Privacy policy / Cookies

I. WHAT PERSONAL DATA DO WE PROCESS?


The collection of personal data is limited to what is strictly necessary (principle of data minimization).
We only collect and use the personal data that is necessary for us in the context of our activity to offer you personalized and quality products and services.
We may collect different categories of personal data from you, including:

identification and contact information (last name, first name, language and country, postal and email address, telephone number, gender, birthday and signature);
information necessary for shipping your orders (delivery address, billing address, your bank details (all payment transactions are encrypted by the receiving bank, we do not store any card numbers), etc.);
identification and authentication data, particularly when using our services (connection, geolocation and navigation data, technical logs, computer traces, security information, IP address);
data relating to interactions with us on our websites, on our applications, on our pages, on social networks, during interviews and telephone conversations and in emails;

Under no circumstances are we required to collect sensitive data.
The data we use may be collected directly from you or obtained from the following sources, for the purpose of verifying or enriching our databases:

publications/databases made accessible by official authorities (Official Journal);
service providers;
third parties such as commercial intelligence organizations in compliance with data protection regulations;
websites/directories/databases/social media pages containing information that you have made public or made public by third parties.

In addition, each form indicates in particular:

What are the objectives of collecting this data (purposes);
Whether this data is mandatory or optional for the management of your request;
Who will be able to read it (only BISCUITERIE ASTRUC in principle, unless specified in the form when transmission to a third party is necessary to manage your request);
Your IT and Liberties rights and how to exercise them with BISCUITERIE ASTRUC

II. SPECIAL CASES OF DATA COLLECTION, IN PARTICULAR INDIRECT COLLECTION


BISCUITERIE ASTRUC may collect information about you even though you are not a customer. The list below (non-exhaustive) constitutes examples of categories of personal data collected by BISCUITERIE ASTRUC from non-customers, such as: prospects; principals or beneficiaries during transactions made in relation to a client; employees of our service providers; partner distribution network.

III. WHY AND ON WHAT BASIS DO WE USE YOUR PERSONAL DATA?


has. TO COMPLY WITH OUR LEGAL AND REGULATORY OBLIGATIONS
We use your personal data to fulfill various legal and regulatory obligations.

b. TO EXECUTE A CONTRACT WITH YOU OR PROVIDE YOU WITH PRE-CONTRACTUAL INFORMATION
We use your personal data to conclude and carry out our services, including for:
provide you with information relating to our products and services; assist you with your requests; In the context of customer relationship management in particular: management and execution of products and services;

IV. TO WHAT CATEGORIES OF ENTITIES MAY YOUR PERSONAL DATA BE DISCLOSED?


The personal data collected as part of the services offered by BISCUITERIE ASTRUC are processed according to secure protocols and allow BISCUITERIE ASTRUC to manage the data received in its IT applications. In order to accomplish the aforementioned purposes, we are required to disclose your personal data only to:
service providers and subcontractors carrying out services on our behalf; independent agents, intermediaries; Distribution network; Commercial Partners; financial, judicial authorities or state agencies, public bodies upon request and within the limits of what is permitted by regulations; certain regulated professions such as lawyers, notaries, auditors, bailiffs.

V.HOW LONG DO WE KEEP YOUR PERSONAL DATA?


We keep your personal data for the longest period necessary to comply with applicable legal and regulatory provisions or another period taking into account operational constraints. Regarding customers, the majority of information is kept for the duration of the contractual relationship and for 10 years after the end of the contractual relationship.
Regarding prospects, the information is kept for 3 years from its collection or our last contact with you.

VI. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?


In accordance with the applicable regulations, you have different rights, namely:
Right of access: you can obtain information regarding the processing of your personal data as well as a copy of this personal data.
Right to rectification: if you believe that your personal data is inaccurate or incomplete, you can request that this personal data be amended accordingly.

Right to erasure: you can demand the erasure of your personal data within the limits of what is permitted by regulations.
Right to restriction of processing: you can request restriction of processing of your personal data.
Right of opposition: you can object to the processing of your personal data, for reasons related to your particular situation. You have the absolute right to object to the processing of your personal data for commercial prospecting purposes, including profiling linked to this prospecting.
Right to portability of your data, where this right is applicable, you have the right to have the personal data you have provided to us returned to you or, where technically possible, to transfer it to a third party;
Right to define guidelines relating to the conservation, erasure or communication of your personal data, applicable after your death.
Right to withdraw your consent: If you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time.

To find out the steps to follow regarding the exercise of the rights listed above, please go to our “Processing of your personal data” page. In accordance with applicable regulations, you have the right to lodge a complaint with the competent supervisory authority such as the CNIL (National Commission for Informatics and Liberties) in France.

VII. HOW CAN YOU FIND OUT CHANGES TO THIS PERSONAL DATA INFORMATION DOCUMENT?


We will update this information document regularly. We invite you to read the latest version of this document on our website and we will inform you of any substantial modification through our sites or through our usual means of communication.