Privacy policy
PREAMBLE
Concerned about the rights of individuals, the company TARNAISE DES PANNEAUX is committed to protecting your personal information and your privacy, particularly with regard to automated processing. The company is committed to fully complying with the requirements of the General Data Protection Regulation No. 2016/679 of the European Union, which has been applicable since May 25, 2018, and the Data Protection Act.
Personal information is data associated with an identified or identifiable individual. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to a name, an identification number or to one or more specific elements specific to their physical, physiological, genetic, psychological, economic, cultural or social identity.
This Privacy Policy covers all data processing, their intended purposes and the means of action available to individuals so that they can best exercise their rights.
For any other questions about the privacy policy, please visit: https://www.cnil.fr/ or contact us at the following addresses:
Postal address: 10 Boulevard Pasteur, 81290 Labruguière
Email address: adv@tarnaisepanneaux.fr
1 – Data controller
The controller of your data within the meaning of the General Data Protection Regulation is:
Name: TARNAISE OF PANELS
Legal form: Simplified joint stock company (SAS)
Legal representative: Renald Rosier in his capacity as president of the company HOLDING RR, itself president of the company HTP GLOBAL, itself president of the company Tarnaise des Panneaux.
Registration number in the Castres Trade and Companies Register: 444 640 635
Head office: 10 Boulevard Pasteur, 81290 Labruguière
Phone number: 05 63 73 33 33
Email address: adv@tarnaisepanneaux.fr
2- Data Protection Officer
As part of the protection of your data, the company TARNAISE DES PANNEAUX has set up a data protection officer.
Contact: sylvain.loriot@tarnaisepanneaux.fr
3- Purposes and legal bases of processing
Personal information collected from you is only used for the purposes described in this Privacy Policy.
In accordance with applicable law, each purpose has a legal basis.
| Processing activity | Purposes | Legal Basis |
| Connecting prospects with the company via the contact form | – Collection of personal information from the prospect necessary to best ensure the response to their request – Collection of personal information within the framework of a future contractual relationship | – Prior consent |
| Execution of the Customer’s order | – Order tracking and management – Complaints management / Mediation in the event of complaints and disputes – Invoicing – Retention of your data to meet legal obligations | Execution of the contract |
| Website management via cookie management. (For more information, please refer to our Cookie Policy) | – Optimization of commercial offers – Management of commercial prospecting | Prior consent |
| Transfer of Customer Data to Third Party Service Providers | Carrying out commercial prospecting actions | Prior consent |
3 – Personal data collected
In accordance with the requirements of the General Data Protection Regulation No. 2016/679 of the European Union, the company TARNAISE DES PANNEAUX undertakes to ensure that personal data is adequate, relevant and limited to what is necessary with regard to the purposes for which it is processed.
By using our contact form, the following personal data relating to the identity of potential future customers will be collected and processed:
- Civility
- Name(s) and first name(s)
- Company name
- Email address
- Phone number
- Any additional personal information provided in the contact form
The transmission of some of your data is mandatory. In the event of refusal to transmit, the company will not be able to process your request.
The transmission of some of your data is done automatically via cookies. To find out more, you can consult our general cookie policy here.
4 – Recipients of the data
Your personal data may be disclosed to the following recipients:
– All companies in our group, all third-party service providers and all business partners for the purpose of providing commercial offers tailored to customer needs.
– Any competent law enforcement bodies, any regulatory government agencies, any duly authorized judicial or administrative authorities to whom it would be necessary to transmit your personal data under the regulations in force.
In the event of disclosure, informed third parties will not be able to access the personal data beyond what is reasonably necessary to achieve the given purpose.
5 – Data retention period
Your data will always be kept for the period strictly necessary to achieve the purpose for which it was collected.
Once the purpose has been achieved, your data is then archived if it is of administrative interest to the company or to meet a legal obligation.
Once any commercial relationship has ceased, your personal data will be archived for a period of 3 years from the very last contact.
Finally, your data will be anonymized or deleted.
6 – Transfer of data outside the European Union
Due to the relationships maintained by the company, your data may be transferred and used outside the European Union. The company undertakes to ensure that this transfer and use is carried out in compliance with legal obligations.
In this respect, transfers will be carried out in accordance with the regulations in force and after signing the Standard Contractual Clauses approved by the European Commission, thus ensuring a sufficient level of protection of privacy and fundamental rights.
