PRIVACY POLICY
Applicable on: 31 August 2022
www.chocolateriedelopera.com
Chocolaterie de l'Opéra Site type: showcase
The purpose of this Privacy Policy
The purpose of the Privacy Policy hereof is to inform users to our site about the personal data we collect and about the following information, where applicable:
a. Personal data we collect
b. The use of data collected
c. Who accesses data collected
d. Site users' rights
e. Site cookie policy
The Privacy Policy hereof is effective in conjunction with the General Terms and Conditions of Use of our site.
Applicable Laws
Pursuant to the General Data Protection Regulation, (GDPR), the Privacy Policy hereof complies with the following regulations.
Personal data must be:
a. processed lawfully, fairly and in a transparent manner in a relation to the data subject ('lawfulness, fairness and transparency');
b. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’);
c. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
d. accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
e. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
f. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
Processing shall be lawful only if and to the extent that at least one of the following applies:
a. the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
b. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c. processing is necessary for compliance with a legal obligation to which the controller is subject;
d. processing is necessary in order to protect the vital interests of the data subject or of another natural person;
e. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Consent
Users agree that by using our site, they consent to:
a. the terms and conditions set out under the Privacy Policy hereof and
b. the collection, use and retention of the data specified under the Privacy Policy hereof.
Personal data we collect
Data collected automatically
Any time you visit our site, we may automatically collect and retain the following information:
a. IP address
b. Location
c. Hardware and software details
d. Links a user clicks whilst using the site
e. Content a user consults on our site
Data collected non-automatically
We may also collect the following data any time you perform specific actions on our site:
a. First and last name
b. Email
c. Telephone number
d. Company
e. Country
f. Profession
This data may be collected whenever a personal account is created.
Please note that we only collect data that helps us reach our objective set out under the Privacy Policy hereof. We do not collect any other data without informing you beforehand.
What we do with personal data
The personal data collected on our site is used only for the purposes specified under the Privacy Policy hereof or on relevant pages of our site. We do not use your data beyond what we disclose.
The data we collect automatically is used for the following purposes:
a. Statistics
The data we collect any time a user performs specific actions may be used for the following purposes:
a. Communication
Who do we share personal data with Employees
We may disclose user data that is reasonably required by any member of our organization to achieve the objectives set out under the Privacy Policy hereof.
Other disclosure
We will not sell or share your data with third parties, except in the following cases:
a. if required to do so by law
b. if required to do so for legal proceedings
c. to prove or protect our legal rights
d. to purchasers or potential purchasers of this Company in the event we choose to sell the Company
In the event that you click hyperlinks on our site that redirect to another site, please note that we cannot be held liable and have no control over their privacy policies or practices.
Personal data retention period
We only retain user personal data for the time required to achieve the purpose said data is collected for.
Personal data protection
All data stored in our system is secure and accessible to our employees only. Our employees are bound by strict non-disclosure agreements and any infringement of an agreement would result in employee dismissal.
While we take all reasonable precautions to ensure our user data is secure and that users are protected, there is always a risk of harm. Internet as a whole can, occasionally, be insecure and, as such, we are unable to ensure the security of user data beyond what is reasonably practical.
Children
The GDPR stipulates that individuals below the age of 16 are considered as children with regard to data collection purposes. Children must have the consent of a legal representative for their data to be collected, processed and used.
Your rights as a user
Pursuant to the GDPR, users have the following rights as data subjects:
a. right to access
b. right to rectify
c. right to be forgotten/right to erasure
d. right to restrict processing
e. right to data portability
f. right to object
You will find more detailed information on these rights under Chapter 3 (Art. 12-23) of the GDPR.
How to modify, delete or object to data collected
If you would like your information to be deleted or modified in any way, please contact our Data Protection Officer (DPO) here:
Caroline AUTRAN
846 Chemin du Barret - 13160 Châteaurenard, France info@chocolateriedelopera.com
+ 33 (0)4 90 87 00 10
Cookie policy
A cookie is a small file, stored on a user's hard drive by a website. It is used to collect data about user browsing habits.
We use the following types of cookies on our site:
a. Functional cookies
We use these to remember your site preferences and all choices you make on our site so they will be saved for you future visits.
b. Analytics cookies
This helps us improve our site design and the way it works by collecting data about the content you access and engage with while using our site.
c. Targeting cookies
These cookies collect data about how you use the site and what interests you. This helps us make the information you see on our site more promotional and targeted for you.
You may choose to be informed each time a cookie is transmitted. You may also choose to disable cookies totally via your web browser settings, but this may affect the quality of your user experience.
Modifications
The Privacy Policy hereof may be modified at any time to remain in compliance with the law and to take any changes in our data collection process into account. We advise our users to check our Privacy Policy periodically to ensure they are informed of all updates. If necessary, we may inform users by email of changes made to the Privacy Policy hereof.
Contact
If you have any queries or require further information, please feel free to get in touch with us via:
+33 (0)4 90 87 00 10
info@chocolateriedelopera.com
846 Chemin du Barret - 13160 Châteaurenard, France