In accordance with European Regulation No. 2016/679 (known as the "GDPR") on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, our data privacy policy is set out below. It covers any data enabling you to be identified directly or indirectly as a natural person.

This data privacy policy (hereinafter the "Policy") tells you which data we collect, the reason and basis for collecting such data, how we use and store them, and your rights with regard to such data. We urge you to read this Policy carefully in order to understand and familiarise yourself with the practices we implement when processing your personal data.

Please note that we may amend or supplement this Policy at any time in line with any developments in legislation, regulations, case law or technology. You should therefore consult this Policy regularly to familiarise yourself with any changes made to it.

I. Identity of the data controller

The personal data controller is the company LAITA S.A.S., a simplified joint stock company with capital of €1,000,000 - Registered office: ZI de Kergaradec 4 rue Henri Becquerel F-29806 Brest Cedex 9, France - Registered on the Brest Trade and Companies Register under number: 380 656 439. Telephone number: 0 800 00 31 36 or email: serviceconsommateur@laita.fr

II. The personal data we process

The information we collect is used to improve the services we offer. These data:

  • Concern your identity: your first name, last name, title, postal and email address, telephone number (landline and/or mobile), date of birth;
  • Concern our commercial relationship: products purchased, your preferences regarding our communications topics, your favourite recipes;
  • Concern appropriate management of our commercial relationship: information on products, product returns, customer services;
  • Are necessary for customer retention, direct marketing and statistical operations;
  • Concern the organisation and management of competitions and other promotional activities.

Please also note that some information is automatically collected and stored when you access our services:

  • When you browse our website and/or create an account on our website (IP addresses, login details, types and versions of web browsers used, types and versions of plug-ins used in your browser, operating systems and platforms, data concerning your browsing history on our website, cookies);
  • When you use a telephone number to contact us;
  • When you call or send a message to our customer services department.
  • Some personal data that we process, including your profiles on social media platforms such as Facebook, Instagram, Pinterest and YouTube, may also originate from third-party partners. Please consult Part V below for further details.

III. How data are processed

We process your personal data to help us perform, provide and improve the services we offer. Data may be processed for all or some of the following purposes:

1. DIRECT MARKETING

We may use your personal data for direct marketing including personalised direct marketing (profiling). In other words, we may use your personal data to communicate with you about new items, deals, sales offers, loyalty schemes, competitions or newsletters, provided that you have given your consent to us using your data in this way.

In such instances, our processing of your data is legally justified by you giving your consent. Naturally, you can change your mind at any time and withdraw your consent by contacting us or using the "My Consents" page of your personal account.

 2. OBSERVING OUR LEGAL OBLIGATIONS

We have a legal obligation to collect and process some of your personal data.

 3. UPHOLDING YOUR RIGHTS

We may process your personal data to satisfy your requests to exercise your rights. Please consult Part VI of this Policy for details of your rights.

 4. SHARING YOUR INFORMATION

We do not sell your personal data. We only share them with third-party partners in certain specific situations. As such, we share your personal data where required by law, or forward your personal data to third-party partners (established in or outside the European Union) that provide us with services such as hosting our website, telemarketing, managing discount vouchers, processing orders, and sending emails to customers. 

Please consult Part V of our Policy for further details regarding this topic. 

5. MANAGING AND IMPROVING OUR WEBSITE

When you visit our website, we collect information including your IP address, location, visiting times, etc. to help us understand the habits of individuals using our website and improve their experience.

IV. Time for which data is kept

Your personal data are kept for as long as is necessary to achieve the purpose for which they are collected. 

We also keep personal data for a period enabling us to process or respond to complaints or any requests for information regarding purchases.

Your personal data may also be kept for longer periods if required under legal obligations, applicable legal limitation periods, or recommendations of the CNIL (French Data Protection Authority), e.g. for:

  • Login logs: 1 year from the last login
  • Cookies: 13 months from them being placed on your computer
  • Customer identification data (name, address, telephone number, etc.) such as those used in your user account: 3 years from the end of commercial relations

V. Data recipients

Your personal data may be forwarded to other companies in our Group established within the European Union. All our companies are bound by the confidentiality and data privacy practices set out in this Policy.

Your personal data may also be forwarded to other companies established in or outside the European Union on the basis of contracts that include standard clauses drawn up by the CNIL laying down requirements to be met with regard to forwarding personal data.

