Privacy policy
In application of Regulation (EU) n°2016/679 of April 27, 2016 known as “GDPR”, which entered into force on May 25, 2018 and the Data Protection Act, amended several times, the company Paul Bruelle Design, a simplified joint stock company , with share capital of €20,000.00, whose head office is located at 2-6 Rue du Capitaine de Lassus, 88100 Saint-Dié-Des-Vosges, registered in the Épinal Trade and Companies Register under number 843 735 432 (hereinafter “The Data Controller” or
“We”), acting as data controller, ensures the protection of personal data collected from natural persons, in their capacity (i) as Users within the meaning of the General Conditions of Use and/or (ii) of Customers within the meaning of the General Conditions of Sale (hereinafter “You”). The said General Conditions of Use and the General Conditions of Sale are accessible on the website www.paulbruelle.fr (hereinafter the “Site”).
ARTICLE 1. PURPOSE OF THE POLICY
We are keen to ensure respect for your privacy and the protection of your personal data (hereinafter the “Data”).
This confidentiality and personal data protection policy (hereinafter the “Confidentiality Policy”) informs you about the use of your Data in the context of the use of the Site and/or your Orders.
This Confidentiality Policy allows you to know the origin and use of the information collected, as well as the rights and options available to you under the applicable legislation regarding the protection of personal data.
The Privacy Policy is therefore important to You, and We invite You to read it carefully.
To find out how we use cookies on our Site, we invite you to consult the Cookies Policy accessible directly on our Site.
All terms written with a capital letter as the first letter in this Privacy Policy have the meaning given to them in the General Conditions of Use and/or in the General Conditions of Sale.
ARTICLE 2. MODIFICATION OF THE CONFIDENTIALITY POLICY
We may change the Privacy Policy depending on the legal and regulatory context, as well as to keep you informed of changes to our practices regarding the processing of personal data and cookies.
We therefore advise you to always read the most recent version of the Privacy Policy whenever you interact with Us by consulting this section or by clicking on the “Confidentiality Policy” link in the bottom banner of our website. Site.
In particular, when placing any Order, we invite you to read this Confidentiality Policy in its most recent version.
ARTICLE 3. OUR ROLE AND RESPONSIBILITY
Unless otherwise indicated in separate information notes/notices relating to certain specific Data processing operations, the Data processing operations described in this Privacy Policy are implemented by our company, named above, publishing the Site and providing the Creations, objects of the Orders, thus having the status of “Processing Manager” within the meaning of article 4 of the GDPR and the applicable national legislation on the protection of personal data.
ARTICLE 4. CONTACT
If you have any questions and/or difficulties regarding the Privacy Policy and our practices regarding the protection of personal data, do not hesitate to contact us:
by post: Paul Bruelle Design, 2-6 Rue du Capitaine de Lassus, 88100 Saint-Dié-Des-Vosges
by email to the following address: contact@paulbruelle.fr
In the event of a dispute concerning the way in which we collect and process your Data, you can submit a complaint to the CNIL via the following link: https://www.cnil.fr/fr/plaintes/ or, via postal mail to the following address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07 – www.cnil.fr or, if you reside in another country of the European Union, to the supervisory authority of your place of residence usual.
ARTICLE 5. CATEGORIES OF DATA WE PROCESS AND THEIR PURPOSE
This section aims to provide you with more information about the Data we collect, the purposes for which we process this Data and the legal basis for each specific processing. We only process Data we collect about you if there is a reason to do so and we have a relevant legal basis.
It is specified that for all purposes based on our legitimate interest, in this case we ensure to take into account any potential impact that this processing may have on you. If we believe that your interest or fundamental rights and freedoms override our legitimate interest, then we will not use your Data on this legal basis and may ask for your specific consent.
Account Creation: We collect and process Data to allow you to create and access your Account on the Site. In order to manage your Account from its creation until its closure, you must provide us with certain information about yourself (email address, password and password confirmation)
The legal basis for this processing is contractual. We need this Data in order to create and maintain your Account, to apply the General Conditions of Use as well as any other applicable contractual conditions (in particular our General Conditions of Sale)
Order: We collect and process your Data in order to allow you to order Creations (on Quote or directly online) and to use the various services of our Site (if applicable)
Payment of the Online Order: As part of payment by credit card on our Site, We process the following Data: Card number, name of the card holder, expiration date, cryptogram.
Order Delivery: We process your contact and identification information, namely: name, first name, postal address, e-mail(s), telephone(s).
Management of customer transactions / Billing: We process the following Data: Transaction number, purchase details, date and amount of the Order and invoice, delivery conditions and address
Complaints / Customer Relations: We process the following Data: purchase history, returns, correspondence with the Customer and customer service.
