Privacy Policy
ARTICLE 1: PREAMBLE
The protection of personal data is one of our major concerns. This privacy policy is part of a legal context shaped by the European General Data Protection Regulation (Regulation EU 2016/679 of April 27, 2016), applicable since May 25, 2018, and the amended French Data Protection Act No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms.
Thus, the purpose of this data protection policy is to present to you:
- The Personal Data Controller
- How your data is collected and processed. Personal data is any information that allows the identification of a natural person.
- Your rights regarding the use of your personal data
- The recipients to whom your data is transmitted
- The website’s policy regarding cookie management
This privacy policy is supplementary to the legal notice available on the website.
ARTICLE 2: DEFINITIONS
Personal Data means any information relating to an identified or identifiable person, that is to say, allowing them to be identified directly (e.g., first and last name) or indirectly (e.g., cookies).
Processing of personal data is any operation or set of operations (automated or not) performed on personal data or sets of personal data, such as: collection, recording, organization, storage, transmission of data…
The Data Controller determines the purposes (the objectives of the processing) and the means of the processing.
The Data Processor processes personal data on behalf of the data controller and under their instructions.
ARTICLE 3: GENERAL PRINCIPLES
In accordance with the provisions of Article 5 of the General Data Protection Regulation (GDPR), the collection and processing of your personal data comply with the following principles:
- Lawfulness, fairness, and transparency: the collection and processing of personal data may only be based on a previously defined legal basis (performance of a contract, legal obligation, consent, legitimate interest, protection of vital interests)
- Purpose limitation: the collection and processing of personal data are carried out to meet one or more defined objectives
- Data minimisation: only the data strictly necessary for the proper fulfillment of the intended objectives are collected
- Storage limitation: the data controller is required to define retention periods for the personal data processed
- Integrity and confidentiality of collected and processed data: the data controller undertakes to guarantee the integrity and confidentiality of the collected data.
ARTICLE 4: DATA CONTROLLER AND DATA PROCESSOR
As the data controller, SAS L’AIGUILLETTE is committed to complying with the obligations arising from the GDPR and the amended French Data Protection Act regarding the collection and processing of personal data. In accordance with Article 32 of the GDPR, we implement all necessary technical and organizational measures to ensure the protection of your personal data.
When SAS L’AIGUILLETTE acts as a data processor, it undertakes to process personal data in accordance with the requirements of Article 28 of the GDPR.
ARTICLE 5: PERSONAL DATA COLLECTED AND PROCESSED: WHICH DATA?
Accordingly, within the scope of its activities, SAS L’AIGUILLETTE may collect and process the following information:
Identity
Last name and first name
Online identifiers
IP address, connection logs, cookies, trackers
Personal Life Details
Personal phone number, personal email address
We do not collect any sensitive data, such as religion, trade union membership, racial or ethnic origin, criminal convictions, or health-related data.
ARTICLE 6: PERSONAL DATA COLLECTED AND PROCESSED: FOR WHAT PURPOSES?
We’d like to explain!
In all of these situations, SAS L’AIGUILLETTE acts as a ‘Data Controller’ within the meaning of the GDPR.
BROWSING THE WEBSITE
Identity, Personal life, and Internet usage
| We use this data in order to : – Contact you when you fill out the contact form – Send you our quotes (if you have requested them) – Perform audience analysis or produce statistics (subject to consent) | Consent | Data collected through the form is stored for 3 years from the date of collection or the last contact from the prospect. Website browsing data is kept for a maximum period of 13 months. |
| – Provide you with personalized services – Monitor and improve our website; – Secure our website and ensure our and your protection against fraud. | Legitimate interest |
PROSPECT MANAGEMENT
Identity, Personal life, and Internet usage
| We use this data in order to: – Update your contact information – Keep our prospect records up to date – Send you marketing communications to inform you of our future offers and events (mailings, invitations to workshops, etc.) – Contact you to offer services tailored to your needs – Improve our sales prospecting management | Legitimate interest | The collected data is stored for 3 years from the date of collection or from the last contact with you. |
ARTICLE 7: PERSONAL DATA: WHO HAS ACCESS TO YOUR PERSONAL DATA?
SAS L’AIGUILLETTE will only share your personal data with authorized staff and authorized third parties.
SAS L’AIGUILLETTE may, where applicable, transfer your personal data to processors for various services, such as Infomaniak, located in Switzerland, for the hosting of its website. We undertake to verify and ensure their compliance with the GDPR and the amended French Data Protection Act (Loi Informatique et Libertés).
SAS L’AIGUILLETTE does not, and will not, sell, assign, or disclose your personal data to any unauthorized third parties.
SAS L’AIGUILLETTE does not rely on any automated decision-making based on your personal data. No profiling is conducted during processing, and the data we collect will never be used without human intervention.
ARTICLE 8: YOUR RIGHTS
8.1 Your rights
In accordance with current regulations, you have the following rights regarding your personal data:
Right of access
You have the right to obtain confirmation as to whether or not your personal data is being processed and to receive a copy of such data.
Right to rectification
You have the right to request the correction of inaccurate or incomplete personal data.
Right to object
You have the right to object, at any time, to the processing of your data for reasons related to your particular situation.
Right to restriction of processing
You have the right to request that we temporarily suspend the use of your data.
Right to erasure (right to be forgotten)
You have the right to request the deletion of your personal data, subject to legal retention requirements.
8.2 Right to lodge a complaint with the CNIL (the French Data Protection Authority)
You may, at any time, lodge a complaint with the competent authority, namely the Commission Nationale de l’Informatique et des Libertés (CNIL), by following this link: https://www.cnil.fr/en/complaints.
ARTICLE 9 : COOKIES
As with most websites, our website uses cookies, which can be classified into three categories:
Marketing or Third-Party Cookies :
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.
Analytical or Performance Cookies
These cookies allow us to track the number of visits and traffic sources so we can measure and improve the performance of our site. They help us understand which pages are the most and least popular and see how visitors move around the site.
Strictly Necessary Cookies
These cookies are essential for the website to function properly. They enable basic features such as page navigation and access to secure areas of the site. The website cannot function correctly without these cookies.
To minimize tracking, we recommend selecting ‘refuse’ by default in the cookie settings banner provided on our site.
You will also find in our cookie policy the procedure to follow to accept, customize, or refuse cookies by expressing your choice via the banner that appears at the bottom of your screen.
ARTICLE 10 : PRIVACY POLICY UPDATE
This privacy policy may be updated from time to time.
Last updated on February 6, 2023.