CHOCOLAT DEBAUVE ET GALLAIS attaches great importance to the protection of your privacy. This is why we have adopted common principles in our Privacy Policy.

CHOCOLAT DEBAUVE ET GALLAIS, SAS, whose registered office is at 30 Rue des Saints-Pères 75007 Paris, is responsible for processing your personal data. The purpose of this document is to inform you of the way we use and protect your personal data, as well as the reasons why we process this data.

It applies uniformly to all the services provided by the company CHOCOLAT DEBAUVE ET GALLAIS, it being specified that additional information may be communicated to you if necessary in the case of a particular order.

WHAT PERSONAL DATA DO WE PROCESS ?

The collection of personal data is limited to what is strictly necessary (principle of data minimization).

We collect and use only the personal data that are necessary for our activity to offer you personalized and quality products and services.

We may collect various categories of personal data from you, including

Identification and contact information (Company, last name, first name, postal and e-mail address, telephone number, fax number, gender, degree, Position and signature) ;
Information necessary for the shipment and management of your orders (Delivery address, billing address, VAT number …)
identification and authentication data, especially when using our services (technical logs, computer traces, security information, IP address);
data relating to interactions with us on our websites, on our applications, on our pages, on social networks, during interviews and telephone or video conversations and in e-mails);

We do not collect sensitive data under any circumstances.

The data we use may be collected directly from you or obtained from the following sources in order to verify or enrich our databases

publications/databases made available by the official authorities (Official Journal)
service providers;
third parties such as business information organizations in compliance with data protection regulations;
Websites/directories/databases/social network pages containing information that you have made public or made public by third parties.

In addition, each form indicates in particular:

What are the purposes of the collection of this data (purposes);
Whether this data is mandatory or optional for the management of your request;
Who will be able to know about it (only 30 Rue des Saints-Pères in principle, except when it is specified in the form that it will be transmitted to a third party for the management of your request);
Your rights with regard to information technology and civil liberties and how to exercise them with CHOCOLAT DEBAUVE ET GALLAIS.
SPECIAL CASES OF DATA COLLECTION, IN PARTICULAR INDIRECT COLLECTION

CHOCOLAT DEBAUVE ET GALLAIS may collect information concerning you even though you are not a client. The list below (which is not exhaustive) constitutes examples of categories of personal data collected by CHOCOLAT DEBAUVE ET GALLAIS from non-customers, such as

prospects,
principals or beneficiaries during transactions made in relation to a client;
employees of our service providers,
distribution network partners.

III. WHY AND ON WHAT BASIS DO WE USE YOUR PERSONAL DATA?

TO COMPLY WITH OUR LEGAL AND REGULATORY OBLIGATIONS

We use your personal data to comply with various legal and regulatory obligations.

TO PERFORM A CONTRACT WITH YOU OR TO PROVIDE YOU WITH PRE-CONTRACTUAL INFORMATION

We use your personal data to enter into and perform our services including to:

provide you with information about our products and services;
assist you with your requests;

For customer relationship management purposes including:

management and execution of products and services;
TO WHAT CATEGORIES OF ENTITIES MAY YOUR PERSONAL DATA BE DISCLOSED?

The personal data collected within the framework of the services offered by CHOCOLAT DEBAUVE ET GALLAIS are processed according to secure protocols and allow CHOCOLAT DEBAUVE ET GALLAIS to manage the data received in its computer applications. In order to accomplish the above-mentioned purposes, we are led to disclose your personal data only to

service providers and subcontractors performing services on our behalf
independent agents, intermediaries,
Distribution network,
commercial partners,
financial authorities, judicial or state agencies, public bodies on request and within the limits of what is permitted by the regulations;
certain regulated professions such as lawyers, notaries, auditors, bailiffs.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We keep your personal data for the longest period of time necessary to comply with applicable legal and regulatory provisions or another period of time taking into account operational constraints. For customers, most information is retained for the duration of the contractual relationship and for 10 years after the contractual relationship has ended.

For prospective customers, information is kept for 3 years from the date of collection or from our last contact with you.

WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

In accordance with the applicable regulations, you have various rights, namely

Right of access: you can obtain information about the processing of your personal data as well as a copy of these personal data.
Right of rectification: if you believe that your personal data is inaccurate or incomplete, you may request that it be amended accordingly.
Right to erasure: you can demand the erasure of your personal data to the extent permitted by law.
Right to limitation of processing: you can request the limitation of the processing of your personal data.
Right to object: you may object to the processing of your personal data for reasons related to your particular situation. You have the absolute right to object to the processing of your personal data for commercial prospecting purposes, including profiling related to such prospecting.
Right to the portability of your data, when this right is applicable, you have the right to have the personal data you have provided to us returned to you or, when technically possible, transferred to a third party;
The right to set up instructions regarding the retention, deletion or disclosure of your personal data, applicable after your death.
Right to withdraw your consent: if you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time.

To find out how to exercise the rights listed above, please visit our “Processing your personal data” page. In accordance with the applicable regulations, you are entitled to lodge a complaint with the competent supervisory authority such as the CNIL (Commission Nationale de l’Informatique et des Libertés) in France.

VII. HOW CAN YOU FIND OUT ABOUT CHANGES TO THIS PERSONAL DATA INFORMATION DOCUMENT?

In a world of constant technological change, we will regularly update this information document. We invite you to consult the latest version of this document on our website and we will inform you of any substantial changes through our websites or through our usual communication channels.

VIII. HOW TO CONTACT US?

If you have any questions concerning the use of your personal data as described in this document, you can find the possible steps on the page “Treatment of your personal data”.

MISCELLANEOUS

Information about our cookie policy and computer security can be found in our “Handling of your personal data”.