ARTICLE 1. WHO IS THE DATA CONTROLLER?

The data controller is:

DELEZAIVE Gaelle, SAS

residing at, 321 allée des muriers, 32600 Pujaudran
registered under SIRET number 90075846700014

 

ARTICLE 2. WHAT PERSONAL DATA DO WE PROCESS?

We collect and process the following personal data concerning you:

• Identification data (for example: surname, first name, email address, postal address, phone number);
• Commercial data (for example: exchanges with customer service, data necessary for providing subscribed services or managing customer relations, conducting satisfaction surveys, statistics);
• Billing data (for example: payment methods and history, transaction data, invoices);

Only personal data strictly necessary for the purposes described below are collected.

 

ARTICLE 3. WHAT ARE THE PURPOSES OF PROCESSING?

Your personal data are processed for the following purposes:

• Managing the relationship with you, in particular customer relations;
• Operations for conducting marketing campaigns and organizing events;
• Downloading files;
• Billing management;
• Statistics, analytics, and audience measurement;
• Satisfaction surveys regarding our services;
• Improving and optimizing the quality of our services and our website;
• Managing individual rights and requests to exercise these rights;

 

ARTICLE 4. WHAT ARE THE LEGAL BASES FOR PROCESSING YOUR PERSONAL DATA?

Your personal data are collected and processed on the following legal bases:

• On the basis of your consent;
• As part of the performance of a contract;
• For legitimate interest purposes;
• To ensure compliance with our legal and regulatory obligations.

All data are collected on a mandatory basis to fulfill the purposes of processing. No data are collected on an optional basis.

 

ARTICLE 5. WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

The recipients of your personal data are the following parties, depending on the processing carried out:

• Internal departments;

Said data are not transferred to a country located outside the European Union. However, should this occur, we undertake to ensure that these transfers comply with applicable regulations or with regulations offering an adequate and equivalent level of protection.

 

ARTICLE 6. HOW LONG IS YOUR PERSONAL DATA STORED?

Your personal data are retained only for the time strictly necessary to fulfill the purposes for which they are collected and processed.

By default:

• The customer account accessible via the customer portal is not retained for more than three (3) years from the last login;
• Your credit card details, when requested, are kept only for the duration necessary to complete the transaction;
• Your email address, surname, first name, and phone number are kept for the duration of the relationship with the data controller.
• Your billing data are retained for 10 years from the date the invoice is issued.

Nevertheless, personal data are retained for a longer period in archived form when required by legal and regulatory obligations or if necessary in light of applicable statutory limitation periods, in order to assert our rights when such proof cannot be provided by any other means.

Once your Personal Data are no longer required for the designated purposes or for archiving purposes to satisfy our legal obligations or statutory limitation requirements, we will ensure that they are completely destroyed or anonymized.

 

ARTICLE 7. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

Your rights regarding your personal data are as follows:

• Right of direct access; you have the right to be informed in a concise, transparent, intelligible, and easily accessible manner about how your Personal Data are processed.
• Right of inquiry; you also have the right to obtain confirmation as to whether Personal Data concerning you are being processed and, where applicable, to access such Personal Data.
• Right to rectification; you have the right to obtain the rectification of inaccurate Personal Data concerning you. You also have the right to complete incomplete Personal Data concerning you by providing a supplementary statement.
• Right to erasure – this right can be exercised provided it does not impede the performance of the contract or compliance with our legal and regulatory obligations;
• Right to restriction; of one or more processing operations on your personal data;
• Rights of modification and/or withdrawal, at any time, of consent regarding the processing of your personal data based solely on your consent;
• Right to object to the processing of your personal data;
• Right to data portability of your personal data.

You also have the right to define general and/or specific directives concerning the fate of your personal data and how you wish your rights to be exercised after your death.

In order to ensure that the information we hold about you is always accurate, we recommend that you regularly update your personal data.

You can submit any request to exercise your rights regarding your personal data by contacting us:

• By email at contact@galeart.fr
• By post by writing to Galeart, 520 avenue du roulage, 32600 Pujaudran

You also have the option to register free of charge on the cold calling opt-out list named Bloctel, managed by the company Opposetel under a public service delegation.

In the event of dissatisfaction, you have the right to lodge a complaint with the competent supervisory authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)

3 Place de Fontenoy

TSA 80715

75334 PARIS CEDEX 07

Tel: 01 53 73 22 22

 

ARTICLE 9. WHAT ABOUT COOKIES?

Cookies and other trackers may be installed and/or read in your browser during your visit to the site.

Cookies set by the Site Editor make it possible to personalize the content of the site, analyze site traffic, generate usage statistics, and improve your experience on the site.

The user has the option to accept or decline cookies placed by the site Editor on their browser's hard drive by adjusting these settings. Disabling cookies will result in the refusal by the user of the storage of the cookies in question. These cookies can be deleted at any time by the user.

In accordance with CNIL recommendations, the maximum retention period for cookies is thirteen (13) months at most after their initial placement on the User's terminal, as is the validity period of the User's consent to the use of these cookies. The lifespan of cookies is not extended with each visit. The User's consent must therefore be renewed at the end of this period.

 

ARTICLE 10. WHAT SECURITY MEASURES ARE IMPLEMENTED?

As data controller, we take all necessary measures to preserve the security and confidentiality of data, and in particular, to prevent it from being damaged or accessed by unauthorized third parties. To this end, we implement all technical and organizational measures to ensure an adequate level of security tailored to the risks. Furthermore, we ensure that our processors comply with personal data protection regulations.

 

ARTICLE 11. WHAT ABOUT CHANGES TO THIS POLICY?

This policy is subject to change and may therefore be modified. In the event of minor modifications, the new policy will be posted on the site in the dedicated section. In the event of substantial modifications concerning, for example, the purposes or the exercise of your rights, you will be duly informed.