Privacy policy

The SOCIETE COOPERATIVE AGRICOLE LES SALINES DE GUERANDE - LE GUERANDAIS is an agricultural cooperative company, with a share capital of 1,500 euros, registered in the Saint Nazaire trade and companies register under number 349 241 315, with its registered office at Pradel CS 65315 - 44350 GUERANDE, hereinafter ("we").

Concerned about the protection of personal data, we comply with the amended French Data Protection Act No. 78-17 of January 6, 1978 (hereinafter the "Data Protection Act") and the European Regulation 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, known as the General Data Protection Regulation or GDPR (hereinafter the "GDPR").

This personal data protection policy (hereinafter the "Personal Data Protection Policy") describes the measures we take to protect the personal data we process and, more specifically, informs you of the ways in which we process your personal data in the context of our business, in particular the management of our prospect files, users of our Website accessible at the following address: https://www.leguerandais.com (hereinafter the "Site") and our social networks including Instagram, LinkedIn, Facebook and You Tube (hereinafter the "Social Networks").

The Personal Data Protection Policy is not contractual in nature and does not create any obligation beyond what is already provided for by the aforementioned regulations on the protection of personal data.

If you are a minor under 15 years of age or incapable, you declare that you have received the consent of your parents or legal representatives prior to the collection and processing of your personal data. When you are a minor under the age of 15, the processing of your personal data whose legal basis is your consent is subject to your consent and that of the holder(s) of parental authority over you.
 

If you are a parent or guardian and you believe that your child has provided us with personal data without your consent, please contact us by e-mail at the following address:  or by post at the following address: Pradel CS 65315, 44350 Guérande.

We may freely update and modify our Personal Data Protection Policy. Where your consent is required, we will obtain it. The latest version of the Personal Data Protection Policy is the one accessible on our Site.
The terms "controller", "joint controller", "processor", "data subject", "personal data", "processing", "personal data breach", "member state" have the same meaning as assigned to them in the GDPR and the terms derived from them shall be interpreted identically.

The terms "controller", "joint controller", "processor", "data subject", "personal data", "processing", "personal data breach", "member state" have the same meaning as attributed to them in the RGPD and the terms derived from them will have to be interpreted identically.
 

1. Who is the controller of the processing of your personal data?

We are the controller of the processing of your personal data collected on our Site.
For any questions relating to the processing of your personal data concerning the processing that we implement in our capacity as controller, you can contact us by:

• E-mail at the following e-mail address:   
• Courier at the following postal address: Pradel CS 65315 - 44350 GUERANDE
• Telephone at the following number: 02.40.62.01.25
   

2. On what occasions do we collect your personal data?

Your personal data may be collected when:

• you have browsed our Site;
• you have contacted us or asked to be contacted, by any means of communication (telephone, e-mail, forms on our Site, post, Social Networks, etc.); 
• you have asked to be contacted, by any means of communication (telephone, e-mail, forms on our Site, post, Social Networks, etc.).) ; 
• you have exchanged views with us ;
• you have applied for a position with our company ; 
• you have responded to our satisfaction surveys and polls ; 
• you have requested the sending of promotional messages related to our business ;
• you have asked to receive our newsletters, news and offers ;
• you have left a review of our products, services or our Site ;
• you have taken part in an event we have organized; 
• you have viewed, subscribed to, used and/or posted comments or content on one of our Social Networks;
• you have consented with our service providers or partners to your data being passed on to us;
• you have made a request to exercise rights.

Your personal data may be communicated to us voluntarily by yourself or by another person, such as a person belonging to the structure in which you work or on whose behalf you intervene, by one of your friends, members of your family or by partners. 
Personal data may also be collected by means of cookies and other Internet tracers on our Site. In this respect, we invite you to consult our cookie management policy.  
 

We process the following personal data:

• To manage your contact requests via our forms: surname, first name, capacity (professional or private individual) telephone number, e-mail address, reason for request.

In the absence of providing this information, we will not be able to respond to your contact and information requests. This requirement to provide personal data is of a contractual nature.

• For the sending of our newsletters, news, offers: e-mail address.

  In the event of failure to provide this information, we will not be able to send you newsletters, news and offers. This requirement to provide personal data is of a regulatory nature.

• For the management of our satisfaction surveys and polls: surname, first names, e-mail address, answers given to questionnaires.

