Sabrina Mlynarczyk O fleurs du bien, as the data controller, attaches great importance to the protection and respect of your privacy. This policy is intended to inform you, in accordance with European Regulation No. 2016-679 of 27 April 2016 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter referred to as the “Regulation” or “GDPR”), about our practices regarding the collection, use, and sharing of information that you may provide to us through our website.
The purpose of this policy is to inform you about the categories of personal data we may collect or hold about you, how we use them, with whom we share them, how we protect them, and the rights you have regarding your personal data.
What is personal data?
The term “personal data” refers to all data that can identify you as an individual. When using the website (ofleursdubien.fr), we may ask you to provide certain personal data concerning you.
What personal data do we collect?
By using our Website and within the framework of the services we provide to you, you may provide us with information, some of which may identify you and therefore constitute personal data (hereinafter referred to as the “Data”).
This Data notably includes:
(i) identification data (surname, first name, address, email address), (ii) transaction data (bank details for payment), (iii) technical data (if necessary for the operation of the Website), (iv) data related to the support services we provide (which may include sensitive data), and (v) data relating to your browsing activity on our Website.
How do we use the data we collect and on what legal basis?
Simple consultation of the Website does not require prior registration or identification. It may be carried out without you providing any personal data.
However, when you decide to subscribe to information from our Website, contact us directly through the Website, respond to surveys, or send us comments, we collect this information strictly for the purposes necessary to carry out our mission.
The collected data is used to:
- Carry out the support services entrusted to us, manage contracts, issue invoices, and monitor our commercial relationship with you. This processing is based on contract performance;
- Carry out commercial prospecting operations. This processing is based on our legitimate interest;
- Manage accounting and comply with our tax obligations. This processing is based on a legal obligation;
- Respond to your requests for information and contact made through our Website. This processing is based on your consent;
- Help maintain a safe and secure environment on our Website. This processing is (i) based on our legitimate interest (ensuring Website security), (ii) necessary for compliance with our legal obligations, and/or (iii) necessary for the establishment, exercise, or defense of legal claims;
- Manage our Website and perform internal technical operations such as troubleshooting, data analysis, testing, research, analysis, studies, and surveys. This processing is based on our legitimate interest (ensuring the security of our Website and improving its features).
When collecting Data, you will be informed whether certain Data must be provided or whether it is optional. Failure to provide mandatory information may limit the processing of your request.
Who is the data controller?
Data Controller: Sabrina Mlynarczyk
Phone: 06 45 90 56 92
Email: Sabrina.mlynarczyk@gmail.com
Data retention period:
Your Data will not be kept beyond the period strictly necessary for the purposes pursued, as set out in this Policy and in accordance with the Regulation and applicable laws.
Data used for the execution of the services entrusted to us is retained for the duration of the contractual relationship and then archived in accordance with applicable limitation periods. Your Data is deleted once the retention periods expire.
Data used for marketing and communication purposes may be retained for a maximum period of 3 years from the end of the commercial relationship or the last contact with the prospect concerned.
Your Data is deleted once the retention periods expire. Nevertheless, your Data may be archived beyond these periods for the purposes of investigating, identifying, and prosecuting criminal offenses, solely to enable the transmission of your Data to judicial authorities if necessary.
How is your data protected?
All appropriate organizational and technical precautions and measures have been taken to preserve the security, integrity, and confidentiality of your personal data.
Where is your data stored?
Your Data is stored and kept throughout its processing period in a locked cabinet at:
23 rue de la source, 44760 Les Moutiers-en-Retz, France.
What are your rights regarding your data and how can you exercise them?
In accordance with applicable laws and regulations on personal data protection, you benefit from several rights regarding your Data:
- Right to information: you have the right to be informed about the processing of your personal data and may contact us for further details at [insert your email address].
- Right of access: you have the right to access all your personal data at any time.
- Right to rectification: you have the right to correct inaccurate, incomplete, or outdated personal data at any time.
- Right to erasure: in certain cases, you have the right to obtain the deletion of your Data. However, this is not an absolute right, and we may retain certain Data for legal or legitimate reasons.
- Right to restriction: you have the right to obtain restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
- Right to portability: you have the right to receive your personal data in a readable format and request its transfer to a recipient of your choice.
- Right to be forgotten: you have the right to request the deletion of your personal data and prevent future collection.
- Right to lodge a complaint: with the CNIL in France if you believe that the processing of your personal data violates applicable regulations.
- Right to object: you have the right to object to the processing of your personal data.
Please note, however, that we may continue processing despite your objection for legitimate reasons or for the defense of legal claims.
Right to withdraw consent at any time: you may withdraw your consent to the processing of your Data where processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Right to provide instructions concerning your data after your death: you have the right to provide us with instructions regarding the use of your Data after your death.
You may exercise the above rights by writing to:
Sabrina.mlynarczyk@gmail.com
Changes and application of the privacy policy:
We reserve the right, at our sole discretion, to modify this policy, in whole or in part, at any time. These changes will take effect upon publication of the new policy. We will inform you in advance by any appropriate means.
Contact:
For any questions regarding this Policy or requests concerning your Data, you may contact us by email at:
Sabrina.mlynarczyk@gmail.com