Data Privacy

BOURRIENNE PARIS X is committed to the protection of personal data processed in the context of its commercial activity of online sales.

For the purposes of total transparency, the company BOURRIENNE PARIS X has defined this Data Protection Policy, so that any customer, as a natural person, can, at any time, be aware of the commitments made and the practices applied to their data. of a personal nature.

BOURRIENNE PARIS X undertakes to process all the data collected in accordance with the texts applicable to data protection (Law n ° 78-17 of January 6, 1978 modified and the General European Regulation 2016/679 of April 27 2016 on data protection, these two texts being hereinafter referred to as the “Regulations”).

1- Glossary

Personal data processing is an operation or an organized set of operations carried out on personal data (collection, structuring, storage, modification, communication, etc.).

Personal data is information that makes it possible to identify a human being (natural person), directly (for example his surname/first name), or indirectly (for example his telephone number, his contract number, his nickname).

The data subject is the person who can be identified by the data used in the context of the processing of personal data.

The data controller is the one who decides how the processing of personal data will be implemented, in particular by determining what the data will be used for and what tools will be implemented to process it.

The subcontractor is the one who carries out operations on the data on behalf of the data controller, he signs a contract with the data controller who entrusts him with certain tasks and who ensures that he has the technical and organizational guarantees, allowing it to process the personal data entrusted to it in accordance with the regulations.

The recipient is the one who receives authorized communication of personal data.

BOURRIENNE PARIS X is responsible for the processing of personal data relating to sales made on its website www. bourrienne.com , within the meaning of amended law n° 78-17 of January 6, 1978 relating to data processing, files and the freedoms of the collection and processing of personal data (known as the "Data Processing and Freedoms Law") ) and the General Regulations on the Protection of Personal Data of April 27, 2017 (known as “GDPR”), all of which are referred to as the “Regulations”.

Personal data is processed for the following main purposes:

    • Taking into account orders placed on the site www.bourrienne.com
    • The provision of technological services (websites) and marketing (newsletter)
    • Management of logistics services (orders, supplies, assortments, delivery)

    Our subcontractors are required to process the personal data of customers of the company BOURRIENNE PARIS X as far as they are concerned and in particular:

    • Logistics management (order and delivery management, inventory management)
    2- Our key commitments

      BOURRIENNE PARIS X , as data controller, respects the following principles:

      • Personal data is used only for explicit, legitimate and determined purposes (objectives) in connection with the business of the controller.
      • Only personal data that is strictly useful is collected and processed.
      • The data is not kept beyond the duration necessary for the operations for which they were collected, taking into account the nature of the operations, or those provided for by the decision-making practice of the CNIL or by the Regulations.
      • BOURRIENNE PARIS X does not communicate or transfer personal data relating to member customers to third parties, but only to authorized recipients within the strict framework of the purposes defined beforehand.
      • BOURRIENNE PARIS X entrusts personal data to subcontractors chosen according to appropriate technical and organizational guarantees, in order to guarantee the protection of the data entrusted to them under the instructions of BOURRIENNE PARIS X.
      • Customers are informed beforehand and regularly, in a clear and transparent manner, in particular on the purpose of use of their data, the optional or compulsory nature of their answers in the forms, the rights they have in terms of protection of the data and the methods of effective exercise of these rights, of the recipients.
      • Whenever the Regulations require it, an explicit, informed, active and unequivocal consent of the client(s) is collected for the processing of their personal data.
      • Appropriate security measures, on a logical, technical, organizational and legal level, have been defined on the basis of a risk analysis of the various processing of personal data concerned, and are implemented by the company BOURRIENNE PARIS X and its subcontractors engaged by contract, to ensure the protection of personal data.
      • BOURRIENNE PARIS X and its subcontractors are committed to monitoring any possible and exceptional data breach and to taking all protective and corrective measures following a breach by informing the CNIL and, where applicable, the persons concerned.

      3- The Data Protection Officer, the DPO

      BOURRIENNE PARIS X appoints a data protection officer to ensure compliance with the Regulations and the rules described in this Data Protection Policy.

      The Data Protection Officer ensures in particular:

      • to establish and keep up to date a register of the processing of personal data implemented in the company,
      • to ensure compliance of practices with regulations and their changes,
      • to make all teams aware of the requirements and good practices in terms of personal data protection,
      • to the effective exercise of the rights of data subjects.

      4- Data collection

      The company BOURRIENNE PARIS X collects the personal data of the persons concerned in the following way:

      • As part of any order made on the site www.bourrienne.com and information supplemented on this occasion,
      • Within the framework of the various exchanges taking place with the company BOURRIENNE PARIS X (mailings, letters, messaging, etc.),
      • As part of the technological services made available to customers (newsletters, online forms, etc.),
      • As part of the logistics services made available to customers.

      5- Data collected

      As part of its business, BOURRIENNE PARIS X collects data belonging to the following categories of personal data:

      • Identify,
      • Contact data (email, telephone, address)
      • Connection data (IP address, logs, etc.)
      • Location data (movements, GPS data, GSM, etc.)
      • Banking information (type of credit card, bank information useful for payment of the order)

      6- The use of data

      BOURRIENNE PARIS X uses personal data for the following main purposes:

        • Taking into account orders placed on the site www.bourrienne.com
        • The provision of technological services (websites) and marketing (newsletter)
        • Management of logistics services (orders, supplies, assortments, delivery)

        Our subcontractors are required to process the personal data of customers of the company BOURRIENNE PARIS X as far as they are concerned and in particular:

        • Logistics management (order and delivery management, inventory management)

        7- Data recipients

        On a case-by-case basis for the processing described in the article "Use of data" above, the company BOURRIENNE PARIS X determines the recipients of the data according to their missions and their authorizations to receive the data in accordance with the purposes determined.

