Preamble
The purpose of this privacy policy is to provide Users with a clear and precise overview of the personal data that may be collected when browsing the www.biolane.com website.
We are committed to respecting Users’ privacy. We therefore set out below the conditions under which Users’ personal data may be processed when they browse the Website.
Definition
“Data(s)”: any information(s) relating to an identified or identifiable natural person (as defined by the RGPD) ;
“RGPD”: refers to the European Regulation on the Protection of Personal Data n°2016/679 of April 27, 2016 ;
“RT” or “we”: refers to Havea Group, data controller, (including all its subsidiaries) whose registered office is located Parc d’Activité Sud Loire – BOUFFÉRÉ – 85 612 MONTAIGU Cedex, registered with the RCS of La Roche sur Yon under number 823 334 578 ;
“Website”: refers to the website accessible from the URL www.biolane.com;
“Processing”: means “any operation or set of operations which may or may not be performed using automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination or otherwise making available, alignment or combination, limitation, erasure or destruction” (definition given by the RGPD) ;
“Users” or “you”: refers to all natural persons who browse the Website and access its functionalities and content.
Data collection
The time of data collection
This privacy policy applies to all Data that you communicate to us or that we collect, directly or indirectly, by:
- Browsing the Website;
- Making purchases/orders (including subscriptions);
- Creating a customer account on the Website;
- Subscribing to the newsletter;
- Contacting Customer Service and/or Consumer Services;
- Participating in a competition;
- Consulting our commercial offers and/or advertisements;
- Answering our questionnaires;
- Requesting any information, in particular via the website’s contact form.
Where the collection of specific Data is necessary for the associated Processing, we indicate the mandatory fields by means of an asterisk.
Your Data may also be collected from third parties, subject to your prior consent.
Details of data processing
we may use certain techniques known as “profiling”, i.e. any form of automated processing of personal data consisting in using the Data collected to analyse and evaluate certain personal aspects relating to a natural person, in particular to analyse and/or deduce, via dynamic segmentation, the elaboration of scenarios, of audiences, certain elements and/or behaviours relating in particular to personal preferences, centers of interest, purchasing habits.
Based on these analyses and deductions, we send you and/or display communications and/or content (concerning HAVEA GROUP and/or its subsidiaries) adapted to your interests/needs that we have identified. It is also possible that automated decisions are made based on profiling, we may use this type of process to determine whether it is relevant to send you certain communications.
You have the right, in certain circumstances, to object to the use of your data for “profiling” purposes. In this case, please see point 7 below.
Data destination
The Data subject to Processing is intended for RT’s internal teams (and/or its subsidiaries) and possibly for service providers that RT may call upon, in particular in connection with the processing of orders, purchases or subscriptions, the management of customer reviews, statistics, audience measurement, etc. (subcontractors within the meaning of the RGPD). These service providers may contact you in order to send you commercial offers as well as satisfaction surveys so as to assess the quality of their service. If you wish to object to this, we invite you to contact the said service providers directly on the initiative of these possible mailings.
Data may also be transmitted to third-party service providers to whom we entrust your Data in order to carry out commercial or marketing missions on our behalf (in particular web analytics, advertising agencies in the context of marketing and commercial campaigns).
RT shall not be liable for the conditions under which the Data are used by these third-party partners and/or subcontractors within the meaning of the RGPD.
In addition, the Data could also be transmitted to any police, judicial or administrative authorities (as part of a legal obligation or RT’s legitimate interest).
Minors’ Data
The Website is accessible to all natural persons, whether adults or minors. However, as a matter of principle, this Website is intended for people of legal age who can enter into contractual obligations. In the event that the Data of minors is collected without the authorization of parental authority, we invite the person(s) with such responsibilities to contact us at contact@biolane.com in order to take the measures they wish to take with regard to the minor (see procedure in point 7).
