A&L attaches the utmost importance to the confidentiality of your information and personal data.
For this reason, this Privacy Policy has been established in accordance with applicable laws, regulations (in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data), and standards, and is intended to provide all data subjects, and in particular Users, with clear, transparent and comprehensive information on how A&L, acting as the data controller, collects and processes personal data relating to them, as well as on the means available to control such processing and exercise their related rights. This Privacy Policy also explains what personal data is processed through the Website, how such data is processed, by whom, and for what purposes.
This Privacy Policy applies to any natural person acting as a consumer (hereinafter referred to as the "User") who uses the website available at https://www.aromes-et-liquides.fr (the "Website") to purchase products or services (the "Services").
The content and information available on the Website are also accessible to individuals who simply browse the Website (the "Visitors"), to whom this Privacy Policy likewise applies.
To access or use our Website, you must be at least 18 years of age. If you are under the age of 18, you are not authorized to access or use the Website.
The Website is hosted exclusively in ALTER WAY-operated data centres in France.
The data controller for your personal data is A&L, whose registered office is located at 405 Rue Jacques de Lesseps, 42160 Andrézieux-Bouthéon, France, and which is registered with the Saint-Étienne Trade and Companies Register (Registre du Commerce et des Sociétés) under registration number 792 985 905.
1. WHAT PERSONAL DATA DO WE COLLECT ?
The personal data collected through the Website includes the following:
- Website access information: Each time you visit the Website, A&L collects your date of birth to verify that you are at least 18 years of age, in accordance with its legal obligations. However, this information is not retained.
- Account information and identification data : When a User creates an account, A&L collects the User's first name, last name, date of birth, email address and telephone number. The User's postal address is also collected for billing and delivery purposes.
- Contact request data : The contact form provided by A&L requires Users to provide their email address to submit an enquiry.
- Customer relationship management data : Order history, products viewed, payment incidents, complaints, order processing, and customer relations.
- Online order data: Information relating to transactions, order number, purchase details, and billing data.
- Browsing data : Information relating to the devices used by the User to access the Website, IP address, connection data, internet browser type, and the content accessed on the Website..
- Payment : When a payment is made on the Website, financial data is processed and made available to the payment service providers responsible for processing the transaction, namely Crédit Agricole, Alma or PayPal.
- Cookies : Electronic identification data collected through cookies. Cookies are used in connection with the operation of the Website. Users may choose whether to accept or reject cookies while browsing the Website.
Except for fields expressly identified as optional, if you choose not to provide the required information, we may be unable to respond to or fulfil your request. You remain free to decide whether or not to provide such information.
2. HOW DO WE USE YOUR PERSONAL DATA AND WHY IS IT COLLECTED ?
The personal data collected from Users is processed for the purpose of providing the Services, in particular enabling Users to place orders through the Website, improving the Services, and maintaining a secure online environment.
More specifically, your personal data may be processed for the following purposes:
- Access to and use of the Website: Your personal data is required to create and manage your online account, process and fulfil your orders, provide personalised customer support, and respond to any enquiries submitted through our contact form.
- Managing and improving the Website’s operation: Your personal data is used for analytical purposes. We retain and analyse information relating to your recent visits to the Website and the way in which you browse it to better understand how visitors use the Website, improve its usability, and optimise its performance.
- Verifying, identifying and authenticating the information provided by the User.
- Communications with A&L: managing and tracking your orders, providing proof of compliance with legal obligations (payment, warranty, etc.).
- Newsletter Subscription.
- Personalising the Service by displaying promotions based on the User’s browsing history and preferences: we keep a record of the items on our Site - that you have clicked on and will use this information to personalise the Site’s display based on your interests.
Preventing and detecting fraud, malicious software (malware) and security incidents.
- Managing and resolving any disputes between the Parties.
- Sending marketing and promotional communications when you have given your consent.
3. SHARING OF USERS' PERSONAL DATA WITH A&L'S PROCESSORS AND THIRD PARTIES: WHO HAS ACCESS TO YOUR PERSONAL DATA ?
Your personal data remains for the exclusive use of A&L. It will only be disclosed to the recipients identified below where such disclosure is necessary to achieve the purposes described in Section 2 above.
Your personal data may be shared with A&L's data processors and third parties in the following circumstances:
- Payment service providers: When you use the payment services available through the Website, all payment transactions are processed by our certified payment service providers (PayPal, Crédit Agricole or Alma) to ensure the security of your payments. The payment process is encrypted and secured. Your payment card details are not stored by A&L.
- Your personal data may be processed as part of the hosting and maintenance of our customer databases.
- A&L may engage third-party service providers to perform services on its behalf, including customer support, advertising, payment processing and hosting services. Such providers are granted access only to the personal data strictly necessary for the performance of their services and are contractually bound to process such data in accordance with applicable personal data protection laws.
- Where required by law, A&L may disclose personal data in response to legal or regulatory requests, court orders, subpoenas, judicial proceedings, or to comply with administrative or judicial requirements.
- If A&L is involved in a merger, acquisition, sale of assets or insolvency proceedings, personal data may be transferred as part of the transaction. Where required, Users will be informed before their personal data is transferred to a third party.