        Depending on the case, these recipients may be:

        • The subcontractors to which BOURRIENNE PARIS X calls for any technical or logistical operation in respect of the implementation of appropriate technical and organizational measures, in particular in terms of confidentiality and security.
        8- Data retention period


        BOURRIENNE PARIS X has determined specific rules concerning the retention period of the personal data of the persons concerned, in order to limit the retention to a strictly necessary period.

        At the end of the duration thus fixed, and depending on the case, the personal data are subject, in compliance with the applicable Regulations, to one of these measures:

        • deletion,
        • Irreversible anonymization,
        • Archiving.
        9- Data security

        Data security concerns the measures taken to protect data from the following facts:

        • the destruction,
        • the loss,
        • the alteration,
        • the unauthorized disclosure of personal data transmitted, stored or processed,
        • unauthorized access to such data, accidentally or unlawfully

        In order to guarantee the security of personal data, the company BOURRIENNE PARIS X and its subcontractors implement the appropriate technical and organizational measures taking into account the state of knowledge, costs, nature, scope, the context and purposes of the processing in order to guarantee a level of security adapted to the risks.

        10- Data rights

        Each data subject has the following rights:

        • right of access / access to their data: the data subject can ask the company BOURRIENNE PARIS X directly if it holds information about them, and request that the list of data be communicated to them,
        • right of rectification / request rectification: the data subject may request the rectification of inaccurate information concerning him. The right of rectification supplements the right of access.
        • right to be forgotten / request the erasure of their data: the data subject may request the erasure of information concerning them, for a reason provided for in the Regulations.
        • right to limit / request the limitation of the processing of his data: the data subject may obtain the limitation of the processing of his data, for a reason provided for by the Regulations.
        • right to portability / request the portability of their data: the person concerned can request to receive the data they have provided to the company BOURRIENNE PARIS X, or ask the company BOURRIENNE PARIS X that they be transmitted to another person in charge processing for a reason provided for in the Regulations,

        The data subject may also object, for legitimate reasons, to the processing, dissemination, transmission, storage or hosting of data concerning him or her.

        For more information on the meaning of rights; the CNIL has created a section dedicated to understanding the rights which can be consulted here: https://www.cnil.fr/fr/comprendre-vos-droits

        To facilitate the process, the company BOURRIENNE PARIS X invites each person concerned, when sending a request to exercise rights, to:

        • Indicate which right(s) they wish to exercise,
        • Clearly mention their surnames / first names / contact details to which they wish to receive the answers,
        • Attach a copy of an identity document.
        11- The consent of the persons concerned

          All processing of personal data is implemented by the company BOURRIENNE PARIS X in compliance with the consent of the persons concerned, and in some cases provided for by the Regulations, the explicit consent, otherwise called express, of the person is required.

          Whenever the explicit consent of the person is required by the Regulations, it is obtained beforehand by the company BOURRIENNE PARIS X and the person concerned may at any time withdraw his consent, by contacting the contacts referred to above.

          12- Complaints to the CNIL

          Each data subject has the right to lodge a complaint with a data protection supervisory authority.

          In France, this authority is the CNIL, here are its contact details:

          • Website : https://www.cnil.fr/
          • Telephone: 01 53 73 22 22
          • Postal address: 3, place Fontenoy TSA 80715, 75334 PARIS Cedex 07

           

          13- Cookies
            1- What is a cookie?

              A cookie is a file containing letters and numbers, stored on the browser or on the hard drive of a user's computer, smartphone or tablet, if he accepts it.

              BOURRIENNE PARIS X may use cookies on its websites: files temporarily or permanently stored on the user's computer, tablet or smartphone in order to recognize them during subsequent visits.

              2- Why are cookies used?

              By continuing to browse the www.bourrienne.com website , the user has consented to the use of all the following cookies:

              • Browser cookies
              • Functional cookies
              • Performance and audience measurement cookies

              By learning to know the behavior of Internet users on the site www.bourrienne.com , BOURRIENNE PARIS X may:

              • establish reliable statistics of attendance and volumes of attendance and use of the various elements making up the sites (headings and content visited, routes, etc.), thus enabling it to improve the interest and ergonomics of the services,
              • to adapt the presentation of the sites to the display preferences of the web or mobile terminal (display resolution, operating system used, etc.) of the user during his visits,
              • of memorize information relating to forms (registration or access to an account, etc.),
              • to implement security measures,

              3- How to block cookies?

              The user of the websites can block cookies by activating a filter on his browser on his computer or on his smartphone or tablet.

              The user can refuse all cookies or only some of them.

              However, if the user chooses to block all cookies, some parts of the websites may become inaccessible.

              • On the computer

              The user can configure his navigation software so that:

              - the cookies are stored in his computer or, on the contrary, that they are rejected systematically or according to their issuer,

              WHERE

              - the acceptance or refusal of cookies may be offered from time to time, before a cookie is likely to be saved in their terminal.

              For the management of cookies and choices, the configuration of each browser is different. It is described in the browser's help menu:

              • On the smartphone

              For the management of cookies and choices, the configuration of each operating system is different. It is described in the documentation:

              14- Changes to the general data protection policy

              The data protection policy is subject to change. In the event of changes to the elements mentioned in the confidentiality policy, the company BOURRIENNE PARIS X undertakes to modify it and to inform the persons concerned, prior to the implementation of the modifications which could have an impact on personal data.

              The company BOURRIENNE PARIS X will endeavor to indicate what impacts these modifications will entail.


              15- Questions and comments: contact us

              If you have questions, comments and concerns regarding this policy, you can contact us by email: contact@bourrienne.com or by mail: BOURRIENNE PARIS X 58 rue d'Hauteville 75010 Paris.