Privacy policy

Field of application:

The company DOMAINE LAURA BOURDY appreciates the trust you place in us when browsing our website. We attach the utmost importance to protecting your personal data and complying with applicable regulations.

Visiting and using our site implies that you accept our privacy policy. Please find below all the information you need to make an informed decision.

Data controller :

As part of your activity on our site, we collect and use personal data relating to you, individuals.

For all processing, the company DOMAINE LAURA BOURDY determines the means and purposes of processing. As such, we act as a data controller within the meaning of personal data regulations, and in particular EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data (RGPD).

Definitions:

• “Personal data” means any information relating to an identified or identifiable natural person;
• “Identifiable natural person” means a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;
• “Processing” means any operation or set of operations which may or may not be performed using automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction ;
• “Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or by the law of a Member State, the controller may be designated or the specific criteria applicable to his designation may be laid down by Union law or by the law of a Member State ;
• “Processor”: the natural or legal person, public authority, department or other body that processes personal data on behalf of the controller;
• “Recipient”: the natural or legal person, public authority, department or other body that receives personal data, whether or not it is a third party. However, public authorities which may receive personal data in the context of a specific investigation in accordance with Union law or the law of a Member State are not considered as recipients; the processing of such data by the public authorities in question complies with the applicable data protection rules according to the purposes of the processing;
• “Third party” means a natural or legal person, public authority, department or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data ;
• “Consent” of the data subject means any free, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or by a clear positive act, that personal data concerning him or her may be processed;

What data do we collect, for how long and why?

Data is collected for specific purposes. We collect the following information when you visit our site:

• Information relating to your browsing: By browsing our site, you interact with it. Consequently, certain information relating to your browsing is collected for a maximum period of 24 months.
  Certain information is necessary to facilitate and improve site navigation. These elements are developed in the “Cookies Policy”. Some necessary cookies are collected in our legitimate interest or on the legal basis of your consent in the case of non-necessary cookies.
  Other personal data, such as your IP address, is collected when you authorize cookies, notably for statistical purposes.
• Contact form: your identification data (name, first name, e-mail, telephone number, address) are requested in the form. Mandatory information is marked with an asterisk. Documents in pdf, dwg, dxf or step format may be added. This data is collected on the basis of your consent to process your request, and is kept only as long as it takes to process your request.

Use and transmission of your personal data :

We share your data with the technical service providers we use to carry out a range of operations and tasks on our behalf. We are contractually bound to these third parties, who have made strict commitments in terms of compliance with applicable regulations and security.

We work with subcontractors such as our DM Web development agency, whose contact details can be found in the present legal notice, our IT service provider, etc., who may have access to your data in a lawful and secure manner, in order to carry out necessary maintenance or conservation operations.

Similarly, only employees who need to respond to you or analyze site statistics have access to personally identifiable information.

Your data may be transmitted to legal or regulatory authorities in order to comply with our legal obligations.

We do not sell your personal data.

The computers and servers used to store personally identifiable information are kept in a secure environment. Our hosting provider holds its servers in the European Union.

The rights you have over your data :

The RGPD provides Data Subjects with rights that they can exercise. These include:

1. Right to information: the right to clear, precise and complete information on the use of Personal Data by the company DOMAINE LAURA BOURDY.
2. Right of access: the right to obtain a copy of the Personal Data that the Data Controller holds on the applicant.
3. Right of rectification: the right to have Personal Data rectified if they are inaccurate or obsolete and/or to have them completed if they are incomplete.
4. Right to erasure / right to be forgotten: the right, under certain conditions, to have Data erased or deleted, unless the company DOMAINE LAURA BOURDY has a legitimate interest in keeping it.
5. Right to object: the right to object to the Processing of Personal Data by the company DOMAINE LAURA BOURDY for reasons relating to the applicant’s particular situation (subject to conditions).
6. Right to withdraw Consent: the right at any time to withdraw Consent where Processing is based on Consent.
7. Right to restrict processing: the right, under certain conditions, to request that processing of personal data be temporarily suspended.
8. Right to data portability: the right to request that personal data be transmitted in a reusable format enabling it to be used in another database.
9. Right not to be the subject of an automated decision: the applicant’s right to refuse fully authorized decision-making and/or to exercise the additional guarantees offered in this respect.
10. Right to define post-mortem directives: the right for the applicant to define directives concerning the fate of Personal Data after his/her death.

Additional rights may be granted by local regulations to the Persons concerned.

To exercise your rights, you may contact the data controller by writing to him at DOMAINE LAURA BOURDY, 41 Rue Saint-Vincent, , 39140 Arlay or by e-mail to contact@domainejeanbourdy.com.

When you send us a request to exercise a right, we ask you to specify as far as possible the scope of the request, the type of right exercised, the personal data processing concerned, and any other useful information, in order to facilitate the examination of your request.

You will also be asked to provide proof of your identity. The latter information will only be used to process your request and will be deleted immediately.

You also have the right to lodge a complaint with the CNIL, the competent authority in France, online at www.cnil.fr or in writing at 3 Place de Fontenoy – TSA 80715 – 75 334 Paris Cedex 07.

How we protect your data:

We are committed to protecting the personal data we collect or process from loss, destruction, alteration, unauthorized access or disclosure.

We therefore implement all appropriate technical and organizational measures, depending on the nature of the data and the risks involved in processing it. These measures must ensure the security and confidentiality of your personal data.

Several security measures have been put in place to protect both the website and the data it may collect.

The website is secured by several secure passwords and an SSL certificate.

This also includes regular maintenance with full site backups, updates, theme updates and site module updates.

All data transmitted to the company is stored in a secure environment.

Policy update:

This policy may be regularly updated to take account of changes in regulations relating to personal data.