CONFIDENTIALITY AND PRIVACY POLICY

APPLICABLE ON 19/09/2024

We attach great importance to respecting your privacy and protecting your personal data. 

This policy informs you about the way in which your data is collected and used through the website accessible at the address www.eu-maison-colibri.com (the "Website") and / or during any contact with our Company, and this, in accordance with the "Data Protection act 2018" of May 24th, 2018 and the European regulations in force resulting from the General Data Protection Regulation 2016/679 of April 27th, 2016 ("GDPR" ). 

 

ABOUT THE PROTECTION OF YOUR PERSONAL DATA 

 

1. Data controller and recipients of personal data 

Collected Personal data ("Data") as part of the use of the Website, the execution of orders for products and/or services presented on the Website or outside of the Website, and more generally, all contacts with our Company, are processed by the Colibri Company, whose head office is located at 27 avenue Franklin Roosevelt, 35400 SAINT-MALO FRANCE, as data controller (“Data Controller”). 

Data refers to any information relating to an identifiable natural person, directly or indirectly, by reference to an identifier such as a name, an identification number, location data or an online identifier. 

Depending on the purpose of the processing, the Data collected and/or transmitted is intended for use by the Data Controller; The support services (purchasing / sales administration, commerce, logistics, credit management, HR, IT and marketing accounting) of the Data Controller will have access to it. They will also be made accessible to the following service providers (“subcontractors” or “third party recipients” within the meaning of the regulations) for the strict needs of their mission, in particular: 

  • technical service providers: communication agency, Site hosting company (see GCU and legal notices accessible HERE); 

  • accounting / financial service providers: auditors; 

  • logistics providers: carriers; 

  • banking service providers (see GCS accessible HERE). 

  • customer service providers: suppliers of customer relationship management and assistance software;

  •  

Access is strictly controlled by the security policies in place so that human intervention on the Data remains very exceptional. The Data Controller may be required to communicate your Data to third parties in cases where such communication is authorized and required by law or a court decision, or if this communication is necessary to ensure the protection and defense of its rights. 

Apart from these cases, your Data will not be transferred or made accessible to any third party without your prior consent. 

The Data Controller does not transfer your Data to a country outside the European Economic Area (EEA). In the event of transfer outside the EEA. Such transfers will be framed by appropriate guarantees, such as the standard clauses required by the European Commission. 

 
2. Purposes of personal data gathering 


The following Data is processed: 


  • Data relating to transaction, 

  • Data relating to the organization and processing of contests and any promotional operation, 

  • Any other data that you send to us in order to get in touch with our Company or obtain the supply of products and/or services. 

  • On the basis of your consent, which you can withdraw at any time without questioning the initial lawfulness of the use of your Data (see infra, art. 3 "Your Rights"), for sending newsletters without prior order; 

  • For the needs of the execution of commercial relations and in particular of the contract of sale or provision of services that you have subscribed or of supply (creation of customer or supplier accounts, execution of orders, invoicing, monitoring of the execution of the contract, delivery, after-sales and complaints, carrying out satisfaction surveys, management of the customer or supplier file, management of unpaid bills and disputes); 

  • To process and respond to requests that may give rise, if necessary, to a contractualization (request for information); 

  • To meet legal, accounting and tax obligations (in particular the conservation of supporting accounting documents; management of requests for rights, rectification and opposition; keeping a list of opposition to prospecting), or establish, exercise and defend legal rights. 

Unless you object and within the limits of your interests and rights, to meet the legitimate needs of the Data Controller, in particular: 

  • Prospecting, monitoring of customer relations and customer loyalty (which involve in particular the sending of commercial messages or news concerning the products, services and offers presented on the Site or off the Site); 

  • Creation of customer/supplier accounts by performing all due diligence necessary to protect the interests of the Data Controller and prevent conflicts of interest; 

  • Optimization of the Website (analysis of the navigation route, identification of massive connections, determination of trends in searches carried out in order to be able to adjust the offers) 

  • Carrying out solicitation operations in order to develop commercial activity; 

  • Management of people's opinions on products, services or content in the interest of improving the products and services offered on the Website or off the Website; 

  • Personalization of the customer experience on the Website; 

  • Development of statistics (in particular commercial), in order to analyze commercial activity; 

  • Management of the prospect file, in order to develop the commercial activity; 

  • Carrying out satisfaction surveys; 

  • For the purpose of combating payment fraud. 

