The website www.pierrot-gourmand.com is published by the companies ANDROS and GER'SON.
ANDROS and GER'SON being concerned about respecting the rules relating to the protection of personal data, this site has been developed in compliance with the General Data Protection Regulation No. 2016/679 (hereinafter referred to as "GDPR") and the law known as "Informatique et Libertés" of January 6, 1978 in its latest version.
ANDROS and GER'SON undertake to ensure that your personal data is collected in a lawful, fair and transparent manner.
1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA ON THE SITE?
The persons responsible for processing your personal data are ANDROS, a general partnership registered with the Cahors Trade and Companies Register under number 428 682 447 and located at Zone Industrielle, 46130 Biars-sur-Cère and GER'SON, a general partnership registered with the Brive Trade and Companies Register under number 701.650.145 whose head office is located at Les Escures – 19120 Altillac.
2.WHAT PERSONAL DATA IS PROCESSED?
The personal data processed are as follows:
Personal data allowing your identification: title, surname, first name, billing address, delivery address, email address, telephone number.
Some personal data is mandatory (fields marked with an asterisk). Otherwise, ANDROS and GER'SON will not be able to provide you with the service.
Data relating to your purchases (and in particular the list of purchases made, the date of purchases, banking details for making purchases and/or reimbursements),
Data relating to your participation in competitions,
Data relating to the geographical position of the place of delivery of the order in order to identify the nearest relay package,
Data relating to the pages consulted.
3. WHY IS YOUR DATA COLLECTED?
The processing of personal data implemented is legally based on the execution of a contract, the legal obligations incumbent on the companies ANDROS and GER'SON, on the legitimate interests of the companies ANDROS and GER'SON, and where applicable, on your consent. When the processing is based on your consent, you have the right to withdraw your consent at any time.
If you do not wish to complete the fields marked with an asterisk, you may not be able to access certain services on the website and ANDROS and/or GER'SON may be unable to respond to your request.
| Legal bases | Purposes |
|---|---|
| Execution of the contract | - Customer relationship management - Order execution - Management of withdrawals - Delivery management - Complaints management - Invoicing - Accounting management - Organization of competitions |
| Consent | - Subscription to our newsletter - Commercial prospecting by e-mail including targeted commercial prospecting - Transmission of personal data to commercial partners - Participation in competitions or lotteries - Responding to satisfaction surveys - Collection and publication of testimonials and opinions - Product testing |
| Legitimate interests of ANDROS and GER'SON: - to better understand our customers and offer them offers that we believe are adapted to their interests; - to develop our customer base; - to secure our website and protect our image | - Development of statistics, analyses and commercial surveys - Management of technical prospecting operations (including technical operations such as standardization, enrichment and deduplication) - Selection of people to carry out loyalty, prospecting, survey, product testing and promotional actions - Fraud prevention and management of account security measures - Management of opinions and comments on our products - Management of unpaid debts and disputes |
| Legal obligations | - Management of requests to exercise rights (right of access, right of opposition, right to limit processing, etc.) - Conservation of proof of consent obtained - Updating of prospecting files by the organization responsible for managing the list of opposition to telephone canvassing |
4. WHO ARE THE RECIPIENTS OF YOUR DATA?
Personal data is processed, within the limits of its attributions, by:
-
the e-commerce, marketing, legal, consumer relations and accounting services of the companies ANDROS and GER'SON.
-
external service providers responsible for implementing personal data processing or as part of ANDROS and GER'SON consulting and assistance missions. In this case, ANDROS and GER'SON have taken care to supervise the subcontracting contracts that bind it to its subcontractors, in accordance with legal and regulatory provisions;
-
legal assistants and ministerial officers as part of their mission of legal assistance and representation in court in the event of litigation;
-
the judicial authorities;
-
any natural or legal person authorized by an enforceable court decision;
-
the body responsible for managing the telephone canvassing opt-out list;
-
business partners of ANDROS and GER'SON companies if you have expressly accepted this;
-
the body responsible for managing the telephone canvassing opt-out list when the telephone number is collected for commercial prospecting purposes;
5. HOW LONG IS YOUR DATA KEPT?
Your personal data is kept for a period not exceeding that necessary for the purposes for which it is processed, then deleted.
The main retention periods are as follows:
| Purposes | Retention periods |
|---|---|
| Execution of orders, deliveries, withdrawals | 5 years from the formation of the contract. |
| Invoice management | 10 years as an accounting document |
| Business prospecting | 3 years from your last contact |
| Litigation management | Duration of acquisition of the legal prescription. In the event of initiation of legal action, data retention for up to 5 years after the end of the legal proceedings (when a decision has become final) |
| Cookies | 6 months |
6. HOW DO THE TARGETED OFFERS PROPOSED TO YOU WORK?
You are informed that the companies ANDROS and/or GER'SON may offer you personalized offers and information which, in view of the products purchased or viewed, should, in our opinion, interest you.
You have the possibility to object to the processing at any time in accordance with Article 8 of this policy.
7. IS YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
Your personal data may be transferred outside the European Union as part of the provision of services by our subcontractors. In this case, the companies ANDROS and GER'SON have taken care to supervise the contracts that bind them to them, in accordance with the legal and regulatory provisions.
These transfers are in particular supervised by appropriate guarantees in order to ensure their security. Thus, they can be based on an adequacy decision from the European Commission relating to the level of data protection in a country.
In the absence of an adequacy decision, transfers are governed by compliance with standard data protection clauses approved by the European Commission.
8. WHAT ARE YOUR RIGHTS?
In accordance with the regulations in force regarding the protection of personal data, you have the right to access, rectify and erase personal data concerning you, as well as the right to limit processing and the right to object to processing, the right to the portability of your data and the right to define guidelines regarding the retention, deletion and communication of your personal data after your death. You can exercise your rights by sending a letter to ANDROS, DPO - Zone Industrielle 46130 Biars-sur-Cère or by contacting the data protection officer at the following address: DPO-Andros@andros.fr .
You may be asked for proof of identity.
The exercise of one of your rights may be refused if your request does not meet the conditions set out in this policy or by the Regulations in force. In this case, you will be duly notified.
Furthermore, you are informed of the existence of the “Bloctel” telephone canvassing opt-out list, on which you can register: https://conso.bloctel.fr/.
In the event of a complaint, you have the right to contact the CNIL at the following address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX, if you consider that the processing of your data does not comply with the applicable legal and regulatory provisions.
9. HOW IS THE SECURITY AND CONFIDENTIALITY OF YOUR DATA ENSURED?
ANDROS companies undertake to implement all physical security measures (security of access to premises, management of authorizations, security of equipment, etc.) and logical measures (antivirus, password security, flow security, anonymization, encryption, data traceability, etc.) necessary to ensure the security and confidentiality of the personal data processed.
