Personal data protection policy for the Panier des Chefs website
Personal data – Website management
Activities relating to the website www.panierdeschefs.eu involve the processing of personal data.
What does the personal data use policy cover?
This policy informs you of the characteristics of these treatments and your rights over your personal data.
This privacy policy is written in accordance with Law No. 78-17 of January 6, 1978 (known as the "Data Protection Act" or "LIL") and the General Data Protection Regulation ("GDPR") No. 2016/679.
Who is responsible for this policy?
The data controller is the company MIR GOURMET SAS, represented by its legal representative MIR PROMOTION SARL.
The contact details of the data controller are as follows: 142 rue de l'Aven 34980 St Gély du Fesc.
The manager can be reached at the following number: 04 99 58 10 50.
The contact email address is: contact@panierdeschefs.com
Who is this policy for?
This policy is for users of the site: Internet users who browse the site.
It also concerns:
-customers of our online store
-people to whom we have entrusted technical services (hosting, maintenance, site security provider)
-people who have access to the site's back office for its administration
-people who write or are cited in content on the site
-people who create an account on the site
-people who contact us using the site's contact form
-people we reference on the site as partners
Purposes (what is the data collected used for)
The purpose of the processing is to manage the website.
This processing allows:
-management of customer orders on the online store
-technical management of the site (maintenance, hosting, site security)
-administration of the website
-management of the site's editorial content
-management of accounts in line
-management of requests for information via the contact form
-referencing of partner persons on the site
-targeted marketing via the Kiliba tool.
Legal basis for processing: what gives us the right to process data
The legal bases for processing are as follows:
-for the management of orders on the online store, the legal basis is the order placed by its customers (the contract)
-for the technical management of the site (maintenance, hosting, site security), the legal basis is legitimate interest
-for the administration of the website, the legal basis is legitimate interest
-for the management of the editorial content of the site, the legal basis is the consent of the persons whose information is published
-for the management of online accounts, the legal basis is legitimate interest or consent
-for the management of requests for information via the contact form, the legal basis is legitimate interest (allowing online communication) or the execution of pre-contractual measures (creation of quotes at the request of persons)
-for the referencing of partner persons on the site, the legal basis is the consent of these persons
-for targeted marketing via the Kiliba tool, the legal basis is the consent of the persons
Data retention period
The data being processed are retained for a period not exceeding that necessary for the purposes for which they are recorded (principle of minimizing processing).
The maximum retention periods are as follows:
-for the management of orders on the online store: 5 years from the end of the contract
-for the technical management of the site (maintenance, hosting, site security): 12 months for IP addresses and connection logs
-for the administration of the website: as long as the persons concerned administer the site
-for the management of the editorial content of the site: 5 years from their publication
-for the management of online accounts: as long as the account is active then for 5 years
-for the management of requests for information via the contact form: 3 years from the request
- for the referencing of partner persons on the site: 5 years from publication
- for targeted marketing via the Kiliba tool: 3 years from consent
Data processed
The data controller processes the following categories of data:
-Identification data (name, first name, address, email, telephone, date and place of birth)
-Products purchased
-Connection data (IP addresses, logs, terminal identifiers, login identifiers, time stamp information, etc.)
-Banking data
Mandatory or optional nature of data collection
The data collected is mandatory to achieve the processing purposes.
For online orders, the data collected is required for the conclusion and execution of the order (contract).
Data sources
The data is transmitted directly by the person concerned.
The data controller specifies that as part of the acquisition of the Panier des Chefs business in December 2019, the personal data of customers was transmitted indirectly through the seller.
The desrecipients of the data
Depending on their respective needs, the following are recipients of all or part of the data:
-people in charge of technical services (hosting at 772424.com, the ARPA3 agency for the maintenance and security of the site)
-online payment service providers (payzen, paypal)
-the Kiliba marketing tool
-carriers (for online orders)
What security measures are in place?
The data controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
The data controller takes measures to ensure that any natural person acting under the authority of the data controller or the subcontractor, who has access to personal data, personal data, does not process them, except on instructions from the data controller, unless required to do so.
The existence or not of a transfer of data to a country outside the European Union and associated guarantees
The data controller does not transfer any personal data outside the European Union.
Automated decision-making
The processing provides for the decision-making entirely automated.
The data controller undertakes to comply with the conditions of Article 22 of the GDPR.
Fate of personal data after death - Right of access, rectification, deletion and portability of data
The person concerned by a processing operation may define guidelines relating to the retention, deletion and communication of their personal data after their death. These guidelines may be general or specific.
The person concerned by a processing operation also benefits from a right of access, opposition, rectification, deletion and, under certain conditions, portability of their personal data. The data subject has the right to withdraw consent at any time if consent constitutes the legal basis for the processing.
The request must indicate the name and surname, email or postal address of the data subject, and be signed and accompanied by valid proof of identity.
She can exercise these rights by contacting:
MIR GOURMET SAS: contact@panierdeschefs.com/04 99 58 10 50
Complaint
The person concerned by a processing operation has the right to lodge a complaint with the supervisory authority (CNIL): https://www.cnil.fr/fr/webform/adresse-une-plainte