What is the purpose of our Privacy Policy?
LA FROMAGEE JEAN YVES BORDIER, which operates the website maisonbordier.com and the Bistro Autour du Beurre (35400), attaches great importance to the protection and confidentiality of your personal data, which represent, for us, a guarantee of professionalism and trust.
In this respect, our Personal Data Privacy Policy reflects our commitment to ensuring compliance within LA FROMAGEE JEAN YVES BORDIER with the rules applicable to the protection of personal data and, more specifically, with the provisions of the General Data Protection Regulation (“GDPR”).
In particular, this Privacy Policy is intended to inform you about how and why we process your personal data in connection with the services we provide to you.
Who is this Privacy Policy intended for?
Our Privacy Policy applies to you, regardless of where you reside, provided that you are at least 15 years old, whether you are a customer, a job applicant with LA FROMAGEE JEAN YVES BORDIER, a customer of our Bistro Autour du Beurre, or a visitor to the website maisonbordier.com.
If you are under the legal age specified above, you are not authorized to use our services without the prior and explicit consent of one of your parents or legal guardians, which must be sent to us by email at donneespersonnelles@avec-olga.com.
If you believe that we hold personal data concerning your children without your consent, we invite you to contact us at the address indicated above.
Why do we process your personal data and on what legal basis?
We process your personal data mainly for the following purposes:
- To browse our website, benefit from our services, and enable us to respond to your requests (e.g., information requests, reservation requests for our Bistro Autour du Beurre, complaints, etc.), based on our legitimate interest in providing you with the best possible service.
- To manage our customer service, based on the performance of a contract and our legitimate interest in responding effectively to your requests and complaints.
- To keep you informed of our latest offers and events by email, based on our legitimate interest in retaining customers and prospecting new potential customers.
- To manage invoicing and any unpaid amounts, based on our legitimate interest in receiving payment for the services provided and pursuant to our general terms and conditions.
- To allow you to follow and comment on our social media publications, based on our legitimate interest in maintaining a presence on social media platforms.
- To receive our newsletter, which informs you about news relating to our services, based on our legitimate interest in retaining customers and, where required, on your consent if you are not yet a customer.
- To apply for a position within LA FROMAGEE JEAN YVES BORDIER, based on our exchanges during the recruitment process and our legitimate interest in recruiting and selecting candidates.
- To schedule appointments with our teams, based on our legitimate interest in offering you an easy way to contact us.
- To allow the download of documents, based on our Terms of Use.
- To ensure your safety within our premises through video surveillance cameras, based on our legitimate interest in protecting you, our employees, and our facilities.
How did we obtain your personal data?
Your data is collected directly from you when you are a customer of our services or simply a visitor to our website maisonbordier.com, and we undertake to process your data only for the purposes described above.
For professionals, your personal data may also be collected indirectly through trade fairs, exhibitions, or social networks (e.g., LinkedIn).
However, when you voluntarily publish content on our social media pages, you acknowledge that you are fully responsible for any personal information you choose to disclose, regardless of the nature or source of the information provided.
What personal data do we process and for how long?
Below is a summary of the categories of personal data we process and their corresponding retention periods:
- For individuals: personal identification data (e.g., first name, last name) and contact details (e.g., email address), retained for the entire duration of the service relationship plus the applicable statutory limitation periods, generally 5 years.
- For professionals: personal identification data (e.g., first name, last name, position, company, department, etc.) and contact details (e.g., professional email address and telephone number), retained for the duration of the service relationship plus the applicable statutory limitation periods, generally 5 years.
- For individuals: financial and economic data (e.g., bank account number, verification code, etc.), retained for the period necessary to complete the transaction and manage invoicing and payments, plus the applicable statutory limitation periods, generally 5 to 10 years.
- For individuals: your preferences (e.g., dietary requirements), retained only for the duration of service provision.
- For professionals, where there is ambiguity between the name of your business and your personal name (e.g., sole traders, very small businesses, etc.), financial and economic data (e.g., bank account number, verification code, etc.) are retained for the period necessary for transaction processing and payment management, plus the applicable statutory limitation periods, generally 5 to 10 years.
- Email addresses, retained for up to 3 years from our last contact with you for email marketing purposes, and until the end of your subscription for newsletter distribution.