The legal basis for these treatments is contractual. We need this Data in order to apply the General Conditions of Sale. The legal basis for processing relating to the Management of customer transactions / Billing is a legal obligation. We need this Data in order to comply with our accounting and tax obligations.
Customer reviews / Studies: we process the content of your reviews (as well as your possible pseudonym) provided spontaneously by you in connection with an Order as well as those provided following a request from us in the context of a study or a satisfaction survey on the quality of our Creations.
The legal basis for this processing is our legitimate interests.
Commercial prospecting actions towards Customers: We process Data such as your email address in order to send you commercial solicitations.
The legal basis is our legitimate interest for requests relating to creations similar to those from which you already benefit.
The legal basis is your consent for all other requests.
Commercial prospecting actions towards prospects: We process Data such as your email address in order to send you commercial requests.
The legal basis is your consent for all requests.
Management of complaints and exercise of the rights provided for in this Policy: We collect and process Data such as your contact details and the content of your message (to the extent that it could contain Data concerning you or a third party) , your identity document (for the exercise of the rights provided for in this Policy) when managing and monitoring questions and/or requests that you may submit to us.
The legal basis for these treatments our legitimate interest in responding to your requests and keeping track of them
Management of the Site, analysis of the use of the Site and the purposes provided for in our “Cookies Policy”: As such, we process and collect Data relating to your connection terminal and your browser, in particular your IP address (from which information about your country/location state can be inferred), your browser, the type of device used and navigation information
More information in our Cookies Policy accessible directly on our Site
Certain Data which is essential for us to fulfill the purposes described above may be indicated on the different pages of our Site, generally by an asterisk. If you do not complete these required fields, We may not be able to respond (or partially respond) to your requests. Other information is optional and allows us to know you better and improve our communications and services to you.
Apart from any interaction with the Site, certain Data is essential to fulfill the purposes described above and we reserve the right not to respond to your requests if they are not provided to us.
During events that we organize, we may process additional Data under the conditions and for uses that are specially notified to you on this occasion.
ARTICLE 6. CONSERVATION OF YOUR DATA
Purposes Shelf life
Account Creation Until your Account is closed. However, where required by applicable law, if we are required to retain some of your data beyond the date of closure of your Account, then the applicable maximum retention period will apply in accordance with the applicable legal limitation periods (art. L.34-1 of the Postal and Electronic Communications Code)
Orders Payment of the Order online Payment by credit card: Until receipt of the Creation plus the withdrawal period or any other return period (contractual guarantee, if applicable)
Order Delivery Duration of the contractual relationship
Management of customer transactions / Billing 15 months from the date of the activity concerned, increased by any time periods necessary to comply with our legal retention obligations (accounting obligations: 10 years; tax obligations: 6 years)
Complaints / Customer Relations 5 years from the last contact initiated by you. Any banking data (bank card data for online orders) are kept for 13 months, following the debit date or 15 months in the case of cards deferred debit payment.
Customer Reviews / Studies
Spontaneous customer reviews Duration during which the Creation subject to a review is still available for sale or until the right of opposition is exercised
Studies / Satisfaction surveys Duration necessary to achieve the objective of the study or satisfaction survey or until the right of opposition is exercised
Commercial prospecting actions towards Customers For requests relating to creations similar to those from which you already benefit 3 years from the last contact initiated by us
For requests relating to creations not similar to those from which you already benefit Until consent is withdrawn or 3 years from the last contact initiated by us.
Commercial prospecting actions towards prospects Until consent is withdrawn or 3 years from the last contact initiated by us.
Management of complaints and exercise of the rights provided for in this Policy Management of complaints 3 years from the last contact initiated by you.
Exercise of the rights provided for in this Policy 1 year from the exercise of the rights concerned
Management of the Site, analysis of use of the Site and purposes provided for in the article “Cookies Policy” Analysis of use of the Site See “Cookies Policy”
Cookies See “Cookies Policy”
ARTICLE 7. RECIPIENT OF YOUR DATA
Your Data is only shared with third party partners when necessary for the purposes set out in this Privacy Policy.
We use trusted third-party partners and provide them with only the information they need and require them not to use this information for other purposes. We
we do everything we can to ensure that all of these third-party partners preserve the confidentiality and security of your Data.
The purpose of sharing your Data with third-party partners is:
Management of the Site and related services Data will not be transferred or made accessible to any third party subject to:
From our subcontractors and service providers, namely the Site hosting and maintenance service provider, logistics and transport service providers, manufacturers, emailing service providers, CRM tools;
and any restructuring of the legal organization, including total or partial transfer of assets, merger, absorption, acquisition, split and more generally any reorganization operation in order to ensure continuity of services. Whether or not they are directly integrated to the Site, these third party providers and partners collect and process your Data independently in accordance with their own relevant privacy policy and under their sole responsibility.
