ARTICLE 1: PREAMBLE
This privacy policy aims to inform users of the website about:
- How their personal data is collected. Personal data is considered as any information that can identify a user. This includes, but is not limited to, their names, first names, age, postal or email address, location, or IP address;
- The rights they have regarding this data; the person responsible for processing the personal data collected and processed;
- The recipients of this personal data;
- The website's cookie policy. This policy supplements the legal notices and General Terms of Use available to users at the following address: https://gribouilleimport.com.com/content/2-legal-notices
ARTICLE 2: PRINCIPLES RELATED TO THE COLLECTION AND PROCESSING OF PERSONAL DATA
According to Article 5 of the European Regulation 2016/679, personal data must be:
- Processed lawfully, fairly, and transparently in relation to the individual concerned;
- Collected for specified, explicit, and legitimate purposes (see Article 3.1 of this document) and not further processed in a way incompatible with those purposes;
- Adequate, relevant, and limited to what is necessary concerning the purposes for which they are processed;
- Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that is inaccurate, concerning the purposes for which it is processed, is erased or rectified promptly;
- Stored in a form that permits the identification of individuals for no longer than necessary for the purposes for which they are processed;
- Processed in a manner that ensures appropriate security of the data, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage, using appropriate technical or organizational measures.
Processing is lawful only if and to the extent that at least one of the following applies:
- The individual concerned has consented to the processing of their personal data for one or more specific purposes; processing is necessary for the performance of a contract to which the individual is a party or for pre-contractual measures taken at their request;
- Processing is necessary for compliance with a legal obligation to which the controller is subject;
- Processing is necessary to protect the vital interests of the individual or another natural person; processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- Processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual, particularly if the individual is a child.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHILE BROWSING THE SITE
Article 3.1: Data collected
The personal data collected as part of our activity includes: Name, First Name, postal address, email address, and phone numbers. The collection and processing of this data aim at the following purposes: contract management, customer space management, service quality monitoring, and newsletter distribution.
Article 3.2: Methods of data collection
When using our website, the following data is automatically collected: Name, First Name, postal address, email address, phone numbers.
These are retained by the data controller under reasonable security conditions for a duration of: 3 years.
The company may retain certain personal data beyond the above-mentioned periods to fulfill its legal or regulatory obligations.
Article 3.3: Data hosting
The website gribouilleimport.com is hosted by:
OVH.com
Article 3.5: Cookie policy
...
ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER
Article 4.1: The data controller
Personal data is collected by Gribouille Import, registered under number 382 582 088 00052.
The data controller can be contacted as follows:
By mail at: 14 Rue de la Faurie, 09000 Foix;
By phone at: 05 61 65 57 09;
By email at: secretariat@gribouilleimport.com
Article 4.2: The Data Protection Officer
The company's or controller's Data Protection Officer is: Frédéric MATHIEU - contact@gribouilleimport.com - 05 61 65 57 09.
If you believe that your rights under the "Informatics and Liberties" law are not respected after contacting us, you may notify the CNIL.
ARTICLE 5: USER RIGHTS IN DATA COLLECTION AND PROCESSING
Any user affected by the processing of their personal data may exercise the following rights under European Regulation 2016/679 and the French "Informatics and Liberties" Law (Law 78-17 of January 6, 1978):
- Right of access, rectification, and erasure of data (Articles 15, 16, and 17 of the GDPR);
- Right to data portability (Article 20 of the GDPR); right to restriction (Article 18 of the GDPR) and to object to data processing (Article 21 of the GDPR);
- Right not to be subject to a decision based solely on automated processing;
- Right to determine the fate of data after death;
- Right to file a complaint with the competent supervisory authority (Article 77 of the GDPR). To exercise your rights, please send your mail to [Company Name and Address] or email to [Insert Data Protection Officer's email]. To process the request, the data controller may require information such as: your first and last name, email address, and account number or personal/ subscriber space information. Visit cnil.fr for more information about your rights.
ARTICLE 6: CONDITIONS FOR MODIFYING THE PRIVACY POLICY
The publisher of the Gribouille Import website reserves the right to modify this Policy at any time to ensure compliance with applicable laws.
Any changes will not affect purchases made before the modifications, which remain subject to the Policy in effect at the time of purchase, as accepted by the user during validation.
Users are encouraged to review this Policy whenever they use our services, without formal notification.
This policy was last updated on January 14, 2025.