The website www.pierrot-gourmand.com is published by the companies ANDROS and GER'SON.
ANDROS and GER'SON being concerned about respecting the rules relating to the protection of personal data, this site has been developed in compliance with the General Data Protection Regulation No. 2016/679 (hereinafter referred to as "GDPR") and the law known as "Informatique et Libertés" of January 6, 1978 in its latest version.
ANDROS and GER'SON are committed to ensuring that your personal data is collected in a lawful, fair and transparent manner.
1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA ON THE SITE?
The controllers of your personal data are ANDROS, a general partnership registered with the Cahors Trade and Companies Register under number 428 682 447 and located at Zone Industrielle, 46130 Biars-sur-Cère and GER'SON, a general partnership registered with the Brive Trade and Companies Register under number 701.650.145 whose registered office is located at Les Escures – 19120 Altillac
2. WHAT PERSONAL DATA IS PROCESSED?
The personal data processed are as follows:
Personal data allowing your identification: title, surname, first name, billing address, delivery address, email address, telephone number.
Some personal data is mandatory (fields marked with an asterisk). Otherwise, ANDROS and GER'SON will not be able to provide you with the service.
Data relating to your purchases (and in particular the list of purchases made, the date of purchases, banking details for making purchases and/or reimbursements),
Data relating to your participation in competitions,
Data relating to the geographical position of the place of delivery of the order in order to identify the nearest relay package,
Data relating to the pages consulted.
3. WHY IS YOUR DATA COLLECTED?
The processing of personal data carried out is legally based on the performance of a contract, the legal obligations incumbent on ANDROS and GER'SON, the legitimate interests of ANDROS and GER'SON, and, where applicable, your consent. When processing is based on your consent, you have the right to withdraw your consent at any time.
If you do not wish to complete the fields marked with an asterisk, you may not be able to access certain services on the website and ANDROS and/or GER'SON may be unable to respond to your request.
| Legal bases | Purposes |
|---|---|
| Execution of the contract | - Customer relationship management - Order fulfillment - Cancellation management - Delivery management - Complaint management - Invoicing - Accounting management - Competition organization |
| Consent | - Subscription to our newsletter - Commercial prospecting by e-mail including targeted commercial prospecting - Transmission of personal data to commercial partners - Participation in competitions or lotteries - Responding to satisfaction surveys - Collection and publication of testimonials and opinions - Product testing |
| Legitimate interests of ANDROS and GER'SON: - to better understand our customers and offer them products that we believe are suited to their interests; - to develop our customer base; - to secure our website and protect our image | - Development of statistics, analyses and commercial surveys - Management of technical prospecting operations (including technical operations such as standardization, enrichment and deduplication) - Selection of people to carry out loyalty, prospecting, survey, product testing and promotional actions - Fraud prevention and management of account security measures - Management of opinions and comments on our products - Management of unpaid invoices and disputes |
| Legal obligations | - Management of requests to exercise rights (right of access, right to object, right to limit processing, etc.) - Conservation of proof of consent obtained - Updating of prospecting files by the organization responsible for managing the telephone canvassing opposition list |
4. WHO ARE THE RECIPIENTS OF YOUR DATA?
Personal data is processed, within the limits of its attributions, by:
-
the e-commerce, marketing, legal, consumer relations and accounting departments of the companies ANDROS and GER'SON.
-
external service providers responsible for implementing personal data processing or as part of ANDROS and GER'SON consulting and assistance missions. In this case, ANDROS and GER'SON have taken care to supervise the subcontracting contracts that bind it to its subcontractors, in accordance with legal and regulatory provisions;
-
legal assistants and ministerial officers in the context of their mission of legal assistance and representation in court in the event of litigation;
-
the judicial authorities;
-
any natural or legal person authorized by an enforceable court decision;
-
the body responsible for managing the telephone canvassing opt-out list;
-
the business partners of ANDROS and GER'SON companies if you have expressly accepted;
-
the body responsible for managing the telephone canvassing opposition list when the telephone number is collected for commercial prospecting purposes;
5. HOW LONG IS YOUR DATA KEPT?
Your personal data is kept for a period not exceeding that necessary for the purposes for which it is processed, then deleted.
The main retention periods are as follows:
| Purposes | Retention periods |
|---|---|
| Execution of orders, deliveries, withdrawals | 5 years from the formation of the contract. |
| Invoice management | 10 years as an accounting document |
| Business prospecting | 3 years from your last contact |
| Litigation management | Duration of acquisition of the legal limitation period. In the event of legal action being taken, data will be retained for up to 5 years after the end of the legal proceedings (when a decision has become final) |
| Cookies | 6 months |
6. HOW DO THE TARGETED OFFERS PROPOSED TO YOU WORK?
You are informed that the companies ANDROS and/or GER'SON may offer you personalized offers and information which, in view of the products purchased or viewed, should, in our opinion, interest you.
You have the right to object to the processing at any time in accordance with Article 8 of this policy.
7. IS YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
Your personal data may be transferred outside the European Union as part of the provision of services by our subcontractors. In this case, ANDROS and GER'SON have taken care to supervise the contracts that bind them, in accordance with legal and regulatory provisions.
These transfers are governed by appropriate safeguards to ensure their security. They may be based on an adequacy decision by the European Commission regarding a country's level of data protection.
In the absence of an adequacy decision, transfers are governed by compliance with standard data protection clauses approved by the European Commission.
8. WHAT ARE YOUR RIGHTS?
In accordance with current regulations on the protection of personal data, you have the right to access, rectify and erase your personal data, as well as the right to limit processing and object to processing, the right to data portability and the right to define guidelines for the retention, deletion and communication of your personal data after your death. You can exercise your rights by sending a letter to ANDROS, DPO - Zone Industrielle 46130 Biars-sur-Cère or by contacting the data protection officer at the following address: DPO-Andros@andros.fr .
You may be asked for proof of identity.
The exercise of any of your rights may be refused if your request does not meet the conditions set out in this policy or by the Regulations in force. In this case, you will be duly notified.
Furthermore, you are informed of the existence of the “Bloctel” telephone canvassing opt-out list, on which you can register: https://conso.bloctel.fr/.
In the event of a complaint, you have the right to contact the CNIL at the following address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX, if you believe that the processing of your data does not comply with the applicable legal and regulatory provisions.
9. HOW IS THE SECURITY AND CONFIDENTIALITY OF YOUR DATA ENSURED?
ANDROS companies undertake to implement all physical security measures (security of access to premises, management of authorizations, security of equipment, etc.) and logical measures (antivirus, password security, flow security, anonymization, encryption, data traceability, etc.) necessary to ensure the security and confidentiality of the personal data processed.