Data storage
Your Data is kept for a period that complies with legal provisions or is proportionate to the purposes for which it was processed. Certain retention periods are in line with RT’s legitimate interests.
Retention periods vary according to whether we have an ongoing contractual relationship with you (active customer), whether we have had a contractual relationship with you in the past (inactive customer) or whether we have never had such a relationship with you (prospect). Data linked to your browsing on the Website and collected by the cookies you have authorized have a specific retention period as set out below.
For example
- all prospect Data is kept for 3 years from the date of collection or last contact with the prospect;
- all Data relating to an active customer is kept for the duration of the contractual relationship;
- all Data relating to inactive customers are kept for 5 years from the end of the contractual relationship or the last contact from the inactive customer;
- browsing data is kept for a maximum of 13 months.
Data may also be archived in an intermediate database for administrative reasons, in particular for litigation, commercial, civil or tax purposes, or to comply with a legal obligation.
In any case, when their retention is no longer justified by legal, commercial or marketing requirements or linked to RT’s legitimate interest, or if the User has exercised a right to modification, deletion or opposition (except in the case of retention for the purposes of complying with a legal obligation), we anonymize or delete them in a secure manner.
The transfer of your Data
We store your Data within the European Union. However, it is possible that Data may be transferred to subcontractors and/or business partners located in other countries and in particular outside the European Union. In the event of such a transfer, we ensure that the Processing is carried out in accordance with this privacy policy and that it is governed by the European Commission’s standard contractual clauses, which guarantee a sufficient level of protection for Data and allow respect for the privacy and fundamental rights of individuals.
How to exercise Users’ rights
In accordance with the regulations on the protection of personal data (and in particular the RGPD), you have a right of access, rectification, deletion, opposition, limitation and portability of your Data. You also have the possibility of formulating directives concerning the fate of your Data after your death.
To exercise these rights, all you need to do is send a formal written and complete request accompanied by any element enabling you to be identified (identity document, customer number, etc.) according to the following methods of receipt:
- By e-mail: contact@biolane.com
- Via the contact form (if available)
- By post: Service Consommateurs – demande RGPD – Parc d’activité Sud Loire, 85612 Montaigu Cedex
The precise terms and conditions relating to the exercise of your rights are mentioned in the regulations on the protection of personal data (and in particular the RGPD) and also on the CNIL website.
Before responding to any request, we may verify your identity and/or ask you to provide further information in order to respond to your request.
Once we have received your written and complete request, we undertake to reply within one (1) month. This period may be extended by two months in the case of complex requests.
Should we fail to respond satisfactorily to your request, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) via its website https://www.cnil.fr/fr/.
Data safety
As RT, we implement appropriate technical and organizational measures in accordance with applicable legal provisions, to protect your Data against alteration, accidental or unlawful loss, use, disclosure or unauthorized access.
Changes to the privacy policy
We may occasionally modify this privacy policy (due to changes in legislation or regulations). Users are therefore advised to consult this page regularly for any changes or updates to this privacy policy.
Cookies and other trackers
- What is a cookie ?
A cookie is a small alphanumeric text file stored on your terminal’s hard drive when you visit a site or view an advertisement. Almost all Internet sites use cookies in order to function correctly and optimize their ergonomics and functionalities.
- Why use cookies?
We use cookies to optimize Users’ visit to the Website. The Website also uses cookies, in particular third-party cookies, to present Users with advertising tailored to their needs.
- Types of cookies and other trackers used
When you visit our website, various types of information may be recorded in “cookie” files installed on your terminal.
Depending on their function and the purpose for which they are used, cookies are classified in the categories described below:
Essential or technical cookies
These are strictly necessary for the proper operation of the Website and cannot be deactivated. They make it possible to retain the choice of Users to move around and use basic functionalities (e.g. connection to the customer area). These cookies store anonymized data only. These cookies are essential for using the website and cannot be deactivated.
