DATA PROTECTION DECLARATION

LA CORDONERIE DINANNAISE attaches particular importance to the protection of your personal data. We want you to be informed about what data we collect about you, and how we use it. From a technical and organizational standpoint, we ensure that data protection rules are observed, both by us and by the external service providers who work for us.

LA CORDONNERIE DINANNAISE entities, depending on the purpose of the personal data processed, may act either as a data controller or as a data processor.

Limitation of liability

All current and future components of the website

 https://www.cdinanaise.com/  are protected by current French intellectual property and copyright law. Reproduction, adaptation, distribution, and any form of use exceeding the limitations of copyright require the written consent of the author or creator.
Downloads and copies of these pages are permitted only for private, non-commercial use. Any content on the website that does not originate from cdinanaise but from third parties is presented with respect for property rights.

Applicable law and competent courts

Without prejudice to your right to take legal action, for any questions, you are invited first and without delay to contact us via the communication means mentioned above. In order for these requests to be processed as quickly as possible, please provide the following information:
•    Name, first name.
•    Full postal address.
•    Telephone and email contact details.
•    Contract or offer number.
The competent courts fall under the jurisdiction of the Court of Appeal of Saint Malo.

In what capacity do we act?

As part of their activities, cdinanaise entities directly process personal data concerning their employees and customers. They are therefore considered data controllers under European data protection legislation. This processing is necessary for the performance of contracts (e.g., General Terms and Conditions of Sale) or to comply with a legal obligation (civil law, tax law, accounting law).
Furthermore, due to its own activities or its capacity as a service provider (e.g., Online Store) to customers, one or other entity of cdinanaise may be considered, in accordance with regulations and depending on the purpose of processing, as a subcontractor of another entity of the group.

 

For advertising and market research purposes, as well as to adapt our offerings to needs, we create and use anonymous usage profiles. In addition, we use recorded postal and email addresses to send you information about new products and products similar to those you have ordered. You can object to this free of charge at any time by sending an email to rouxelin.tarboun@gmail.com or by clicking on the link at the bottom of each newsletter.

We point out that, as part of risk management and to be able to make an informed decision regarding the creation, execution, or termination of the contract, we collect or use the probabilities of occurrence of your future behavior and also use addresses to determine these probabilities of occurrence.

We can provide you with information about your personal data stored in our databases free of charge. You can request the rectification, blocking, and deletion of this data at any time and free of charge.

We do not transmit your data to third parties without your express consent, especially for advertising purposes. If required by law or a court decision, we would transmit your data to the authorities authorized to receive them.

Your data is stored on particularly secure servers with technical and organizational measures against loss, destruction, access, modification, or disclosure by any unauthorized person. Only a few authorized individuals can access your data.
Your personal data is encrypted before being transmitted over the internet. To transmit the data, we use SSL (secure socket layer) encryption.

What data do we collect?

A.    General
To provide the services offered, cdinanaise needs to collect and process certain information about you. The data retrieved depends on the context of your interactions with the group's entities, the choices you make, and the services you subscribe to.

B.    Categories of personal data
The data we collect and process may include the following categories, listed non-exhaustively:
•    Identification data : we retrieve data concerning you such as name, first name and other similar data, date of birth, gender (title), country, nationality and language;
•    Bank details (for online sales): we retrieve your bank details such as bank account number and financial institution name, BIC and IBAN account, for accounting operations (invoicing, credit note) or contributions or participation in extra-contractual fees;
According to the data categories mentioned above, cdinanaise guarantees that no special data is collected or processed, in accordance with articles 9 and 10 of the GDPR.

Children and young people under 18 cannot transmit personal data to us without the consent of their parents or legal guardians; the use of our online store is prohibited for children and young people under 18. We do not request personal data from children, we do not collect it, and we do not transmit it to third parties.

How do we collect data?
This clause relates to our privacy policy.
When you log in, information about you is automatically retrieved. For more details, please consult our Cookie Declaration below.
The personal data we collect when you submit the contact form, register online for the newsletter, or participate in an event: we only retrieve and process personal data strictly within the necessary scope of the professional relationship.