  In the absence of communication of this information, we will not be able to take into account your participation in satisfaction surveys and polls. This requirement to provide personal data is contractual in nature.

• For the management of events that we organize: surname, first name, telephone number, e-mail address.

  In the absence of communication of this information, we will not be able to register you for events that we organize. This requirement to provide personal data is of a regulatory nature.

• For the management and processing of your job applications: surname, first name, e-mail address, telephone number, curriculum vitae, covering letter, information relating to the position for which you are applying.

  In the event of failure to provide this information, we will not be able to respond to your application for a position with our company. This requirement to provide personal data is contractual in nature.

• For improving the quality of our support, services and Site  : activity data on the Site, such as type of pages visited, date of visit, IP address, connection data, language, location data, preferences, browsing history;

  The failure to record this information may prevent us from improving the quality of our support and services. This requirement to provide personal data is of a contractual nature.

• In order to exercise your rights, as recalled below, the communication of information or documents proving your identity or additional information on the nature of your requests may be required.

The failure to communicate this information may prevent us from responding to your requests. This requirement to provide personal data is of a regulatory nature.

The compulsory nature of the data requested is indicated at the time of collection by an asterisk. 

The collection of other personal data may be compulsory. All personal data whose collection is mandatory, the contractual or regulatory nature of this obligation to supply, as well as the consequences of failing to supply the personal data concerned, are then brought to your attention directly at the time of collection. 

You may voluntarily communicate personal data within the framework of the use of our Social Networks, the free text zones available on our Site appearing in the forms on our Site or even on the occasion of our exchanges. We inform you that you must only provide adequate and relevant information. You undertake not to make any excessive, abusive, defamatory, obscene, offensive, violent or inciting to violence or generally infringing the rights of third parties, nor to communicate any data considered sensitive under Article 9 of the RGPD (racial or ethnic origin, political, philosophical or religious opinions, trade union membership, data relating to health or sex life, offences, convictions, security measure). You undertake not to engage in illegal activities or harm third parties. In the event of non-compliance with these commitments, we reserve the right to take any action in order to preserve our rights and those of our staff. 

We invite you to consult the personal data protection policies of the various Social Networks in order to find out what personal data may be transmitted by them.
 

What are the purposes and legal bases of the processing of your personal data?

Your personal data is processed for the purposes and according to the legal bases detailed below:

5. Who are the recipients of your personal data?

The personal data we collect is intended, depending on the case, and according to the purposes as described above, for strictly authorized personnel in our customer, accounting, marketing, sales, legal and human resources, administrative and financial departments. 

We may need to communicate your personal data:  

• to our subcontractors (and to their own subcontractors, where applicable) when this is strictly necessary for the performance of our services and obligations in the context of the purposes described above (IT service providers, technical service providers, identity verification service providers, fraud prevention and anti-fraud service providers, service providers for the organization of satisfaction surveys and polls, event service providers, suppliers of analytical solutions, collection companies and credit agencies, accounting firms and chartered accountants, law firms, audit firms, marketing service providers). Our subcontractors are bound by an obligation of confidentiality and security as well as other obligations listed in the RGPD;
   
• to financial, judicial, police, administrative, police or state agencies, public bodies and regulatory authorities to whom we may, in particular in the context of proceedings, litigation, control and/or a request be required to disclose certain data, upon request and within the limits permitted by the regulations;    
   
• to our assignees or successors, if any;
   
• to third parties likely to place cookies on your terminals (computers, tablets, cell phones, etc..) when you give your consent (for more details, consult our cookie management policy available at the following link. [leguerandais.com/cookie-management]. 
  In accordance with Article 19 of the GDPR, we will notify each recipient to whom your personal data has been communicated of any request for rectification, erasure or restriction of processing made in accordance with Article 16, Article 17(1) or Article 18 of the GDPR (see below in Article 6.), unless such communication proves impossible or requires disproportionate efforts.
   

In accordance with Article 19 of the GDPR, we will notify each recipient to whom your personal data has been communicated of any request for rectification, erasure or restriction of processing made in accordance with Article 16, Article 17(1) or Article 18 of the GDPR (see below in Article 6.), unless such communication proves impossible or requires disproportionate efforts.

