In the course of its activities, Compagnie Fruitière Group will have cause to process a certain amount of personal data concerning its contact persons, in particular its customers, prospects, partners, service providers and subcontractors, suppliers, website users, etc.
The Compagnie Fruitière Group attaches the greatest importance to the protection of privacy and personal data and to compliance with extant regulations.
1 – Definitions
Controller: Compagnie Financière de Participation, a simplified joint stock company whose registered office is located at 33 Bd Ferdinand de Lesseps, 13014 Marseilles, France, registered in the Marseilles Trade and Companies Register under number 302 716 535, represented by its Chairman, Jérôme Fabre.
The Controller’s contact details are as follows:
– Mailing address: 33 Bd Ferdinand de Lesseps, 13014 Marseilles, France
– Email address: email@example.com
– Telephone number: +33 (0)4 91 10 17 10
Personal data: data of a personal nature allowing the direct or indirect identification of a Data Subject within the meaning of extant regulations.
Website: website accessible through the address www.www.compagniefruitiere.fr/en/
2 – Personal data processing
a – What Personal Data is collected and why?
Personal data collected via the Website
The Website presents the activities carried out by the Controller. The Website allows any user (hereinafter referred to as the “User”) to email the Controller through the “Contact” form.
The User shall provide the information stipulated on the contact form in order to send an email to the Controller. The provision of this Personal Data is mandatory to enable the Controller to respond to the User’s request.
Purposes and legal basis: the processing of this Personal Data is necessary to enable the Controller process the User’s request and manage their contact file. The processing is based on the Controller’s legitimate interests for the purposes of carrying out its activities.
Any User who does not wish to provide the necessary information may not send an email to the Controller.
Data collected during information or contact requests (customers, prospects, contacts, potential partners, applicants, etc.)
The Controller may collect Personal Data during the performance of a customer’s contract, information or contact requests, for example by email, telephone or during a meeting between one of the Controller’s employees and the Data Subject (at the Controller’s or the Data Subject’s initiative).
Purposes and legal basis: The processing of this Personal Data is necessary to enable the Controller to provide the information requested by the Data Subject and the creation and management of a file of customers and contacts, communication or recruitment operations with the Data Subject, the implementation and follow-up of the relationship between the Controller and the Data Subject or the assessment of a Data Subject who has applied to join one of the Controller’s affiliates. The processing is based on the Controller’s legitimate interests for the purpose of carrying out its activities and, where applicable, on the implementation of a pre-contractual or contractual relationship. The Data Subject cannot interact with the Controller if this Personal Data is not provided.
Data concerning suppliers, service providers and subcontractors, partners
The Controller may collect Personal Data during its exchanges and the conclusion of contracts with its suppliers, service providers and subcontractors or partners.
Purposes and legal basis: The processing of this Personal Data is necessary for the Controller to fulfil its contractual and legal obligations, namely the management of the contractual relationship with the Data Subject, in particular accounting management, payment management, any claims, and any exchange with the Data Subject. It also allows the creation and management of a contact file and communication or recruitment operations with the Data Subject. The processing is based on the implementation of the pre-contractual or contractual relationship between the Controller and the Data Subject, the Controller’s compliance with its legal obligations and the Controller’s legitimate interests for the purpose of carrying out its activities. The Data Subject cannot conclude a contract with the Controller if this Personal Data is not provided.
b – How is Personal Data processed?
The Controller shall process the Personal Data for the purposes set out above. The Controller undertakes not to use it for any other purpose or to transmit them to third parties, except as provided below or with the Data Subject’s express consent.
Recipients: in compliance with the purposes set out above, Data Subjects’ Personal Data may be transmitted to the Controller’s affiliated companies (parent companies, subsidiaries, sister concerns, etc.), who may contact the Data Subject directly, for the Controller’s legitimate interests.
The Data Subject acknowledges that in this case, the processing of their Personal Data by affiliated companies is carried out by the latter under their responsibility and in accordance with their own data protection policy, as the separate data controller.
The Controller may also disclose Personal Data to third parties in the context of compliance with a legal obligation, at the request of a judicial or public authority, or pursuant to a judicial, administrative or independent administrative authority decision.
Subcontractors: in compliance with the purposes set out above, Personal Data may be communicated to the Controller’s staff and subcontractors (for example, IT service provider, host, etc.). The Controller shall take all measures to require these subcontractors to comply with applicable regulations and, where applicable, that data transfers outside the European Union are based on an adequate level of protection or sufficient guarantees. The Controller’s subcontractors may only process Personal Data on the Controller’s instructions.
Storage and archiving: Personal Data is kept for a period of 3 years from the date of the last contact made by the Data Subject, for the purpose of managing the contacts file and, where applicable, for recruitment.
When a contract has been concluded between the Controller and the Data Subject, the Personal Data shall be archived for the duration necessary for the establishment, exercise or defence of a legal claim and, where applicable, for the duration applicable by virtue of its legal obligations.
The Controller shall use its best efforts to store and archive this Personal Data under appropriate security conditions in compliance with the applicable provisions, in accordance with current technical means.
c – What are the rights to the Personal Data provided?
Any person who has provided Personal Data has the following rights over it:
– A right of access and right to rectification;
– A right to erasure of data (“right to be forgotten”), a right to restriction of processing and a right to object to processing in the situations stipulated by extant regulations;
– In addition, pursuant to Sections L223-1 et seq. of the French Consumer Code, the Consumer User has the right to register on the Do Not Call Register [database of telephone numbers of persons who do not wish to receive telephone solicitations].
– The right to define guidelines on the fate of personal data after death;
– A right to the portability of the raw Personal Data provided;
– The right to lodge a complaint with the competent authority.
These rights may be exercised by sending an email or a letter to the contact details of the Controller indicated in Section 1.
These rights must be exercised under the conditions stipulated by extant regulations. In particular, a proof of the Data Subject’s identity may be requested in order to prevent any unauthorised access to the Personal Data in question.
3 – Cookies on the website
Users are informed that the Website contains the following cookies:
These cookies are cookies created by Google Analytics and used by Google, Inc. (or any subsidiary) to obtain audience measurement statistics and records of internet users’ browsing on the Website, to optimise the Website’s functionalities and the navigation on it.
These cookies enable the Controller to obtain a report of anonymised and aggregated statistics, to the exclusion of any individual data concerning the User.
By continuing to browse the Website, the User accepts the placement of these cookies. The User can block this through browser settings. The User is advised to consult their browser’s help section to find out the procedure to follow depending on the browser used.