4. DATA RETENTION
In accordance with applicable law, your personal data is retained only for as long as necessary to fulfil the purposes described above or to enable A&L to comply with its legal obligations.
Accordingly, personal data collected when you create your customer account is retained until one year after your A&L customer account has been closed. Personal data collected in connection with an order is retained for as long as necessary to process and fulfil the order and, for any additional statutory retention period, including the retention period applicable to invoices and accounting records.
Personal data submitted when you contact A&L is retained for one year. Likewise, personal data processed for newsletter subscriptions is retained until one (1) year after you unsubscribe from the newsletter.
Such data is archived for an additional period of nine (9) years under restricted and secure access conditions.
Personal data processed for direct marketing purposes may be retained for a maximum period of three (3) years from the end of the commercial relationship.
5. INTERNATIONAL TRANSFERS OF PERSONAL DATA
Users are informed that their personal data is hosted in France or elsewhere within the European Economic Area (EEA).
However, A&L informs Users that certain personal data may be transferred outside the European Union in connection with the use of Google Analytics. By using the Website, Users acknowledge and accept that such transfers may take place.
6. SECURITY AND CONFIDENTIALITY
A&L implements appropriate technical, organisational, physical and software security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, the Internet is not a completely secure environment, and no method of electronic transmission or storage is entirely secure, and A&L cannot guarantee the absolute security of information transmitted to or stored on the Internet.
The confidentiality and security of your personal data are binding obligations for all A&L employees and authorised service providers who process such data on A&L's behalf.
7. EXERCISING THE USER’S RIGHTS
In accordance with the applicable data protection legislation, you are entitled to exercise the following rights in relation to your personal data:
- You may request information about how A&L processes your personal data.
- You may request that your personal data be updated or corrected by writing to the postal address indicated above or by email at [email protected].
- You may request the deletion of your customer account by sending an email to [email protected]. Please note that any content you have shared publicly with other Users, such as forum posts, may remain publicly accessible on the Website even after your account has been deleted.
- You may request access to the personal data held about you by contacting [email protected]. Before responding to such a request, A&L may require proof of identity in order to verify your identity.
- If any personal data held by A&L is inaccurate or incomplete, you may request that it be corrected by contacting [email protected].
- You may request the deletion of your personal data in accordance with applicable data protection laws by contacting [email protected].
- You may withdraw your consent to receive direct marketing communications and object to the processing of your personal data.
8. CHANGES TO THIS PRIVACY POLICY
A&L reserves the right to amend this Privacy Policy at any time. Where changes are made, A&L will publish the updated version on the Website. A&L will also notify Users of any material changes by email at least fifteen (15) days before the revised Privacy Policy becomes effective. If a User does not agree with the amended Privacy Policy, they may request the deletion of their customer account.
9. MORE INFORMATION
If you would like to obtain further information about this Privacy Policy or the way in which A&L processes your personal data, you may contact us at: 405 Rue Jacques de Lesseps – 42160 Andrézieux-Bouthéon – France
Alternatively, you may contact us by email at: [email protected]
10. COOKIE POLICY
Cookies help facilitate navigation on websites and improve features such as user authentication and audience measurement. A&L informs Users that cookies store certain information on the User's device. We also use tracking technologies, including cookies, to tailor advertising and content to your preferences and interests when you browse our Website.
When you browse through the Website, a cookie banner will be displayed explaining how cookies are used. You will be given the opportunity to accept or reject cookies through the consent options provided.
Cookies used on the Website
A&L uses cookies to provide content and Services tailored to Users, compile visitor statistics, retain certain information provided by Users, and optimise the browsing experience.
The Website uses the following categories of cookies:
- Strictly necessary cookies for the proper functioning of the Website. They are deleted within ten (10) days after the end of the browsing session, i.e. once the User has logged out or the session has expired.
- Analytics cookies to measure and analyse Website traffic and visitor activity.
- Authentication cookies.
- Cookies used in connection with the Website's live chat service. These cookies are retained for a period of one (1) year.
Strictly necessary cookies
These cookies are essential for the proper operation of the Website and for enabling Users to navigate its features. They allow Users to access the core functionalities of the Website. Please note that changing your cookie settings may affect the conditions under which certain Services are available, where the use of cookies is required. If your browser is configured to reject all cookies, you may not be able to access certain features of the Website, including those requiring you to remain authenticated during your session.
Most web browsers allow you to manage your cookie preferences. You may configure your browser to refuse cookies or to delete certain cookies. Similar tracking technologies can generally be managed in the same way through your browser settings.
You can find instructions on how to manage cookies in the following browsers:
- If you use Internet Explorer: ici
- If you use Mozilla Firefox: ici
- If you use Safari: ici
- If you use Google Chrome: ici
- If you use Opera: ici
For further information on the use, management and deletion of cookies for all browser types, please refer to the guidance published by the French Data Protection Authority (CNIL):
https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser
The User further expressly acknowledges and agrees that A&L reserves the right to collect big data, that is, massive amounts of non-personally identifiable and therefore anonymous data, in connection with the operation of the Site, and to use such data for statistical and/or qualitative or quantitative analysis purposes, whether for free or for commercial purposes.