PRIVACY POLICY

Le Comptoir des Régions, hereinafter referred to as "We" or "Us", attaches great importance to the protection and respect of your privacy.

Through this policy, we intend to provide you with clear and precise information regarding the collection and processing of the personal data that you may provide to us through the website www.lecomptoirdesregions.fr (hereinafter referred to as the "Site").

Art.1 Privacy Rules

The General Data Protection Regulation of April 27, 2016 (hereinafter the "GDPR") has been applicable since May 25, 2018. It imposes strict rules and conditions on companies and merchants regarding the processing of their clients' and prospects' personal data, in order to protect their privacy.

Art.2 Data Controller

The "data controller" of your personal data is Le Comptoir des Régions, responsible for the website www.lecomptoirdesregions.fr which you are visiting and to which you communicate data.

Art.3 Legal Basis and Use of Data Processing

We can only use your personal data for purposes that are both legitimate and necessary (Art. 6 of the GDPR). In concrete terms, this means that we process your personal data, whether or not in electronic form, for legitimate purposes within the context of contractual relations, business, and safety/security.

These purposes include, but are not limited to, the following:

• Processing and fulfilling your orders and contracts;

• Managing your account and the commercial relationship;

• Communicating commercial, promotional, and advertising information to you, or updates regarding the use of our services;

• Communications required for the execution of a contract;

• Improving the design, layout, and overall functionality of the website;

• Analyzing data for statistical purposes.

Art.4 What is Personal Data?

Personal data includes all information relating to you on the basis of which you can be identified (hereinafter referred to as "Data"). Anonymous data, which does not allow you to be identified, is consequently not considered personal data. Your personal data may therefore include:

• Identity data (last name, first name, address, VAT number, company registration number, etc.);

• Personal status data (phone number, personal email, etc.);

• Financial and transaction data (payment method data, bank account number, billing details, etc.);

• Data relating to the execution of the contract concluded with us (purpose of the contract, billing address, professional data, etc.);

• Data relating to the use of electronic equipment, such as computers (password, log data, electronic identification data, billing details, etc.);

• Sensitive Data: The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, or data concerning a natural person's sex life or sexual orientation is prohibited. We are strictly committed to respecting this prohibition.

Art.5 Sources and Origins of Personal Data

In principle, the data we hold comes directly from you when you fill out a form. If you choose not to provide mandatory or necessary information, you may lose access to certain benefits and/or we may decide to terminate our services to you, or find ourselves unable to fulfill the contract.

Art.6 Access to Personal Data – Who Do We Share Your Information With?

In compliance with applicable regulations, data may be transmitted to competent authorities upon request, notably public bodies, exclusively to fulfill legal obligations, as well as to legal auxiliaries, ministerial officers, debt collection agencies, and in the case of investigating perpetrators of offenses committed on the internet.

Your data is primarily for internal use. We may communicate your data to third-party companies that will process it for legitimate reasons, notably for the proper execution of the contract, such as when we rely on service providers and subcontractors to fulfill orders or provide services on our behalf (technical services, payment processing, payment security, deliveries, sending commercial marketing, etc.).

We transmit only the data they strictly need to perform their services.

However, we will ensure that our subcontractors comply with GDPR regulations. Data processing by subcontractors is governed by a strict legal framework.

Art.7 Data Retention Period

We implement the necessary means to ensure that the retention of personal data for the purposes described above does not exceed legal limits.

Art.8 What Are Your Rights?

We commit to taking appropriate technical and organizational measures to guarantee the security of everyone's personal data processing (Art. 32 of the GDPR).

In accordance with applicable personal data protection laws and regulations, you benefit from a certain number of rights regarding your personal data, namely:

• Right of access (Art. 15 of the GDPR) and information: You have the right to be informed in a concise, transparent, intelligible, and easily accessible manner about how your data is processed. You also have the right to obtain confirmation that data concerning you is being processed and, if applicable, to access your personal data and obtain a reasonable copy of it.

• Right to rectification (Art. 16 of the GDPR): You have the right to obtain the correction of inaccurate data concerning you. You also have the right to complete incomplete data.

• Right to be forgotten (or Right to erasure - Art. 17 of the GDPR) and Right to restriction of processing (Art. 18 of the GDPR): We commit to erasing your personal data, notably in the following cases:

  • The data is no longer necessary in relation to the purposes for which it was collected or processed;

  • You object to the processing;

  • The personal data has been processed unlawfully.

• Right to data portability (Art. 20 of the GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format for your personal use or to transmit it to a third party of your choice.

• Right to withdraw consent at any time (Art. 7 of the GDPR): You can withdraw your consent to the processing of your data when the processing is based on your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

• Right to lodge a complaint (Art. 77 of the GDPR): The client has the right to lodge a complaint at any time with the Privacy Commission if they believe that the processing of their personal data constitutes a violation of the GDPR.

To exercise your rights, you can contact us by email at: contact@lecomptoirdesregions.fr

Art.9 Our Commitment

Our goal is to implement security techniques to protect stored data against unauthorized access, inappropriate use, alteration, unlawful or accidental destruction, and accidental loss.

Art.10 Procedure in Case of Breaches

It is always possible that personal data processed within the framework of the contractual relationship may fall into the wrong hands due to human error, computer error, etc.

When the breach poses a high risk to the rights and freedoms of individuals, we will inform them immediately of the facts and measures taken. We will ensure that the necessary steps are taken to notify the Privacy Commission of the breach within 72 hours after becoming aware of it, unless the breach is unlikely to result in a high risk to the rights and freedoms of individuals (Art. 32-34 of the GDPR).

Art.11 Consent

You give your express, informed, and unambiguous consent to the processing of personal data as described in this Privacy Notice. You have the right to withdraw your consent at any time upon simple written request. We reserve the right to modify this Privacy Notice.

Art.12 Modifications to our Privacy Policy

We may occasionally modify this privacy policy, notably to comply with any regulatory, jurisprudential, editorial, or technical developments.

Art.13 Contact

For any questions regarding this Privacy Policy, or for any request relating to your data, you can contact us:

• By email at the following address: contact@lecomptoirdesregions.fr

• By mail at the following address: Le Comptoir des Régions,19 Rue de l'Horloge 03000 Moulins