Personal data

vivienpaille.com attaches the greatest importance to the protection of personal data. To this end, this Privacy Policy will allow you to understand what personal data we collect and what we do with it.

 

Our website collects some Personal Data from its Users.

 

 

Owner and data controller

 

  • Address: 41 Rue du Petit Bruxelles – 59300 VALENCIENNES, FRANCE
  • VALENCIENNES Companies Register No. 568 801 260
  • Email: contact@vivienpaille.com

 

 

Type of data collected

 

The types of Personal Data that this site collects directly or through third parties include: first name, last name, phone number, email address, Cookie and Usage Data.

 

Full details of the types of Personal Data collected are provided in the sections devoted to this Privacy Policy or in specific explanatory texts published before the Data is collected.

 

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when you use the website.

 

Unless otherwise indicated, all Data requested by this site is required and its absence may make it impossible for the site to provide Services or information. In the event that this site specifies that specific Data is not required, Users are free not to communicate it without affecting the availability or functioning of services or information. Users who have any doubts about the Personal Data required are invited to contact the Owner.

 

Any use of Cookies - or other tracking tools - by this site or by the owners of third-party services used by this site is intended to provide the Service(s) requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.

 

Users are responsible for any third party Personal Data obtained, published or communicated via this site and confirm that they obtain the consent of the third party to provide the Data to the Owner.

 

 

Mode and place of data processing

 

Processing methods

 

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of the Data.

 

Data processing is carried out using computers or IT tools, following procedures and organizational methods closely related to the purposes indicated. In addition to the Owner, the Data may be accessible, in certain cases, to certain categories of persons in charge of this site's functioning (administration, marketing, legal department, system administration) or to external parties (such as third-party technical service providers, messaging services, hosting providers, IT companies, communications agencies) designated, where applicable, as Subcontractors by the Owner. An updated list of these parties may be requested from the Owner at any time.

 

 

Legal basis for processing

 

The Owner may process Personal Data relating to Users if one of the following conditions applies:

 

  • Users have given their consent for one or more specific purposes;

Note: Under certain legislation, the Owner may be authorized to process Personal Data until the User objects ("opt-out"), without having to depend on consent or one of the following legal bases. However, this condition does not apply where the processing of Personal Data is subject to the European General Data Protection Regulation;

 

  • The provision of Data is required for the performance of an agreement with the User or for any precontractual obligation of the latter;
  • Processing is required to comply with a legal obligation to which the Owner is subject;
  • Processing is required for the purposes of the legitimate interests pursued by the Owner or by a third party.

In all cases, the Owner will be available to assist you in clarifying the specific legal basis that applies to processing, and in particular whether the provision of Personal Data is a legal or contractual requirement, or a requirement required to conclude an agreement.

 

 

Place of processing

 

Data is processed at the Owner's head office and at all other locations where the parties responsible for processing are located.

 

Depending on the User's location, data transfers may result in the User's Data being transferred to a country other than their own. To find out more about where such transferred Data is processed, Users may consult the section containing details about the processing of Personal Data.

 

Users also have the right to know the legal basis for transfers of Data to a country outside the European Union or to any international organization governed by public international law or created by two or more countries, such as the United Nations, as well as the security measures taken by the Owner to safeguard their Data.

 

If such a transfer takes place, Users can find out more by consulting the relevant sections of this document or by contacting the Owner using the information provided in the contact section.

 

 

Retention time

 

Personal Data is retained for a period strictly required to achieve the purposes for which it is collected. Unless otherwise stated, the retention period is 3 years from the last active contact with the User, pursuant to recommendations on the managing customer and prospective customer files.

 

Consequently, Personal Data collected for purposes related to the performance of an agreement between the Owner and the User must be retained until the agreement is fully performed.

 

The Owner may be obliged to retain Personal Data for longer periods whenever this is required for the performance of a legal obligation or by order of an authority.

 

The information collected in this way will only be used to monitor the volume, type and pattern of traffic using this site, to develop the design and layout of the site or for other administrative and planning purposes and, more generally, to improve the service we offer you.

 

Once the retention period has expired, the Personal Data will be deleted. Consequently, the right of access, the right of erasure, the right of rectification and the right to data portability cannot be applied after the expiry of the retention period.

 

User Data is collected to enable the Owner to provide its Services and for the following purposes: Contacting the User, Analyses, Interaction with social media and external platforms, Managing contact details and sending messages and Managing the user database, managing agreements.

 

Users can find further information on the purposes of this processing and on the specific Personal Data used for each purpose in the respective sections of this document.

 

 

Detailed information on the processing of personal data

 

Personal Data is collected for the following purposes using several services:

 

 

Analyses

 

The services contained in this section allow the Owner to monitor and analyse web traffic and track changes in User behaviour.

 

Google Analytics (Google Inc.) is a web analytics service provided by Google Inc ("Google"). Google uses the Data collected to track and analyse the use of this site, prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize advertisements on its own advertising network.

 

Personal data collected: Cookie and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.

 

 

Contacting the user

 

By completing the contact form with their Data, the User authorizes the use of this information by this Application for the purposes of responding to requests for information, quotations or any other request as indicated in the header of the form.

 

Personal data collected: surname, first name, email address, phone number. We inform you of the existence of the "Bloctel" telephone canvassing opposition list, on which you can register.

 

Subscribing to the distribution list or Newsletter means that the user's email address is added to the contact list of people who may receive emails containing information about news and forthcoming collective information meetings offered by the cooperative. Your email address may also be added to this list if you register with this website or after signing an agreement.

 

Personal data collected: Email address.

 

 

Prospect relationship management service

 

This service enables vivienpaille.com to follow up on requests made by prospective customers and thus enable it to follow up by email, establish phone contact or request additional information.

