Personal Data Protection Policy (GDPR)
Identity of the data controller
Atepac, a limited liability company with a share capital of 18293.88€, registered with the Trade and Companies Register under number 405 666 355 and with its registered office at 275 rue de l’Ormière, 31380 Garidech. Atepac is responsible for the personal data that you provide to us. In accordance with the applicable regulations on the protection of personal data, Atepac is the “data controller”.
Atepac, 275 rue de l’Ormière, 31380 GARIDECH
What is personal data?
“Personal data” refers to any information that can directly (e.g., your name) or indirectly (e.g., a pseudonymized email) identify you. This means that personal data includes information such as postal/mailing addresses, email addresses, mobile phone numbers, usernames, purchasing habits, and may also include unique digital identifiers such as IP addresses and cookies.
Data Collection and Processing
How do we collect or receive your personal data?
We may collect personal data from you or receive it from you through our websites, forms, devices, product pages dedicated to Atepac, on social media, or by any other means. In some cases, you provide us with personal data directly (for example, when you create an account, when you contact us, or when you make a purchase on our websites or in-store). In other cases, we collect this data, for example, by using cookies to understand how you use our websites.
When we collect data, we indicate the mandatory fields with an asterisk. Some of the data we ask for is essential for the following reasons:
- To fulfill the contract we have entered into with you (for example, to proceed with the delivery of the goods you have purchased on our website).
- To provide the service you have requested from us (for example, to send you a newsletter).
- To comply with legal obligations (for example, billing).
Not providing the information in the fields marked with an asterisk may impact our ability to provide you with products and services.
In what situations can your personal data be provided or collected?
- Creation and management of an account
- Purchase and order management
- Contact and ordering by phone
- Inquiries (data collected when you ask questions about our brands, products)
- Subscription to the newsletter
- Website browsing (data collected through cookies or similar technologies)
- Data collected in the context of your use of our websites
How and why can we use them?
- Order management.
- After-sales service (responding to your inquiries and interacting with you in any other way).
- Marketing and commercial prospecting (e.g., newsletters, you can unsubscribe from receiving newsletters via a link provided at the bottom of each newsletter).
- Prevention and fight against fraud during payment processing.
- Statistical analysis and audience measurement.
- Monitoring and improving our websites.
- Securing our websites and providing fraud protection for both you and us.
- Processing and tracking your order, including product delivery to the address you provided.
- Managing payment for your order. It should be noted that payment information is not collected by us but directly by payment service providers.
- Protecting transactions against fraud.
- Handling any communication you have with us regarding your order.
- Managing any disputes related to a purchase.
- Ensuring the protection and security of the website and protecting you against fraud or fraudulent use of our websites or services by performing authentication operations.
- Conducting targeted online behavioral advertising to provide you with advertisements for products that may be of interest to you based on your previous behavior.
- Ensuring the proper functioning of our website.
- Publishing comments on product pages.
What personal data can we obtain directly from you or as a result of an interaction with us?
- Last name, first name(s)
- Email address
- Postal address
- Mobile and/or landline phone number
- Account username and password
- Order information
- Purchase history
- Data related to your navigation and usage on our websites
- Last visited site
- Connection data
- Pages viewed
- Videos viewed
- Ads clicked on
- Products searched for
- Duration of your visit
- Products selected for your shopping cart
- Any other information you have provided to us (e.g., photos of your products, comments)
Informations techniques :
- IP address
- Browser data
- Device data
Atepac makes every effort to maintain the security and confidentiality of data to prevent distortion, damage, or unauthorized access by third parties.
When placing an order, no banking data is collected or stored by Atepac. This banking data is provided by the customer via the order form or verbally when the customer wishes to place an order over the phone with the assistance of one of our advisors. This sensitive data is only processed by authorized employees.
What is the legal basis for our use of your personal data?
The processing and use of your personal data may be based on:
- Your consent,
- The performance of a contract (i.e., providing the services you request),
- Legal obligations,
- Our legitimate interests, specifically:
Improving our products and services, and more specifically our business interests to help us better understand your needs and expectations, and thus improve our websites, devices, products, and brands in the interest of our customers.
Preventing fraud, to ensure that payments are made and have not been subject to any fraud or misconduct.
Securing our tools, to ensure the protection and security of the tools you use and to ensure that they function properly and are continuously improved.
Cookies
A cookie is a text file that is stored on your device (computer, laptop, tablet) when you visit a website. It allows the website to recognize you, help you navigate from page to page, and remember your preferences for your future visits.
Atepac uses cookies to recognize the user when connecting to the website. Cookies are used to collect statistics in order to provide you with a simpler and more interactive browsing experience, with the sole purpose of improving their services. You can choose to accept these cookies or customize them according to your preferences by clicking the “customize” button in the cookie information banner. You can also disable cookies stored on your device at any time by going to your browser settings. However, disabling cookies may prevent certain features of the website from functioning properly.
By browsing our Atepac website, you automatically accept the collection of cookies.
Recipients of the data
The collection of data is intended for the use of the Atepac website. Depending on the purposes for which your data has been collected, and only if necessary, some of your personal data may be accessible to our business partners. We rely on trusted third parties to perform a range of operations and business tasks on our behalf. We only provide them with the information they need to perform the service and ask them not to use your personal data for any other purposes. We take all necessary measures to ensure that all such third parties we work with preserve the confidentiality and security of your data. We may, for example, request services that require the processing of your personal data from:
- Third parties who assist and help us provide digital and e-commerce services.