7 – Your rights
In accordance with the law of January 6, 1978 known as the amended “Information Technology and Freedoms” law and the General Data Protection Regulation of April 27, 2016, you have the following rights:
Right of access:
The right of access is understood as the ability to obtain from the data controller confirmation that personal data is being processed, and where applicable, to obtain communication of this data in an understandable format. When exercising this right of access, the data controller undertakes to provide a copy of the personal data in his/her possession as well as the following information: the purposes of the processing, the categories of data collected, the identity of the recipients to whom your data is or will be transmitted, the retention period or the criteria for identifying this period, the possibility of exercising the right of rectification, erasure, limitation or opposition, the possibility of filing a complaint with the CNIL, any information relating to the specific source of the data collected, the existence of automated decision-making and the possible transfer of data outside the European Union.
Right of rectification:
The right of rectification is understood as the possibility of obtaining from the data controller the rectification, completion, updating or deletion of inaccurate personal data when errors, inaccuracies or the presence of data whose collection, use, communication or conservation is prohibited have been detected.
Right to erasure:
The right to erasure is understood as the ability to obtain from the data controller the erasure of personal data when these data are no longer necessary in relation to the purposes for which they are processed, when the person concerned by the data withdraws his or her consent, when the data are subject to unlawful processing, when the data were collected when the person concerned was a minor in the context of the information society, when they must be erased to comply with a legal obligation.
Right of limitation:
The right to restriction is understood as the possibility to obtain from the controller the restriction of processing and thus freeze the use of personal data. The data may then only be stored and no longer used for the period necessary to process the request for opposition.
Right to portability:
The right to portability is understood as the possibility to receive the data provided to the data controller in a readable, structured and commonly used format, to transmit them directly without hindrance to another data controller.
Right of opposition:
The right to object is understood as the possibility to object at any time, for reasons relating to one’s particular situation, to the processing of one’s personal data by an organization for a specific purpose. The right to object in the case of commercial prospecting may be exercised without reason.
Except in cases of prospecting, the data controller may nevertheless continue this processing if it proves that it is necessary for a legitimate and compelling reason or necessary for the exercise or defense of legal claims. The controller may also continue the processing when a contract binds it to the data subject or when it is subject to a legal obligation to process data.
Right to withdraw consent:
The right to withdraw consent is understood as the possibility of withdrawing consent at any time, through a simple method equivalent to that used to collect it.
8 – Exercising your rights
These rights concern all of your personal data.
To exercise these rights, you can contact the company at the following addresses:
Postal address: 10 Boulevard Pasteur, 81290 Labruguière
Email address: adv@tarnaisepanneaux.fr
Each individual may exercise his rights directly or by giving a mandate to a person of his choice. In the latter case, the agent must attach a letter specifying the purpose of the mandate as well as the identity of the principal and the agent.
The response will be sent within one month of receipt of the request in the case of a simple request. This one-month period may be extended by two months in the case of a complex request. In the latter case, the individual will be informed of the outcome of their request within one month maximum.
In addition, and since law n°2016-1321 of October 7, 2016, people who wish to do so have the possibility to organize the fate of their data after their death and to choose whether or not their data is communicated to a third party that you have previously designated. In the event of death and in the absence of instructions, the data will be destroyed, unless their retention proves necessary for evidentiary purposes or to meet a legal obligation.
In all cases, each individual has the possibility of contacting the CNIL if they consider that the processing of their personal data does not comply with the legislative and regulatory provisions in force on the official website of the body: https://www.cnil.fr./
However, we recommend that you contact us before making any complaint, thus ensuring that we do everything possible to try to resolve your problem.
9 – Security and confidentiality
The Company implements organizational, technical, software and physical digital security measures to protect personal data against alteration, destruction and unauthorized access. However, since the Internet is not a completely secure space, the Company cannot guarantee the security of user data beyond what is reasonably practical.
10 – Update
It is possible that our personal data protection policy is regularly updated to take into account legislative and regulatory developments as well as technical or commercial developments. Therefore, in the event of an update to the confidentiality policy, appropriate measures will be taken to inform you.
We invite you to read the latest version made available to you on our website.
11 – Cookie management
For more information regarding the use of cookies, you can consult the cookie policy.