The purpose of this Privacy Policy is to inform you about how your personal data is collected and processed. The data concerning the user that we may collect and process in the context of his/her use of the Site is processed in accordance with the French law of 6 January 1978 as amended and with European Regulation n°2016/679/EU of 27 April 2016 known as “RGPD”.

We may modify this Policy at any time by updating this page.
We therefore invite you to regularly consult our Policy to ensure that you are
in accordance with its terms.

SUMMARY:
1. Responsible for the processing of your personal data
2. Personal data collected
3. Purposes and legal basis for the processing of your personal data
4. Cookie Information
5. How long your personal data will be kept
6. Recipients of your personal data
7. Countries to which we transfer your personal data
8. Security of your personal data
9. Information about your rights

1 The person responsible for the processing of personal data on this site is :

VIRGINIE ROUX CONSULTING SAS (RCS Antibes 831 534 961), whose registered office is located at 5 chemin du Corse 06480 La Colle sur Loup and whose secondary establishment is located at 9 rue Française 75002 Paris.

2 Personal data refers to any information about you that enables you to be identified, directly or indirectly, by reference to identification data (surname, first name, etc.) or to several elements that are specific to you.
Depending on your career path and your actions (such as: creation of an online account, subscription to a newsletter), we may collect different types of personal data about you:
– Identity data: surname, first name, title, etc.
– Contact information: email address, phone number, postal address, online account ID
– Order data: transaction number and history, order amount
– Payment data: credit card number, expiry date, number on the back of the card, the cardholder
– Connection data: IP address, geolocation (if you expressly agree)
– Behavioural data: history of your purchases, navigation data on our website.

Credit card data is not processed directly but via two subcontractors: STRIPE and PAYPAL according to the payment methods chosen at the time of your order.

When you provide data, you undertake to communicate only that which concerns you personally, and you guarantee that this information is accurate and does not violate any standards or infringe the interests or rights of third parties.

3. Purposes and legal basis for the processing of your personal data Only the personal data necessary for the purposes pursued are collected.

We collect and process your personal data on the basis and for the purposes set out below:
Where the processing of your data is necessary for the conclusion and performance of the contract between us.
Here the legal basis is contractual necessity. The DPMR states more precisely on this subject that the processing is “necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
In this context, your personal data may be used for the following purposes:
– management of your online customer account;
– online reservation and purchase of products;
– management of your customer service requests;
– customer relationship management;
– participation in competitions.
In order to improve the conditions of our relations, they can also be used for these purposes:
– improving our website and your browsing comfort (display on our website of offers related to the products you have purchased or consulted on our website).
– Sending you information related to the products and/or services you have ordered from us;
– organisation of promotional operations, in particular through social networks;
– carrying out statistical studies.

When the processing of your data is based on our legitimate interest. The RGPD indicates more precisely on this subject that the processing is then “for the purposes of the legitimate interests pursued by the controller or by a third party”.
Within this framework, your personal data may be used for the following purposes:
– to know your preferences in order to be able to better personalize our offers, and to send you information about our products and services.
proposals that better correspond to the needs and desires of our customers

We may also be required to process your data due to a legal obligation. The DPMR specifically states that this processing is “necessary for compliance with a legal obligation to which the controller is subject”.

Finally, we process your data when you have given your consent, by ticking a box, to the collection of your data for a given purpose. The DPMR specifically states for this case “the data subject has consented to the processing of his or her personal data for one or more specific purposes”.
Within this framework, your personal data may be used for the following purposes:
– Communication by email of offers and information from the website
There is no legal obligation for you to provide us with your personal data.
However, we draw your attention to the fact that we cannot provide you with the requested service if you do not communicate the information presented as being necessary (identified by an asterisk) on our collection forms (for example the form for creating an online account).

By definition, the data not identified as necessary is optional, you are free to communicate it to us or not, but if you consent to communicate it to us, it will enable us to improve the service offered and/or to send you information that may be of interest to you (on products and/or services similar to those you have purchased or consulted).

4. Cookie Information

What’s a cookie?
A cookie is a small text file placed on your computer when you visit a site or view an advertisement. It contains information on the navigation carried out on the pages of the site. In your computer, cookies are managed by your internet browser. You can configure their use by following the procedure indicated on your browser.

What is the purpose of the cookies used by the site?
Cookies enable us to collect and recognise your browsing preferences during a subsequent visit to our site, so that it can be optimised and personalised according to your preferences. They make your interaction with our sites faster and more efficient. Cookies may also be used to provide you with advertisements related to your interests.
Here is a list of the different categories of cookies used on our site:
– Cookies required
These cookies are necessary for the operation of our site and allow you to use its main functions (such as: use of the shopping cart and other payment functions on our site, access to your customer account). Without these cookies, you will not be able to use our sites normally.

– Analytical cookies
These are cookies deposited as a result of the use of third-party analysis tools (Google Analytics) on our sites which allow us to know the use and performance of our sites in the form of statistics and audience measurement in order to improve our services. These cookies are not used for commercial purposes.

