L’Arche du Livradois protects your personal data. In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi “Informatique et Libertés”) of 6 January 1978, as amended, this page explains how we use your data and what your rights are.
Data controller
L’Arche du Livradois – Laurine GENEVEY, entrepreneur individuel (EI) (sole trader), agricultural business, Lospeux, 63580 Peslières, France. Email: archedulivradois@gmail.com.
Data collected
- Identity and contact details: surname, first name, email address, delivery and billing addresses, telephone number.
- Orders: products and services ordered, amounts, delivery and payment methods, order history, correspondence with us.
- Bookings and appointments: service, date and time, number of participants or people, optional message and, for a home service, time slot, number of hours on site and travel zone.
- Payment: payment method chosen and payment status. No bank card data is stored by the shop.
- Customer account: login and password, the password being stored in encrypted form.
- Browsing: IP address, technical connection data and cookies (see below).
Mandatory fields in forms are marked: without this information, we cannot process your order or your request.
Purposes and legal bases
- Processing orders, deliveries, collections by appointment, payments, returns and guarantees, managing your customer account: performance of the contract.
- Managing your bookings (courses, introduction to lapidary, home services) and your free appointments at the farm, sending their confirmation and then a reminder the day before: performance of the contract or, for free appointments, pre-contractual measures taken at your request. Booking data is used solely for these purposes.
- Replying to your requests: pre-contractual measures taken at your request or legitimate interest in replying to you.
- Invoicing and accounting: legal obligation.
- Security of the Site and prevention of payment fraud: legitimate interest.
- Publication of customer testimonials, under their authors’ initials only and with their date: legitimate interest in making our customers’ opinions known; each author may object and have their testimonial removed at any time.
- Sending news from the farm by email (newsletter): consent, given when you sign up; every email contains an unsubscribe link. For our customers, information about products or services similar to those already purchased: legitimate interest, with the option to object at any time.
- Cookies strictly necessary for the Site to function: legitimate interest (see the “Cookies” section below).
Recipients
Your data is processed by L’Arche du Livradois. Only the data that is necessary is passed on:
- to OVH SAS (Roubaix, France), which hosts the Site;
- to PrestaShop SA (PrestaShop Checkout module), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) and Google (Google Pay), for payments;
- to La Poste (Colissimo), for the delivery and tracking of your parcels;
- to Google (Gmail), our email service;
- to Google Ireland Limited (Google Calendar): for our organisation, your bookings and appointments are copied into the farm’s Google Calendar, where only the date, time, service, your name and your telephone number appear;
- to our bank, for transfers and cheques, and to authorised professionals and public authorities, in connection with our accounting and tax obligations;
- to administrative or judicial authorities, where required by law.
We neither sell nor rent out your data.
Transfers outside the European Union
Google and PayPal may process certain data outside the European Union, in particular in the United States. These transfers are subject to the safeguards provided for by the GDPR: an adequacy decision of the European Commission (the EU–US “Data Privacy Framework”) or the European Commission’s standard contractual clauses.
Retention periods
- Customer data (orders, correspondence): for the duration of the business relationship, then 3 years after your last order or last contact with us;
- Customer account: until it is deleted at your request, or after 3 years of inactivity;
- Invoices and accounting records: 10 years;
- Contracts for an amount of €120 or more: 10 years, under Article L213-1 of the French Consumer Code (Code de la consommation);
- Paid bookings (courses, introduction to lapidary, home services): as for orders, according to the periods above;
- Free appointments at the farm: 1 year after the appointment at the latest;
- Testimonials: until their author asks for them to be removed.
Security
The Site is protected by the HTTPS protocol, which encrypts communications between your browser and the server. Access to data is restricted to the people who need it, and passwords are stored in encrypted form.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability, as well as the right to object, in particular to direct marketing, without having to give reasons. You can withdraw your consent at any time and set instructions regarding what happens to your data after your death.
To exercise these rights, write to us at archedulivradois@gmail.com or to L’Arche du Livradois, Lospeux, 63580 Peslières. We reply within one month. If we have reasonable doubts about your identity, we may ask you for proof of identity.
If you consider that your rights have not been respected, you can lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
Telephone marketing
Your telephone number is used to track your deliveries and to arrange appointments. In accordance with Article L223-2 of the Consumer Code, we inform you that telephone marketing is prohibited without your prior consent, except where it takes place in the context of an ongoing contract and is related to the subject matter of that contract.
Cookies
What is a cookie?
A cookie is a small file placed on your device when you visit a website. In accordance with Article 82 of the French Data Protection Act, cookies that are not strictly necessary for the Site to function are only placed with your consent.
Cookies necessary for the Site to function
The Site only uses cookies that are strictly necessary for it to function. Exempt from consent, they are used to:
- keep the contents of your basket and your login session;
- remember your language;
- secure the Site and online payment: when you pay by Google Pay, the PrestaShop Checkout module (PayPal) may place the cookies needed to secure the payment.
No audience measurement or advertising cookies
The Site uses no audience measurement or advertising cookies, so you are not asked for any consent. If we ever add such tools, we will ask for your consent first.
Blocking or deleting cookies
You can set your browser to block or delete cookies; your basket and logging in to your account will then no longer work.