  •  

3. About cookies 

Various cookies are used on the Website to improve the interactivity between you, the Website and the provided services. 

For more information, please consult the Cookie Policy accessible HERE. 

 


4. Your data rights 

The persons whose Data are processed by the Data Controller have a right of access, rectification of erroneous Data concerning them, and, in the cases and according to the limits provided for by the regulations, of opposition, of deletion of some of their Data, to withdraw their consent, to limit their use, to define their fate after their death, or to request their portability with a view to their transmission to a third party. 

To exercise your rights, all you have to do is write to one of the two addresses mentioned in article 6 below and attach, if applicable, any document allowing you to justify your identity and your request. 

 

5. Storage period of data 

Your Data will be kept for a period not exceeding that necessary for the purposes for which they are collected and in particular during the following periods: 

  • For a period of 3 years following the last contact, then kept in intermediate archives for the duration of the applicable legal prescription (5 years) for all Data, except for banking data and cookies (see below); 

  • For the time required for the transaction in the event of payment by bank card with regard to bank details then for 13 or 15 months, depending on the type of bank card, depending on the debit date in intermediate archiving; with your consent, which can be withdrawn at any time, the Data may be kept for later purchases; 

  • For a period of 13 months from their implementation/creation in the case of cookies. 

At the end of these periods, the Data will be deleted from the active databases and, if necessary, archived for a period not exceeding the legal limitation periods or the applicable archiving obligations. Once these deadlines have expired, the Data will be destroyed. 

6. Contact the data protection officer 

For any additional information or difficulty relating to the use of your Data, you can contact the data protection officer by email at dpo@maison-colibri.com or by sending a letter to the following address: COLIBRI DPO, 2 route de Marennes, 17800 PONS - FRANCE. 

In the event of an unresolved difficulty or for any complaint relating to the processing of your Data, you can contact the Data Protection Commission electronically: https://www.dataprotection.ie/ or by sending a letter at the following address: 

Data Protection Commission 21 FITZWILLIAM SQUARE SOUTH DUBLIN 2D02 RD28 - IRELAND  

ABOUT THE PROTECTION OF YOUR HR DATA (COLLECTION FOR A SPONTANEOUS APPLICATION OR IN RESPONSE TO A JOB OFFER) 

We are committed to respect for privacy and the protection of personal data, in accordance with applicable legislation and our commitment to ethics and compliance. 

Your Data is processed on the basis of your consent. By submitting a spontaneous application, you authorize the Data Controller to process and collect your Data. 

All of your Data will be processed for recruitment purposes, in particular to determine the suitability of your experience and qualifications for the positions available on the date of submission of your application. 

With your agreement, beyond the time necessary to examine your application, your Data may be kept in the pool of applications of the Data Controller and its affiliated companies and for the purpose of sending alerts, for the maximum duration provided below. 

The information collected is stored on the territory of the European Union and will not be transferred, without your consent, to a third country. Only people who are involved in the recruitment process (recruitment department, human resources, management and supervisors) will have access to your Data. 

Your Data will be kept, in active then intermediate archiving, for a maximum period of 2 years from your application or until you ask the Data Controller to delete them. 

In accordance with the applicable national and European provisions, you have a right of access to the Data concerning you, the right to request its rectification, erasure or portability, as well as the right to request the limitation of the processing of your Data and withdraw your consent. You also have the option of objecting, at any time, to alerts sent to you by e-mail. 

To exercise your rights or for any additional information or difficulty relating to the use of your Data, you can contact the data protection officer by email at dpo@maison-colibri.com or by sending a letter at the following address: COLIBRI DPO, 2 route de Marennes, 17800 PONS - FRANCE. 

In the event of an unresolved difficulty or for any complaint relating to the processing of your Data, you can contact the Data Protection Commission electronically: https://www.dataprotection.ie/ or by sending a letter at the following address: 

Data Protection Commission – 21 FITZWILLIAM SQUARE SOUTH DUBLIN 2D02 RD28 - IRELAND  

You must ensure that the documents sent as part of your application (information directly filled in or attachments) do not contain any sensitive information. Information which directly or indirectly reveals membership or non-membership, true or supposed, to an ethnic group or a so-called race is considered as sensitive; sexual orientation or life; political, religious or philosophical opinions; health status; union or mutualist activity; your possible criminal convictions or offenses; your social security number.