- Third parties we need to provide and deliver a product to you.
- Third parties who assist and help us provide IT services, such as platform providers, hosting services, maintenance services, and technical support for our databases and software that may contain data about you.
- Payment service providers and credit reference agencies to assess your creditworthiness and verify your information when required to enter into a contract with you.
We may also disclose your personal data to third parties:
- If we are required to disclose or share your personal data to comply with a legal obligation, or to enforce or apply our terms of use/sale or any other terms you have agreed to; or to protect the rights, property, or safety of Atepac, its customers, or employees.
- If we have your consent.
- If permitted by law.
We do not offer or sell your personal data.
Is the security of your personal data ensured?
We place great importance on the protection of your personal data and take all reasonable precautions to ensure its security. We require trusted third parties who handle your personal data on our behalf to do the same through contractual agreements.
We constantly strive to protect your personal data to the best of our ability. Upon receiving your data, we implement strict procedures and security measures to prevent unauthorized access. However, please note that data transmission over the Internet is not completely secure, and we cannot guarantee the security of data transmitted to our website. Any transmission is done at your own risk.
Links to third-party websites and connection to social media platforms
Our websites may occasionally contain links to websites owned by our network and affiliate partners. Please note that these websites have their own privacy policies and we are not responsible for their practices. We encourage you to review the terms of these policies before providing any personal data on these websites.
We may also offer you the option to connect through your social media accounts. If you choose to do so, please be aware that you are providing us with information from your social media profile based on the settings of the social media platform you are using. We encourage you to visit the respective social media platform and review its privacy policy to understand how your personal data is shared and used in this context.
Right of access, rectification, and deletion
In accordance with the Data Protection Act of January 6, 1978, as amended, the user has the right to access, rectify, and delete data concerning them. The user can expressly object to the processing of their personal data. To do so, they simply need to write a letter to Atepac, 275 rue de l’Ormière, 31380 Garidech, or send an email to info@atepac.com.
Their request must be signed and accompanied by a valid identification document bearing their signature.
Atepac has a period of 2 months from the receipt of the user’s request to respond. After this period, the customer may contact the CNIL (French Data Protection Authority) in the event of a negative response or absence of a response from Atepac.
The user can delete their customer account and all associated personal data at any time through the “My Account” section. Atepac will then commit to deleting all their personal data.
Data retention period
Atepac retains data for a period of three years from the end of the relationship with the prospect, and for five years from the end of the relationship with the customer. The period begins either from the last order, last login to the customer account, last contact with customer service, last email sent to customer service, click on a hyperlink in an email sent by Atepac, adding products to the cart without completing the purchase, or a positive response to an email asking if the customer wishes to continue receiving commercial prospecting after the 3-year period. At the end of this period, the customer or prospect data will be anonymized.
Therefore, the customer will be required to create a new account if they wish to make a new purchase on Atepac. All previous orders and invoices will no longer be accessible.
However, information necessary for establishing a right or a contract, or retained for compliance with a legal obligation, may be archived in accordance with applicable legal provisions.
Personal data after death
Atepac informs the user that they can establish, during their lifetime, directives regarding the storage, erasure, and communication of their personal data after their death. These directives can be general or specific. The user can modify or revoke their directives at any time. To do so, the user can contact Atepac – 275 rue de l’Ormière, 31380 Garidech.
Newsletters
When a customer creates an account on Atepac, they are automatically subscribed to the newsletter. The purpose of the newsletter is to regularly inform them about ongoing promotional offers. They can unsubscribe by clicking on the link provided at the bottom of each newsletter.
Your rights & choices
Atepac respects your right to privacy: it is important that you have control over your personal data. You have the following rights:
Your rights |
What this means is that… |
---|---|
The right to be informed |
You have the right to obtain clear, transparent, understandable, and easily accessible information about how we use your personal data and about your rights. |
The right of access |
You have the right to access the personal data we hold about you. To exercise your right of access, please contact us using the contact information at the bottom of this document. |
The right of rectification |
You have the right to demand that your personal data be corrected if it is inaccurate or outdated, and/or completed if it is incomplete. To exercise your right to rectification, you can log into your customer account to make any necessary modifications. |
The right to erasure/right to be forgotten |
If you wish for us to erase your data, please contact us using the contact information at the bottom of this document. This right is not absolute as we may be required to retain your personal data for legal or legitimate reasons (e.g., outstanding payments). |
The right to object to direct marketing |
You can unsubscribe or opt out of receiving our commercial messages at any time. You will need to log into your customer account and unsubscribe from the newsletter. |
The right to data portability |
You have the right to move, copy, or transfer the data concerning you from our database to another. This applies only to the data you have provided to us, when the processing is based on your consent or a contract, and when it is carried out by automated means. Atepac has a period of 1 month from the receipt of the user’s request to respond, or 3 months if Atepac sends a registered letter indicating that more time is needed. |
The right to restriction of processing |
You have the right to request the limitation of the processing we carry out on the data concerning you by customizing the collection of cookies in your customer account or upon your arrival on the website. |
The right to disable cookies |
You have the right to disable cookies. Internet browser settings are usually set by default to accept cookies, but you can easily change this by modifying your browser settings. Many cookies are used to improve the usability or functionality of websites, so disabling cookies may prevent you from using certain parts of the site. |
Contact
For any questions or remarks regarding the way we process and use your personal data, or if you wish to exercise any of the rights mentioned above, please contact us via email at info@atepac.com or write to us at the following address: Atepac, 275 rue de l’Ormière, 31380 Garidech.