Privacy policy

The SOCIETE COOPERATIVE AGRICOLE LES SALINES DE GUERANDE - LE GUERANDAIS (hereinafter "LE GUERANDAIS") is a company constituted in the form of an agricultural cooperative with variable capital, registered on the Saint-Nazaire Trade & Companies Register under the number 349 241 315 and whose registered office is located at Pradel – CS 65315 – 44353 GUERANDE, France.

As we are concerned about the protection of personal data, we comply with Act No. 78-17 of 6 January 1978 regarding Information Technology, Files and Liberties (hereinafter the "French Data Protection Act") and European Regulation 2016/679 of 27 April 2016 on the protection of individuals in respect of the processing of personal data and the free movement of such data, known as the General Data Protection Regulation or GDPR (hereinafter the "GDPR").

This privacy policy (hereinafter the "Privacy Policy") provides information about the ways in which LE GUERANDAIS collects and processes your personal data in the context of managing files related to its customers, prospective customers and professional relationships.

It is not a contract and does not create any obligations beyond those provided for by the data protection regulations previously mentioned. 

We may update our Privacy Policy. You will be made aware of any updates in advance and we shall obtain your consent when your consent is necessary.

The terms "data controller", "data processor", "data subject", "personal data", "processing", "personal data breach", "member state" shall have the same meaning as attributed to them by the GDPR and the terms derived therefrom must be interpreted in the same manner.


Article 1 - Data Controller for the personal data

LE GUERANDAIS is the Data Controller for the personal data.
If you have any questions about the processing of your personal data by LE GUERANDAIS, you can contact us:
  • by email at the following email address: rgpd@seldeguerande.com
  • by writing to the following postal address: Pradel – CS 65315 – 44353 GUERANDE, France  
  • by telephone on the following number: +33 (0)2 40 62 01 25

Article 2 - Personal Data collected
In the course of conducting our business, we may have cause to collect your personal data if:
  • you or your institution are or have been a customer or a prospective customer of LE GUERANDAIS;
  • you have visited our website: https://www.leguerandais.fr/fr (hereinafter the "Website");
  • you have created a personal space on our Website;
  • you have asked to be contacted by LE GUERANDAIS via the online forms on our Website (for the different reasons listed);
  • you have participated in one of the events organised by LE GUERANDAIS;
  • you are or have been connected to one of the members of LE GUERANDAIS via social networks;
  • you know one of the members of LE GUERANDAIS professionally;
  • you have applied to work for LE GUERANDAIS;

We may collect your data from different sources. It may be communicated:

  • by you or another person belonging to your institution by filling in one of the online forms on our Website to create a personal space and/or to be contacted by LE GUERANDAIS;
  • by you or another person belonging to your institution by filling in your personal space;
  • by you or another person belonging to your institution when you use social networks, particularly our Facebook page, our YouTube channel, our Instagram account or our "Bien saler" application;
  • by you or another person belonging to your institution during long-distance or in-person discussions (such as mail, fax, telephone calls, SMS, emails, appointments, trade fairs/professional events, meetings);
  • via cookies and other internet trackers used on our Website - in relation to this, we invite you to view our cookies policy [hypertext link to the cookies policy].

It may also be collected on websites for professionals and/or applications accessible to the public such as LinkedIn or your Website or your institution's Website. This involves identification data (surname, first name, professional email address, professional telephone number, etc.) and data about your current professional situation.

Collecting some of your personal data is mandatory:

  • For the creation and management of your personal space on our Website, collection of the following data is mandatory: surname, first name, email address, password and username. If this mandatory information is not sent, we will not be able to create a personal space for you. These requirements to provide data are contractual.
  • Collection of the following data is mandatory for the purposes of managing and processing your contact requests, your requests for information, press inquiries and your employment applications: surname, first name, email address, purpose of the contact request. If this mandatory information is not sent, we will not be able to fulfil your request. These requirements to provide data are contractual.
  • For the management and processing of your requests for estimates/prices and your product orders, customer relations management, complaints, collection of the following data is mandatory: surname, first name, email and postal addresses, telephone contact details, and, if applicable, professional role/industry (individual, processor, superstores and hypermarkets, restaurateur/delicatessen, wholesaler, specialised shop or exporter), identification data for your institution (name, postal address, telephone number, SIRET), payment data, contract-related data (transaction number, order history, amount, discussions with the customer service department, etc.). If this mandatory information is not sent, we will not be able to fulfil your estimate request or implement the order contracts that have been made. These requirements to provide data are contractual.
  • To manage registration requests for events organised by LE GUERANDAIS, collection of the following data is mandatory: surname, first name, email address, postal address, name of your institution, if applicable. If this mandatory information is not sent, we will not be able to process your registration request. These requirements to provide data are contractual.
  • In order to exercise your rights, as set out in Article 5 of this Privacy Policy, you may be required to provide information or documents as proof of your identity or for additional information on the nature of your requests. Failure to do this may prevent us from responding to your requests. This requirement to provide data is regulatory.

