The General Data Protection Regulation (GDPR) has been the European framework for the processing and circulation of personal data since May 2018. The protection of personal data is also governed by the Data Protection Act No. 78-17 of 6 January 1978, as amended. This personal data protection policy informs you about how Sorodist processes your personal data in accordance with the GDPR and the Data Protection Act.
TO WHOM IS YOUR PERSONAL DATA DISCLOSED?
Your personal data is processed by Sorodist, SAS with a capital of €500,000, having its registered office at 3 avenue Gustave Eiffel, 66200 ELNE, France, and registered with the Perpignan Trade and Companies Register under number 452 032 824.
Your personal data is made accessible only to persons authorised to access it with regard to their attributions. Your personal data is transmitted to Sorodist's employees in charge of the administration of the site and the management of orders as well as to the subcontractors contractually linked to the data controller, who are AttrapTemps, whom Sorodist uses to carry out its services for the purposes mentioned below, for example for the management, the execution, processing, payment and logistics of orders as well as for marketing operations. Your data will not be passed on to our business partners without your prior knowledge and consent.
WHY DO WE NEED TO PROCESS YOUR PERSONAL DATA?
Your personal data is processed by Sorodist for the following purposes:
- To manage orders, payment and delivery of products offered on the site
- To create your customer account on our website
- To enable you to access and use our site with the best possible experience and quality online browsing
- To process your inquiries, complaints, or requests, and to contact you to respond to them
- To manage the relationship between you and Sorodist: to process the management of your orders, your participation in our contests, promotional activities and any other requests
- To provide you with personalized content and services, based on your browsing history, preferences and interests
- To ask you about our products, and to better understand and measure your points of interest and consumer desires in order to improve our digital platforms (website, social networks), our communication methods and/or to develop new products and services
- To develop and improve our products, services, communication methods and the functionality of our websites, services
Sorodist ensures that it only collects and processes data that is strictly necessary for the purpose for which it is processed.
The legal basis for this processing is your consent. You may withdraw your consent in accordance with your right to withdraw described below.
WHAT PERSONAL DATA IS COLLECTED?
In particular, we collect and process your surname, first name, address, email address, password, telephone number, IP address, connection and browsing data, order history, preferences and interests, products viewed, delivery incidents, complaints. The mandatory nature of the data is indicated to you at the time of collection by an asterisk.
HOW LONG IS YOUR DATA KEPT?
The data necessary for order management and invoicing are kept for the duration of the commercial relationship and ten (10) years for accounting obligations.
The data used to identify and target surveys (email, profile) are kept until unsubscribing, after which they will be permanently deleted. However, if your account is inactive for a period of two (2) years, you will be notified by Sorodist and if you do not react within the period communicated by Sorodist, your data will be deleted.
Responses to surveys carried out by Sorodist are kept for a period of 3 years, after which time this data is deleted.
However, these retention periods may be extended or shortened if:
You exercise, under the conditions set out below, one of the rights granted to you;
A longer storage period is permitted or required by law or regulation or to safeguard our rights.
Data relating to payment methods is not kept by Sorodist. It is collected during the transaction and is immediately deleted as soon as the purchase is paid.
WHAT RIGHTS DO YOU HAVE?
You have:
A right of access, which allows you to obtain:
- Confirmation that data about you is or is not being processed;
- The communication of a copy of all the personal data held by the data controller.
- This right concerns all data that is or is not subject to processing by data controllers.
A right to request the portability of certain data: it allows you to retrieve your personal data in a structured, commonly used and machine-readable format. It only applies to data that is actively provided, e.g. by filling in a form, responding to a survey and which is processed in an automated manner.
A right to withdraw consent: the withdrawal of your consent to the processing of your personal data, given when you register with the platform, will result in your immediate unsubscription from the platform. You will therefore no longer have access to the platform and all your personal data will be deleted immediately.
A right to rectification: it allows you to have information concerning you rectified when it is obsolete or erroneous. It also allows you to have incomplete information about yourself completed.
A right to erasure: it allows you to obtain the erasure of your personal data subject to the legal retention periods. In particular, it may apply in the event that your data is no longer required for processing.
A right to restriction: it allows you to limit the processing of your data in the following cases:
In the event of unlawful use of your data;
If you dispute the accuracy of the data;
If you need to have the data to establish, exercise or defend your rights.
You can set general instructions with a trusted third party, or specific instructions with the data controller regarding the storage, erasure and communication of your personal data after your death. These guidelines may be modified or revoked at any time. We advise you to contact the Data Protection Officer whose contact details are given below.
If, after contacting us, you believe that your rights in terms of personal data protection have not been respected, you have the option of referring the matter to the Commission Nationale de l'Informatique et Libertés. The CNIL's contact details are available at the following address: https://cnil.fr/
HOW DO I CONTACT THE DATA PROTECTION OFFICER?
For any further information, you can contact the Data Protection Officer Mrs. Claudine REGIS as follows:
By mail to: SORODIST, 3 avenue Gustave Eiffel, BP 37, 66201 ELNE CEDEX, France
By phone: +33 (0)4 68 92 94 00
By email: sorodist@sorodist.fr
In support of your request, you will be asked to prove your identity.
Your data will then no longer be actively processed, and may not be modified during the period of the exercise of this right.
For more details on your rights, you can contact the Data Protection Officer whose contact details are listed above.
SECURITY OF YOUR DATA
Sorodist implements appropriate technical and organizational measures to ensure the security of your data in accordance with the applicable regulations. In this context, it implements the necessary precautions and measures against any unauthorised access to and use of data, accidental loss or theft of data, destruction or alteration of data and, in general, any damage that may affect this data.