Privacy policy (GDPR standard)

Security and protection of personal data

We implement appropriate technical and organisational measures to protect your personal data against any unauthorised access, disclosure, alteration or destruction.

Definitions

The Publisher: the natural or legal person publishing the online public communication services.
The Site: all the sites, web pages and online services offered by the Publisher.
The User: the person using the Site and its services.

Type of data collected

When the Site is used, the Publisher may collect:

• Civil status and identification data (e.g. surname, first name, email, phone).
• Connection data (IP addresses, event logs, technical identifiers).

Disclosure of data to third parties

No disclosure to third parties

Your data is not disclosed to third parties, except where required by law, regulation or a decision of a competent authority.

Merger / acquisition

Prior information and right to object

In the event of a merger, acquisition or sale of assets, we will guarantee the confidentiality of your data and inform you before any transfer or change in privacy rules so that you can exercise your rights (including opt-out where applicable).

Purposes of processing

Customer relationship management

• Contracts, orders, deliveries, invoicing and accounting (customer account management).
• Loyalty programme (within one or more group entities).
• Customer follow-up: satisfaction surveys, complaints, after-sales service.
• Selection of audiences for product studies and tests, without profiling that reveals sensitive data.

Sales statistics

Building indicators to improve our services, based on aggregated and anonymised data.

Promotional operations

Organisation of games, draws or promotional operations (excluding gambling subject to licensing).

Data aggregation

With non-personal data

We may publish, disclose and use aggregated, anonymous information for sector analysis, statistics and communication purposes, without identifying individuals.

Connections to social accounts

If you connect your account to a third-party service, it may send us the information you have authorised. We only use this data for the purposes required by the service concerned.

Collection of identity data

Free browsing

The Site can be browsed without registering. No personal data is required simply to browse.

Collection of identification data

Limited use: we only use your electronic identifiers for access to the services and performance of the contract.

Collection of device technical data

Technical data (IP address, ISP, hardware/software configuration, browser type and language) may be collected automatically to provide and secure the service.

Technical data for advertising and statistical purposes

This data may be used to personalise the experience, measure audience and improve the Site. No personal data is sold.

Cookies

Retention period

In line with CNIL recommendations, cookies are kept for a maximum of 13 months from the time they are set. Consent is renewed after this period.

Purposes

Audience measurement, personalisation, remembering preferences, security and operation of the Site.

Refusing cookies

You can manage your preferences through our cookie preference centre and/or your browser settings.

Retention and deletion

Technical data

Kept for the period strictly necessary for the purposes described above.

Personal data during the contractual relationship

Kept for as long as necessary to perform the contract and comply with legal obligations.

Archiving / anonymisation

After that, data is anonymised and kept for statistical purposes only.

Deletion after inactivity

If you have not logged in for 3 years, a notification may invite you to log in again; otherwise your data will be deleted.

Account deletion

On request

You can delete your account at any time from your settings or simply by asking the Publisher.

In the event of a breach of the Terms of Use

The Publisher may suspend or terminate an account in the event of a breach of the Terms of Use.

Security breach notification

In the event of a security incident affecting your data, we will inform you as soon as possible, analyse the causes and take appropriate measures to limit its effects. Such notification does not constitute an admission of liability.

Transfers outside the EU

We do not transfer personal data outside the European Union, except with adequate safeguards (standard clauses, adequacy decisions) and prior notice.

Changes to the policy

In the event of a substantial change, you will be informed in advance; we will not reduce your privacy levels without your consent where it is required.

Governing law and remedies

This policy is governed by applicable local law. Any dispute will be handled by the competent courts. An arbitration clause may apply if provided for by contract and accepted by the parties.

Data portability

You can obtain a copy of your data in a structured, commonly used and machine-readable format.