsible for any personal information that you may transmit, whatever the nature and origin of the information provided. .
- What data do we process and for how long?
We have summarized the categories of personal data that we collect directly from you or via databases of potential customers , as well as their respective retention periods .
If you would like even more details on retention periods , you can contact us at: privacy@plaqchocolat.com .
- Personal or professional identification data and contact details (e.g.: first name, last name, personal or professional email address, personal or professional postal address, etc.) kept for the entire duration of the provision of the service to which are added the limitation periods legal which are generally 5 years.
- When there is confusion between the name of your structure and your name (e.g. self-employed, small business, etc.), economic and financial data (e.g. bank account number, verification code, etc.) ) kept for the duration necessary for the transaction and the management of invoicing and payments to which are added the legal limitation periods which are generally 5 years to 10 years.
- Data for marketing purposes and subscription to our newsletter (e.g. email address, etc.) kept for a maximum period of 3 years from the last contact we had with you.
- Data indicated in the CV and cover letter kept for the duration of the recruitment process then for 2 years from your application.
- Video surveillance images kept for a maximum period of 1 month.
- Connection data (e.g. logs, IP address, etc.) kept for a period of 1 year.
At the end of the retention periods summarized above, we delete all your personal data in order to guarantee your confidentiality for future years.
The deletion of your personal data is irreversible and we will no longer be able to communicate it to you after this period. At most, we may only keep anonymous data for statistical purposes .
Please also note that in the event of litigation, we are obliged to keep all of the data concerning you throughout the processing of the file even after the expiration of their retention periods described above.
- What rights do you have to control the use of your data?
The applicable data protection regulations grant you specific rights that you can exercise, at any time and free of charge , in order to control the use we make of your data.
- Right of access and copy of your personal data as long as this request is not in contradiction with business secrecy, confidentiality, or even the secrecy of correspondence.
- Right to rectify personal data that is erroneous, obsolete or incomplete.
- Right to object to the processing of your personal data carried out for commercial prospecting purposes.
- Right to request the erasure (“right to be forgotten”) of your personal data which is not essential to the proper functioning of our services.
- Right to limitation of your personal data which allows the use of your data to be photographed in the event of a dispute over the legitimacy of processing.
- Right to the portability of your data which allows you to recover part of your personal data in order to store them or transmit them easily from one information system to another.
- Right to give instructions on the fate of your data in the event of death either through you, or through a trusted third party or a beneficiary.
For a request to be taken into account , it is imperative that it is made directly by you to the address privacy@plaqchocolat.com . Any request that is not made in this manner cannot be processed .
Requests cannot come from anyone other than you. We may, only in this specific case, ask you to provide proof of identity in the event of doubt about the identity of the applicant.
We will respond to your request as soon as possible , within three months of receipt, in case the request is technically complex or if we receive numerous requests at the same time.
Please note that we can always refuse to respond to any excessive or unfounded request , particularly given its repetitive nature .
- Who can have access to your data?
We only communicate your data to people duly authorized to use it to implement our services. This may include our staff responsible for implementing the service, accounting, marketing or even the security of our premises.
We may also communicate your data to public authorities , external advisors and practitioners , as well as service providers to ensure the proper functioning of our services (e.g. security of information systems, etc.).
- How do we protect your data?
We implement all technical and organizational means required to guarantee the security of your data on a daily basis and, in particular, to combat any risk of destruction, loss, alteration, or unauthorized disclosure of your data.
For example, all our computers are equipped with the latest up-to-date antivirus and firewall and your data is encrypted in order to strengthen their daily protection.
- Can your data be transferred outside the European Union?
Unless strictly necessary and in exceptional circumstances, we never transfer your data outside the European Union and your data is always hosted on European soil . In addition, we do our utmost to only recruit service providers hosting your data within the European Union.
In the event that our service providers are nevertheless required to transfer personal data concerning you outside the European Union, we scrupulously ensure that they implement the appropriate guarantees to ensure the confidentiality and protection of your data. .
- Who can you contact for more information?
Our Data Protection Officer (“DPO”) is always available to explain in more detail how we process your data and to answer your questions on the subject at privacy@plaqchocolat.com .
- How can you contact the NCIL?
You can contact the French supervisory authority for data protection at any time (the “ National Commission for Information Technology and Liberties ” or “ NCIL ”) using the following contact details: CNIL Complaints Department, 3 place de Fontenoy – TSA 80751, 75334 Paris Cedex 07 or by telephone at 01.53.73.22.22.
- Can the policy be changed?
We may modify our privacy policy at any time to adapt it to new legal requirements as well as new processing operations that we may implement in the future. You will obviously be informed of any modification to this policy.
Published on 05/24/2022
Certified compliant by Dipeeo ®