Personal Data Protection Policy for the Casier des Chefs website
Personal Data – Website Management
Activities related to the website www.casierdeschefs.fr involve the processing of personal data.
What does this personal data policy cover?
This policy informs you of the characteristics of these processing activities and of your rights regarding your personal data.
This privacy policy is drafted in accordance with French Law No. 78-17 of January 6, 1978 (known as the "Data Protection Act") and the General Data Protection Regulation ("GDPR") No. 2016/679.
Who is responsible for this policy?
The data controller is the company ORIGAMI MANAGEMENT, represented by its manager Ms. Issis RAMAN.
The data controller's contact details are as follows: 142 rue de l'Aven, 34980 Saint-Gély-du-Fesc, France.
The data controller can be reached at the following number: (+33) 04 11 93 98 01.
The contact email address is: contact@casierdeschefs.fr
Who is this policy for?
This policy applies to users of the site: visitors browsing the website.
It also concerns:
- customers of our online shop
- persons to whom we have entrusted technical services (hosting provider, maintenance, site security)
- persons who have access to the site's back office for its administration
- persons who write or are mentioned in the site's content
- persons who create an account on the site
- persons who contact us through the site's contact form
- persons we list on the site as partners
Purposes (what the collected data is used for)
The purpose of the processing is the management of the website.
This processing enables:
- management of customer orders on the online shop
- technical management of the site (maintenance, hosting, security)
- administration of the website
- management of the site's editorial content
- management of online accounts
- management of information requests via the contact form
- listing of partner entities on the site
- targeted marketing via the Brevo tool
Legal basis for processing: what gives us the right to process the data
The legal bases for processing are as follows:
- for order management on the online shop, the legal basis is the order placed by the customer (contract)
- for technical management of the site (maintenance, hosting, security), the legal basis is legitimate interest
- for administration of the website, the legal basis is legitimate interest
- for management of editorial content, the legal basis is the consent of the persons whose information is published
- for management of online accounts, the legal basis is legitimate interest or consent
- for management of information requests via the contact form, the legal basis is legitimate interest (enabling online communication) or the performance of pre-contractual measures (preparing quotes upon request)
- for listing of partner entities on the site, the legal basis is the consent of these persons
- for targeted marketing via the Brevo tool, the legal basis is consent
Data retention period
Data processed is kept for a period not exceeding that necessary for the purposes for which it was collected (data minimization principle).
The maximum retention periods are as follows:
- for order management on the online shop: 5 years from the end of the contract
- for technical management of the site (maintenance, hosting, security): 12 months for IP addresses and connection logs
- for administration of the website: for as long as the persons concerned administer the site
- for management of editorial content: 5 years from publication
- for management of online accounts: for as long as the account is active, then for 5 years
- for management of information requests via the contact form: 3 years from the request
- for listing of partner entities: 5 years from publication
- for targeted marketing via the Brevo tool: 3 years from consent
Data processed
The data controller processes the following categories of data:
- Identification data (first name, last name, address, email, phone number, date and place of birth)
- Products purchased
- Connection data (IP addresses, logs, device identifiers, login credentials, timestamp information, etc.)
- Banking data
Mandatory or optional nature of data collection
The data collected is mandatory in order to fulfill the purposes of the processing.
For online orders, the data collected is required for the conclusion and performance of the order (contract).
Sources of data
Data is provided directly by the person concerned.
ORIGAMI MANAGEMENT operates this activity under the trade name Casier des Chefs®.
Data recipients
Depending on their respective needs, the following are recipients of all or part of the data:
- persons in charge of technical services (hosting by 772424.com, the ARPA3 agency for maintenance and site security)
- online payment service providers (Mollie)
- the Brevo marketing tool
- carriers (for online orders)
What security measures are in place?
The data controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
The data controller takes measures to ensure that any individual acting under its authority or that of a subcontractor, who has access to personal data, does not process it except on instruction from the data controller, unless required to do so by law.
Existence or absence of data transfer outside the European Union and associated safeguards
The data controller does not transfer any personal data outside the European Union.
Automated decision-making
The processing does not involve any fully automated decision-making.
Fate of personal data after death – Right of access, rectification, erasure and portability of data
The data subject may define directives regarding the retention, deletion, and communication of their personal data after their death. These directives may be general or specific.
The data subject also has the right of access, objection, rectification, erasure, and, under certain conditions, portability of their personal data. The data subject has the right to withdraw their consent at any time where consent constitutes the legal basis for processing.
The request must indicate the first name, last name, email or postal address of the person concerned, and be signed and accompanied by valid proof of identity.
These rights may be exercised by contacting:
ORIGAMI MANAGEMENT: contact@casierdeschefs.fr / (+33) 04 11 93 98 01
Complaints
The data subject has the right to lodge a complaint with the supervisory authority (CNIL): https://www.cnil.fr/fr/webform/adresser-une-plainte