Management of Complaints / Exercise of your rights in connection with this PolicyYour Data is accessible to authorized persons acting on our behalf with whom you are in contact, as well as to our teams responsible for customer relations.
Personalized customer management / ProspectingYour personal data is accessible to authorized persons intervening on our behalf for the management of the Site with which you are in contact, as well as to our teams responsible for customer relations. You will thus be able to receive through them information on our offers, training, news and events.
Management of banking transactions The banking data processed, for the purposes mentioned above, must be shared with the payment service providers present on the Site allowing the implementation of the transaction.
Protection of defense of our rights We may be required to communicate your Data to third parties when such communication is required by law, a regulatory provision or a judicial decision, or if this communication is necessary to ensure the protection and defense of our rights. rights (for example to our agents and external advisors in the event of debt recovery).
Outbound links pointing to third-party websites
The Site may contain outgoing links to third party websites. We have no control over the content, privacy policies or actions of these websites.
Use of information that you may provide to third parties on other sites or that such third parties may collect on other websites is not governed by this Privacy Policy.
You should carefully review the privacy and personal data protection policies of third-party websites and contact the publishers of these sites if you have any questions about how they use information about you.
We cannot be held responsible for any third party that does not use information about you in accordance with that third party’s privacy policy or in accordance with any contractual or legal obligation to which that third party is subject.
ARTICLE 8. TRANSFER OF YOUR DATA OUTSIDE THE EUROPEAN UNION
Your personal data may be transferred outside the European Union. In this case, we take the necessary measures with our service providers / partners to guarantee an adequate level of data protection, in accordance with the regulations in force (Chapter V of the GDPR).
As such, we ensure that your data benefits from a degree of protection similar to that applicable within the meaning of the European Union, by implementing at least one of the following two protection measures:
Your Data would be transferred to countries which have been considered as ensuring an adequate level of protection of personal data by the European Commission;
We would use the Standard Contractual Clauses approved by the European Commission
If the service provider and/or partner no longer or no longer meets these conditions, We undertake not to transfer your Data to them.
ARTICLE 9. COOKIE POLICY
Our Site uses cookies and/or other tracking technologies under the conditions accessible here.
ARTICLE 10. SECURITY
We have implemented appropriate technical, organizational, software and physical measures to guarantee the confidentiality and security of your Data against any loss, destruction, alteration, unauthorized access or disclosure. Notably :
Our IT systems are subject to state-of-the-art physical and software protection. Physical and electronic backup procedures for data collected on the Site are implemented, in accordance with French legislation and European regulations in force relating to the protection of personal data;
Our staff who, due to their functions, would have access to your Data are subject to confidentiality obligations;
Our service providers and subcontractors are required by written commitments to implement sufficient security measures to ensure the protection of your Data in compliance with applicable legislation;
We remind you that the internet is not a completely secure environment and as such we cannot guarantee the security of the transmission or storage of information.
ARTICLE 11. YOUR RIGHTS
In application of the laws and regulations applicable to personal data, you have the following rights:
Access and rectification You have the right to access your Data, as well as the right to request the rectification or deletion of Data that proves to be inaccurate.
Deletion You can also request the erasure of Data concerning you as soon as their retention is no longer necessary.
OppositionYou can also object to the processing of your Data or request its limitation, except when the processing is necessary for the performance of the services.
Withdrawal of consentWhen the processing of your Data is based on your consent (and it constitutes the only legal basis for the processing), you can withdraw this consent at any time.
LimitationYou have the right to obtain limitation of the processing of your Data in certain cases defined in Article 18 of the GDPR.
PortabilityWhere permitted by law, you have the right to ask us to return your Data to you (in a structured, machine-readable form) or where technically possible, to transfer it to a third party.
“Postmortem” instructions
You can also inform us of your instructions regarding the conservation, erasure and communication of your personal data after your death, by sending us on any durable medium the name of one or more people authorized to do so. TO DO. You can change these guidelines at any time.
ARTICLE 12. EXERCISE OF YOUR RIGHTS AND COMPLAINTS
The rights provided for in Article 11 of this Confidentiality Policy may be exercised directly with us in accordance with the terms and conditions referred to in Article 4 of this Confidentiality Policy.
To enable us to respond to you quickly, it is recommended that you indicate your first and last name and email address.
Certain requests to exercise rights (right of access) must be accompanied by a photocopy of an identity document bearing the signature of the person concerned in order to verify their identity and specify the address to which the request must be sent. answer. A response will then be sent to him within one
(1) month following receipt of the request.
It is specified that the data relating to identity documents necessary to exercise the right of access, modification or rectification will be kept for a period of one (1) year in accordance with article 9 of the procedural code. criminal.
However, we reserve the right not to respond to requests that are manifestly unfounded or excessive.