Data Protection Policy in accordance with the General Data Protection Regulation (GDPR)

1) Information on the collection of personal data and contact details of the controller

1.1 Thank you for visiting our website and for your interest in our services. Here we inform you about the processing of your personal data when using our website. Personal data is any data that allows you to be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is: Cornilleau SAS, La Folie – 14 Route Nationale – 60120 Bonneuil-les-Eaux, France, Tel.: +33 (0) 344 802 222, Fax: +33 (0) 344 802 223, Email: commercial@cornilleau.fr. The controller for personal data is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries), this website uses SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption. You can recognize an encrypted connection by the string "https://" and/or by the padlock symbol in the navigation bar.

2) Data collection when visiting our website

When you use our website solely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server ("server log files"). When visiting our website, only the following data is collected, which is technically necessary to display the website to you:

* The visited website

* Date and time of access

* Amount of data sent (in bytes)

* Source/reference from which you reached our website

* Browser used

* Operating system used

* IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of the website. The data is under no circumstances passed on or used for other purposes. However, we reserve the right to check server log files retrospectively if there are concrete indications of unlawful use.

3) Cookies

In order to make your visit to our website attractive and to enable the use of certain functionalities, we use cookies on various pages. A cookie is a small text file that is stored by your browser on the hard drive of your device.

Some cookies are deleted after the end of the browser session ("session cookies"). Others remain stored on your device and allow us and our partners (third-party cookies) to recognize your browser on your next visit (persistent cookies).

If cookies are used, they collect and process specific user information such as browser data, location data, or IP address values. Persistent cookies are systematically deleted after a predetermined period, with a maximum duration of thirteen (13) months from the first placement.

When personal data is processed via cookies, processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in providing the best possible website functionality.

4) Contacting us

Personal data is collected when you contact our services (e.g., via the contact form or email). This data is stored and used exclusively to answer your request and for the associated technical management (Art. 6(1)(f) GDPR).

5) Data processing for account opening and contract execution

Pursuant to Art. 6(1)(b) GDPR, personal data may also be collected and processed when you provide it to us for the performance of a contract or for opening a customer account. Account deletion is possible at any time by contacting the controller.

6) Use of your data for prospecting purposes

If you subscribe to our newsletter, your email address will be used for advertising purposes until you unsubscribe (Art. 6(1)(a) GDPR).

7) Data processing in the context of order processing

For order processing, we cooperate with service providers such as DPD, KUEHNE + NAGEL, and La Poste for delivery, and Payline for payment processing (Art. 6(1)(b) GDPR).

15) Rights of the data subject

The applicable data protection regulations grant you rights including: Right to access (Art. 15), Right to rectification (Art. 16), Right to erasure (Art. 17), Right to restriction of processing (Art. 18), and Right to data portability (Art. 20).

17) Contact and complaints

For any request or in case of a dispute, please contact our customer service via email at: dpo.cornilleau@cornilleau.fr.