Statistical cookies
They enable us to compile statistics and volumes on the number of visitors to and use of the various elements making up our Website (sections and content visited, path taken, etc.), enabling us to improve the interest and ergonomics of our services.
Advertising cookies
The purpose of advertising cookies is to identify Users’ centers of interest through products consulted on the Website, and to collect browsing data in order to personalize the advertising offer sent to Users outside the Website, or to meet specific objectives.
Social network cookies
Cookies may also be stored via the Website on the User’s terminal by social networks when using network buttons (“Facebook”, “Pinterest”, “Instagram”, “Google +” etc.). For more information about these cookies and your Data, please refer to their privacy policies accessible on their respective websites.
- Cookie management
Several options are available for managing cookies. Any settings made by the User are likely to modify his/her Internet browsing experience and the conditions of access to certain services requiring the use of cookies (essential/technical cookies).
The User may choose at any time to express and modify his or her wishes with regard to cookies, by the means described below.
If the functionality is activated on the Website, the User may at any time deactivate or configure the types of cookies from this page by clicking on the following link: Privacy Center
Users can configure their browser software so that cookies are stored on their terminal or, conversely, so that they are rejected, either systematically or depending on the sender. The User may also configure his browser software so that acceptance or rejection of cookies is proposed from time to time, before a cookie is likely to be stored on his terminal.
If the User’s browser accepts cookies, the cookies embedded in the pages and content consulted may be stored temporarily in a dedicated space on the User’s terminal. They will only be readable there by their sender.
If the User refuses to accept cookies from us, or if he deletes the cookies we have stored on his terminal, he will no longer be able to benefit from a certain number of functions which are nevertheless necessary for browsing certain areas of our website. This would be the case if, for technical compatibility reasons, we were unable to recognize the type of browser used by your terminal, its language and display settings, or the country from which your terminal appears to be connected to the Internet. Where applicable, we decline all responsibility for the consequences linked to the degraded operation of our services resulting from the impossibility for us to record or consult the cookies necessary for their operation and which the User would have refused or deleted.
To manage cookies and choices, the configuration of each browser is different. It is described in the help menu of the User’s browser, which will enable him/her to know how to modify his/her wishes regarding cookies.
With Internet Explorer: follow the procedure https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
With the Mozilla browser, follow the procedure https://support.mozilla.org/fr/kb/autoriser-bloquer-cookies-preferences-sites?redirectlocale=fr&redirectslug=Activer+and+d%C3%A9sactiver+les+cookies
With Chrome, follow the procedure https://support.google.com/chrome/answer/95647?hl=fr&hlrm=en
With Safari browser, follow the procedure https://support.apple.com/safari
With the Opera browser, follow the procedure https://www.accepterlescookies.com/comment-accepter-les-cookies-sur-opera.html
In addition, the User can connect to the Youronlinechoices website, proposed by digital advertising professionals belonging to the European Digital Advertising Alliance (EDAA) and managed in France by the Interactive Advertising Bureau France.
The User will thus be able to find out which companies are members of this platform, and which offer the possibility of refusing or accepting the cookies used by these companies to adapt the advertising likely to be displayed on his/her terminal to his/her browsing information: http://www.youronlinechoices.com/fr/controler-ses-cookies/
This European platform is shared by hundreds of Internet advertising professionals and constitutes a centralized interface enabling Users to express their refusal or acceptance of cookies that may be used to adapt the advertising likely to be displayed on their terminal to their browsing information.
- Cookie storage
Cookies installed by RT will be limited to thirteen (13) months in the User’s terminal from the moment he/she gives his/her consent to the application of said cookie. Beyond this period, the User must again give his consent.
Applicable law and jurisdiction
This Privacy Policy is governed by French law.
In the event of a dispute, and failing amicable settlement, the User may refer the matter either to one of the courts having territorial jurisdiction under the French Code of Civil Procedure, or to the court in the place where the User resided at the time the contract was concluded or at the time the harmful event occurred.