Data protection
In compliance with the European Data Protection Regulation of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR), GAUTIER FRANCE is committed to protecting the personal data of data subjects.
The present personal data processing policy is intended to inform users of the GAUTIER FRANCE site.
What data are collected?
The data that may be processed are the following:
- First name(s), Last name(s), Title
- Postal address, Postcode, City, Country
- Delivery information such as floor or intercom
- Fixed or mobile phone number, e-mail address
- Online logins and passwords
- Geolocation
- Electronic identification data available on your devices ("cookies" or "IP addresses")
- Activity data on the GAUTIER site (actions taken, date of visit, type of pages visited, etc.)
When is this data likely to be collected?
Personal data of our users may be collected:
- When browsing our website
- When creating an account on our website
- When completing a form on our website
- When subscribing to our newsletter
- When accepting the receipt of a catalog or commercial offers
- When participating in contests on our own site or on partner sites
- When requesting a quote in store
- When ordering our products on our website or in store
Why is this data being collected?
The collection of data is due to various reasons and necessities.
It is useful for the purpose of assisting our users: creating and accessing your personal online space, answering your questions, managing the commercial relationship for a quote, an order and its delivery or invoicing, developing statistics, etc.
This data may also be collected in the legitimate interest of GAUTIER FRANCE, and in particular that of the fight against fraud at the time of payment for the order and the management of any chargebacks.
The user's consent is also a condition for the collection of data. Consent is required for sending commercial information by e-mail or text message and for the proposal of sales outlets closest to your place of residence.
Who has access to your personal data?
Your personal data are collected by GAUTIER FRANCE for the reasons explained above, and by other joint data controllers.
Your personal data may be transmitted to our data processors, to perform services related to your requests, necessary for the accomplishment of the tasks which are entrusted to them, such as delivery and assembly.
Personal data are not transmitted outside the European Union. They are not transferred to third parties.
However, your data may be transmitted to the administrative authorities or to the police, in accordance with the legal obligations of GAUTIER FRANCE, in particular during legal and administrative requisitions.
How long do we keep your personal data?
Your data is kept for the time necessary to fulfil the purpose for which it was collected. They are then archived with restricted access for a further period. They are for reasons strictly limited by law and for a legal period of retention and time limitation.
Your banking data recorded with your consent are kept until the expiration of your credit card. However, you may delete your registered credit card.
Your unrecorded payment data, in accordance with the EU Regulation of 27 April 2016, is not retained beyond the transaction.
Supporting documents such as purchase orders, delivery notes, customer and supplier invoices are kept for 10 years, in accordance with the obligation set forth in Article 123-22 of the Commercial Code. This implies that the personal data contained in these supporting documents must be kept for 10 years.
Data relating to inactive customers are deleted, in compliance with the principle of limiting the duration of data retention as set out by the French Data Protection Authority (CNIL), i.e. 3 years from the last contact with the company. Your data will therefore be automatically deleted, and in particular you will no longer be included in our email and SMS mailing lists after 3 years of inactivity on our website.
How is your personal data secured?
GAUTIER FRANCE is committed to protect your personal data thanks to technical and organizational measures. GAUTIER FRANCE has appointed a GDPR committee whose mission is to guarantee the conformity of the implemented processing and to keep a register to notify the solutions and their processing.
GAUTIER FRANCE commits itself to ensure that no malicious use is made of your banking data, by entrusting an external specialized company to carry out the necessary, confidential and secure checks. During these checks, data relating to your bank card, your identification data and the purchases made with the card are collected.
What rights do you have to protect your personal data?
Our users have rights to manage their personal data:
- Right of access to data, including the right to obtain a copy
- Right to rectify inaccurate information
- Right to the deletion of information contained in the databases
- Right of objection and withdrawal of consent concerning your appearance in the database files.
- The right to object to profiling, which will remove the targeting of approaches based on your interests.
- Right to portability, relating to the transmission of personal data
- Right to refer to the CNIL (French Data Protection Authority): complaint possible if you consider that the personal data processing policy is contrary to the regulations in force.
- Right to an effective judicial remedy against the supervisory authority or against the data controller or a data processor: against a legally binding decision of a supervisory authority concerning him or her, or against the data controller if it is considered that the rights conferred by the European Regulation have been violated by the use of personal data contrary to the Regulation.
- Right to be forgotten, which refers to the acceptance of a request for the deletion of personal data.
How to exercise your rights?
To ensure the exercise of your rights, you can at any time contact GAUTIER FRANCE, by mail, at the following address:
GAUTIER FRANCE - GDPR Committee
17, rue Georges Clémenceau / BP10
85510 LE BOUPERE
Phone: 02-51-61-40-00
Fax: 02-51-61-41-40
Or by email to the following address rgpd@gautier.fr
If, after contacting us, you feel that your rights have not been respected, you may file a complaint with the complaints department of the French Data Protection Authority at: CNIL - Service des plaintes - 3 place de Fontenoy - TSA 80715 - 75334 PARIS Cedex 07, or by Internet: https://www.cnil.fr/fr/plaintes
Other information
Data Controller:
GAUTIER FRANCE
17, rue Georges Clémenceau / BP10
85510 LE BOUPERE
Phone: 02-51-61-40-00
Fax: 02-51-61-41-40
Representative of the data controller:
General Manager of Gautier France
17, rue Georges Clémenceau / BP10
85510 LE BOUPERE
The GDPR committee is composed of:
- the communication manager,
- a representative of the human resources department,
- a representative of the legal department,
- and a representative of the IT department.
It may also be supplemented from time to time by an external consultant.