 

When you connect, data is recorded on our servers, including IP address, date, time, and pages visited. It is possible that this data may identify certain users.
We do not use IP addresses to identify users. However, we may use collected IP addresses for statistical (anonymous) analysis purposes if necessary. In addition, we use information related to your IP address and other data to prevent fraudulent use and to select the version of our website corresponding to the relevant country.

Payment for orders depends on the chosen payment method, possibly through a service provider. In the case of payment by credit card or Paypal, it is necessary to transmit your personal data to the service provider or through them, so that your order can be processed.

You have given us your consent for the processing of your personal data within the framework of our contractual and/or commercial relations.
We inform you that you can withdraw this consent at any time in the future.

Authorization to send promotional emails
I would like to regularly receive advantageous offers by email. My email address will not be communicated to other companies. I can refuse to receive further promotional emails at any time in the future.

Cdinanaise thanks you for your trust and commits to protecting the personal data you entrust to it. We guarantee the implementation of appropriate organizational measures as well as physical and technical security measures.

Confidentiality
Taking into account appropriate security measures, the processing of personal data constitutes a legitimate interest for the data controller. Therefore, cdinanaise guarantees that the processing of your personal data will be carried out in complete confidentiality, integrity, and with respect for fundamental rights and freedoms.

 

Integrity
At cdinanaise, the security of your personal data is our priority. You can browse our website and our offers completely anonymously. However, if you communicate your data to us (for example by subscribing to newsletters), we record your data with your consent.
•    All data provided during the ordering process is encrypted before leaving your PC and being transmitted over the internet. For this, we use the secure "Secure Socket Layer" (SSL) encryption mode with a 128-bit encryption key, to prevent any other person from reading your encrypted data.
•    The cdinanaise online store works with various displays. It is therefore possible that the SSL symbol does not appear at the bottom of the browser window or that your browser does not indicate, in a dialog box, the existence of a connection with an SSL server. However, you can see the encrypted transmission of the data you have provided (https mode) by right-clicking in Checkout and selecting "Properties" and Certificates.

Resilience
We store all personal data on particularly secure servers. Technical and organizational measures are provided against the loss, destruction, access, modification, or disclosure of your data by any unauthorized person. Only a few authorized individuals can access your data.

What are your rights as a data subject?  
Cdinanaise ensures that you can exercise your rights at any time and will respond to you in the most appropriate way.
Your rights are as follows:
•    Right to information and access to personal data
•    Right to rectification
•    Right to erasure ("right to be forgotten")
•    Right to restriction of processing
•    Right to data portability
•    Right to object
•    Right to lodge a complaint with a supervisory authority

To assert your rights, please send an email to the following address: rouxelin.tarboun@gmail.com

Please note that in order to respond to your request in the most adequate manner, we may ask you for a proof of identity, which will be destroyed as soon as the processing of your request is completed.

The deadlines within which we are required to respond to your request are listed below:

 

Right to information (direct collection) art.13: when data is collected directly (from the data subject)

Right to information (indirect collection) art.14: one month

Right of access art.15: within a reasonable time

Right to rectification art.16: as soon as possible

Right to erasure / right to be forgotten art.17: as soon as possible

Right to restriction of processing art.18: within a reasonable time

Right to data portability art.20: within a reasonable time

Right to object art.21: upon first communication

Rights related to automated decision-making and profiling art.22: when data is collected

What are the purposes of processing?
For processing to be lawful under the GDPR, a legal basis must be identified and established before processing personal data.

