1. Our company

Briconord Group and each of its respective subsidiaries, parent companies and affiliates are deemed to operate this website. We recognize that you care how information about you is used and shared. We have created this privacy policy to inform you about the information we collect on the website, how we use your information, and the choices you have about how your information is collected and used. Please read this privacy policy carefully. Your use of the website indicates that you have read and accept our privacy practices as described in this Privacy Policy.

 

Please note that the practices described in this Privacy Policy apply to information collected by us or our subsidiaries, affiliates or agents: (i) through this website, (ii) where applicable, through our customer service in connection with this website, (iii) through information provided to us in our independent retail shops, and (iv) through information provided to us in connection with promotions and sweepstakes.

 

  1. The personal data we process

In the context of the processing of personal data, Briconord Group collects and processes the following data:

 

If you are a consumer :

The personal data collected to benefit from certain services or to create an account are :

  • title, surname, first name, postal address and date of birth
  • email address and password
  • information provided on the account
  • authorization (checkbox specifically) to allow us to send the monthly newsletter or refusal if the choice is not to be part of our mailing list
  • statistics on the opening and clicks on the newsletters sent
  • activity data on the site: time of connection, duration and time of end of connection, pages consulted, etc.

 

If you are a professional :

Personal data collected to benefit from certain services or to create an account:

  • title, surname, first name, postal address and date of birth
  • email address and password
  • name of the establishment, professional category, postcode and town.
  • information provided on your account
  • refusal (checkbox specifically) if the choice is not to receive the newsletter
  • statistics on opening and clicks on newsletters sent by the Data Controller
  • activity data on the site: time of connection, duration and time of end of connection, pages consulted, etc.

 

 

  1. The purposes and legal bases of our data processing

The purposes of our processing

The processing that we carry out is for the following purposes:

  • Website content management ;
  • Management of marketing communication / communication to consumers, customers and prospects;
  • Tracking the consumer, professional, customer and prospect journey;
  • Follow-up of consumer, professional and customer relations and of complaints, questions or requests for information;
  • Audience analysis ;
  • Customer categorisation ;

 

The legal basis for our processing

We only process data if at least one of the following conditions is met:

 

  • your consent to the processing operations has been obtained ;
  • the performance of a contract between us and you requires us to carry out the relevant processing of personal data;
  • we are bound by legal and regulatory obligations that require the processing of personal data;
  • the existence of our legitimate interest, or that of a third party, justifies us carrying out the processing of personal data concerned. The legitimate interests pursued by the Controller may include enabling the continuity of its business, improving the consumer experience, building consumer loyalty, understanding consumer expectations, managing user requests.

 

  1. The recipients of your data

The personal data we collect, as well as those collected subsequently, are intended for us in our capacity as a marketing and digital operations department.

We ensure that only authorised persons have access to this data. Our subcontractors / service providers may receive this data in order to carry out the services we entrust to them.

Your personal data may be matched, pooled or shared between all parent, sister and subsidiary entities of the Data Controller.

It may be communicated to these entities for the purposes mentioned in this information notice. These operations are carried out on the basis of instruments that comply with the applicable regulations and are capable of ensuring the protection and respect of your rights.

 

  1. Transferring your data

As part of the services offered, we transfer your personal data to recipients in the following countries

  • in France: to subcontractors (agency managing the website or agency managing the database or agency managing the email routing)
  • to the USA: for site cookies (Google Analytics) and others (Facebook…). Each of these transfers is governed by legal instruments that comply with the applicable legal framework. The data transferred to our service providers located in the United States is certified EU-US Privacy Shield, thus ensuring a sufficient level of protection.

 

  1. How long we keep your data

The retention periods we apply to your personal data are proportionate to the purposes for which they were collected. Accordingly, we organise our data retention policy as follows:

 

Purpose of processing Duration of retention

Prospecting 3 years from the last contact from you or, if applicable, from the end of the commercial relationship plus the duration of the legal requirements

Customer In the context of concluded contracts, the data is stored for the duration of the business relationship plus the duration of the legal requirements.

Cookies 13 months from their installation on your device

Contract for an amount of more than €120 for accounting purposes10 years (legal duration not modifiable) from the conclusion of the contract

In case of exercise of the rights of access, rectification, erasure, restriction, data relating to identity documents and information enabling these rights to be taken into accoun t1 year from receipt of the request

In case of exercise of the right to object, data relating to identity documents and information enabling the right to object to be taken into account. 6 years from receipt of the request

Requests made via the contact form During the time it takes to process the request plus the legal limitation period.

Customer profile created on the website 3 years from the last contact from you or the date of creation of the customer profile

Newsletter Until you withdraw your consent or, failing that, 3 years* from the last contact from you

The retention periods presented may be increased by the applicable legal limitation periods.

