Privacy Policy

 

PRIVACY POLICY

 

Personal data

Duralex SCOP SA, a company with a capital of 20300 euros whose registered office is located at La Chapelle Saint Mesmin (45380) in France, registered in the Orléans Trade and Companies Register under number RCS 892 108 663 (hereinafter referred to as "NDI") collects personal data from users (hereinafter referred to as "Customer(s)") of the www.duralex.com website (hereinafter referred to as the "Site").

 

Personal data collected on this Site is processed, whether automatically or not, by NDI. This processing is subject in particular to the French Data Protection Act no. 78-17 of 6 January 1978, as amended, and to the General Data Protection Regulation no. 2016/679 (hereinafter "GDPR").

The information collected is recorded in the customer file, which has been declared to the CNIL (no. 1672800).

 

Data controller

The personal data provided by the Customer when registering for certain sections of the Site are intended exclusively for NDI (Data Controller), which determines the purposes and means of their processing and which may transfer them to its service providers (data processors). Data processing by these sub-contractors is always limited to the purposes defined by NDI.

 

Purposes of processing

The purpose of the processing is to enable users of the Site to benefit from the Site's services and animations, in particular thematic offers or content. This processing by NDI is necessary for the administration of its site, the performance of its services, the promotion and sale of its products, correspondence with its Customers and invoicing. This processing is also necessary to enable NDI to comply with its legal obligations and to meet certain legitimate interests linked in particular to its management. The categories of data collected are title, surname, first name, date of birth, postal address, e-mail address, telephone number, as well as the data necessary for the purchase (in particular, products purchased, means of payment chosen).

 

Data security

NDI takes the necessary technical and organisational security measures with respect to its employees and requires its data processors to guarantee the confidentiality of personal data and to protect them against accidental or unlawful destruction, modification, disclosure or unauthorised access, in accordance with the rules in force.

 

Data transfer

Customer data may be transferred to certain data processors located outside the European Economic Area. During this transfer, the Customer's data is kept in compliance with legal protection and security obligations, in accordance with applicable European regulations (RGPD). In the event of a transfer, NDI requires its sub-contractors to provide sufficient guarantees regarding the implementation of appropriate technical and organisational measures in order to meet the requirements of European regulations and the protection of Customer data, in particular when this is required by the use of model contractual clauses provided by the European Commission in application of the RGPD. In the event that the subcontracting of data is stopped or after the end of the processing, NDI requires its subcontractors to destroy or return the data immediately with a prohibition on keeping a copy, unless otherwise provided by the law applicable in the territory where the subcontractor is established.

Consent to processing

By giving their explicit consent (by ticking a box, registering voluntarily or placing an order), Customers may also receive information and offers by electronic mail (emailings and newsletters) issued exclusively by the Site publisher. The Customer may unsubscribe at any time. This information (checkbox or voluntary registration) is not used without the Customer's consent and is neither transferred nor sold, unless the Customer expressly agrees to its transmission to the Site's partners.

Mandatory information when the Customer registers for one of the sections of the site is clearly identified (error message). Optional information is used to get to know the Customer better so that we can offer them content and services that meet their expectations as closely as possible.

 

The Site uses techniques to collect information when the Customer publishes content or to track browsing patterns on the Site, in particular through the use of "cookies". A "cookie" is a file deposited in a dedicated space on the Customer's terminal (computer, tablet, mobile phone or any other device optimised for the Internet) when the Site is consulted, enabling browsing to be tracked. Some cookies are essential for using the Site, while others are used to optimise and personalise the content displayed. Some cookies may be used to store the contents of a shopping basket, others to record browsing parameters.

 

The aim of these techniques is to gain a better understanding of user expectations and to improve the services offered, in particular to avoid customers having to reconnect, and to offer them more relevant themes or information.

The publisher may use the information collected in this context for analysis and research purposes, either internally in order to better meet the expectations of its users, or on behalf of external partners, in exclusively statistical, anonymous and non-identifiable form.
The Customer is free to refuse the installation of cookies by modifying the settings of their Internet browser. However, the Site cannot be held responsible for the consequences of these settings, in particular the limitation or deactivation of certain functions based on these techniques.

 

Shelf life

Personal data will be kept for as long as is necessary for the purposes for which they were collected:

• For a period of 3 years from the last activity of the Customer on the Site or on one of NDI's electronic communication media (e.g. clicking on a link in a newsletter or emailing);
• In the case of orders, this period is extended to 10 years, in order to keep a record of orders (Products purchased, invoicing) and because of the warranty period of the Products (these data can be deleted at any time at the request of the Customer);
• For a period of 13 months for "cookies".

Notwithstanding the above, the retention period may be different if: (i) the Customer exercises his/her right to delete data concerning him/her, under the conditions described below; (ii) a longer retention period is authorised or imposed by virtue of a legal or regulatory obligation. In particular, the Customer's personal data may be archived in order to comply with NDI's accounting and tax obligations, such as the obligation to keep invoices for 10 years (article L.123-22 of the French Commercial Code). For any clarification relating to the data retention period, the Customer may contact the Data Protection Officer at the address given below.

Exercising rights

In accordance with the French Data Protection Act of 6 January 1978, as amended, and the RGPD, the Customer has the right to access, modify, rectify and delete data concerning him or her. The Customer also has the right to object to, limit and port personal data. For processing based on the collection of consent, the Customer may withdraw consent at any time. To exercise these rights, to ask any question concerning the processing and to obtain communication of the information concerning him, the Customer must send a simple request accompanied by proof of identity by post or email to the following respective address: Duralex SCOP SA located at La Chapelle Saint Mesmin (45380) - 7, rue du Petit Bois - in France | support@duralex.com | +33 (0)2 54 60 65 04. The information collected is recorded in the NDI customer file, which has been declared to the CNIL (n° 1672800). The Customer also has the right to lodge a complaint with the CNIL, the competent supervisory authority in France.