In its role as data controller, the company LE ROUGE FRANÇAIS may collect and process your personal data when you use the services available on its website, www.lerougefrancais.com. Personal data refers to any information concerning a physical person who is identified or identifiable; an identifiable person is considered to be a person who can be directly or indirectly identified by reference to an identification number or to one or more specific elements unique to his or her physical, physiological, psychological, economic, cultural or social identity.
LE ROUGE FRANÇAIS is committed to complying with the rules for protecting the privacy of its potential customers and visitors to its website, mobile site and mobile apps. All processing of personal data undertaken as part of the available services complies with the applicable local regulations concerning the protection of personal data, including the provisions of the modified French data protection law (on “Information Technology, Data Files and Civil Liberties”) of 6 January 1978 and the General Data Protection Regulations (Regulation EU 2016/679) or ‘GDPR’.
LE ROUGE FRANÇAIS is responsible for processing your personal data.
To ensure that the rules are properly applied, LE ROUGE FRANÇAIS has appointed a data protection officer who will be the key point of contact for the CNIL (the French data protection commission). LE ROUGE FRANÇAIS also implements the necessary in-house procedures to raise awareness amongst its employees and ensure the company complies with the rules.
WHAT COMMITMENTS IS LE ROUGE FRANÇAIS MAKING IN TERMS OF PROTECTING PERSONAL DATA?
LE ROUGE FRANÇAIS is committed to ensuring a high level of protection for the personal data of its customers, potential customers and users of its website, mobile site and mobile apps, as well as of any other person whose personal data it processes.
LE ROUGE FRANÇAIS is committed to complying with the regulations that apply to all its data processing. More specifically, LE ROUGE FRANÇAIS is committed to complying with the following principles:
- Your personal data is processed lawfully, fairly and transparently (lawfulness, fairness and transparency).
- Your personal data is collected for defined, explicit and legitimate purposes and will not be processed at a later stage in a manner that is incompatible with these purposes (purpose limitation).
- The personal data that is stored is adequate, relevant and limited to what is necessary for the purposes for which it is processed (data minimization).
- Your personal data is accurate and up-to-date, and all reasonable measures are taken to ensure that data that is inaccurate, in terms of the purposes for which it is processed, is deleted or corrected as soon as possible (accuracy).
LE ROUGE FRANÇAIS implements the technical and organizational safeguards necessary to ensure a level of security appropriate for the inherent risks relating to data processing, to comply with the regulations and to protect the rights and data of those concerned as soon as the processing begins.
Moreover, LE ROUGE FRANÇAIS makes the same level of protection for personal data a contractual obligation for its sub-contractors (service providers, suppliers, etc.).
Finally, LE ROUGE FRANÇAIS is committed to complying with any other principle concerning the regulations applicable to the protection of personal data, and more specifically regarding the rights conferred on the persons concerned, the length of time for which personal data is stored and the obligations relating to transferring data across borders.
HOW IS THE DATA THAT MAY BE COLLECTED BY LE ROUGE FRANÇAIS USED?
1. How we collect your personal data
In the course of our relationship, you may give us your personal data via various means, including on our website, on our mobile app when browsing the Internet, when making purchases, when filling out various data collection forms, when subscribing to an e-newsletter, when creating an account, when applying for a job, when posting a comment on one of our social media pages, when making any contact with LE ROUGE FRANÇAIS or when sending us your personal data by any other means.
2. Processing purposes and legal basis
Your data is primarily used for the purposes of purchases, after-sales service, processing of your queries and/or complaints, ensuring of security and anti-theft measures, and combating of fraud.
Apart from instances in which your consent has been obtained (for example to send you personalized offers), the processing of your data for the various aforementioned purposes is principally necessary:
- to ensure the sales contract can be fulfilled,
- for the purposes of legitimate interests pursued by LE ROUGE FRANÇAIS (for example in developing new services and offers, improving customer service, etc.).
More specifically, your data is used in the following ways:
- to allow you to benefit from all the services available on the LE ROUGE FRANÇAIS website, mobile site and mobile apps,
- to allow you to browse our website,
- to ensure that our information, notifications, offers and other services correspond as closely as possible to your interests,
- for complementarity through the sharing of certain information with carefully chosen commercial partners with the aim of improving our knowledge of your interests so that we can send you offers and other personalized services (subject to your prior consent when it is required and to the respect of your right of refusal, in compliance with the applicable rules concerning direct marketing).
HOW LONG IS YOUR DATA STORED?
LE ROUGE FRANÇAIS is committed to storing your personal data for no longer than is necessary for the purposes for which it is processed. Moreover, LE ROUGE FRANÇAIS stores your personal data in compliance with the storage limitations imposed by the applicable laws in force.
These storage limitations are defined according to the processing purposes implemented by LE ROUGE FRANÇAIS and take into account the applicable legal provisions imposing a specific storage limitation for certain types of data, any applicable limitation period and CNIL recommendations concerning certain categories of data processing.
WHO MIGHT HAVE ACCESS TO YOUR PERSONAL DATA?
1. Who receives your data?
The data collected by the LE ROUGE FRANÇAIS website, mobile site, and mobile apps may be communicated to third parties (e.g. carriers). Whenever this is the case, LE ROUGE FRANÇAIS asks its service providers to implement strict confidentiality and data protection measures.
2. Transferring data outside the European Union
Some of the recipients mentioned above may be based outside the European Union and may have access to all or some of the personal information collected by LE ROUGE FRANÇAIS.
In that event, LE ROUGE FRANÇAIS is committed to guaranteeing the protection of your data in compliance with the strictest rules, including via the signature, on a case-by-case basis, of contractual clauses based on the European Commission template, or any other mechanism that complies with the GDPR in the event that your personal data is processed by a service-provider outside the European Economic Area and in a country that, in the European Commission’s view, does not offer an adequate level of protection.
HOW CAN YOU EXERCISE YOUR RIGHTS?
In accordance with the applicable regulations concerning personal data protection, you can, at any time, exercise your right to access, rectify or delete data pertaining to you as well as your right to limit or refuse the processing and portability of your personal data.
Moreover, you have the legal right to leave instructions for what happens to your personal data after your death.
In addition, any person who is under the legal age of majority at the time their data is collected can obtain its deletion as soon as possible.
These rights can be exercised by writing to the following address:
LE ROUGE FRANÇAIS
27 bis Rue Voltaire, 92140 CLAMART – FRANCE.
In this event, please ensure that your request includes the details we will need to identify you (i.e. full name, email address) as well as any other information necessary to confirm your identity.
For some specific services, you may be able to exercise these rights directly online (managing your account, managing your purchases, etc.).
You also have a right of recourse to the CNIL in the event of a violation of the applicable regulations concerning the protection of personal data and the GDPR.
When you contact our customer service team, your call may be recorded to help us improve the quality of our service and to prevent disputes and hostile calls. If you do not wish to be recorded, inform the customer service team member directly.
You also have the right to object to the processing of your personal data for direct marketing purposes. When required by law, your data will only be used for direct marketing via electronic means once your explicit consent has been obtained.
If you no longer wish to receive the LE ROUGE FRANÇAIS newsletter via email, you can click on the unsubscribe link at the end of the message.