Privacy Policy

www.toutpourlehautbois.com

ARTICLE 1: PREAMBLE

The purpose of this Privacy Policy is to inform users of the website:

• How their personal data is collected. Personal data refers to any information that makes it possible to identify a user. This may include: first and last names, age, postal or email address, location, IP address (non-exhaustive list);

• The rights they have regarding this data;

• The person responsible for processing the personal data collected and processed;

• The recipients of this personal data;

• The website’s cookie policy.

This policy supplements the legal notice and the General Terms of Use available at the following address:

[Insert the URL providing access to the General Terms of Use and Legal Notice]

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of European Regulation 2016/679, personal data must be:

• Processed lawfully, fairly and transparently in relation to the data subject;

• Collected for specified, explicit and legitimate purposes (see Article 3.1 below) and not further processed in a manner incompatible with those purposes;

• Adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed;

• Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure inaccurate data is erased or rectified without delay;

• Kept in a form permitting identification of data subjects for no longer than is necessary for the purposes for which it is processed;

• Processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing is lawful only if at least one of the following applies:

• The data subject has given consent for one or more specific purposes;

• Processing is necessary for the performance of a contract or pre-contractual measures;

• Processing is necessary for compliance with a legal obligation;

• Processing is necessary to protect vital interests of the data subject or another person;

• Processing is necessary for a task carried out in the public interest or in the exercise of official authority;

• Processing is necessary for the legitimate interests pursued by the controller or a third party, unless overridden by the data subject’s fundamental rights and freedoms, especially where the data subject is a child.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING SITE USE

Article 3.1: Data collected

The personal data collected in the course of our activities are as follows:

[List the data collected when using the site]

The collection and processing of this data serve the following purposes:

[Specify the reason(s) for collecting personal data]

Examples: contract management, customer account management, service quality monitoring, newsletter distribution, etc.

Article 3.2: Methods of data collection

When you use our website, the following data are automatically collected:

[List data automatically collected when visiting the site]

Additional personal data are collected when you perform the following actions on the platform:

[List personal data collected and specify the purpose of the collection]

These data are stored by the data controller under reasonable security conditions for a period of:
[Specify the retention period]

The company may retain certain personal data beyond the above periods to comply with legal or regulatory obligations.

Article 3.3: Data hosting

The website [website name] is hosted by:

[Company name
Registered office address
Contact details (email and/or phone number)]

[If personal data are shared with third parties, insert:
Article 3.4: Transfer of data to third parties
“The data may be shared with the following partners:”]

[If cookies are used, insert Article 3.5: Cookie policy]

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1: Data controller

Personal data are collected by [company name], [legal form], share capital [amount], registered under number [RCS number].

The data controller can be contacted:

• By post at: [registered office address]

• By phone: [phone number]

• By email: [data controller email]

Article 4.2: Data Protection Officer (DPO)

The Data Protection Officer is:

[Identity, address, phone number and/or email of the DPO]

If you believe your data protection rights have not been respected, you may lodge a complaint with the CNIL.

ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

In accordance with GDPR (EU 2016/679) and the French Data Protection Act (Law 78-17 of January 6, 1978), users have the following rights:

• Right of access, rectification and erasure (Articles 15–17 GDPR);

• Right to data portability (Article 20 GDPR);

• Right to restriction (Article 18 GDPR) and objection (Article 21 GDPR);

• Right not to be subject to automated decision-making;

• Right to determine the fate of data after death;

• Right to lodge a complaint with the supervisory authority (Article 77 GDPR).

To exercise your rights, contact:
[Company name and address] or [DPO email].

The user may be required to provide identification information (name, email, account number, etc.).

Visit cnil.fr for more information.

ARTICLE 6: MODIFICATION OF THE PRIVACY POLICY

The website publisher [Site name] reserves the right to modify this Policy at any time to ensure compliance with applicable law.

Any changes will not affect purchases made prior to the modification, which remain subject to the Policy in force at the time of purchase.

Users are encouraged to review this Policy each time they use the services.

This Policy, published on [publication date], was last updated on [update date].