- Video surveillance footage, collected through our security cameras and retained for a maximum period of one month (applicable only within our premises and not within the Bistro Autour du Beurre).
- Data contained in CVs and cover letters, retained for the duration of the recruitment process and then for 2 years following receipt of your application.
- Connection data (e.g., logs, IP addresses, etc.), retained for 1 year.
- Cookies, generally retained for a maximum period of 13 months.
Once the applicable retention periods expire, the deletion of your personal data is irreversible, and we will no longer be able to provide it to you. We may only retain anonymized data for statistical purposes.
Please also note that, in the event of a dispute or legal proceedings, we are required to retain all personal data relating to you for the entire duration of the proceedings, even after the retention periods described above have expired.
What rights do you have regarding your personal data?
Data protection regulations grant you specific rights that you may exercise at any time and free of charge:
- The right of access to and copy of your personal data, provided that such access does not conflict with business secrecy, confidentiality, or the secrecy of correspondence.
- The right to rectification of inaccurate, outdated, or incomplete personal data.
- The right to object to the processing of your personal data for direct marketing purposes, as well as to processing based on our legitimate interest, unless compelling legitimate grounds justify such processing.
- The right to request the erasure (“right to be forgotten”) of personal data that is not essential to the operation of our services.
- The right to restrict processing, allowing the temporary suspension of data use where the legitimacy of the processing is disputed.
- The right to data portability, enabling you to retrieve certain personal data and transfer it to another information system.
- The right to provide instructions regarding the use of your personal data after your death, either directly or through a trusted third party or beneficiary.
For a request to be processed, it must be submitted directly by you or your representative to donneespersonnelles@avec-olga.com.
Requests cannot be made by anyone other than you or your representative. We may therefore request proof of identity and evidence of representation where there is doubt regarding the identity of the requester.
We will respond to your request as quickly as possible and no later than one month after receipt. However, if the request is particularly complex or if we receive a large number of requests simultaneously, this period may be extended up to three months.
Please note that we may refuse to respond to any request that is manifestly unfounded or excessive, particularly due to its repetitive nature.
Who can access your personal data?
Your personal data is processed by our teams and by our technical service providers solely for the purpose of operating our services.
We ensure that all technical service providers are carefully vetted before appointment to verify their strict compliance with data protection regulations.
MOREOVER, WE GUARANTEE THAT WE NEVER TRANSFER OR SELL YOUR DATA TO THIRD PARTIES OR COMMERCIAL PARTNERS.
Can your personal data be transferred outside the European Union?
Personal data processed through our website may be hosted on servers located outside the European Union. To protect your personal data, we ensure that our hosting providers implement the appropriate safeguards required to guarantee the confidentiality and protection of your data.
We may also use technical tools located outside the European Union. In such cases, we ensure that they strictly comply with the rules governing international data transfers and provide an adequate level of data protection.
How do we protect your personal data?
We implement all technical and organizational measures required to ensure the security of your personal data on a daily basis and, in particular, to prevent any risk of destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
Do we use cookies when you browse our website?
We guarantee that we do not use any advertising cookies on this website.
Furthermore, apart from technical cookies strictly necessary for the proper operation of our website, we only use statistical cookies that supervisory authorities consider sufficiently privacy-friendly to be exempt from consent requirements and therefore exempt from cookie banner obligations.
As a result, you may not object to the use of these statistical cookies.
However, you may object to the placement of technical cookies on your device through your browser settings.
Who can you contact for additional information about the use of your personal data?
To ensure the best possible protection and integrity of your data, we have officially appointed an independent Data Protection Officer (“DPO”) with our supervisory authority.
You may contact our DPO at any time, free of charge, at donneespersonnelles@avec-olga.com to obtain further information about how we process your personal data.
How can you contact the CNIL?
You may contact the French Data Protection Authority (“CNIL”) at any time using the following details:
CNIL Complaints Department
3 Place de Fontenoy – TSA 80751
75334 Paris Cedex 07
France
Telephone: +33 (0)1 53 73 22 22
Can this Privacy Policy be amended?
We may modify this Privacy Policy at any time in order to adapt it to new legal requirements and to any new processing activities that we may implement in the future.