We attach great importance to respecting your privacy and protecting your personal data.
This policy informs you about how your data is collected and used in connection with the website accessible at www.weiss-france.fr (the “Site”) and/or during any contact with our Company, in compliance with the French Data Protection Act No. 78-17 of January 6, 1978 and the applicable European regulation resulting from the General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”).
On the Protection of Your Personal Data
1. Data Controller and Recipients of Personal Data
The personal data collected (“Data”) through the use of our Site and, more generally, through any relationship you may have with our Company, is processed by Weiss France Energie, acting as the data controller (“Data Controller”).
Data refers to any information relating to an identified or identifiable natural person, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, or an online identifier.
Depending on the purpose of the processing, the Data collected and/or transmitted is intended to be used by the Data Controller. The following departments of the Data Controller may have access to it: support services (purchasing/sales administration, sales, logistics, credit management, HR, accounting, IT and marketing). It may also be made accessible to the following service providers (“processors” or “third-party recipients” within the meaning of the regulations) strictly for the needs of their mission, in particular:
- – technical service providers: communication agency, hosting company of our Site (see Terms of Use and Legal Notices available HERE);
- – accounting/financial service providers: auditors, banks;
- – logistics service providers: transport companies;
Access is strictly regulated by the security policies in place so that human intervention on the Data remains very limited. The Data Controller may disclose your Data to third parties where such disclosure is permitted and required by law or by a court decision, or where such communication is necessary to ensure the protection and defense of its rights.
Outside of these cases, your Data will not be transferred or made accessible to any third party without your prior consent.
The Data Controller does not transfer your Data to any country outside the European Economic Area (EEA).
If a transfer outside the EEA occurs, such transfers will be governed by appropriate safeguards, such as the standard contractual clauses required by the European Commission.
2. Purposes of Data Collection
The Data necessary to respond to your contact request, to carry out commercial relations with our Company (including the contract for the sale of products and/or services presented on the Site), or to comply with a regulatory obligation will be indicated as such at the time of collection.
The following Data is processed:
- – Identification data (last name, first name, name of the company you work for, position, relationship with any person within the Company)
- – Connection data
- – Location data (postal address)
- – Payment-related data
- – Transaction-related data
- – Any other data that you send to us in order to contact our Company or obtain the provision of products and/or services
- – Etc.
The Data will be used in different ways depending on the reason why you visited the Site:
- – Based on your consent, which you may withdraw at any time without affecting the initial lawfulness of the use of your Data (see below, art. 3 “Your Rights”), for sending newsletters;
- – For the purposes of executing commercial relationships and in particular the sales or service contract you have entered into or the supply of products/services (creation of customer or supplier accounts, order execution, invoicing, contract monitoring, delivery, after-sales service and complaints handling, satisfaction surveys, management of customer or supplier databases, management of unpaid invoices and disputes);
- – To process and respond to requests that may, where applicable, lead to contractual agreements (requests for information);
- – To comply with legal, accounting and tax obligations (including the retention of supporting accounting documents; management of rights requests, rectification and objection requests; maintaining an opposition list for marketing purposes), or to establish, exercise or defend legal claims.
Unless you object and within the limits of your interests and rights, the Data may also be processed to meet the legitimate interests of the Data Controller, in particular for:
- – Marketing, customer relationship management and customer loyalty (in particular through the sending of commercial messages or news relating to products, services and offers presented on or outside the Site);
- – Creation of customer/supplier accounts by performing due diligence necessary to protect the interests of the Data Controller and prevent conflicts of interest;
- – Optimization of the Site (analysis of browsing paths, identification of massive connections, determination of search trends in order to adjust the offers provided);
- – Conducting marketing campaigns to develop commercial activity;
- – Managing reviews about products, services or content in order to improve the products and services offered on or outside the Site;
- – Personalizing the customer experience on the Site;
- – Producing statistics (including commercial statistics) to analyze business activity;
- – Managing prospect databases to develop commercial activity;
- – Conducting satisfaction surveys;
- – Preventing payment fraud.
3. About cookies
Various cookies are used on the Site to improve interaction between you, the Site, and the services offered.
For more information, please consult the Cookie Policy available HERE.
4. Your Rights Regarding the Data
Individuals whose Data is processed by the Data Controller have the right to access their Data, rectify inaccurate Data concerning them and, in the cases and within the limits provided by the regulations, object to processing, request the deletion of certain Data, withdraw their consent, restrict processing, determine what happens to their Data after their death, or request its portability for transmission to a third party.
To exercise your rights, simply write to one of the two addresses mentioned in Article 6 below and, where applicable, attach any document enabling us to verify your identity and your request.
5. Data Retention Period
Your Data will be retained for a period not exceeding that necessary for the purposes for which it was collected, and in particular during the following periods:
- – For a period of 3 years following the last contact, then stored in intermediate archives for the duration of the applicable legal limitation period (5 years) for all Data, except banking data and cookies;
- – For a period of 13 months from their creation/placement in the case of cookies.
At the end of these periods, the Data will be deleted from active databases and, if necessary, archived for a period not exceeding the applicable legal limitation periods or archiving obligations. Once these periods have expired, the Data will be destroyed.
6. Contacting the Data Protection Officer (DPO)
For any additional information or difficulty relating to the use of your Data, you may contact the Data Protection Officer by email at dpo@weiss-france.fr or by post at the following address:
DPO – 27 Avenue Franklin Roosevelt, 35400 Saint-Malo, France.
If you experience unresolved difficulties or wish to lodge a complaint regarding the processing of your Data, you may contact the CNIL electronically at https://www.cnil.fr/fr/agir or by post at the following address:
Commission Nationale de l’Informatique et des Libertés,
3 Place de Fontenoy – TSA 80715,
75334 PARIS CEDEX 07, France.