Privacy policy

4. Length of retention of personal data

The personal data is retained to be used for the purposes set out in this Policy. Unless otherwise stated in the preceding paragraphs, the data is retained for as long as the person concerned has a contractual relationship with the Company.

If the contract binding the person concerned to the Company is terminated, such as at the end of the service ordered, and if there is no other reason to continue processing, the information will be kept for the necessary periods in order to comply with the legislation and the statute of limitation in force, in particular the contractual, accounting and tax rules or, where applicable, to process any claim or request related to the services provided.
Customers’ personal data is retained for the period of the contractual relationship, plus 3 years, for the purposes of management and marketing, without prejudice to the retention obligations or statutes of limitation. With regard to prevention of money laundering and funding of terrorism, the data is kept for 5 years following the end of the relationship with the Company.
Finally, the data may be kept for 10 years following termination of the contractual relationship, to comply with tax and accounting obligations.

5. Access to personal data

The personal data collected is intended for the Company’s sales and accounting departments.

The data collected by the Company may be transferred to service providers under a sub-contract, as provided for in Article 28 of the GDPR. The Company’s service providers are strictly bound by the Company's instructions.
These service providers only have the right to use the data to process orders, not for other purposes.

The data collected by the Company may also be transferred to
sub-contractors outside the European Union.

Finally, and on request, the personal data may also be transferred to the people and authorities (legal authorities, public organisations, etc.) whose right of access to personal data is recognised by the law, the regulations or the provisions issued by authorities authorised by the law.

6. Rights over personal data

With regard to processing of your personal data, the GDPR gives you certain rights as a Website user:

- Right of access (Article 15 of the GDPR): You have the right to obtain confirmation that your personal data is being processed; if this is the case, you have a right of information about this personal data and about the information mentioned in detail in Article 15 of the GDPR.

- Right of rectification and right of erasure (“right to be forgotten”) (Articles 16 and 17 of the GDPR): You have the right to obtain, as soon as possible, rectification of your personal data that is inaccurate and you have the right to obtain, where applicable, completion of any incomplete personal data. You also have the right to obtain erasure, as soon as possible, of your personal data when one of the reasons detailed in Article 17 of the GDPR applies, for example when the data is no longer required for the purposes stated.

- Right to restriction of processing (Article 18 of the GDPR): You have the right to restrict processing of your data when one of the items listed at Article 18 of the GDPR applies, for example during any checks, if you object to processing.

- Right to portability of data (Article 20 of the GDPR): In certain cases listed at Article 20 of the GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format, or to have this data transmitted to a third party.

- Right of objection (Article 21 of the GDPR): Where the data is collected on the basis of Article 6, paragraph 1, point f), of the GDPR (data processing for the purposes of legitimate interest), you have the right to object at any time, for reasons relating to your specific situation, to processing of your personal data. In this case, we will no longer process your personal data, unless we can demonstrate that there are legitimate, compelling reasons for processing that prevail over the interests, rights and freedoms of the person concerned, or to record, exercise or defend rights through the courts.

- Right to lodge a claim with a supervisory authority: In accordance with Article 77 of the GDPR, you have the right to lodge a claim with a supervisory authority, if you consider that the processing of your personal data breaches the data protection legislation. The right to lodge a claim may be made with a supervisory authority in the Member State in which you usually reside, your place of work or the place where the breach was committed.

- The right to object to receiving marketing documents in the future, and in certain circumstances, the right to ensure that this information is transferred to the person concerned or is transferred to third parties.