Privacy policy

PRIVACY AND DATA PROTECTION POLICY

[Guégniard] attaches the utmost importance to protecting the privacy of individuals. She believes that a privacy policy should be simple and intelligible, meeting two precise objectives: your information and your protection.
In accordance with Regulation (EU) 2016/679 on the Protection of Personal Data [ci-après « le Règlement » ou « le RGPD »], the company [Guégniard] (
[3 Route de la Pierre, Champ-sur-Layon 49380 Bellevigne-en-Layon]
), owner of the website and the brand [NOM_MARQUE], is responsible for processing personal data collected on its behalf on the non-commercial website. [URL_SITE] [ci-après dénommé « le Site »].
In this capacity, [Guégniard] undertakes to comply with all the rules and obligations set out in the Regulations.

1. Key concepts

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an “identifiable natural person” is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
“Processing” means any operation or set of operations which is performed upon personal data or sets of data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing operation; where the purposes and means of such processing are determined by Union law or by the law of a Member State, the controller may be designated or the specific criteria applicable to his designation may be laid down by Union law or by the law of a Member State.
“Sub-processor”: the natural or legal person, public authority, department or other body that processes personal data on behalf of the controller.
“Recipient”: the natural or legal person, public authority, department or any other organization that receives personal data, whether or not it is a third party. However, public authorities which may receive personal data in the context of a particular investigation in accordance with Union law or the law of a Member State are not considered as recipients; the processing of such data by the public authorities in question complies with the applicable data protection rules according to the purposes of the processing.
“Third party”: a natural or legal person, a public authority, a service or a body other than the data subject, the controller, the processor and the persons who, placed under the direct authority of the controller or processor, are authorized to process personal data.
“Consent” of the data subject: any free, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or by a clear positive act, that personal data concerning him or her may be processed.
“Personal Data Breach”: a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.

2. Purposes and methods of data processing

Users of the [ci-après « l’Utilisateur »] site are hereby informed that any information they consent to provide is useful for browsing the site and for accessing, using and customizing the services offered on the site, in accordance with the Legal Notice and the Site’s General Terms and Conditions of Use (hereinafter referred to as the “Services”).

The information collected on the Site is mainly intended for the internal teams of [Guégniard]. Service providers duly appointed by [Guégniard] are also authorized to intervene on the Site and its databases insofar as such intervention is strictly necessary for the provision of the Services (see article 5 “Subcontracting and data transfers”). The User’s contact details will never be transferred to third parties, whether free of charge or in return for payment, without the User’s express prior knowledge and consent.
The data processing methods used on the Site are as follows:

– the processes and purposes are :

Purposes Categories of processing
Maintain and operate the Site in a safe and stable manner
Site hosting

Application supervision and constant, preventive security operations
Improve the experience of using the Services
Provision of a contact form

Integration of browsing cookies (functional/analytical)
Manage the online recruitment service
Application form available

Manage the quotation transmission service
Quote request form available

Communicate on services Newsletter subscription form available

– The personal data processed on the Site are :
Data category Data that may be collected Mandatory data (*)
Identification data Address, last name, first name Address, last name, first name (if using a form, except Newsletter registration form)
Contact details Email address, telephone number, postal address Email address (if using a form), postal address (if using an application or quotation request form)
Professional data Company or establishment, CV Company or establishment (if using the application form or quote request form), CV (if using the application form)
Connection data IP address, browsing cookies IP address, browsing cookies (only those essential to the proper operation of the Site)

Any other data that may be communicated by the User as part of a form made available to him or her cannot be anticipated by [Guégniard]. However, this data will be protected in the same way as requested or required data. If sensitive data (such as health, political affiliation, religious beliefs, sexual orientation, etc.) is transmitted, it will be automatically deleted without being processed. Under no circumstances should the User transmit intimate and highly personal information on the Site (e.g. data on his state of health, data on his sexual orientation, etc.). This information does not concern [Guégniard].

– The categories of persons concerned by this processing are Users of the Site, in the broadest sense.

– The length of data retention varies according to the purposes for which it is to be used:

Data concerned Retention period Deletion method
Identification data 3 years from the last request from the User Manual deletion with time-stamped indicators
Contact data
Professional data
Connection data Maximum 13 months for analytical/statistical cookies Automatic deletion

3. Rights of persons concerned

In accordance with the provisions of Chapter III “Rights of the data subject” of the RGPD, the User benefits from a right of access, rectification, limitation, deletion and opposition of information concerning him/her, which he/she may exercise in the following ways:

– By e-mail to :
mesdonnees.personnelles@[domainebergerie .fr]

– Via the contact form on the Site, using the “RGPD Request” item in the drop-down menu dedicated to the “Subject of the request”.

– By post to :
[Guégniard – Domaine de la Bergerie]
[3 Route de la Pierre, Champ-sur-Layon, 498380 Bellevigne-en-Layon].

