PRIVACY POLICY Last updated: March 7, 2024

This privacy policy (the “Policy”) aims to formalize our commitment to respecting the privacy of users of the website https://www.atelierdugantier.fr/ (the “Site”) operated by L'Atelier du Gantier.

The Policy and the Site’s Terms and Conditions form a contractual set. All capitalized terms not defined in this Policy are defined in the Terms and Conditions available here: https://www.atelierdugantier.fr/fr/content/3-conditions-generales-de-vente.

As part of providing our Site, we process your personal data in compliance with the General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”) and under the conditions set out below.

Personal data refers to any information relating to an identified or identifiable natural person. We collect and process personal data only to provide our Services or to communicate about these Services, strictly in compliance with the GDPR.

We only collect personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed. You will never be asked to provide “sensitive” personal data, such as your racial or ethnic origin, political, philosophical or religious opinions.

By registering on the Site, you authorize us to process your personal data in accordance with this Policy. If you do not agree with the terms of this Policy, please refrain from using the Site and Services.

1. When do we collect your personal data and what data is collected?

We may collect and store your personal data, especially when you:

• browse the Site
• create an account
• make online payments
• contact us.

We use your personal data to enable the implementation and management of the Site’s Services and respond to your specific requests. We also use your personal data to operate and improve our Services, our Site, and our approach. This information is used only by us and allows us to better tailor our Services to your expectations.

If you chose to receive emails and messages from us when creating your Account, you will receive electronic and alphanumeric messages about our products and promotions. We will then use the personal data you provided during registration. You may unsubscribe from these mailings at any time.

1.1 Browsing the Site

Connection data. Each time you connect to our Site, we collect personal data such as your IP address, your computer’s MAC address, the date and time of connection, and information about the browser you use.

Navigation data. We also collect information identifying how you access the Site, which pages are viewed, and for how long. We may use Cookies as described in paragraph 5 below.

1.2 Creating an Account

Access to some of our Services requires creating an Account. According to the Terms and Conditions, you will be asked to provide personal data such as your first and last name, postal address, email address, and phone number.

1.3 Payment

Some of the Services available are paid. For this purpose, you agree that we may use external service providers who may collect personal data to enable the proper functioning of credit card or other payment methods and, where applicable, delivery of products or services.

To complete your purchase, you must provide your billing details and payment details, including your credit card number, expiration date, security code, and the cardholder’s name when paying by credit card.

You may also be asked to provide your telecom operator’s name, your mobile phone model, and a valid mobile number to receive purchase instructions directly via your phone.

We keep details of your payments and your purchases. Transaction details are stored either in our systems or with the external provider. This storage is for internal purposes, including accounting, compliance, and legal purposes, in accordance with paragraph 4 of this Policy.

1.4 Newsletter Subscription

When creating your Account, you may consent to receiving our newsletters about news, new products, services, and promotions as part of the Services.

You may also consent directly to receiving our newsletters by entering your email address in the designated fields on the Site.

You may withdraw your consent to receiving such newsletters at any time and free of charge as described in paragraph 6 of this Policy.

1.5 Contact

To respond to any requests you may make to our Customer Service and to confirm your information, we may use your first and last name, email address, and phone number.

2. How do we protect your personal data?

We have implemented technical and organizational security measures to guarantee the security, integrity, and confidentiality of all your personal data, to prevent it from being altered, damaged, or accessed by unauthorized third parties. We ensure an appropriate level of security, considering current knowledge, implementation costs, and the nature, scope, context, and purposes of processing as well as the risks and their likelihood.

However, as no security measures are infallible, we cannot guarantee absolute security for your personal data.

You are responsible for maintaining the confidentiality of your Account password. Do not share this information with anyone. If you share your computer, remember to log out after each session.

3. When do we share your personal data?

3.1 Sharing your personal data with third-party companies

When browsing the Site, your personal data may be transmitted to external service providers. These third parties provide services on our behalf to enable the proper functioning of credit card payments and other Services.

No personal data is transferred outside the European Union.

Except where a third party requires you to accept its own privacy policy and terms of use, third parties receiving your personal data have agreed to process it solely for implementing our Services.

We will never share your personal data with third parties for marketing or commercial purposes without your prior consent.

