Donate

INFORMATION ON THE PROTECTION OF PERSONAL DATA

Who are we?

Data Controller

The following information is provided to allow you to read the personal data protection commitments of the Valrhona Foundation, an endowment fund, whose head office is located at 12-14-16-18 avenue du Président Roosevelt, 26600 Tain L’Hermitage, France,

who acts as Data Controller for the processing of personal data referred to in this document, hereinafter referred to as “the Data Controller” or “we/us”.

Our Data Protection Officer

The Data Controller has appointed a person responsible for our Data Protection Policy that you can contact

by email at the following address: contact@fonds-solidaire-valrhona.org

or

by post at the following address: Valrhona Foundation, 315 allée du Bergeron, 26600 Mercurol-Veaunes, France

The Data Protection Officer may be contacted at the following address: dpo@savencia.com

Our use of personal data

In the context of personal data processing, the Data Controller collects and processes the following data:

last name, first name(s), company name, address, email address, other

The purposes and legal bases of our data processing

Purposes of data processing

We process data for the following purposes:

  • Website content management
  • Donation management
  • Communication with patrons and future patrons
  • Audience analysis

The legal basis for our processing

We only carry out data processing if at least one of the following conditions is met:

  • your consent has been obtained to process it;
  • our legitimate interest, or that of a third party, justifies our processing of the personal data concerned;
  • the performance of a contract between us requires us to process the personal data concerned;
  • we are bound by legal and regulatory obligations that require the processing of the personal data concerned.

Pursued legitimate interests

The legitimate interests pursued by the Data Controller may include enabling the continuity of its activity, improving the patron’s experience, building the patron’s loyalty and understanding patrons’ expectations.

Data recipients

The personal data we collect, as well as data collected subsequently, is only to be used by us in our capacity as Data Controller.

We ensure that only authorized persons have access to this data.

How long we keep your data

The retention periods we apply to your personal data are proportionate to the purposes for which they were collected. Accordingly, we organize our data retention policy as follows:

Contacts and patrons:

3 years from your last contact.

Cookies:

13 months from being stored on your device.

In the event of the exercise of rights of access, rectification, erasure or restriction, data relating to identity documents and information enabling these rights to be taken into account:

1 year from receipt of the request.

If the right to object is exercised, data relating to identity documents and information allowing the right to object to be taken into account:

6 years from receipt of the request.

Your rights

Procedures for exercising your rights

You can exercise your rights

by email at the following address: contact@fonds-solidaire-valrhona.org

or

by post at the following address: Valrhona Foundation, 315 allée du Bergeron, 26600 Mercurol-Veaunes, France

To do this, you must clearly indicate your last name(s), first name(s) and the address to which you want the response to be sent.

In principle, you can exercise all your rights free of charge. However, to exercise the right of access, you may be asked to pay reasonable administrative fees for any copies of the data you request.

With regard to the right to be informed, the Data Controller is under no obligation to fulfill your request if you already have the information you are requesting.

The Data Controller will inform you if it cannot respond to your requests.

These rights are not absolute and are subject to different conditions under:

  • the local applicable personal data protection or privacy law and
  • laws and regulations applicable to you.

The Data Controller wishes to inform you that any omission or modification of your data may have consequences with regard to the processing of certain requests for the performance of the contractual relationship and that your request to exercise your rights will be kept for monitoring purposes for 6 years when exercising the right to object and for 1 year when exercising other rights.

All your rights are detailed below.

Your right to be informed

You acknowledge that this information notice informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared, and of the possibility of transferring data to a third country or an international organization.

In addition to this information and to ensure the fair and transparent processing of your data, you declare that you have received additional information concerning:

  • the retention period for your personal data;
  • your rights and how to exercise them.

If we decide to process data for purposes other than those indicated, all information relating to these new purposes will be communicated to you.

Your right of access and to rectification of your data

When exercising this right, you are provided with confirmation as to whether or not your personal data is being processed and, if it is, you will have access to your data and information about:

  • the purposes of its processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients, in particular recipients established in third countries;
  • if possible, the planned retention period for personal data or, if not, the criteria used to determine this period;
  • the right to request from the Controller the rectification or erasure of your personal data, the right to request the restriction of its processing, and the right to object to its processing;
  • the right to lodge a complaint with a supervisory authority;
  • the source of the data when it is not collected directly from the data subjects;
  • automated decision-making, including profiling, and in such cases, any relevant information about the underlying logic as well as the significance and expected consequences of such processing for the data subjects.

You may ask us to correct or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.

Your right to erasure of your data

You may ask us to erase your personal data in any of the following situations:

  • your personal data is no longer necessary for the purposes for which it was collected or processed;
  • you are withdrawing your prior consent;
  • you object to the processing of your personal data when there is no legal reason for such processing;
  • the processing of your personal data does not comply with the provisions of applicable legislation and regulations;
  • your personal data was collected when you were a minor.

It should be noted that it will not be possible to exercise this right when the retention of your personal data is required by law or regulation or needed for the establishment, exercise or defense of legal rights.

Your right to restriction of data processing

You have the right to request the restriction of processing of your personal data in the cases provided for by law and regulations.

Your right to object to data processing (unsubscribe)

You have the right to object to the processing of your personal data when its processing is based on the legitimate interest of the Data Controller.

In the event of direct communication, this right may be exercised by any means, including by clicking on the unsubscribe link found at the bottom of sent messages.

Your right to data portability

You have the right to the portability of your personal data.

The data covered by this right includes:

  • solely your personal data, which excludes anonymized personal data or data that does not concern you;
  • declarative personal data and operational personal data;
  • personal data that does not infringe on the rights and freedoms of third parties, such as those protected by corporate confidentiality.

This right is limited to data processing based on consent or a contract and to personal data that you have personally generated.

This right does not apply to derived or inferred data which is personal data generated by the Data Controller.

Your right to withdraw your consent

When the data processing we are carrying out is based on your consent, you may withdraw it at any time. We will then stop processing your personal data without it affecting any previous operations to which you have consented.

Your right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority without prejudice to any other administrative or judicial remedy.