Privacy Policy

GALOCHE & PATIN is committed to a process of security, confidentiality, and continuous protection of the personal data (the “Data”) of its service users, in accordance with current French and European regulations, notably the Data Protection Act of January 6, 1978, as amended (LIL), and the General Data Protection Regulation of April 27, 2016 (GDPR).
The purpose of this policy is to inform you of the rules we apply regarding Data protection. It specifically describes how we collect and process your personal Data and how you can exercise your rights over this Data.
GALOCHE & PATIN, represented by Sébastien Matykowski as President, is the data controller for the personal Data collected through the Website. This means that we determine the purpose and means of processing the personal Data collected.
We apply a strict policy to ensure the protection of your Data.

Scope of the Policy

This policy covers the use of our website www.galocheetpatin.fr and the services accessible from this site.

The Data We Collect

GALOCHE & PATIN may collect your Data in the following cases:

We collect your Data through the form you complete on our website to subscribe to our services.
We also collect your Data when you correspond with us, particularly with our customer service, by email or telephone. In this case, we keep a copy of this exchange.
We may also collect your Data when you interact with us on social media.

The categories of Data we process are as follows:

Data identifying the natural person (surname, first name, date of birth, email address, postal address, telephone number)
Data related to operations and transactions carried out within the framework of orders placed on the Site (receipt and issuance of payments)
Contact and interaction data with us: messages, emails, calls, interaction on our Site.
Browsing data: cookies and IP address. We use cookies to allow you to access your reserved and personal areas. To learn more about the cookie use policy, you can consult our “cookie processing policy” available

We do not perform any processing operations on personal Data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, nor the processing of biometric or genetic data, pursuant to Article 9 of the European General Regulation 2016/679 of April 27, 2016, relating to data protection.

Use of Collected Data

We collect and process your personal Data for specific, explicit, and legitimate purposes. As such, we use your Data within the framework of the execution of the service contract you enter into with us. The purposes and legal bases pursued are as follows:

PURPOSES	LEGAL BASES
Carry out operations related to customer management concerning contracts, orders, deliveries, invoices, loyalty programs, and customer relationship monitoring.	This processing is necessary for the execution of our respective contractual obligations and/or carried out with your consent.
Establish a file of registered members, users, customers, and prospects.	This processing is based on your consent and/or our legitimate interest (providing you with relevant information).
Send newsletters, solicitations, and promotional messages.	This processing is based on your consent and/or our legitimate interest (providing you with relevant information).
Manage the handling of reviews from individuals on products, services, or content.	This processing is based on our legitimate interest.
Manage potential disputes regarding the use of our products and services.	This processing is (i) necessary for the execution of our respective contractual obligations, and/or (ii) necessary for the establishment, exercise, or defense of legal claims.
Comply with our legal and regulatory obligations.	This processing is (i) necessary for the execution of our respective contractual obligations, (ii) carried out with your consent, and/or (iii) necessary for the establishment, exercise, or defense of legal claims.
Manage our Site and perform internal technical operations for troubleshooting, testing, and research.	This processing is based on our legitimate interest (ensuring the security of our Tool and improving its features).

We inform you, at the time of collecting your personal data, whether certain data must be mandatory or if it is optional. Mandatory data is necessary for the operation of the services. Regarding optional data, you are entirely free to provide it or not. We also indicate the potential consequences of a failure to respond.

Commercial Prospecting

In accordance with applicable legislation and with your consent where required, we may use the data you provide to us for commercial prospecting purposes (for example, to (i) send you our newsletters, (ii) send you invitations to our events or any other communication that may interest you).
You may withdraw your consent at any time by (i) clicking on the unsubscribe link provided in each of our communications or (ii) contacting us at 14 rue Bachaumont 75002 PARIS.

Recipients of the Collected Data

Only authorized and specified persons mentioned below may have access to some of your Data:

Authorized personnel of GALOCHE & PATIN
Subcontractors of GALOCHE & PATIN acting in the name and on behalf of GALOCHE & PATIN
Authorized third parties, such as relevant jurisdictions, mediators, chartered accountants, auditors, lawyers, bailiffs, debt collection companies
Third parties likely to place cookies on your terminals when you consent (For more details, consult our “cookie processing policy” available here)

Your Data is not communicated, exchanged, sold, or rented to any person other than those mentioned above.