3.2 Sharing with authorities

We may disclose your personal data to administrative or judicial authorities where disclosure is necessary to identify, apprehend, or prosecute any individual likely to harm our rights, another user, or a third party. We may also be legally required to disclose your personal data and cannot object in this case.

4. How long do we keep your personal data?

We will only keep your personal data for the duration of your registration on the Site to ensure your identification when you log in to your Account and to provide the Services.

If you unsubscribe from the Site, your personal data will be deleted and only retained as an archive to establish proof of a right or contract. In any case, we will keep your personal data only for as long as necessary for the purposes for which it is processed, in accordance with this Policy and the applicable laws.

5. Cookies: how do we use them?

5.1 What is a cookie?

A cookie is a text file that may be placed on your device when you visit an online service with a browser. A cookie allows its issuer to recognize the device concerned whenever it accesses digital content containing cookies from the same issuer, during its validity period.

Cookies placed on your browser with your consent are deleted 13 months after they are placed.

5.2 What are the cookies issued on our Site used for?

Cookies we issue allow us to:

• establish statistics and traffic volumes and usage of various elements of our Site (sections and content visited, journey), to improve the interest and ergonomics of the Site and, where applicable, our products and services;
• adapt the Site’s presentation to your device’s display preferences (language, display resolution, operating system, etc.) during your visits;
• remember information from a form you filled out on our Site (registration or account login) or about products, services, or information you chose on our Site (service subscribed, shopping cart, etc.);
• allow you to access reserved and personal areas of our Site, such as your Account, using identifiers or data you may have previously provided and to implement security measures (for example, when you are asked to log in again after a certain period of time).

While browsing the Site, social media cookies may be generated, especially via sharing buttons, and collect personal data. When you first visit the Site, a cookie banner will appear on the homepage. A clickable link will provide more information about the purpose and functioning of cookies and refer to this Policy. Continuing to browse or selecting an element on the Site (image, text, link, etc.) implies your acceptance of these cookies on your device.

5.3 How can you control the cookies used?

According to regulations, you may refuse the use of cookies that are not strictly necessary.

You can configure your browser to accept or reject cookies (either systematically or by issuer) or to prompt you each time before storing cookies.

Note: Any settings may affect your internet browsing and conditions of access to services requiring cookies. We decline any responsibility regarding the consequences related to degraded operation of our services resulting from your refusal or deletion of necessary cookies.

5.4 How to configure your browser

Each browser has different cookie settings. This is described in the browser’s help menu.

Internet Explorer / Edge

In Internet Explorer, click the Tools button, then Internet Options. Under the General tab, under Browsing History, click Settings. Click View Files.

Firefox

• Go to the Tools tab then select Options
• Choose Privacy and click Show Cookies

Safari

• Go to Settings via the browser menu (Safari > Preferences)
• Click Privacy

Google Chrome

• Go to Settings via the button on the right of the URL bar or via the menu (Chrome > Preferences)
• Select Advanced Settings
• Click Content Settings then Cookies

For more information about cookies, you can visit the CNIL website.

6. What are your rights?

You alone have provided us with the data we hold, through the Site. You have rights over your personal data. Under the GDPR (Articles 15 to 22) and upon proof of your identity, you may request access, rectification, or erasure of your personal data.

Within the limits of the law, you also have the right to object to processing, restrict it, decide what happens to your data after death, withdraw your consent at any time, and the right to data portability.

You can contact us to exercise your rights at: contact@atelierdugantier.fr or by post at: 20 rue Droite – 12100 MILLAU, enclosing a copy of your ID.

You may unsubscribe from our newsletter at any time by clicking the unsubscribe link at the bottom of each email or by emailing contact@atelierdugantier.fr.

7. Can we amend the Policy?

We reserve the right to amend this Policy at any time. You are therefore advised to review it regularly. In case of changes, we will publish them on this page and where appropriate depending on their significance.

Your continued use of the Site after any modification means that you accept these changes. If you do not accept substantial changes, you must stop using the Site.

8. Data Protection Officer and Contact

For any questions regarding your personal data or to delete your Account, please contact us at: 20 rue Droite – 12100 MILLAU (indicating “Privacy – Data Protection”) or by email at contact@atelierdugantier.fr.

9. CNIL (French Data Protection Authority)

You can contact the CNIL directly via their website or by post at: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX 07.