RGPD | carat gp

ARTICLE 1: PREAMBLE
This privacy policy aims to inform users of the site:
- About how their personal data is collected. Personal data is any information that allows the identification of a user, such as names, age, postal or email address, location, or IP address (non-exhaustive list);
- About their rights regarding these data;
- About the person responsible for processing the collected and processed personal data;
- About the recipients of this personal data;
- About the site’s cookie policy.

This policy complements the legal notice and the Terms and Conditions of Use, which users can consult at the following link: https://www.carat-gp.fr/mentions-légales

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of Regulation (EU) 2016/679, personal data is:
- Processed in a lawful, fair, and transparent manner in relation to the data subject;
- Collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
- Adequate, relevant, and limited to what is necessary for the purposes for which it is processed;
- Accurate and, where necessary, kept up to date. All reasonable measures will be taken to ensure that inaccurate personal data is erased or rectified without delay;
- Kept in a form that permits identification of data subjects for no longer than necessary for the purposes for which they are processed;
- Processed in a way that ensures appropriate security of the data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Processing is lawful only if at least one of the following conditions is met:
- The data subject has consented to the processing of their personal data for one or more specific purposes;
- The processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract;
- The processing is necessary for compliance with a legal obligation to which the data controller is subject;
- The processing is necessary to protect the vital interests of the data subject or another person;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- The processing is necessary for the legitimate interests pursued by the controller or by a third party, unless the interests or rights and freedoms of the data subject override those legitimate interests.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING NAVIGATION ON THE SITE

Article 3.1: Collected Data
The personal data collected in the course of our activity includes:
- Data related to sessions on the pages and site
- Identification data: name, surname, phone number (landline or mobile), email address
The collection and processing of this data aim to ensure service quality, send newsletters, and manage customer contact.

Article 3.2: Mode of Data Collection
When you use our site, the following data is automatically collected:
- Statistical data
- Functional data
- Marketing data
- Preference data
Additional personal data is collected when you perform the following actions on the platform:
- Providing personalized services such as newsletters
- Providing optional services such as interactive discussion spaces or chats
- Managing cookies (subject to consent)
These data are stored by the data controller under reasonable security conditions for a period of 5 years. The company may retain some personal data beyond these periods to fulfill legal or regulatory obligations.

Article 3.3: Data Hosting
The site www.carat-gp.fr is hosted by:
Carat GP
66 rue d’Allonville, 44000 Nantes
Contact: office@carat-gp.fr, 0240149803

Article 3.5: Cookie Policy
About Cookies:
A cookie is a small text file saved by your browser on your computer, tablet, or phone that allows us to track your visit. It functions like an ID card, recording your passwords and preferences. It is not executable code and cannot transmit viruses. The information stored in this tracker is encrypted to prevent unauthorized use.
We use cookies to provide you with a better browsing experience, personalized and secure.
Cookie Statement:
- Functional: These cookies are necessary for the site to function properly and ensure security. They are mandatory and do not require your consent.
- Preferences: These cookies are necessary to remember your cookie settings. No consent is required.
- Statistics: These cookies allow us to measure the site's audience and create anonymous statistics on performance and visits to improve the quality of our services.
- Marketing: These cookies allow us and our partners to display personalized advertising based on your browsing and profile.
- Social Media Sharing: Cookies placed via social media buttons allow content sharing and enhance user experience. Video-sharing service cookies enable viewing content directly on the site. Refusal of these cookies may limit some content functionality.
- Unclassified: These are cookies being integrated or representing a category in themselves.

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1: Data Controller
Personal data is collected by Carat GP, a limited liability company (SARL) with a capital of €30,777.00, registered under the RCS Nantes number 842 620 247.
The data controller can be contacted as follows:
By mail at 66 rue d’Allonville, 44000 Nantes;
By phone at 0240149803;
By email at office@carat-gp.fr.
If you believe that your "Informatics and Freedoms" rights have not been respected after contacting us, you may address a complaint to the CNIL.

ARTICLE 5: USER RIGHTS IN RELATION TO DATA COLLECTION AND PROCESSING
Any user whose personal data is processed can exercise the following rights in accordance with Regulation (EU) 2016/679 and the French "Informatique et Libertés" Law (Law 78-17 of January 6, 1978):
- Right to access, rectification, and erasure of data (Articles 15, 16, and 17 of the GDPR);
- Right to data portability (Article 20 of the GDPR);
- Right to restrict (Article 18 of the GDPR) and object to data processing (Article 21 of the GDPR);
- Right not to be subject to decisions based solely on automated processing;
- Right to determine the fate of data after death;
- Right to lodge a complaint with the relevant supervisory authority (Article 77 of the GDPR).
To process a request, the data controller may require certain information such as: full name, email address, account, personal space, or subscription number.
For more information about your rights, consult the CNIL website.

ARTICLE 6: CHANGES TO THE PRIVACY POLICY
The site’s publisher reserves the right to modify this policy at any time to ensure compliance with applicable laws.
Any modifications will not affect previous purchases, which remain subject to the policy in effect at the time of purchase and as accepted by the user during the validation of the purchase.
Users are encouraged to review this policy each time they use our services, without formal notification.
This policy was issued on 05/03/2024 and updated on 05/03/2024.