How to set cookies?
You can configure your internet browser at any time in order to activate and/or deactivate cookies on a case-by-case basis, and/or to delete those saved on your computer. Nevertheless, your navigation could be altered depending on the settings you choose to make, particularly if you decide to deactivate the necessary functional cookies. In order to manage cookies as closely as possible to your expectations, we invite you to set up your browser taking into account the purpose of cookies as mentioned above.

More information on cookies: on the CNIL website https://www.cnil.fr/fr/cookies-les-outils-
to control them

5. How long your personal data will be kept

We keep your personal data for the time necessary to provide our services and/or for the duration of the contractual relationship between us and/or to ensure the protection of our interests, in particular in the event of a complaint or action.
Beyond this period, your personal data will either be deleted or made anonymous so that they no longer allow you to be identified.

Below is a summary of the retention period by type of processing purpose.

Storage period before deletion or anonymisation :
Online customer account management -> During the period of use and 3 years from the last activity.
Information on online purchases of seats, tickets, products -> 3 years from the transaction
Information on complaints and the exercise of your rights (access, rectification, opposition, etc.) -> Duration strictly necessary for the management of your complaint

6. Recipients of your personal data

VIRGINIE ROUX CONSULTING is the recipient of your personal data as data controller and/or our subcontractors, who may need them for the purposes for which your personal data are processed.
Access to personal data is strictly limited to VIRGINIE ROUX CONSULTING’s employees and agents, who are authorised to process them by virtue of their functions, or to third parties bound to us by contract for the performance of subcontracted tasks necessary for the management of the service offered. Our subcontractors have limited access to data concerning you that is strictly necessary, and they are obliged towards us to use it in accordance with the provisions of the applicable regulations.

Apart from these cases, we undertake not to sell, rent, transfer or give third parties access to the data without your prior consent, unless we are obliged to do so for a legitimate reason (legal obligation, fight against fraud or abuse, exercise of the rights of defence, etc.).

7. Countries to which we transfer your data

We ensure that our service providers who are involved in the implementation of our various services and who may have access to your Data for the performance of the services concerned, that they provide a sufficient and appropriate level of protection in the event of a transfer of Data outside the European Union.
Part of your Data (payment data, relating to transactions carried out with us) may be transferred to the United States for the purposes of carrying out our payment services by our subcontractor STRIPE in charge of Internet payment. This service provider is a trusted third party that guarantees adequate Data protection measures and has obtained the
Privacy Shield certification recognized by the European Commission as providing an adequate level of protection for personal data transferred by a European entity to companies established in the United States.

For more information on the Privacy Shield: https://www.cnil.fr/fr/cnil-direct/question/quels-
are the blessings of–

IONOS hosts the site’s database on its server within the EU.

8. Security of your personal data

VIRGINIE ROUX CONSULTING and its subcontractors implement appropriate technical and organisational measures to guarantee a level of security in the processing of personal data. It is adapted to the risks of loss, access, modification, alteration, unauthorized disclosure or destruction of the same.
We ensure that our subcontractors present sufficient guarantees to ensure the implementation of security and confidentiality measures for the personal data to which they have access in the performance of their missions as defined by the applicable regulations in this area.

Concerning online purchases, payments by credit card are secured by the PCI DSS protocol for STRIPE. PAYPAL uses the same protocol. No banking data is stored on our servers.
The www.aupaysdelafleurdoranger.com Site has a SSL certificate which guarantees the encryption of data during the transit of data to the subcontractors in charge of the payments of the site. More generally, the site is hosted by IONOS. It keeps the entire database of the site on their server. IONOS complies with the PCI DSS protocol.
The IONOS connection and registration services are completed via a secure HTTPS/SSL server.

In the event of a breach of security and/or confidentiality of your personal data, a communication will be made, within the applicable time limits, to the CNIL, and to your attention as appropriate.

9. Information on your rights

In accordance with the French Data Protection Act of 6 January 1978 as amended and the European Regulation n°2016/679/EU of 27 April 2016 (applicable as of 25 May 2018), you have the right to access, rectify, transfer and delete your personal data or to limit the processing. You may also, for legitimate reasons, object to the
processing of your personal data. To exercise your rights you can contact Virginie Roux in charge of these matters:
– By email at : virginie.roux@aupaysdelafleurdoranger.com
– By post at : VIRGINIE ROUX CONSULTING SAS 5 chemin du Corse 06480 La Colle sur Loup

For any claim or complaint concerning a request to exercise a right, please indicate in the subject line of your email, or your letter, the mention “Claim” or “Complaint”.
To process your request as well as possible, we thank you to fill in your first and last name, e-mail address, and to attach a copy of your identity card. We will reply to you as soon as possible and in any event within one month at the following address Upon receipt of your request, which may be extended for an additional month depending on the complexity of the request.
If, however, you consider that we have not processed your personal data in accordance with the regulations in force, you have the possibility of lodging a complaint with the CNIL: https://www.cnil.fr/fr/plaintes.