Privacy Policy
Privacy Policy
Preamble
Aware of the need to ensure the confidentiality of personal data, the company CAFE COTON wished to formalize the commitments it intends to take with regard to the protection of personal data by adopting this privacy policy.
This privacy policy applies to all personal data processed by CAFE COTON, when acting as data controller.
I. Presentation of the data controller
CAFE COTON is a simplified joint stock company with capital of 1,301,566.99 euros, whose registered office is located at 11 Rue Christophe Colomb, 75008 Paris. It is registered in the Paris Trade and Companies Register under number RCS 378 617 245. Its telephone number is 01 55 87 79 00. You can contact CAFE COTON at the following e-mail address
contact@cafecoton.com.
II. Purposes, "active basis" retention periods and legal bases
Your personal data may be processed by authorised CAFE COTON staff for a number of purposes.
Each of these purposes is associated with a "legal basis", which justifies our processing.
Your data is also stored for a predetermined period, which depends on the purpose for which it was collected.
purpose of the processing. This period is expressed on an "active basis", which corresponds to the stage at which your data is actually processed in order to achieve the purpose described in the table. Please note that following this "active basis" storage, CAFE COTON may keep your personal data in intermediate storage for additional periods (with regard to the applicable rules and periods of prescription and legal or regulatory storage obligations), in order to comply with a legal obligation and/or to enable us to defend our legal rights, if necessary.
The purposes, legal bases and "active basis" retention periods are detailed in the table below:
|
Purpose of processing
|
Legal basis
|
Retention period for "active base" data
|
|
Management of requests you send to our contact e-mail address
|
Our legitimate interest in responding to your requests and queries
|
Until the request is processed
|
|
Accounting management
|
Our legal accounting obligations
|
During the current tax year
|
|
Recruitment
|
Pre-contractual measures taken at the request of a candidate
|
During the recruitment process
|
|
Managing a CV library
|
Our legitimate interest in keeping your CV in order to contact you about a job vacancy t
|
2 years from the date on which we ruled on your application
|
|
Management of prospect relations, including the sending of our newsletter, the organisation of competitions, promotions, surveys, etc.
|
The pursuit of our legitimate interest in expanding our business
|
3 years following the last action taken by you, or until you unsubscribe from our newsletter
|
|
Retention of connection data for security and maintenance purposes
|
Our legitimate interest in ensuring the security of our website
|
1 month from recording of data
|
|
Improve our service (customer service in particular)
|
Our legitimate interest in improving our services on the basis of information and comments received via the Internet.
|
The time needed to process your return
|
|
Management of our video surveillance system
|
Our legitimate interest in ensuring the security of our premises
|
1 month from recording of images
|
|
Customer relationship management
|
The contract we have concluded with our customer
|
During the term of the contract
|
|
Supplier management
|
The contract we have signed with our supplier
|
Indirect collections
We receive certain personal data about you indirectly from non-public sources. For example, when you submit your e-mail address to express your interest in becoming our customer, we receive information from a third party that provides us with automated fraud detection services. We also occasionally collect publicly available information from social media websites. You can control the amount of information that social media websites make public by visiting those websites and changing your privacy settings.
With whom do we share your personal data?
We may transfer and disclose your data to :
- our promotional and marketing partners, advertisers, competition sponsors, service providers responsible for canvassing sales, developing advertising networks and conducting commercial or market research;
- any company with which we have direct or indirect capital links;
- our IT service providers, for example as part of the hosting of this site, software hosting (e.g. CRM), maintenance, as well as our service providers in charge of web analysis and application development;
- regulators, the TRACFIN unit, independent administrative authorities or dispute resolution bodies, in order to comply with their requests;
- any other person involved in a dispute;
- judicial or administrative authorities.
Some of these recipients are located outside the European Union, in the following countries: France, Italy, Spain, the UK and Germany. Where this is the case, we rely on
the European Union's standard contractual clauses.
What are your rights with regard to personal data?
Depending on the circumstances, you may have rights in relation to your personal data, in particular:
- the right to obtain information on the processing carried out and the data we hold on you, as well as a copy of the latter; the right to withdraw your consent to the processing of your personal data at any time; the right to obtain rectification of your data; the right to obtain confirmation that your personal data is or is no longer being processed; the right to ask us to delete your data; the right to ask us to restrict or object to the processing of your data.
You can exercise your rights by contacting us at contact@cafecoton.com.
You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés, at the following address: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 Paris - Cedex 07 or via the CNIL's dedicated website.
