a.) Collection of data when consulting the website
You can consult our web pages without providing any information about yourself. Each time a web page is viewed, the web server automatically saves only a so-called server log file, which contains e.g. the name of the requested file, your pseudonymised IP address, the date and time of the consultation, the quantity of data transmitted and the provider who made the request (access data), and who attests to the consultation. These access data are analyzed exclusively in order to guarantee impeccable functioning of the site and to improve our offer. This serves to defend our legitimate interests in the correct representation of our offer in accordance with Article 6 para. 1, 1st sentence, lit. f GDPR, interests prevailing in the context of taking interests into account. All access data is deleted no later than seven days following your viewing of the page.
b) Contractual data
We collect, process and store the data you provide when you register on our site and/or opt to purchase our products. The collection of personal data takes place via registration forms and/or order forms providing details of name, address, including email address and information relating to the respective order, including payment details. The capture of this data and its transmission are at the sole discretion of the customer. Only personal data which is necessarily necessary for the execution of the contract is collected. The data collected is stored for as long as necessary and permitted within the framework of the contract concluded and in compliance with applicable law.
Legal basis for data processing
The decisive use and processing by us of your personal data takes place solely within the framework of the execution of the contract, in accordance with Art. 6 GDPR. We further guarantee that the volume of personal data we request corresponds strictly to the minimum necessary for commercial relations. There must be a legitimate interest in order to process personal data in preparation for or on the basis of a contractual relationship. It can be assumed that such a legitimate interest exists as long as the data subject is a (potential) customer of the controller.
Safety
As part of data processing on our behalf pursuant to Article 28 GDPR, a recognized provider provides us with the hosting services for the online store as well as the services related to the collection of data in this context. This serves to defend our legitimate interests in the correct representation of our offer in accordance with Article 6 para. 1, bed. f) GDPR, interests prevailing in the context of taking interests into account. All data that is collected, as described below, in the context of the use of this website or in the forms provided for this purpose in the online store are processed on the servers of this provider. The latter attaches the highest importance to data protection and operates these servers only in data centers that attest to the strictest security standards through ISO certifications.
Your rights
If you wish, we will be happy to inform you in writing whether we have stored any data about you and, if so, which data. If you wish to assert your legal rights regarding access, rectification, erasure or blocking of your data, please contact the company's Data Protection Officer.
Data protection manager
Sarl Toufau Andréoli Marc Za Champ au Roi 70000 Vaivre et Montoille