The collection of other data may be mandatory. All data which it is mandatory to collect, the contractual or regulatory nature of this obligation to provide data and the consequences of the non-disclosure of relevant data are directly notified to you at the time of the data collection.


Article 3 - Purposes and Legal Basis of Data Processing

In accordance with the regulations, in order to be lawful, all personal data processing must be based on a legal basis set out in Article 6 of the GDPR.
The following table sets out the different purposes for our processing of your data and the legal basis for each of these purposes.

 

Purposes pursued

Legal basis

 

Management of contact and information requests, press inquiries

Management of personal spaces on our Website

Management of requests for estimates and prices

Implementation and monitoring of order contracts that have been made

Handling discussions with customers and prospective customers

Accounting management

Sending news messages, newsletters and commercial offers regarding products similar to those already provided by LE GUERANDAIS

 

Processing of employment applications

 

Performance by LE GUERANDAIS of a contract to which the data subject is a party or pre-contractual measures taken at the request of the data subject or legitimate interests of LE GUERANDAIS (performance of its activities), depending on the case

 

Sending of informative messages about the life and business of LE GUERANDAIS, greetings and invitations to events organised by LE GUERANDAIS

Management of events organised by LE GUERANDAIS (for example, for the management of registrations, sending of gifts)

 

Legitimate interests of LE GUERANDAIS (promoting its business operations)

 

Management of complaints, unpaid debts, pre-litigation and legal disputes

 

 

Legitimate interests of LE GUERANDAIS (defending its rights and interests) or compliance with the legal obligations of LE GUERANDAIS, as applicable

 

Management of your rights (particularly maintaining a list of objections to the receipt of our various mailings)

 

Compliance with the legal obligations of LE GUERANDAIS

 

Performing audience measurement on our Website

Consent (obtained via our cookie information banner)



Article 4 - Recipients of Personal Data
 
Depending on the case in question, the personal data will be received by our commercial, customer service, marketing, human resources or legal departments.
 
We may have to communicate the data:
  • to our data processors and their own data processors (IT service provider, transport service provider, technical service provider, payment service provider, audience measurement tool on our websites, debt recovery company, accounting firm and accounting expert, legal practice, auditors, marketing service provider, etc.). Our data processors are bound by a confidentiality and security obligation, as well as other the obligations set out in the GDPR;
  • to our partner, TERRE DE SEL, a simplified joint stock company with a single shareholder, registered on the Saint-Nazaire Trade & Companies Register under the number 485 007 835, whose registered office is located at Pradel – 44350 Guérande, France;
  • financial, judicial, administrative authorities or government agencies, public bodies and supervisory authorities to which LE GUERANDAIS may, in particular in the scope of legal proceedings, disputes, audits and/or applications, be required to disclose certain data, on request and within the limits of regulations;
  • our beneficiaries or any successors.

In accordance with Article 19 of the GDPR, we shall notify each recipient to whom your personal data has been disclosed of any request for correction or erasure of personal data or restriction of processing in accordance with Article 16, Article 17-1 or Article 18 of the GDPR (see Article 6 below), unless such a notification proves impossible or involves disproportionate effort.


Article 5 - Your rights 
You have the following rights under the provisions of Articles 15 and following of the GDPR, except as otherwise provided for:
  • the right to obtain confirmation as to whether or not your personal data is being processed, and, when this is the case, access to said personal data, as well as various types of information about our processing (right of access – Article 15 of the GDPR);
  • the right to obtain the correction of inaccurate personal data about you (right to correction – Article 16 of the GDPR);
  • the right to obtain the erasure of your personal data in certain cases (right to erasure or right to be "forgotten" - Article 17 of the GDPR);
  • the right to obtain a restriction on processing in certain cases (right to restriction on processing – Article 18 of the GDPR);
  • the right to receive the personal data you have provided, in a structured, commonly used and machine-readable format and/or to ask us to forward such data to another data controller, where the processing is based on consent or the processing is carried out by automated means (right to data portability – Article 20 of the GDPR);
  • the right not to be subject to a decision based solely on automated processing, which produces legal effects concerning you or significantly affecting you in a similar way (right not to be subject to automated individual decision-making – Article 22 of the GDPR);
  • the right to obtain our discontinuance of processing personal data concerning you on grounds relating to your particular situation (right to object – Article 21.1. of the GDPR);
  • the right to object to the processing of your personal data for direct marketing purposes (right to object to direct marketing – Article 21.2. of the GDPR);
  • the right, at any time, to withdraw your consent to the processing of your personal data, which is based on consent, and without such withdrawal of consent affecting the lawfulness of the processing carried out before its withdrawal (Article 7.3. of the GDPR).
The existence of these rights or otherwise depends, in particular, on the legal basis for the processing covered by the request. These rights are not unrestricted and, in some cases, we may therefore refuse your request (for example, for the purposes of compelling legitimate grounds regarding the right to object). Thus, in some cases, we may reply that we cannot give a positive response and explain the reason we cannot comply with the request.

