Privacy Policy

PERSONAL DATA AND COOKIES

Within the framework of the use of the www.avrilgau.com website and the management of orders placed on the website, Avril Gau is required to collect and process personal data relating to its customers.

•  Processing purposes

L The processing of personal data collected when using the website are:

• Data related to the creation of an account
• Data related to the sending of information about the products and promotional offers

 

• Data related to the creation of an account

The data related to the creation of an account and the order are the data that you provide on the forms during the creation of the account and the order, as well as the data that you may provide during the performance of the order (requests for information, exercise of your rights). The data collection forms specify whether the provision of data is optional or not.

Data relating to payment by credit card (credit card number, expiration date, authorization number, security code) are collected directly by our payment providers.

Purposes and legal basis : This data is necessary for the creation and management of the customer's account, for the processing and follow-up of the customer's requests or orders, payments and deliveries, for correspondence with the customer and, if required, for the processing of complaints and requests to exercise rights, as well as for the prevention of any fraudulent use of the customer's means of payment or identity.

The data identified as required is mandatory. Their collection is a condition for opening an account and/or purchasing a Product.

The legal basis of the processing is the execution of a contract to which you are a party or of pre-contractual measures taken at your request and the respect of the legal obligations of Avril Gau. If the mandatory information is not provided, the customer's request cannot be processed.

 

• Data related to the sending of information about the products and promotional offers

Purposes and legal basis: : The data provided at the time of the order or on the website also allows us to send to the customer information on the Avril Gau brand, on the website, or to make him/her benefit from commercial offers, if the customer accepts it when validating his/her order or by subscribing to the Avril Gau newsletter from the footer of the website.

This processing is based on the user’s consent, which can be withdrawn at any time. In particular, the user may unsubscribe at any time by email by clicking on the unsubscribe link included in each mailing.

If you do not provide the personal data identified as mandatory, you will not be able to receive such information.

 

• How are personal data processed?

The controller of the data is the company AVRIL GAU (hereinafter referred to as "Avril Gau"), a French “société par actions simplifiée” (simplified joint stock company) with a share capital of 100,000.00 euros, registered in the RCS (Trade and Companies Register) of Romans under number 449704790, whose VAT number is FR F67 449 704 790 and whose registered office is located at 4 to 8 rue Pierre Curie, 26100 Romans sur Isère, represented by French Legacy Group in its capacity as “Président”.

The data collected on the website are exclusively intended for the use of Avril Gau. It may also be transmitted to persons acting under the authority and on the instructions of Avril Gau and to Avril Gau’s providers, i.e. in the context of the performance of services and orders (such as the dispatch of orders, the sending of newsletters and payment).

The customer's personal data is transferred at the Website’s hosting provider located in Canada. Canada is one of the countries ensuring an adequate level of protection for personal data according to the European Commission.

Data may also be transferred to certain service providers (in charge of sending newsletters) who transfer data outside the European Union to countries that are not deemed to ensure an adequate level of protection by the European Commission. AVRIL GAU takes all measures to require these recipients to comply with the applicable regulations and, if necessary, to ensure that transfers outside the European Union are based on sufficient safeguards, a copy of which may be obtained by data subjects from AVRIL GAU on request.

Following any injunction from the legal authorities or in order to defend its rights or those of its employees, customers or any other person, Avril Gau may communicate personal data to the legally authorized bodies and authorities.

Avril Gau undertakes to take all necessary precautions to ensure the security of its files and the protection of its computer system, and in particular to prevent the customer's personal data from being altered, damaged or accessed by unauthorized third parties.

None of the personal data collected from the Website is communicated or transferred to third parties for commercial purposes

Retention: personal data collected are stored for no longer than is necessary for the purposes for which the personal data are processed.

Personal data is stored in an active database for a period of 3 years from the last purchase from Avril Gau; from the registration to the newsletter or from the last click on a hypertext link contained in an e-mail sent by Avril Gau; or from the last contact on your part, in particular by the following actions:

• the creation of an account without purchase
• subscribing to the newsletter or clicking on a hyperlink in an e-mail sent by Avril Gau;
• the last connection to your account.

The data relating to orders and invoices will be stored for a period of 10 years with restricted access for the establishment, exercise or defense of legal claims or to enable Avril Gau to comply strictly and solely with its legal obligations (obligation to archive contracts involving an amount greater than 120 euros, accounting obligations).

The customer's financial information (credit card) is not stored by Avril Gau and are only processed by the payment providers, Adyen and Alma.

 

• What are your rights regarding the personal data you have provided?

In accordance with the "Informatique et Libertés" law of January 6, 1978 and the General Data Protection Regulation of April 27, 2016, you have the following rights on the personal data you have provided to Avril Gau, under the conditions provided by the regulations in force:

• A right to request from the controller access to such data (the right to obtain confirmation that personal data relating to you are or are not being processed and, when they are, access to said personal data as well as information on the processing carried out)

• A right to rectification of inaccurate data

• A right to erasure of personal data when one of the grounds provided for in the GDPR applies (e.g., the data are no longer necessary, in case of withdrawal of consent or opposition, unlawful processing, to comply with a legal obligation). This right does not apply in particular if the processing of the data is necessary to comply with a legal obligation or for the establishment, exercise or defense of legal claims.

• A right to restriction of processing in the cases provided for by the GDPR (for example, if you contest the accuracy of the data or object to your data being processed, for the time required to verify or examine your request).

You can also modify your personal data from your customer account by identifying yourself using your e-mail address and password.

You also have the right to object to the processing of your personal data for legitimate reasons when the processing is based on the legitimate interest of the data controller (Avril Gau).

You also have the right to withdraw your consent, for processing based exclusively on consent, in this case the receipt of newsletters, in particular by formulating a request to unsubscribe in the emails received.

You also have the right to inform the data controller of your instructions regarding the fate of your personal data.

Finally, you have the right to receive the personal data concerning you, and to transmit those data to another controller, when you have consented to the collection of your personal data or when your personal data has been collected in the context of the performance of a contract.

You can exercise these rights by providing the information required for your identification to the Customer Service: client@avrilgau.com or by post to the following address: rue Pierre Curie 26100 Romans sur Isère.

You also have the right to lodge a complaint with a competent supervisory authority (the “CNIL” if you are in France).