[Guégniard] also informs the User that, if he/she considers that his/her rights have not been respected, he/she may at any time lodge a complaint with the Commission Nationale Informatique et Libertés (CNIL) via www.cnil.fr/fr/plaintes/ or at the following address
3 place de Fontenoy – TSA 80715
75334 PARIS CEDEX 07
www.cnil.fr

4. Security

[Guégniard] undertakes to implement all organizational, technical and structural measures to ensure the physical and logical security of personal data, and to maintain them until such data is deleted. In particular, it will actively combat any alteration, destruction or unauthorized access to data.
Visit [Guégniard] reminds you that the Internet is not a completely secure environment and that the Site cannot guarantee the perfect security of transmissions and storage of information on this network. However, we are constantly striving to improve our safety measures. Connections and flows are encrypted in order to ensure the security of data transit to the Site.
[Guégniard] also undertakes to comply with the rules for notifying data breaches as set out in Articles 33 and 34 of the RGPD (Notifications to the CNIL and/or Users).
All these rules are also applied by the company’s subcontractors. [Guégniard]. This commitment is a decisive and essential component of its subcontracting contracts for [Guégniard].

5. Subcontracting and data transfer

[Guégniard] informs Users and Customers that the proper operation of the Site requires the intervention of several subcontractors (hereinafter the “Subcontractors”) in connection with the following processing operations:

Treatments concerned Subcontractor Rank Contact details
(and location of servers if different addresses)
Edition, supervision and maintenance of the Atelier ASAP 1 website Head office :
7, Rue Max Richard, 49100 Angers, FRANCE

Hosting and backup of the O2 SWITCH website
1 Head office :
222-224, Boulevard Gustave Flaubert, 63000 CLERMONT-FERRAND Server location: FRANCE

[Guégniard] certifies that it has examined and selected the Subcontractors for their levels of personal data protection in compliance with the requirements of the Regulation. Subcontractors have undertaken, in the same way as [Guégniard]to comply with the provisions of the aforesaid Regulations and to allow by any means [Guégniard] to meet its legal obligations concerning the rights of the above-mentioned data subjects.

Subcontractors have also undertaken not to subcontract personal data without the prior information and approval of [Guégniard]. It will then be responsible for verifying the existence of a level of personal data protection equivalent to that which it applies and has applied to its Subcontractors at this subsequent Subcontractor.

[Guégniard] and its Subcontractors jointly undertake that personal data collected on the Site will always be processed and hosted within the European Union or in a country or organization with an adequate level of security according to the European Commission. In accordance with Chapter V of the RGPD, [Guégniard] has taken all necessary precautions to control its data transfers outside the European Union.

6. Cookies

As mentioned above, certain information is collected by means of cookies (small text files placed on the User’s browser which store information about the User which can then be consulted by the Site).

The cookies and tracers used on the site are the following:
N° N° COMPANY NAME FUNCTION LIFETIME
1 _ga Google Web analytics and for statistical/traffic measurement purposes enabling the site owner to better understand their users’ behaviour 13 months
2 _gat Google Web analytics and for statistical/traffic measurement purposes enabling the site owner to better understand their users’ behaviour 24h
3 _gid Google Web analytics and for statistical/traffic measurement purposes allowing the site owner to better understand the behavior of their users 24h
6 __utma Google This cookie is used to distinguish unique visitors to the site. It is updated with each page viewed. 13 months
7 __utmb Google This cookie is used to track the visitor’s session. The use of this cookie, coupled with the _utmc cookie, makes it possible to track visits (sessions) to a given site. 30 minutes
8 __utmc Google This cookie works in conjunction with the _utmb cookie to determine whether or not there is a new visit by the current visitor at the end of the session.
9 __utmt Google This is a cookie used by the Google Analytics 10mn service.
10 __utmz Google This cookie stores all the information needed to identify a traffic source. 6 months

[Guégniard] then informs the User that he/she may oppose the recording of cookies by adjusting the settings of the cookie manager present on first connection to the Site and, at any time, via the settings button at the bottom of the site (see visual below).

Only cookies that are mandatory for the proper operation of the Site cannot be objected to by the User. Similarly, if the User refuses so-called “functional” cookies, he acknowledges that the site may not function properly and that his user experience may be severely disrupted.

In addition, [Guégniard] informs the User that if, in general, he/she wishes to oppose the collection of cookies, he/she can also do so by configuring his/her browser (see CNIL advice).

7. Updating of the Privacy and Personal Data Protection Policy

The privacy policy may be modified or amended at any time. The User is invited to consult it regularly on the Site. [domainebergerie .fr]. In the event of a major change to this policy, an e-mail will be sent to the User to inform him of the change, at least 15 days before the effective date.

Last modified: version of [29/06/24]