Privacy policy

1. Who are we?

The company SAVENCIA Ressources Laitières, publisher of the www.alimpex-milktrade.com website, is aware of the importance you attach to the processing of your personal data and recognises the importance of protecting your privacy. This privacy and data protection policy explains how SAVENCIA Ressources Laitières collects and processes your personal data and for what purposes.

1.1 Data controller

The following information is provided so that you can take note of the commitments in terms of personal data protection by the company SAVENCIA Ressources Laitières, whose registered office is located at 2, route Neuve, 50890 CONDÉ-SUR-VIRE, a subsidiary of the SAVENCIA Saveurs & Spécialités Group. SAVENCIA Ressources Laitières acts as the data controller for the processing of personal data referred to in this document, hereinafter referred to as “the Data Controller” or “we”.

1.2 Our Data Protection Officer

The data controller has appointed a person responsible for IT policy and freedoms who can be contacted :

By email to the following address : : dpo@savencia.com

Or by post to the following address: SAVENCIA Ressources Laitières, Référent RGPD, 2 Route Neuve, 50890 Condé-sur-Vire

The Data Protection Officer can be contacted in English or French at the following address : dpo@savencia.com

2. The data personnal we process

In the context of the processing of personal data, the Data Controller collects and processes the following data :

• Name, first name, e-mail address from the contact form

• IP address for website statistics (Google Analytics)

The data marked with an asterisk in our forms must be provided. Otherwise, the service associated with the form cannot be provided.

3. The purposes and legal basis of our date

processing

3.1 The purposes of our processing

The processing that we carry out is for the following purposes:

• Website content management
• User journey monitoring
• Monitoring of user complaints
• Audience analysis
• Showcase site to present our products, trade fairs, promote Alimpex’s activity

3.2 The legal basis of our treatment

We will only process data if at least one of the following conditions is met: Your consent to the processing operations has been obtained; Our legitimate interest, or that of a third party, justifies our processing of the personal data concerned.

3.3. The legitimate interests pursued

The legitimate interests pursued by the Controller may include enabling the continuity of its business, improving the user experience, understanding the user’s expectations.

4. The recipients of your data

 

The personal data we collect, as well as those collected subsequently, are intended for us in our capacity as data controller. We ensure that only authorised persons have access to this data. Our service providers may receive this data in order to carry out the services we entrust to them.

5. Transfers of your data

As part of the services offered, we transfer your personal data to partners located in France and in the United States (Google Analyctics). Each of these transfers is governed by legal instruments that comply with the applicable legal framework.

6. The periods for which we keep your data

 

The retention periods we apply to your personal data are proportionate to the purposes for which they were collected. Accordingly, we retain data :

• From your request made via the contact form until our reply (maximum within 1 month)
• For thirteen months the cookies from their installation on your device;

7. The rights you are entitled to

7.1 How to exercise your rights

You can exercise your rights by email : dpo@savencia.com

Or by post with proof of identity, to the following address: SAVENCIA Ressources Laitières, Référent RGPD, 2 Route Neuve, 50890 Condé-sur-Vire.

To do so, you must clearly indicate your name(s) and surname(s), the address to which you wish the reply to be sent and attach proof of your identity.

In principle, you may exercise all your rights free of charge. With regard to the right to information, the data controller will not be obliged to comply with it if you already have the information you are requesting.

The data controller will inform you if it cannot comply with your requests. These rights are not absolute and are subject to various conditions under :

• Applicable local data protection or privacy laws;
• Laws and regulations applicable to you.

The Data Controller wishes to inform you that failure to provide or amend your data may have consequences for the processing of some of your requests and that your request to exercise your rights will be retained for follow-up purposes.

All the rights you have are detailed below.

7.2 Your right to information

You acknowledge that this information notice informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared, and the possibility of a transfer of data to a third country. In addition to this information and in order to ensure fair and transparent processing of your data, you declare that you have received additional information concerning

• The length of time your personal data will be kept;
• The existence of your rights and how to exercise them.

If we decide to process data for purposes other than those indicated, you will be given all the information relating to these new purposes.

7.3 Your right to access and rectify your data

By exercising this right, you have confirmation as to whether or not your personal data is being processed and, where it is, you have access to your data as well as information about :

• The purposes of the processing ;
• The categories of personal data concerned;
• The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients who are established in third countries;
• Where possible, the period for which the personal data is to be kept or, where this is not possible, the criteria used to determine this period;
• The existence of the right to ask the controller to rectify or erase your personal data, the right to request a restriction on the processing of your personal data, the right to object to such processing;
• The right to lodge a complaint with a supervisory authority;
• Information about the source of the data when it is not collected directly from the data subject;
• The existence of automated decision-making, including profiling, and in the latter case, relevant information about the underlying logic and the significance and intended consequences of the processing for the data subjects.

You can ask us to correct or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.

7.4 Your right to erasure of your data

You may request that we delete your personal data where one of the following reasons applies:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You withdraw the consent previously given;
• You object to the processing of your personal data where there is no legal ground for processing;
• Le traitement de données personnelles n’est pas conforme aux dispositions de la législation et de la réglementation applicable ;
• Your personal data was collected when you were a minor.

However, the exercise of this right will not be possible where the retention of your personal data is necessary under the law or regulations and in particular for example for the establishment, exercise or defence of legal claims.

7.5 Your right to limit data processing

You may request the restriction of the processing of your personal data in the cases provided for by the law and regulations.

7.6 Your right to object to data processing

You have the right to object to the processing of your personal data where the processing is based on the legitimate interests of the controller.

7.7 Your right to the portability of your data

You have the right to the portability of your personal data. The data on which this right can be exercised are :

• Only your personal data, which excludes anonymised personal data or data that does not concern you;
• Declarative personal data as well as the personal operating data mentioned above;
• Personal data that does not infringe the rights and freedoms of third parties such as those protected by business secrecy.

This right is limited to processing based on consent and to personal data that you have personally generated.

This right does not include derived or inferred data, which are personal data created by the Data Controller.

7.8 Your right to withdraw your consent

Where the data processing operations we carry out are based on your consent, you may withdraw it at any time. We will then stop processing your personal data without affecting the previous operations to which you have consented.

7.9 Your right to appeal

You have the right to lodge a complaint with the Cnil on French territory, without prejudice to any other administrative or judicial recourse.

7.10 Your right to define post-mortem directives

You have the possibility to define directives relating to the conservation, deletion and communication of your personal data after your death with a trusted third party, certified and charged with enforcing the wishes of the deceased, in accordance with the requirements of the applicable legal framework.

8. Security of your data

We attach great importance to the protection, integrity and confidentiality of your data. Therefore, we have implemented technical and organisational measures to ensure a level of security appropriate to the risk and to protect your data from loss, alteration, access or disclosure to unauthorised third parties.

However, despite our efforts, no security measure can protect against all risks of misuse or hacking, for which we as data controller cannot be held responsible.

In the event of a personal data breach, we undertake to notify the CNIL in accordance with the regulations in force relating to the protection of personal data. In the event that a data breach presents a high risk to your rights and freedoms, we will inform you as soon as possible and always in accordance with the conditions set out in the regulations in force relating to the protection of personal data.