Privacy policy - Château du Cèdre

ARTICLE 0: PRE-PREAMMULE

The new RGDP law has come into force in France. We are therefore obliged to provide you with all the information you need on this subject.

ARTICLE 1: PREAMBLE

This privacy policy applies to https://www.chateauducedre.com/

The purpose of this privacy policy is to explain to users of the site:

How their personal data is collected and processed. Personal data is any data that can be used to identify a user. This includes first and last names, age, postal address, e-mail address, user location or IP address;
What rights do users have regarding this data;
Who is responsible for processing the personal data collected and processed;
To whom this data is transmitted;
Eventually, the site’s policy regarding “cookie” files.

This privacy policy supplements the legal notice and the General Conditions of Use, which users can consult at the address below:

https://www.chateauducedre.com/politique-de-confidentialite

ARTICLE 2: GENERAL PRINCIPLES FOR DATA COLLECTION AND PROCESSING

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of site users’ data complies with the following principles:

Licitness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that his or her data is being collected, and for what purposes his or her data is being collected;
Limited purposes: the collection and processing of data is carried out to meet one or more purposes determined in these general terms of use;
Minimization of data collection and processing: only the data necessary for the proper execution of the purposes pursued by the site are collected;
Limited data retention: data is retained for a limited period, of which the user is informed.
Integrity and confidentiality of collected and processed data: the data controller undertakes to guarantee the integrity and confidentiality of collected data.

In order to be lawful, and in compliance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below:

The user has expressly consented to the processing;
The processing is necessary for the proper performance of a contract;
The processing meets a legal obligation;
Processing is necessary to protect the vital interests of the data subject or of another natural person;
The processing can be explained by a necessity linked to the performance of a task carried out in the public interest or in the exercise of official authority;
The processing and collection of personal data is necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF WEBSITE NAVIGATION

A. DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION

The personal data collected on the site is as follows:

Last name / First name
Email
Phone number
Free message
Date of birth
Company name (optional)
Street number and name
City
Postcode
IP address
Banking data to validate a transaction carried out on the online store (Stripe, etc…)

This data is collected when the user performs one of the following operations on the site:

When a form is filled in and sent
When the user places an online order on our shop
When a user visits our website, and the Google Analytics script is triggered, for site performance tracking.

The data controller will store all data collected in its website IT systems and under reasonable security conditions for a period of : 3 years.

Data is collected and processed for the following purposes:

Data collected following the completion of contact forms enable us to respond better and faster to the needs and requests expressed. The data collected following the completion of an order validation form on the store allows us to better process the shipment of the desired order. The data is therefore stored in our CRM so that contact and/or delivery can be made.

B. TRANSMISSION OF DATA TO THIRD PARTIES

Personal data collected by the site is not transmitted to any third party, and is only processed by the site editor.

C. DATA HOSTING

The https://www.chateauducedre.com/ website is hosted by:

OVH, whose registered office is located at the following address:

2 rue Kellermann – 59100 Roubaix – France.

The host can be contacted at the above postal address.

Data collected and processed by the site are exclusively hosted and processed in France.

D. GOOGLE TAG MANAGER

On this website, we use Google Tag Manager. With Google Tag Manager, it’s possible to manage website tags on one interface. The Tag Manager tool itself (which integrates tags) is a cookie-free domain and stores no personal data. The tool triggers other tags which may sometimes record data. Google Tag Manager has no access to this data. If a deactivation has been made at domain or cookie level, it remains valid for all tracking tags integrated by Google Tag Manager. Further information on Google Tag Manager can be found at: https://www.google.com/intl/fr/tagmanager/use-policy.html

ARTICLE 4: PERSON RESPONSIBLE FOR DATA PROCESSING

A. THE DATA PROCESSOR

The person responsible for processing personal data is:

Pascal VERHAEGHE

He can be contacted as follows:

The data controller can be contacted via this email address: info@chateauducedre.com, by telephone on 05 65 36 53 87 or by post at CHÂTEAU DU CÈDRE – Lieu-dit Bru 46700 Vire-sur-Lot France

The data controller is responsible for determining the purposes and means of processing personal data.

B. OBLIGATIONS OF THE DATA PROCESSOR

The data controller undertakes to protect the personal data collected, not to transmit it to third parties without the user’s knowledge and to respect the purposes for which the data was collected.

In addition, the data controller undertakes to notify the user in the event of rectification or deletion of data, unless this would entail disproportionate formalities, costs and steps for the data controller.

In the event that the integrity, confidentiality or security of the user’s personal data is compromised, the data controller undertakes to inform the user by any means.

ARTICLE 5: USER RIGHTS

In accordance with regulations concerning the processing of personal data, the user has the rights listed below.

In order for the data controller to grant the user’s request, the user is required to provide the data controller with: first and last name as well as e-mail address.