Please consult the table below for further details:

SUBCONTRACTOR

Personal data forwarded

Purposes of processing

Subcontractors' data privacy policy*s*

TECHNOLOGIE INNOVATION BRETAGNE (BEABLE)

Personal data collected on our website

Hosting of our website

https://www.beable.fr/mentions-legales

SENDINBLUE

Internal identification number, first name, last name, email addresses

Sending emails

https://fr.sendinblue.com/legal/privacypolicy/

CLICK 2 BUY

IP address and GPS data

Providing GPS data for retailers selling our products

https://www.click2buy.com/fr/conditions-generales-dutilisation/

 

YOUTUBE

IP address, behavioural data linked to cookies installed

Viewing our videos

https://www.youtube.com/static?template=terms&gl=FR

FACEBOOK

IP address, behavioural data linked to cookies installed

Enabling content to be shared on Facebook

https://fr-fr.facebook.com/privacy/explanation

PINTEREST

IP address, behavioural data linked to cookies installed

Enabling content to be shared on Pinterest

https://policy.pinterest.com/fr/privacy-policy-archive

GOOGLE ANALYTICS

IP address, cookies

Analysing the performance of our website

https://policies.google.com/privacy?hl=fr&gl=fr

GOOGLE TRANSLATE

IP address + cookies

Translating our website

https://policies.google.com/privacy?hl=fr&gl=fr

* these addresses are subject to change.

VI. Your rights

You have the following rights regarding your personal data which you can exercise by writing to either the email address  serviceconsommateur@laita.fr 

or the postal address: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France.

Please note that the CNIL offers a letter generator to help you make any requests: https://www.cnil.fr/fr/modeles/courrier.

 

In order for us to satisfy your requests to exercise rights concerning your personal data, you must provide the first name, last name and email address you used to sign up to our newsletter or create an account on our website. If we are unable to identify you with complete certainty based on details provided in your request to exercise your rights, we may need to request a valid copy of an identity document (ID card or passport in the following format: GIF, JPG, PNG, PDF). Finally, if you use different details (different email address, different name) to make your requests, we cannot guarantee that you will be able to fully exercise your rights concerning your personal data without providing further information.

1. RIGHT OF ACCESS AND COMMUNICATION OF DATA

You have the right to know if and how we are processing your personal data and to have such data provided to you in a form that is easily understood.

However, since we are bound by a duty of security and confidentiality when processing personal data, please note that your requests will be processed subject to you providing proof of your identity, in particular by presenting a copy of a valid identity document (either an electronic copy or signed paper photocopy).

Please note that we shall be entitled, if necessary, to reject any requests that are clearly excessive (in terms of volume, repetitiveness or regularity) and requests infringing third-party rights.

Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.

2. RIGHT TO RECTIFY DATA

You have the right to request the rectification, updating, restriction of processing, or erasure of any of your personal data that may prove inaccurate, incorrect, incomplete or out of date.

Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.

 4. RIGHT OF ERASURE

You have the right to request that we erase your personal data without undue delay.

Please note that in some rare cases we will not be able to satisfy your requests, particularly where we are bound by a legal obligation (e.g. invoices and the data included in them must be kept for 10 years).

Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.

5. RIGHT TO RESTRICT PROCESSING

You have the right to request the restriction of processing.

Requests may be made to us in writing to the above-mentioned address using the letter template provided by the CNIL.

5. DROIT DE LIMITATION

Vous avez le droit de solliciter la limitation d’un traitement.

Cette demande peut être réalisée en nous adressant une demande écrite à l’adresse mentionnée ci-dessus, à l’aide du modèle de courrier élaboré par la CNIL.

6. RIGHT TO DATA PORTABILITY

You have the right to data portability, entitling you to receive personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller.

Please note that this right can only be exercised if your data are processed by automated means (paper records are not eligible) and with your prior consent or in accordance with a contract entered into with you.

 

To exercise this right, please contact us using our online contact form, the email address serviceconsommateur@laita.fr, or our postal address: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France.

7. DIGITAL WILL

You have the right to provide us with specific instructions regarding what happens to your personal data after your death, particularly with regard to how they are stored, erased and passed on in connection with the processing we carry out.

You should provide these instructions to us using our online contact form or by writing to: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France.

These instructions may be amended at any time. Unless otherwise instructed or indicated, the heirs of a deceased individual may exercise the rights of the deceased.

8. RESPONSE TIMES

We undertake to respond to your access, rectification or objection requests or any other additional information requests within a reasonable period of time not exceeding ONE (1) month of receipt of your request.

However, we may extend this period by two additional months if required based on the complexity and volume of the request. In such cases, you will be informed of such an extension of the response time during the month following your request.

9. RIGHT TO CONTACT THE COMPETENT SUPERVISORY AUTHORITY

Should you experience any difficulties, you are entitled to make a complaint to the CNIL:  https://www.cnil.fr/fr/plaintes

10. WITHDRAWAL OF CONSENT

You also have the right to withdraw your consent to any personal data processing that is subject to you giving your consent. If, for example you have agreed to us sending marketing emails, you may unsubscribe from these emails at any time by clicking on the unsubscribe link at the bottom of any marketing emails you receive.

You may also close your user account at any time and without giving any reasons, either directly online or by contacting our customer services department.

For all other withdrawals of your consent, please contact us using our online contact form, the email address serviceconsommateur@laita.fr , or our postal address: Service consommateurs Paysan Breton, Laïta, 4 rue Henri Becquerel, 29806 Brest Cedex 09, France.

VII. Cookies and other technologies

This paragraph explains how cookies work and how to adjust cookie settings.

WHAT IS A COOKIE?

