1. The company Talek SAS (a simplified joint stock company with a capital of 975,000 euros and intra-community VAT number FR 01415308568, registered with the RCS of PARIS under the number 415 308 568, whose head office is located at 88 Boulevard Saint Michel, 25 Avenue de l’Observatoire 75006 PARIS), hereinafter the "Company", publisher of the website "www.maison-kayser.com" (hereinafter the "Website") will only have access to Website users' personal data that has been made available to the Website "www.maison-kayser.com" (i) by creating a customer account, or (ii) by completing a contact form or request for quote or (iii) by sending in an unsolicited application or responding to a job offer.
By providing this personal data, the Website user consents to the Company and bakeries under the Éric Kayser brand using this data under the conditions and within the limits outlined in this policy.
This personal data is limited to surnames, first names, telephone numbers, mobile numbers, customer numbers, email addresses, billing addresses, delivery addresses and, if applicable, the CVs of users who have applied for a job, with or without a photograph and cover letter.
2. This personal data is for the exclusive use of: either the Company's Sales Department, Marketing Department and IT Department and bakeries under the Éric Kayser brand to fulfil the customer user's orders, give the customer user the opportunity to view his or her order history and benefit from promotional offers; or the HR Department for processing submitted applications.
This personal data will not be used for other purposes or passed on to third parties either free of charge or for a fee.
It will only be provided to the Company's service providers where applicable, i.e. those responsible for delivering users' orders or managing loyalty programmes, or those in charge of the employee recruitment process for the Company or Éric Kayser bakeries.
Personal data will not leave the European Union. It will be retained for the duration of any commercial relationship with the Company and for three years afterwards, except in the case of a request for deletion before the end of this period under the conditions outlined at the end of this policy.
The processing of the user's personal data will be undertaken by the Company as the body responsible for its processing and by the company Insitaction as its subcontractor.
The Company undertakes to respect the legislation and regulations pertaining to the processing of personal data and, more specifically, the consolidated version of the French Data Protection Law no. 78-17 of 6 January 1978 and General Regulation no. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data as of 25 May 2018. The Company will obtain the same undertaking from Insitaction.
The Company will implement measures to protect access to personal data and ensure the security and confidentiality of this data. However, the Company would like to draw users' attention to the fact that there are confidentiality risks when transmitting data via the internet. Users must help to protect their data by keeping their login details and passwords confidential to avoid any risk of unauthorised access to their account or personal data.
On the website there are:
<![if !supportLists]>· <![endif]>technical cookies, which are used to ensure the smooth running of the website, store login information and implement security measures
<![if !supportLists]>· <![endif]>analytical cookies, which are used to count website visitors, produce statistics and measure the volume of traffic.
You can accept or refuse analytical cookies.
Users who agree to have cookies installed do so by clicking on the button "I accept" or "Accept and continue". To refuse analytical cookies, click on the button "Refuse".
4. In accordance with the aforementioned French Data Protection Law of 6 January 1978 and General Regulation on the protection of personal data of 27 April 2016, users have the right to access, amend, delete and restrict the processing and portability of their personal data.
Users can also withdraw the consent given to the Company to use this data and oppose the processing of their data for sales prospecting purposes.
They can exercise these rights at any time by sending a request to the Company at the following address: email@example.com mentioning their surname, first name, email address and customer account number, and providing an identity document. Users also have the right to make a complaint to the CNIL if they believe that the aforementioned regulations have not been respected.