PRIVACY POLICY - Applicable to the A Tribute to Gaz Regan operation

Who is responsible for processing your personal data?

The data controller is the company MAISON VILLEVERT, SAS, with capital of 3 453 155 euros, having its head office at VILLEVERT 16100 MERPINS FRANCE and registered at the Trade and Companies Register of Angouleme under number B 524 935 301.

Email address: dpe@maisonvillevert.com

Phone number: 05 17 22 30 30

MAISON VILLEVERT ensures that its personal data processing is lawful, justified by a valid legal basis and that the data is kept for a duration that is reasonable and necessary for the operations for which it was collected, in compliance with the legislation in force and considering the prescription periods.

What personal data do we process? For what purpose? On what legal basis? For how long?

Kind of data

• Establishment name and address, first name, last name, email address, phone number, instagram account
• Last name, first name, company name, unique code, donation amount
• Email address
• Name, first name, postal address
• Data concerning the request and the answer given
• Copy of an identity document only in case of doubt

Purposes

• Managing the dispatch of communication kits for participation in « A Tribute to Gaz Regan ».
• Carry out statistics
• Send a thank-you email
• Management of requests for access, rectification, opposition and your other rights under the European Regulation

Legal basis

• Contractual obligation
• Legitimate interest as this is the only way for Maison Villevert to check whether the plants have actually participated
• Legitimate interest
• Legal obligation

Maximum storage duration

• Delate after kit dispatch
• 1 month from end of operation
• Delate after sending the email
• The time required to process the request
• Copy of the identity document: deletion after verification of the applicant’s identity

Do we perform profiling with your personal data?

No, MAISON VILLEVERT does not make any automated decision, including profiling, based on your personal data.

What are your rights and how can you exercise them?

In accordance with the General Regulation on Data Protection n°2016/679 of April 27, 2016, you have the following rights:

• Access right: the right to be informed and to request access to the personal data that we process.
• Rectification right: the right to ask us to modify or update your personal data when they are inaccurate or incomplete.
• Deletion right: the right to ask us to permanently delete your personal data.
• Limitation right: the right to ask us to, temporarily or permanently, stop the processing of all, or part of, your personal data.
• Opposition right: the right to refuse at any time the processing of your personal data for personal reasons and the right to refuse the processing of your personal data for direct marketing purposes.
• Portability of data: the right to request a copy of your personal data in electronic format and the right to ask us to forward such personal data for use by a third-party service.
• Right not to be subject to automated decision making: the right not to be subject to a decision based solely on automated decision making, including profiling, if the decision would have a legal effect on you or produce a similar significant effect.
• Right to determine the fate of your data post-mortem.

You also have the right to submit a complaint to the CNIL https://www.cnil.fr/.

In order to exercise your rights before MAISON VILLEVERT, you can send a letter to the postal address VILLEVERT 16100 MERPINS FRANCE or an e-mail to dpe@maisonvillevert.com

All requests by post or e-mail must be signed and include the address to which the reply should be sent. In case of doubt, you may be asked to provide a photocopy of an identity document. A reply will be sent to you within one month of receipt of the request.

What security measures have we taken to protect your personal data?

We are careful to preserve the confidentiality and integrity of your data.

We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized use, partial or total accidental loss or destruction.

If you have any questions on this subject, please send a letter to the postal address VILLEVERT 16100 MERPINS FRANCE or an e-mail to dpe@maisonvillevert.com.

Who else may have access to your personal data?

We share personal information with our affiliates and other trusted companies or persons who process it on our behalf, as instructed by us, in accordance with this Privacy Policy and other appropriate security and confidentiality measures. The list is available on request.

Are your personal data transferred outside the European Union?

MAISON VILLEVERT does not transfer your personal data outside the European Union.

Updating this Privacy Policy

Date of update: August 30, 2023