 

  1. Your rights

How to exercise your rights

You can exercise your rights

  • by e-mail to the following address: contact@nordlinger-pro.com
  • by post to the following address CS 20001- RN10 – VIGNOLLES, 16300 BARBEZIEUX – FRANCE

To do so, you must clearly indicate your full name(s) and the address to which you wish the reply to be sent.

In principle, you may exercise all your rights free of charge. However, in relation to the right of access, you may be required to pay a reasonable fee based on administrative costs for any copy of the data you request.

With regard to the right to information, the Marketing and Digital Operations Department will not be obliged to act on it if you already have the information you are requesting.

The Marketing and Digital Operations Department will inform you if they are unable to comply with your requests.

These rights are not absolute and are subject to various conditions under :

  • the applicable local data protection or privacy law;
  • and the laws and regulations applicable to you.

The Marketing and Digital Operations Department would like to inform you that the non-information or modification of your data may have consequences in the processing of certain requests in the context of the execution of the contractual relationship and that your request for the exercise of your rights will be kept for follow-up purposes for 6 years concerning the exercise of the right to object and 1 year concerning the exercise of other rights.

The full range of rights available to you is detailed below.

 

Your right to information

You acknowledge that this information notice informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared, and the possibility of transferring data to a third country or to an international organisation.

In addition to this information and in order to ensure fair and transparent processing of your data, you declare that you have received additional information concerning :

  • how long your personal data will be kept;
  • the existence of the rights recognised for your benefit and the modalities of their exercise.

If we decide to process data for purposes other than those stated, you will be given full information about the new purpose.

 

Your right to access and correct your data

By exercising this right, you have confirmation as to whether or not your personal data is being processed and, where it is, you have access to your data as well as information about :

  • the purposes of the processing ;
  • the categories of personal data concerned;
  • the recipients or categories of recipients, in particular recipients who are established in third countries;
  • where possible, the intended period of retention of personal data or, where this is not possible, the criteria used to determine this period;
  • the existence of the right to ask the marketing and digital operations department to rectify or erase your personal data, the right to request a limitation of the processing of your personal data, the right to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • information on the source of the data when not collected directly from the data subject;
  • the existence of automated decision-making, including profiling, and in the latter case, relevant information about the underlying logic, as well as the significance and expected consequences of such processing for the data subjects.

You can ask us to correct or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.

 

Your right to erasure of your data

You may request the deletion of your personal data where any of the following grounds apply:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • you withdraw the consent previously given ;
  • you object to the processing of your personal data where there is no legal ground for such processing;
  • the processing of personal data does not comply with the provisions of the applicable laws and regulations;
  • your personal data was collected when you were a minor.

However, the exercise of this right will not be possible when the conservation of your personal data is necessary with regard to the legislation or regulations and in particular, for example, for the establishment, exercise or defence of legal claims.

 

Your right to limit data processing

You may request the restriction of the processing of your personal data in the cases provided for by the legislation and regulations.

 

Your right to object to data processing (unsubscribe)

You have the right to object to the processing of your personal data where the processing is based on the legitimate interests of the marketing department and digital operations.

In case of direct communication, this right can be exercised by any means, including by clicking on the unsubscribe links at the bottom of the communications sent.

 

Your right to data portability

You have the right to the portability of your personal data.

The data on which this right can be exercised are :

  • only your personal data, which excludes anonymised personal data or data that does not concern you;
  • declarative personal data as well as operational personal data;
  • personal data that do not infringe on the rights and freedoms of third parties, such as those protected by business secrecy.

This right is limited to processing based on consent or contract and to personal data that you have personally generated.

This right does not include derived or inferred data, which are personal data created by the Data Controller.

 

Your right to withdraw your consent

Where the data processing operations we carry out are based on your consent, you may withdraw it at any time. We will then stop processing your personal data without affecting the previous operations to which you have consented.

 

the security of your data

The protection, integrity and confidentiality of your data are of great importance to us. Therefore, we have implemented technical and organisational measures to ensure a level of security appropriate to the risk and to protect your data against loss, alteration, access or disclosure to unauthorised third parties.

However, despite our best efforts, no security measure can protect against all risks of misuse or hacking, for which we, as the data controller, cannot be held responsible.

In the event of a personal data breach, we undertake to notify the CNIL in accordance with the regulations in force relating to the protection of personal data. In the event that a data breach presents a high risk to your rights and freedoms, we will inform you as soon as possible and always in accordance with the conditions set out in the regulations in force relating to the protection of personal data.

If you have any questions about this privacy policy, you should contact our customer service department by email at contact@nordlinger-pro.com