The data controller is required to respond to the user within a maximum of 30 (thirty) days.

A. PRESENTATION OF THE USER’S RIGHTS WITH RESPECT TO DATA COLLECTION AND PROCESSING

A. RIGHT OF ACCESS, RECTIFICATION AND RIGHT TO DELETION

The user may view, update, modify or request the deletion of data concerning him or her, by complying with the procedure set out below:

The user must send an e-mail to the person responsible for processing personal data, specifying the subject of the request and using the contact e-mail address provided above or via the forms (https://www.chateauducedre.com/en/user-data)

B. RIGHT TO DATA PORTABILITY

The user has the right to request the portability of his/her personal data, held by the site, to another site, by complying with the following procedure:

The user must send an e-mail to the personal data controller, specifying the subject of the request and using the contact e-mail address provided above or via the forms (https://www.chateauducedre.com/en/user-data)

C. RIGHT TO LIMIT AND OPPOSE THE PROCESSING OF DATA

The user has the right to request the limitation of or to object to the processing of his/her data by the site, without the site being able to refuse, unless it can demonstrate the existence of legitimate and compelling reasons, which may prevail over the interests and rights and freedoms of the user.

In order to request the limitation of the processing of his/her data or to formulate an objection to the processing of his/her data, the user must follow the following procedure:

D. RIGHT NOT TO BE SUBJECTED TO A DECISION BASED EXCLUSIVELY ON AN AUTOMATED PROCESS

In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on an automated process if the decision produces legal effects concerning him, or significantly affects him in a similar way.

E. RIGHT TO DETERMINE THE FATE OF DATA AFTER DEATH

Users are reminded that they can organize what should become of their collected and processed data if they die, in accordance with law n°2016-1321 of October 7, 2016.f. Right to refer to the competent supervisory authority

In the event that the data controller decides not to respond to the user’s request, and the user wishes to contest this decision, or, if he/she believes that one of the rights listed above has been infringed, he/she is entitled to refer the matter to the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr) or any competent judge.

F. RIGHT OF UNREGISTRATION

If you no longer wish to receive electronic communications about Cedar Castle activities, you may unsubscribe at any time by using the dedicated icon at the end of each Newsletter or by sending us an e-mail (chateauducedre@wanadoo.fr)

B. PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data.

If the user is a minor under the age of 15, the consent of a legal representative will be required in order for personal data to be collected and processed.

The site editor reserves the right to verify by any means that the user is over 15 years of age, or that he will have obtained the consent of a legal representative before browsing the site.

ARTICLE 6: USE OF “COOKIES”

FILES.
The site may use “cookie” techniques.

A “cookie” is a small file (less than 4 kb), stored by the site on the user’s hard disk, containing information relating to the user’s browsing habits.

These files enable it to process traffic statistics and information, facilitate navigation and improve the service for the user’s comfort.

For the use of “cookie” files involving the storage and analysis of personal data, the user’s consent is necessarily requested.

This user consent is considered valid for a maximum period of 13 (thirteen) months. At the end of this period, the site will again request the user’s authorization to save “cookie” files on their hard disk.

A. USER’S OPPOSITION TO THE USE OF “COOKIES” FILES BY THE SITE

Users are informed that they may oppose the recording of these “cookie” files by configuring their browser software.

For information, the user can find at the following addresses the steps to follow in order to configure his browser software to oppose the recording of “cookie” files:

Chrome: https://support.google.com/accounts/answer/61416?hl=fr
Firefox: https://support.mozilla.org/en-us/kb/enable-and-disable-cookies-website-preferences
Safari: http://www.apple.com/legal/privacy/fr/
Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies
Opera: http://www.opera.com/help/tutorials/security/cookies/

In the event that the user decides to deactivate “cookie” files, they will be able to continue browsing the site. However, any malfunction of the site caused by this manipulation could not be considered as being due to the site editor.

B. DESCRIPTION OF THE MAIN “COOKIES” FILES USED BY THE SITE

The site editor draws the user’s attention to the fact that the following cookies are used during browsing:

Cookie name: Google Analytics

Sender: Chateau du Cedre
Finality: Audience analysis

ARTICLE 7: CONDITIONS FOR CHANGING THE PRIVACY POLICY

This privacy policy may be consulted at any time at the address below: https://www.chateauducedre.com/politique-de-confidentialite

The site editor reserves the right to modify it in order to ensure its compliance with current law.

As a result, the user is invited to come and consult this privacy policy regularly in order to keep abreast of the latest changes to it.

The user is advised that this privacy policy was last updated on: 07/17/2023.

ARTICLE 8: USER ACCEPTANCE OF PRIVACY POLICY

By browsing the site, the user certifies that he/she has read and understood the present privacy policy and accepts its terms, with particular regard to the collection and processing of his/her personal data, as well as the use of “cookie” files.

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07).