6. What are your rights and how can you exercise them?

You have, under the conditions of Article 15 of the RGPD, and barring exceptions, the following rights:

•  right to obtain confirmation that your personal data are or are not being processed and, where they are, to access your personal data as well as several information on the processing  (right of access);
   
• right to object, for reasons relating to your particular situation, to our processing of your personal data (right to object);
   
• right to obtain the rectification of your data when it is inaccurate (right of rectification) ;
   
•  right to obtain the erasure of your data in certain cases (right of erasure or "to be forgotten") ;
   
• right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, and/or to ask us to transfer your data to another data controller, where the processing is based on your consent or on a contract and the processing is carried out using automated processes (right to data portability) ;
   
• right to obtain  limitation of processing in certain cases (right to limitation of processing) ;
   
• right to define directives relating to the retention, erasure and communication of your personal data after your death.
  These directives may be general or specific. We can only be custodian of specific directives concerning your personal data that we process. General directives may be collected and stored by a digital trusted third party certified by the Commission Nationale de l'Informatique et des Libertés (hereinafter the "CNIL"). You also have the right to designate a third party to whom your personal data may be communicated after your death. In this case, you undertake to inform this third party of your request and of the fact that unambiguously identifiable data will be transmitted to us, and to inform them of this Personal Data Protection Policy;
   
• right to withdraw at any time your consent to the processing of your personal data where this is based on said consent, and to do so without prejudice to the lawfulness of the processing carried out prior to said withdrawal (right to withdraw your consent) ;
   
• right to object to the processing of your personal data for canvassing purposes (right to object to canvassing) ;
   
• right not to be the subject of a decision based exclusively on automated processing producing legal effects concerning you or affecting you significantly in a similar way (right not to be the subject of an automated individual decision); 
   
• the right to lodge a complaint with the competent supervisory authority, which in France is the CNIL, and to bring an action against us before the competent courts if you  consider that we have infringed your rights in relation to personal data.

The existence or otherwise of these various rights depends in particular on the legal basis of the processing concerned by the request. These rights are not without limits either, and in some cases we may therefore refuse your request (for example, for compelling legitimate reasons in the case of the right to object). Thus, in certain hypotheses, we may reply that your request cannot give rise to a positive response on our part and we will explain the reason why it cannot be deferred.

In the event of reasonable doubt on our part as to your identity, we may request additional information or documents in order to verify your identity (for example, in certain cases, a copy of the black and white front of your identity card).
In compliance with the conditions laid down by the regulations, you may exercise your rights by writing to us at the following e-mail address: contact@leguerandais.com or at the following postal address: Pradel CS 65315 - 44350 GUERANDE. 

We endeavor to respond to your requests within a reasonable time and, in any event, within the time limits set by the regulations in force.

7.    How long will your personal data be kept?
 

Your personal data is kept for the time strictly necessary for the purposes described above.

At the end of the durations previously listed, your data will either be deleted or anonymized so that it no longer allows you to be identified.

By way of exception, in the event of pre-litigation or litigation, all or some of your personal data may be subject to prolonged storage, in intermediate archiving, with access restricted to authorized persons only, if they prove useful for the said pre-litigation or litigation.

8.    What security measures do we implement for your personal data?

Respecting your right to protection, security and confidentiality of your personal data is our priority.

We implement technical and organizational security measures adapted to the degree of sensitivity of your personal data to protect them against malicious intrusion, accidental loss, accidental or unlawful destruction, alteration or disclosure to unauthorized third parties. 

On all pages of our Site requiring the input of personal data, we use standard SSL (Secure Sockets Layer) encryption.

Finally, where we detect a personal data breach likely to give rise to a high risk to your rights and freedoms, we will inform you of the breach as soon as possible, in accordance with the RGPD.

9.    Where is your personal data stored?
 

Your personal data is stored on secure servers located in Switzerland, at Infomaniak.

However, we may transfer all or part of your personal data to some of our subcontractors and partners established outside the European Union, in connection with the purposes mentioned above.
In general, we ensure that transfers of personal data outside the European Union are carried out in accordance with our Personal Data Protection Policy. Where the non-European Union state of destination of personal data has not been officially recognized as offering an adequate level of protection by the European Commission, we undertake to provide appropriate guarantees to protect your personal data, in accordance with Article 46 of the RGPD, in particular through the use of standard contractual clauses approved by the European Commission. We also ensure that you always have enforceable rights and effective legal remedies.