Since May 2018, the General Data Protection Regulation (GDPR) has been the European framework for the processing and circulation of personal data. The protection of personal data is also governed by the French Data Protection Act no. 78-17 of 6 January 1978, as amended. This personal data protection policy informs you about how Cohélio processes your personal data in compliance with the RGPD and the French Data Protection Act.
WHO RECEIVES YOUR PERSONAL DATA?
Your personal data is processed by Cohélio,
Your personal data is made accessible only to persons authorised to have access to it in the light of their responsibilities. Your personal data is transmitted to Cohélio employees in charge of the administration of the site and the management of orders as well as to sub-contractors contractually linked to the data controller who are AttrapTemps, whom Cohélio calls upon to carry out its services within the framework of the purposes mentioned below, for example for the management, execution, processing, payment and logistics of orders as well as for marketing operations. Your data will not be passed on to our commercial partners without your prior knowledge and consent.
WHY DO WE NEED TO PROCESS YOUR PERSONAL DATA?
Your personal data is processed by Cohélio for the following purposes:
Managing orders, payment and delivery of products offered on the site
To create your customer account on our site
Enabling you to access and use our site, with the best possible experience and quality online browsing process your requests for information, complaints or queries, and contact you to respond to them
Process your requests for discount vouchers, to be used on our products, which we make available for our site.
Manage the relationship between you and Cohélio: process the management of your orders, your participation in our competitions, prize draws, promotional activities and any other requests.
Provide you with personalised content and services based on your browsing history, preferences and interests
To ask you questions about our products, and to better understand and measure your points of interest and consumer desires with a view to improving our digital platforms (website, social networks), our communication methods and/or developing new products and services
To develop and improve our products, services, communication methods and the functionality of our websites and services.
Cohélio ensures that it only collects and processes data that is strictly necessary for the purpose for which it is processed.
The legal basis for this processing is your consent. You may withdraw your consent in accordance with your right of withdrawal described below.
WHAT PERSONAL DATA IS COLLECTED?
We collect and process your surname, first name, address, email address, password, telephone number, IP address, connection and browsing data, order history, preferences and interests, products consulted, delivery incidents and complaints. The compulsory nature of the data is indicated at the time of collection by an asterisk.
HOW LONG IS YOUR DATA KEPT?
The data required to manage orders and invoicing is kept for the duration of the commercial relationship and ten (10) years for accounting purposes.
Data used to identify and target surveys (email, profile) is kept until you unsubscribe, after which it will be permanently deleted. However, if your account is inactive for a period of two (2) years, you will be informed by Cohélio and if you do not react within the period communicated by Cohélio, your data will be deleted.
Responses to surveys carried out by Cohélio are kept for a period of 3 years, after which time this data is deleted. However, these retention periods may be extended or shortened if :
You exercise one of your rights under the conditions set out below;
A longer retention period is authorised or imposed by virtue of a legal or regulatory provision or to safeguard our rights.
Data relating to means of payment are not kept by Cohélio. It is collected at the time of the transaction and is immediately deleted once the purchase has been paid for.
WHAT RIGHTS DO YOU HAVE?
You have :
A right of access, which allows you to obtain:
Confirmation that data concerning you is or is not being processed;
A copy of all personal data held by the data controller.
This right concerns all data which may or may not be processed by data controllers.
A right to request the portability of certain data: this allows you to recover your personal data in a structured, commonly used and machine-readable format. It applies only to data that is actively provided, for example by filling in a form or responding to a survey, and that is processed automatically.
A right to withdraw your consent: if you withdraw your consent to the processing of your personal data, given when you registered on the platform, you will immediately no longer be registered on the platform. You will therefore no longer have access to the platform and all your personal data will be deleted immediately.
A right of rectification: this allows you to have information about you rectified if it is out of date or incorrect. It also allows you to complete incomplete information about yourself.
A right to erasure: this allows you to have your personal data erased, subject to the legal retention periods. This right may apply in particular if your data is no longer required for processing.
A right of limitation: this allows you to limit the processing of your data in the following cases:
In the event of unlawful use of your data;
If you dispute the accuracy of your data;
If you need the data to establish, exercise or defend your rights.
You may give general instructions to a trusted third party or specific instructions to the data controller concerning the storage, deletion and communication of your personal data after your death. These directives may be modified or revoked at any time. We advise you to contact the Data Protection Officer, whose contact details are given below.
If, after contacting us, you feel that your personal data protection rights have not been respected, you may refer the matter to the Commission Nationale de l’Informatique et Libertés (CNIL). Contact details for the CNIL are available at the following address: https://cnil.fr/
HOW TO CONTACT THE DATA PROTECTION OFFICER?
For any further information, you can contact the Data Protection Officer at the following address:
Camille Piesseau – camille.piesseau@cohelio.fr
To support your request, you will be asked to provide proof of your identity.
Your personal data will no longer be processed and cannot be modified while you exercise this right.
For more details on your rights, please contact the Data Protection Officer, whose contact details are given below.
SECURITY OF YOUR DATA
Cohélio implements appropriate technical and organisational measures to ensure the security of your data in accordance with applicable regulations. In this context, it implements the necessary precautions and measures against any unauthorised access and use of data, accidental loss or theft of data, destruction or alteration of data and, in general, any damage that may affect such data.