You also have the right to define, amend and revoke instructions regarding the storage, erasure and disclosure of your personal data after your death at any time, in accordance with Article 40-1 of the French Data Protection Act. These instructions may be general or specific. Only we may be given special instructions concerning the data we process. General instructions may be recorded and stored by a trusted digital third party certified by the French Data Protection Authority ("CNIL"). You also have the right to designate a third party to whom your data may be disclosed after your death. You therefore undertake to inform this third party of the measures that you have taken and the fact that data enabling them to be unambiguously identified shall be transmitted to us, and shall disclose this Privacy Policy to them. 

In keeping with the conditions imposed by the regulations, you may exercise your rights by writing to us at the following email address: rgpd@seldeguerande.com  or the following postal address: Pradel – CS 65315 – 44353 GUERANDE, France.

When we have reasonable doubts concerning your identity, we may ask you to provide additional information or documents in order to confirm your identity (for example, in some cases, a black and white photocopy of the front of your national identity card).
 
We shall make every effort to respond to your requests within a reasonable time frame and, in any event, within the time limits laid down by the applicable regulations.

You also have the right to lodge a complaint with the competent supervisory authority, which in France is the French Data Protection Authority (hereinafter the "CNIL"), and to take legal action against us before the competent courts in the event of a breach of your personal data rights by us. You may claim full compensation for all the damage suffered.


Article 6 - Retention Period for your Data

Data shall be stored for the period of time strictly necessary for the purposes set out above in Article 2.

Data concerned

 

Total retention period

 

 

Data used for contracts that have been concluded

Data processed in our electronic messaging tool

 

During the period in which LE GUERANDAIS's liability can be incurred (taking into account any interruptions or suspensions of the applicable periods prescribed under civil or criminal law)

Accounting documents (for example: invoices)

10 years with effect from the invoice date

Data related to the management of an unpaid debt

 

2 years following the settlement of a consumer's unpaid amount

 

5 years following the settlement of a professional's unpaid amount

 

Data from cookies

13 years after the data was collected

Data related to directives about the fate of your data after your death

As long as the data to which the directives relate is retained

Data about the exercise of a right of access, correction or erasure

5 years with effect from the completion date of the procedure related to your request

Data on exercising a right to object

6 years with effect from the completion date of the procedure related to your request

Data on exercising a right to the restriction of processing

5 years with effect from the end of the limitation of processing

Data related to the processing of employment applications

2 years after the last contact with the candidate if his/her application is not accepted and they have not requested that the application be destroyed

Other data used outside of the scenarios referenced above (data used to fulfil different requests for estimates, contact, information; data used with a view to commercial prospecting, etc.)

3 years following its collection by LE GUERANDAIS or the last contact from you

At the end of the periods listed above, your data will either be deleted or made anonymous.  

On an exceptional basis, if there is pre-litigation or there are legal disputes, all or some of your data may be retained for prolonged periods if it is relevant to said pre-litigation or legal disputes.


Article 7 - Transfer of your Data outside the European Union

We may use partners or service providers to which we need to transfer all or part of the personal data we collect and process. Since some of the servers of some of the players involved are located outside the European Union, it shall accordingly be necessary to transfer your data outside the European Union.

We shall ensure that such transfers of personal data outside the European Union are carried out in accordance with our Confidentiality Policy. When the non-EU member state receiving personal data is not officially recognised by the European Commission as ensuring an adequate level of data protection, we undertake to provide appropriate safeguards to protect your personal data in accordance with Article 46 of the GDPR, in particular by using standard contractual clauses approved by the European Commission. In addition, we shall ensure that you have enforceable rights and effective legal remedies at all times.

The transfers that may occur and the precautions taken are described below.

 

Entity

Recipient country of your data

 

Implementation protection

(Privacy Shield, Contractual type clauses, Binding Corporate Rules (BCR), Adequacy decision from the European Commission)

 

Google Analytics

 United States

 

Privacy Shield   (https://support.google.com/analytics/answer/7105316?hl=fr)

 

Partners whose business is outside of the European Economic Area (if necessary and with your agreement)

The recipient country varies according to the scenario in question

The protection measure depends on the country concerned and is verified if a transfer of this type is envisaged as part of the handling of the case.


Article 8 - Security of Personal Data

We shall make every effort to take all appropriate measures to ensure the security and confidentiality of your personal data, to prevent your personal data from being damaged or altered, or an unauthorised third party gaining access to or misusing such data. 

We shall take technical and organisational measures to guarantee appropriate security for your personal data.