 

 

Interaction with social media and external platforms

 

These types of services allow interaction with social media or other external platforms directly from the pages of this site.

 

The interactions and information obtained by this site are always subject to the privacy settings defined by the User for each social media.

 

If such a service allowing interaction with social media is installed, it may still collect web traffic data from pages where the service has been installed, even if users do not use it.

 

 

Other information about personal data

 

Web hosting and backend infrastructure

 

The purpose of these types of services is to host Data and files that enable this site to function and be distributed and to provide a ready-made infrastructure for specific functions or parts of this site to work.

 

Some of these services operate through geographically dispersed servers, making it difficult to determine the actual location where Personal Data is stored in Europe.

 

  • Hosting:
    This site is hosted on Microsoft's Cloud offering (Azure). It is geographically located in Microsoft's Western Europe hosting centre in the Netherlands.
    For more information, please refer to: Azure Trust Center
  • Managed Services:
    This site is managed by Cloud Temple:
    Address: Immeuble Le Clemenceau II, 215 Avenue Georges Clemenceau, 92000 Nanterre, France
    SIREN: Nanterre Companies Register No. 402 336 085

 

User rights

 

Users may exercise certain rights concerning their Data processed by the Owner.
In particular, Users have the right to do the following:

 

  • Withdraw their consent at any time. Users have the right to withdraw their consent if they have already given their consent to the processing of their Personal Data.
  • Object to the processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
    Details are added in the relevant section below.
  • Access their Data. Users have the right to know whether Data is being processed by the Owner, to obtain information regarding certain aspects of the processing and to obtain a copy of the Data being processed.
  • Check and obtain a correction. Users have the right to verify the accuracy of their Data and to request that it be updated or corrected.
  • Limit the processing of their Data. Users have the right, under certain conditions, to limit the processing of their Data. In this case, the Owner will process their Data only for retention purposes.
  • Have their Personal Data deleted or erased. Users have the right, under certain conditions, to obtain the erasure of their Data from the Owner.
  • Retrieve their Data and transfer it to another data controller. Users have the right to retrieve their Data in a structured, commonly used and machine-readable format and, if technically possible, to transfer it to another data controller without hindrance of any kind. This provision applies, provided that the Data is processed by automated means and that the processing is based on the User's consent, on an agreement to which the User is a party or on pre-contractual obligations.
  • File a complaint. Users have the right to file a complaint with their competent data protection authority.

 

Information regarding the right to object to processing

 

Where Personal Data is processed in the public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a reason linked to their particular situation that should justify such objection.

 

However, Users should be aware that if their Personal Data is processed for direct marketing purposes, they may object to such processing at any time without providing any justification. To find out whether the Owner processes Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

 

How to exercise these rights

 

Any request to exercise User rights may be addressed to the Group's Data Protection Officer (DPO) at the following address: gdpr@avril.com. These requests can be exercised free of charge and will be considered by the DPO as soon as possible and always within one month.

 

 

Additional information on data processing and collection

 

Legal action

The User's Personal Data may be used for legal purposes by the Owner in court or in steps that may lead to legal action resulting from improper use of this site or related Services.

 

The User is aware that the Owner may be required to disclose Personal Data at the request of the public authorities.

 

 

Additional information concerning the User's personal data

In addition to the information contained in this Privacy Policy, this site may provide the User with additional information and contextual information concerning particular services or the collection and processing of Personal Data.

 

 

System logs and maintenance

 

For operational and maintenance purposes, this site and any third-party services may collect files that record interactions with this Application (system logs) or use other Personal Data (such as the IP address) for this purpose.

 

 

How “Do Not Track” requests are handled

This site does not support "Do Not Track" requests.
Please refer to the Privacy Policy of third-party services to determine whether or not they accept "Do not track" requests.

 

 

Changes to this Privacy Policy

The Owner reserves the right to review and make changes to this Privacy Policy at any time by notifying its Users on this page or – where technically and legally possible – by sending a notice to Users via the contact details available to the Owner. It is strongly recommended that Users consult this page frequently, referring to the date of the last modification indicated at the bottom.

 

If the changes affect the processing activities carried out on the basis of the User's consent, the Owner must obtain a new consent from the User where required.

 

The Company's subcontractors

In the course of carrying out its activities and providing its services, the Company uses subcontractors. These:

  • process your Personal Data on its behalf, and on its instructions,
  • provide sufficient guarantees as to the implementation of appropriate technical and organizational measures to ensure the security and privacy of your data.

 

In cases where the Company uses subcontractors located in countries offering levels of protection not equivalent to the level of protection afforded to personal data in the European Union, the Company undertakes to ensure that any such transfer is subject to certification to the transatlantic legal framework approved on 10 July 2023 by the European Commission (hereinafter "US-EU Data Privacy Framework" or "DPF") or by signing standard contractual clauses established by the European Commission or by implementing internal company rules ("BCR").

 

 

GDPR - European General Data Protection Regulation

Pursuant to the GDPR (General Data Protection Regulation), we inform you that the data collected as part of the information requested will be used for internal purposes only and will not be passed on to third parties under any circumstances. Your data will be retained for a period of one year.

 

What recourse do you have in the event of a data breach?  

  • "In the event of a breach of your Personal Data likely to create a risk for your rights and freedoms, the Company shall notify the CNIL (French Data Protection Authority) of said breach as soon as possible, and if possible no later than 72 hours after becoming aware of it. The Company will also inform the User as soon as possible pursuant to the provisions of Article 34 of the GDPR.
  • Without prejudice to any other administrative or legal remedy, the User who considers that the processing of their Personal Data constitutes a breach of the provisions of the legislation in effect may file a complaint with a competent supervisory authority such as the French Data Protection Authority (CNIL)."