CRISTEL WEBSITE PRIVACY & PERSONAL DATA PROTECTION POLICY
Last update: 19 April 2021
Article 1. Introduction
This privacy and personal data protection policy, hereinafter referred to as the “Privacy Policy”, applies to the website www.cristel.com hereinafter referred to as the “Website” belonging to the company CRISTEL SAS, hereinafter referred to as “CRISTEL” and “we/us”.
Protecting your personal data is of utmost importance to us. To guarantee you the best level of protection, CRISTEL scrupulously ensures that the collection, use and processing of your personal data are carried out carefully and correctly, and in strict compliance with European Regulation 2016/679 (GDPR).
The purpose of this document is to explain Cristel’s Privacy Policy and how your personal data is collected, used and processed.
Personal data is any data that can be used to identify you. This includes your first name, last name, age, postal address, email address, location and IP address.
This Privacy Policy supplements the Legal Notice and the Online Terms and Conditions which can be found at the following address: XXXXX
This Privacy Policy also covers data that CRISTEL receives from its distributors, service providers, business partners or other third-party sources.
Article 2. Legal basis and general principles for personal data processing
The legal basis for the processing of personal data covered by this Privacy Policy is based on European Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 regarding the protection of natural persons for the processing of personal data and on the free movement of data.
We therefore collect and process personal data only in the following cases:
- If you have given your consent
- If the data processing is necessary to fulfil a contract
- If there is a legitimate interest
- If the data processing is required by law
We collect and process your data in accordance with the following principles:
Legality, fairness and transparency
Your data can only be collected and processed with your consent. Whenever personal data is collected, you will be informed that this data is collected and for what purpose.
Restricted collection and purpose
The collection and processing of data is carried out to meet one or more of the purposes set out in this Privacy Policy.
Only the data required to fulfil the purposes of the Website is collected.
Reduced data retention over time
Your data is kept for a limited period of time, of which you are informed.
Privacy
We are committed to ensuring the integrity and confidentiality of the data collected.
Article 3. The data collected by CRISTEL
We may collect the following data:
Contact details and personal information, such as your name, address, email address, telephone number, login details (including social media account details for login purposes, if applicable) and signature;
Demographic information such as your gender, age, date of birth, number of people in your household;
Data about your online activity or activity on other networks and devices, such as information about the browsers and devices you use to access the Website, emails and advertisements and how you interact with the Website, emails and advertisements.
Data relating to your relationship with CRISTEL such as information relating to your purchases and purchase history, the products you purchase, the frequency of your purchases as well as the price and promotions or advantages linked to these purchases, data relating to any loyalty programmes, information relating to how you interact with us as well as with our Products and Services.
Data relating to your geographical location. When you use the Website, CRISTEL may collect and process this data, including precise geo-tracking.
Audio, digital, visual or other similar information, such as photos, videos or other content that you have sent to us or shared on our Website or as part of our services or events, such as cooking demonstrations, cooking classes, or games and competitions with or without prize draws.
More widely, we may also collect other data that identifies you or can be reasonably associated with you.
Article 4. How we collect your data
We collect data provided by you, data collected automatically or data we receive from other sources.
Regarding data you provide us:
You provide us with data when you create an account on the Website, when you communicate with us, or when you participate in events, such as cooking classes, cooking demonstrations, games or competitions.
For example, you may provide us with contact information, personal information, demographic information, financial information, information about your eating habits, cooking practices and product use.
Regarding data collected automatically:
Data collected automatically includes
Data relating to Website use
CRISTEL records data when you access the Website, emails or advertisements such as device and browser type and language, hardware model, operating system version, login details, IP addresses and device data (e.g., hardware settings, date and time of your request, referring URL, bugs and system activity). We also collect data about how you interact with the Website, emails and advertisements, such as the settings you use, the content you view, and the dates and times of your interactions.
Cookies and other similar technologies
Cookies and similar technologies are data stored directly on the computer you are using.
A cookie is a small file located on your device that activates the features of our Website. Any browser accessing our Website may receive cookies from us or from third parties, such as our customers, partners or service providers.
Cookies enable CRISTEL to collect information such as browser type, time spent on the Website, pages viewed and preferences.
We use the information for security purposes, to facilitate browsing, to display data more effectively and to customise your customer experience. Cookies also enable CRISTEL to collect statistical data about the use of the Website to improve its design and features by understanding how it is used.
You can choose to accept or decline cookies.
Although most browsers automatically accept cookies, you can generally change your browser settings to decline cookies. If you prefer to decline cookies, most browsers will enable you to:
(i) Change your browser settings to notify you when you receive a cookie, giving you the chance to decide whether to accept it.
(ii) Deactivate existing cookies.
(iii) Set your browser to automatically decline cookies. If you set your browser to decline cookies, some parts of the Website may not operate properly.
A Pixel is an image embedded in the Website or emails that requires a call to our servers before it can be displayed (thereby providing data about your device and visit to the Website).
We use pixels to track how you interact with the content of an email or the content of the Website.