We use your personal data for the following purposes in compliance with the GDPR:
•    Service provision;
o    The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
o    Online payment: payment for orders depends on the chosen payment method, potentially through a service provider. In the case of payment by credit card or Paypal, it is necessary to transmit your personal data to the service provider or through them, so that your order can be processed.
•    Sending communications related to marketing activities;
o    Contact form and online newsletter registration: the data subject has consented to the processing of their personal data for one or more specific purposes
o    Sending targeted messages via direct mail, such as promotional offers or participation in events organized by cdinanaise or in partnership with other data controllers, including consent collection: processing is necessary for the purposes of the legitimate interests pursued by the data controller.
o    We reserve the right to contact you by email, phone, fax, video conference, or other communication techniques to notify you of events, new features, or any other information that may be related to your interaction with Mephisto SAS. In cases expressly provided for by current laws and regulations, your consent will be requested beforehand before sending any communication for prospecting purposes, so that you can object or agree to receive such communication: when personal data is processed for prospecting purposes, the data subject has the right to object at any time to the processing of personal data concerning them, including profiling to the extent that it is related to prospecting.
•    Management and administration of infrastructure and information system development operations: the data controller implements appropriate technical and organizational measures to ensure that, by default, only personal data necessary for each specific purpose of processing is processed.
•    Compliance with internal policies and procedures: processing is necessary for the purposes of the legitimate interests pursued by the data controller.
•    Compliance with any applicable law and regulation, code of conduct, or guideline from a supervisory authority or with a request from a public authority

Cdinanaise does not sell, distribute, or provide information to third parties without your prior consent.

In accordance with Article 33 of the GDPR, cdinanaise entities, as data controllers, are required to notify any personal data breach to the competent supervisory authority without undue delay and, if possible, no later than 72 hours after becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.
The processor is required to notify the controller of any personal data breach without undue delay after becoming aware of it.
In accordance with Article 34 of the GDPR, cdinanaise communicates to the client and any affected person (e.g., prospect) any breach of their personal data if such breach is likely to result in a high risk to the rights and freedoms of a natural person, namely the client and/or any other affected person.

Cdinanaise retains your personal data:
• For the period necessary to achieve the processing purposes
• For the period defined by applicable laws and regulations

Our website uses cookies. Cookies are text files placed on your computer and saved by your browser. Cookies are often used to make online experiences more welcoming and efficient. For technical reasons, they are necessary for the proper functioning of the shopping cart, for example.

Most of the cookies we use are "session" cookies, which are deleted once your session ends. There are also longer-lasting cookies that allow us to recognize visitors.

In addition, we use cookies to perform page usage, frequency, and marketing analysis. For this, we use the online tracking services of Google Analytics, a web analytics service provided by Google Inc. All information we collect through these analyses is not personal and is therefore completely anonymous.

You can delete the cookies we create at any time.

Most browsers are set to automatically accept cookies. However, you can deactivate the saving of cookies or set your browser to warn you when cookies are sent.

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer to help analyze your use of the site. The information generated by the cookie about your use of the site is generally transmitted to and stored on a Google server in the United States. If IP anonymization is activated on this site, your IP address will only be processed in an abbreviated form within member states of the European Union or the European Economic Area. The full IP address will only be transmitted to a Google server in the United States and abbreviated there in exceptional cases. Google uses this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the installation of cookies by adjusting your browser software; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

More information can be found at tools.google.com/dlpage/gaoptout or www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that, on this website, Google Analytics is extended by the code "gat._anonymizeIp();" to ensure anonymized collection of IP addresses (IP masking).

Our internet presence uses social plugins ("plugins") of the social network "facebook.com", operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are marked with a Facebook logo or followed by "Facebook Social Plugin".
If you visit one of the pages of our internet presence that features such a plugin, your browser establishes a direct connection with Facebook's servers. The content of the plugin is transmitted directly to your browser by Facebook and integrated into the website.
By integrating the plugins, Facebook receives the information that you are visiting the page in question. If you are logged in to Facebook, Facebook can assign your visit to your Facebook account. If you interact with the plugins, for example by clicking the "Like" button or leaving a comment, the corresponding information will be transmitted directly from your browser to Facebook where it will be stored.
For information on the purpose and scope of data collection, as well as the processing and use of data by Facebook, and your rights and privacy settings, please refer to Facebook's "Data Policy".
If you do not want Facebook to collect data about you through our site, you must log out of Facebook before visiting our website.

Without prejudice to the rights and obligations of the various parties concerned, this policy and the terms of use of the site may be modified later in accordance with applicable laws and regulations.
Date of creation: 05/05/2023

For any questions or information about the use of your data or this notice, please do not hesitate to contact us
- Via our email: rouxelin.tarboun@gmail.com
- Via our postal address:
LA CORDONNERIE DINANNAISE
15 rue du marchix, 22100 Dinan
France