Privacy policy
Preamble
SAUR France entities undertake to respect privacy and protect personal data collected and processed during your browsing and use of this Site: www.boutiquesf.fr.
They undertake to comply with the applicable regulations regarding the protection of personal data, and in particular the provisions of the General Data Protection Regulation (EU Regulation 2016/679) and the “Informatics and Liberties” law. of January 6, 1978 amended.
More particularly, they take care to collect only the strictly necessary data, in a fair and transparent manner, for specific, explicit and legitimate purposes and not to reuse them for purposes incompatible with those initially intended. Technical and organizational measures are implemented to guarantee the accuracy, updating, rectification or erasure of data. Finally, they undertake to respect the retention periods of the personal data collected as well as the obligations relating to cross-border transfers of personal data where they exist.
1 – Identity of the data controller and purpose of the processing
As part of the use of the services accessible on the Website (www.boutiquesf.fr) (hereinafter the “Site”), the entities of SAUR France each act on their own behalf as Data Controller , distinctly from each other, for the purposes of implementing a goodie pre-order platform made available by the supplier Divodurum – “Bernicia”, acting as Subcontractor.
Thus, your employer, an entity of SAUR France, is likely to collect and process personal data concerning you as Data Controller.
In addition, and separately, the supplier Bernicia may process your personal data as Data Controller for monitoring orders placed and their invoicing. These treatments are not the subject of this policy.
2 – Means of data collection
When using the Site, and more specifically when creating an account, you may communicate your personal data to us.
Cookies are also ways of collecting certain data about you. For more details in this regard we invite you to consult our Cookies management policy.
3 – Processed data and data minimization
The Data Controller undertakes to collect only the personal data strictly necessary for the purposes for which they are processed. Mandatory information in the forms is marked with an asterisk.
Your data, namely your Name, First Name, professional email address, professional telephone number, the postal address of your home Site, and by extension, the postal address of the Site for delivery of orders, are provided directly by you when completing the registration form. The collection of this data is necessary for the creation of an account and your identification on the platform.
4 – Data recipients and disclosure
The processed data is only intended and communicated to authorized and determined recipients with regard to the purposes of the processing, namely: the Transverse Communication Department of SAUR France as well as the authorized personnel of the supplier and the carrier, contractually required to comply with adequate and sufficient data protection measures.
5 – Data retention period
The Company only keeps your data for the duration necessary for the purposes for which they were collected. Your personal data is kept for the duration of activation of your Account.
6 – Data security
The Data Controller is committed to the security of your personal data. Consequently, the Company implements all appropriate technical and organizational measures to guarantee a level of security adapted to the risks, taking into account the state of knowledge, the costs of implementation and the nature, scope, of the context and purposes of the processing.
7 – Subcontracting
This platform is made available to the Data Controller by Bernicia, acting as Data Processor. To this end, the Subcontractor may have access to your personal data for the sole purpose of carrying out the tasks in accordance with the purposes of the processing. The Data Controller contractually ensures that the Subcontractor has the necessary guarantees in the execution of the tasks assigned to it to ensure the protection of your data.
8 – Data transfer
No personal data will be transferred to a country outside the European Union.
9 – Rights over your data
In accordance with the Data Protection Act of January 6, 1978 and European Regulation 2016/679 of April 27, 2016, you have a right of access, rectification, erasure, limitation and portability of data personal information that concerns you. You also have the right to object to the processing of your personal data for reasons relating to your particular situation. Finally, you have the right to define general and specific directives defining the way in which you intend these rights to be exercised after your death.
You can exercise all of these rights by contacting:
- to the following email address: mail@saur.fr,
- to the following postal address: SAUR France Transverse Communications Department, mail box: 11 Chemin de Bretagne – 92130 ISSY LES MOULINEAUX
You may be asked to provide proof of identity in the event of serious doubt about your identity. We will do everything we can to respond to you as soon as possible and at the latest within one month of receiving your request. We reserve the right to extend this period by two months if your request is particularly complex.
Finally, you also have the option of contacting the competent supervisory authority, the Commission Nationale Informatique et Libertés (CNIL), in order to lodge a complaint.
10 – Data protection contact
For more information on the processing of your personal data, you can contact your Data Privacy Manager (DPM) whose contact details are available on the SAUR France intranet: directory of DPMs.