Pixels may be used for certain pages of the Website, emails or advertisements, to track the actions of Website users, compile statistics on Website use and response rates, determine whether you have opened or replied to emails, and assess the effectiveness of our marketing strategy.
3. Regarding data from other sources:
We may also collect or receive data from our retailers, contact details and personal information, and data relating to products you have inquired about or purchased. Retailers are independent legal entities with their own privacy practices.
Article 5. Use of data collected.
We use the data collected for the following purposes:
To provide and improve our products. This includes customising them to your preferences or interests, modifying them to make them easier to use, analysing how they are used, and assessing, maintaining and improving their performance, efficiency, safety and durability.
To design new products or services.
To process payments and transactions.
To advertise our products. This includes the creation and distribution of promotional and advertising materials
To communicate and manage our relationship with you. In order for us to be able to provide you with information about our products and our Website, answer your questions, provide you with data and manage your participation in surveys or promotional offers.
To handle your claims: we also use the data collected to investigate, approve, respond to and manage warranty claims.
To deal with legal matters: we may use the data collected to comply with laws, regulations, contractual obligations, court orders, other legal processes or obligations, or legal claims from public authorities or governments, to detect, prevent and respond to fraud, and to Intellectual Property infringements.
We may anonymise or manage all such data and use it for any purpose, including research and product design. This data will not identify you personally.
Article 6. Transmission of data to third parties.
The personal data collected by the Website is processed exclusively by CRISTEL and is not transmitted to any third party.
Article 7. Data hosting
The CRISTEL Website is hosted by: whose head office is located at OVH situated 140 quai du sartel 59100 Roubaix, FRANCE.
The Host can be contacted here : https://www.ovhcloud.com/fr/contact/
The data collected and processed by the Website is exclusively hosted and processed in FRANCE.
Article 8. Data Controller
The Data Controller for the personal data is Mr. Antoine DEVANNE.
He can be contacted as follows adevanne@cristel.com.
The Data Controller is responsible for determining the purposes and means of processing personal data.
Article 9. Third Party Websites and Plug-ins
The Website contains links to external websites, mobile applications or third-party services that are not operated by CRISTEL, as well as plug-ins from social media platforms and other parties.
We do not accept any liability for the use of these links/plug-ins.
We are not liable for the privacy and personal data policies of these third-party websites or for their other policies or practices.
To learn more about the data collected by these websites, please read their privacy policies.
Article 10. Security of data collected.
We make every effort to ensure compliance with technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration or destruction.
Article 11. Retention of data collected
The data collected will be retained by CRISTEL for the entire term of contractual relations with you as well as during a maximum period of one year following the end of these relations.
Article 12. Options
You have certain choices over the information you provide and how it is used and shared. For example, you may:
Choose to provide only some of the information requested. If the information is not complete, the Website may not function properly or the advantages offered by our Website or our services may be restricted.
· Amend and review with us certain information related to your account(s).
Choose not to receive any marketing communication from us. Depending on the laws in force in your country or your relationship with us, you may automatically receive our marketing emails or you may have to sign up to receive them. If you wish, you can stop receiving our marketing emails by following the unsubscribe instructions in the email or by submitting a request via the following link: https://www.cristel.com/en/newsletter.
Your request must include your last name and first name, the brands and types of marketing communications you no longer wish to receive, and the contact information used to send these communications (e.g., postal address for postal communications or email address for email communications). In this case, however, you may receive non-marketing communications, including: communications relating to an order or transaction, or customer service communications.
Article 13. Rights to access and control your personal data
Pursuant to the French Data Protection Act (“Informatique et Libertés”) and the General Data Protection Regulation, you have the right to access, rectify and withdraw your personal data, as well as the right to object to its processing.
You may request that any personal information that is inaccurate, incomplete, ambiguous or out of date be rectified, supplemented, clarified or updated. You can also request that the processing of the data you provide be restricted.
To exercise these rights, you may send a request to CRISTEL at any time via the “contact” interface or by contacting the Data Controller via the address mentioned in Article 8 of this policy.
Otherwise, you are entitled to lodge a complaint with the local supervisory authority
CNIL
3 place de Fontenoy - TSA 80175
75334 PARIS CEDEX 07, France
Or at https://www.cnil.fr/en/home
Article 14. Minors
We do not intentionally collect data from individuals under the age of 13 or younger than the minimum age pursuant to applicable local law. The Website is not intended for persons under the age of 13 and is not designed for this audience. We request that children under the age of 13 do not provide any personal information on this Website.
Article 15. Amendments to this policy
We may amend this Privacy Policy.
Any amendments to this Privacy Policy will come into force when we post the amended policy on this Website.
We encourage you to review updated and amended versions of this policy by checking the date when you access the Website.
Article 16. Contact us
If you have any questions about this Privacy Policy, please contact us using the contact information below:
CRISTEL
Service CRISTEL Store
Parc d'Activités du Moulin
BP 10
F - 25490 FESCHESLE-CHATEL, France
Email address: cristelstore@cristel.com