A cookie is a text file placed on your computer when you visit a website or view an advertisement. Its purpose is to collect information concerning your browsing patterns and provide you with services appropriate to your device (computer, smartphone or tablet). Cookies are mainly managed by your web browser.

OUR USE OF COOKIES

When you visit our website, cookies or other trackers are placed on your computer, smartphone or tablet.

The information that we collect in this way allows us to provide more appropriate, higher quality content on our website, analyse your browsing patterns, and identify and resolve any problems.

WHAT ARE THE DIFFERENT TYPES OF COOKIES?

This website includes various types of cookies for which you can give and withdraw your consent at any time using the [cookie manager] at the bottom of each web page. However, this option is not available for strictly necessary cookies.

  • Strictly necessary cookies:

These cookies are essential for ensuring that our website functions properly and cannot be disabled from our systems. They are generally only enabled in response to your actions constituting service requests such as configuring your confidentiality preferences, logging in, or completing forms. You can configure your browser to block such cookies or alert you to their use. However, if you block this category of cookies that store no personal data, some parts of the website will not work. The principal cookies used are: OptanonConsent, OptanonAlertBoxClosed

  • Performance cookies

These cookies allow us to determine the number of visits and sources of traffic on our website with a view to measuring and improving its performance. They also help us to identify the most and least visited pages and assess how visitors browse our website. All the information collected by these cookies are aggregated and anonymised. If you reject this category of cookies, we will be unable to determine when you visit our website. The principal cookies used are: _ga, _gat_UA-26302861-12, _gid

  • Functionality cookies

These cookies allow us to improve the features of our website and personalise it, for example by using videos and instant messaging services. They can be enabled by us or by third parties whose services are used on the pages of our website. If you reject this category of cookies, some or all of these features may not function properly. The principal cookies used are: _km, SSESS3e4db262237507c12eca7bd828dc011d, has_js

  • Cookies for targeted advertising

These cookies may be enabled on our website by our advertising partners. They may be used by these companies to profile your interests and offer targeted advertisements on other websites. They operate solely by identifying your browser and device. If you reject this category of cookies, advertisements that are less closely tailored to your interests will be displayed when you browse other websites. The principal cookies used are: Actifpinterest.com (pinterest.com), Actifyoutube.com (youtube.com)

HOW TO CHANGE COOKIE SETTINGS

When you first visit https://www.paysanbreton.com/fr a banner is displayed informing you of the cookies used and prompting you to set your preferences using the [cookie manager].

You can access information about cookies and change your cookie settings at any time on the [cookie manager] page which can be found at the bottom of each page of the website.

For further information on cookie settings, please visit the dedicated page of the CNIL website by clicking on: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

VIII. PERSONAL DATA SECURITY

We are committed to taking all steps to ensure the security of your personal data. This involves us taking appropriate technical and organisational measures to guarantee a suitable level of security. These include:

  • pseudonymisation and encryption of data;
  • means to ensure consistent confidentiality, integrity, availability and resilience of systems and processing services;
  • means to restore data availability and access within an appropriate time frame in the event of physical or technical incidents;
  • a procedure for regularly testing, analysing and assessing the effectiveness of technical and organisational measures to ensure processing security;

In the interests of security, we urge you to keep your password secret and refrain from disclosing it to anyone. You shall be liable for any failures that may occur as a result of the password that you have chosen for accessing your personal account not being kept secret.

IX. DATA PROTECTION OFFICER

The contact details of our data protection officer are:

  • LAITA – DPO (Délégué à la protection des données personnelles) – ZI de Kergaradec – 4 rue Henri Becquerel – 29806 Brest Cedex 9, France
  • dpo@laita.fr

X. Social media and us

Third-party social media platforms that integrate interactive modules in our website may use cookies or other trackers to collect information on your use of our website.

The way such information is used by third parties is described in the privacy policies published on the websites of the respective social media platforms. We encourage you to read these privacy policies carefully.

Such third parties may use these cookies or other tracking methods for their own purposes by linking information on your use of our website to personal information they hold on you. We may also obtain analytical data from these social media platforms. Such information helps us to measure the effectiveness of our content and our advertisements on social media.

Please note that most web browsers offer a simple procedure for rejecting these technologies.

If you wish to log in to your customer account using the login details that you use for a social media platform (e.g. Facebook®, Instagram®, Snapchat®, Twitter®, LinkedIn®, etc.), the first time you log in, you will be asked to consent to the social media supplier providing us with certain details relating to you, in particular your name, email address, profile photo, posts, comments and other information linked to your account on the relevant social media platform.

If you do not wish for the social media supplier to provide your data, you can simply log in to your customer account using your login details without using login details linked to your social media account.

In any event, we can legally justify processing such data based on the legitimate interest of providing you with an alternative means of logging in.

XI. Personal data of minors

Our websites, products and applications are not designed for minors (people aged under 18 years) and we ask any concerned minors to refrain from providing us with personal data. If we discover that we have collected personal data from a minor, we will take all necessary steps to erase this information without undue delay.

Last updated: 06/09/2021