Data Storage and Data Transfer Outside the EU

All our servers on which your data is kept and those of the service providers used to exchange and store this data are located in Europe.
As such, the Data we collect is stored on the servers of our service provider, who guarantees a high level of security.
In the event that we use subcontractors located outside the European Union, we undertake to ensure that our subcontractors present protection measures recognized as sufficient within the meaning of the GDPR. This may notably include subcontractors located in any other country recognized by the European Union as ensuring an adequate level of protection for personal data (“Adequacy Decision”), being subject to a data transfer agreement compliant with the standard contractual clauses adopted by the European Commission, or any other protection measure recognized as sufficient by the European Commission.

Security

We inform you that we take all useful precautions, appropriate organizational and technical measures to preserve the security, integrity, and confidentiality of your personal Data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorized third parties. We also use secure payment systems that comply with the state of the art and applicable regulations.

Data Retention Period

We retain your Data only for the time necessary for the purposes pursued.
GALOCHE & PATIN retains your Data as long as your account remains active, unless you request its deletion or that of your account.
The following categories of personal data are also likely to be retained for different periods:

Financial data relating to the billing of your orders (for example, payments) is kept for the duration required by applicable tax and accounting laws
Data used for commercial prospecting purposes may be kept for a period of three years from the deletion of your account, unless you have decided to exercise your right to object under the conditions provided below.
Data allowing the establishment of proof of a right or a contract, or kept for compliance with a legal obligation, may be subject to an intermediate archiving policy to satisfy our legal, accounting, and tax obligations. This includes the common law limitation period of 5 years provided for in Article 2224 of the Civil Code.

Data Retention Period

In accordance with applicable regulations, you have rights when your Data is processed:

Right of access (Article 15 of the GDPR): you have the right to obtain confirmation from us as to whether or not Data concerning you is being processed, as well as to receive a copy of all the Data we hold about you
Right to rectification (Article 16 of the GDPR): you have the right to request the correction of the Data we hold about you if it is incomplete or incorrect. In this case, we may request you to verify the new Data provided
Right to be forgotten (Article 17 of the GDPR): You can ask us to erase your Data when we no longer have a legitimate interest in holding it
Right to restriction (Article 18 of the GDPR): You can, in certain cases, obtain from us the restriction of the processing of your Data
Right to portability (Article 20 of the GDPR): You can receive from us the Data concerning you in a structured, commonly used, and machine-readable format, notably for transmission to a third party. Where technically possible, you also have the right to have the Data concerning you transmitted directly to this third party
Right to object (Articles 21 and 22 of the GDPR): You can object at any time to the processing of your Data for reasons relating to your particular situation or when your Data is processed for prospecting purposes
Right to withdraw your consent (Article 13-2 c of the GDPR): You have the right to withdraw your consent to the processing of your Data at any time, which will not make the prior processing based on this consent unlawful.
Right to define the fate of your Data after your death and to choose whether or not we communicate your data to a third party you have previously designated. In the event of death and in the absence of instructions from you, we undertake to destroy your data, unless its retention proves necessary for evidentiary purposes or to meet a legal obligation.

Exercising Your Rights

You can exercise your rights by sending a request to our customer support at the addresses mentioned below. Any request to exercise a right must be accompanied by a copy of an identity document. A response will be sent to you within one month of receiving your request. For this purpose, we may ask you for additional information or documents.
Note that you do not need to pay a fee to access your personal data or exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
For any questions regarding the processing of your personal Data or for any remarks, requests, or complaints regarding their confidentiality, you can contact us:

By email: contact@galocheetpatin.fr
By mail: 14 rue Bachaumont 75002 PARIS

Complaint to the National Commission for Information Technology and Civil Liberties (CNIL)

In the event that the rights of the person concerned have not been respected and after contacting the Data Controller, the person concerned may file a complaint with the CNIL:
Commission Nationale de l’Informatique et des Libertés, 3 Place de Fontenoy, 75334 PARIS
Useful link: https://www.cnil.fr/en/webform/adresser-une-plainte/

Modification of the Privacy Policy

We reserve the right to modify this privacy policy at any time. The most current version of this privacy policy governs our use of your information and will always be available on your account or upon request from GALOCHE & PATIN.

Home » Privacy Policy