Privacy policy

Compliance with the General Data Protection Regulation (GDPR)

SAS LA FRUITIÈRE DU VAL EVEL

v20201111

The personal data you provide is processed by SAS LA FRUITIÈRE DU VAL EVEL.

Your personal data is valuable. That is why SAS LA FRUITIÈRE DU VAL EVEL is committed to complying with the GDPR (General Data Protection Regulation), which came into force on 25 May 2018.

General Information

Identity and contact details of the Data Controller

SAS LA FRUITIÈRE DU VAL EVEL – 10 LUZUNIN – 56500 EVELLYS
02 97 27 40 96
info@lafruitiere.com

Your rights

You have the right to object to, access, rectify, erase, restrict, and request portability of your personal data. You may also withdraw your consent at any time, where consent is the sole legal basis for processing.
To exercise your rights, you can contact us at info@lafruitiere.com

CNIL contact details

If you are not satisfied with the way your request has been handled, you may contact the CNIL via its website: www.cnil.fr/en

Data recipients

Data are processed within our company by management and only by the departments that need access to them. Where data are shared with other operators (joint controllers or processors), they are listed below depending on the situation and are committed to complying with the GDPR.

Transfer of data outside the European Union

In the event of data transfers outside the European Union, our partners and processors ensure an adequate level of protection as required by the European Union, in particular through compliance with relevant local regulations (such as PIPEDA) or through appropriate contractual safeguards.

Mandatory nature of data collection

Your data is either mandatory or optional, as indicated at the time of collection. Without the mandatory data, we are unable to process your request.

Depending on the situations described below, please review the specific information relating to each processing activity.

You are a customer of SAS LA FRUITIÈRE DU VAL EVEL.

Purposes of processing:

  • Carry out operations related to customer management, including: contracts, orders, deliveries, invoices, accounting, and in particular customer account management; and customer relationship follow-up such as satisfaction surveys, complaint handling, and after-sales service ;
  • Produce commercial statistics ;
  • Organize contests, sweepstakes, or any promotional operations, excluding online gambling and games of chance subject to approval by the French Online Gambling Regulatory Authority ;
  • Manage requests for access, rectification, and objection rights ;
  • Manage unpaid debts and disputes, provided that they do not involve offenses and/or do not result in the exclusion of an individual from the benefit of a right, service, or contract (managed by administrative departments) ;
  • Manage users’ reviews of products, services, or content.

Legal basis (lawfulness under Article 6 of the GDPR):


b) processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject;

c) processing is necessary for compliance with a legal obligation to which the data controller is subject.

Third-party recipients:

Processors: the web hosting provider, the IT managed services provider.

Retention periods:

(without prejudice to legal obligations regarding the retention or archiving of contractual and accounting documents)

Duration necessary for managing the commercial relationship.

You are a prospect of SAS LA FRUITIÈRE DU VAL EVEL.

Purposes of processing:

  • Carry out prospecting operations, including technical prospecting activities (such as data standardisation, enrichment, and deduplication); selecting individuals for customer retention, prospecting, and promotional actions; and conducting outreach campaigns ;
  • Produce commercial statistics ;
  • Update prospect databases using the organisation responsible for managing the telephone marketing opt-out list, in accordance with the provisions of the French Consumer Code.

Legal basis (lawfulness under Article 6 of the GDPR):

f) processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Third-party recipients:

Processors: the web hosting provider, the IT managed services provider.

Retention periods:
(without prejudice to legal obligations for the retention or archiving of contractual and accounting documents)

FORMER PROSPECTS / CUSTOMERS: 3 years from the last contractual relationship (extension request possible)

NON-CUSTOMER PROSPECTS: 3 years from the last contact initiated by the prospect (extension request possible)

You are a candidate for a seasonal position
offered by SAS LA FRUITIÈRE DU VAL EVEL.

Purpose of processing

Management of applications for seasonal employment.

Legal basis (lawfulness under Article 6 of the GDPR):

a) the data subject has given consent to the processing of their personal data for one or more specific purposes (minor applicant);

b) processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract;

f) processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Third-party recipients

Processors: the web hosting provider, the IT managed services provider.

Retention periods

1 year

You are a candidate for a position offered by SAS LA FRUITIÈRE DU VAL EVEL.

Purpose of processing

Management of applications for a job or internship.

Legal basis (lawfulness under Article 6 of the GDPR):

b) processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract;

f) processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Third-party recipients

Processors: the web hosting provider, the IT managed services provider.

Retention periods

2 years maximum, unless expressly authorized by the candidate

You are a member of the staff of SAS LA FRUITIÈRE DU VAL EVEL

Purposes of processing

Administrative management of staff; provision of IT tools; work organization; career and mobility management; staff training; management of supplementary health insurance, provident benefits, retirement, and collective savings plans offered by SAS LA FRUITIÈRE DU VAL EVEL to its employees; payroll management and general accounting.

For staff equipped with badges, the purposes pursued are as follows:
Access control at entry points and within specifically designated areas of the company or administration subject to restricted circulation;
Management of working hours and attendance;
Access control in compliance with “Food Defense” regulations.

Legal Basis (Lawfulness under Article 6 of the GDPR):

b) processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract;

c) processing is necessary for compliance with a legal obligation to which the controller is subject;

f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Third-Party Recipients

External organizations: providers of supplementary insurance and savings plans.
Processors: the web hosting provider, the IT management (outsourcing) provider, and training providers.

Retention periods

The duration of the data subject’s employment (without prejudice to legal obligations to retain or archive legal, regulatory, contractual, and accounting documents).

You are a supplier of SAS LA FRUITIÈRE DU VAL EVEL

Purposes of processing

Carry out administrative operations related to contracts, purchase orders, deliveries, invoices, payments, and accounting in relation to supplier account management; issue payment instruments (drafts, direct debit bills of exchange (LCR), cheques, promissory notes); prepare financial and turnover statistics per supplier; provide supplier selections for the needs of the company or organization; maintain supplier documentation.

Legal Basis (Lawfulness under Article 6 of the GDPR)

b) processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;

Third-Party Recipients

Processors: the web hosting provider and the IT management (outsourcing) provider.

Retention periods

The period necessary for managing the commercial relationship (without prejudice to legal obligations to retain or archive contractual and accounting documents).


In all cases: you are a User (visitor) of our website.

Cookies are small files stored on your device by your web browser.

Our website places on your device the cookies necessary for its operation, which are not subject to any specific consent requirement, as stipulated by applicable regulations.

However, upon your arrival on our website, you are invited to consent to the use of audience measurement cookies.

These specific cookies, which are considered personal data (although your IP address is anonymized), are subject to processing.

You may withdraw your consent at any time by using the dedicated button, where applicable, or by contacting SAS LA FRUITIÈRE DU VAL EVEL.

Purpose

Preparation of website traffic statistics for the company’s website.

Legal Basis (Lawfulness under Article 6 of the GDPR):

a) the data subject has given consent to the processing of their personal data for one or more specific purposes that have been explicitly stated.

Third-Party Recipients

Processor: the website traffic statistics and audience measurement (“analytics”) provider, and web marketing tool providers.

Retention periods

13 months