Privacy policy
Privacy policy
SASU Sushi Robots
Type of site: showcase and e-commerce
The purpose of this privacy policy
The purpose of this privacy policy is to inform users of our site about the personal data we will collect and the following information, where applicable:
a. The personal data we collect
b. Use of the data collected
c. Who has access to the data collected
d. Site users' rights
e. The site's cookies policy
This confidentiality policy operates in parallel with the general terms and conditions of sale and use of our site.
Applicable laws
In accordance with the General Data Protection Regulation (GDPR), this privacy policy complies with the following provisions and is intended for the sale of products offered on the site.
Personal data must be :
a. processed lawfully, fairly and transparently in relation to the data subject (lawfulness, fairness, transparency);
b. collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; further processing for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes shall not be considered, in accordance with Article 89(1), as incompatible with the original purposes (purpose limitation) ;
c. adequate, relevant and limited to what is necessary for the purposes for which the clicks are processed (data minimisation);
d. accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (accuracy) ;
e. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which clicks are processed; personal data may be kept for longer periods insofar as clicks will be processed exclusively for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1), provided that the appropriate technical and organisational measures required by the Regulation are implemented in order to safeguard the rights and freedoms of the data subject (limitation of storage);
f. processed in such a way as to ensure appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (integrity and confidentiality).
Processing is lawful only if, and insofar as, at least one of the following conditions is met:
a. the data subject has consented to the processing of his/her personal data for one or more specific purposes;
b. processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject's request;
c. the processing is necessary for compliance with a legal obligation to which the controller is subject ;
d. processing is necessary to protect the vital interests of the data subject or of another natural person;
e. the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.
Finally, the personal data collected is adequate, relevant and limited to what is necessary for the purposes for which it is processed. No personal data considered sensitive, such as racial or ethnic origin, political, philosophical or religious opinions, may be requested or collected.
Consent
By using our site, users agree to accept :
a. the conditions set out in this privacy policy, and
b. the collection, use and storage of the data listed in this policy.
Personal data we collect
Data collected automatically
When you visit and use our site, we may automatically collect and store the following information:
a. IP address
b. Location
c. Hardware and software details
d. Links that a user clicks while using the site
e. Content that users consult on our site
Data collected non-automatically
We may also collect the following data when you perform certain functions on our site:
a. First name and surname
b. Company name and VAT number
c. Email
d. Postal address
e. Phone number
f. Automatic filling data
This data can be collected using the following methods:
a. Forms
b. Orders placed via the purchase tunnel
Please note that we only collect data that helps us to achieve the objective set out in this privacy policy.
We will not collect any additional data without informing you in advance.
How we use personal data
Personal data collected on our site will only be used for the purposes specified in this policy or indicated on the relevant pages of our site.
We will not use your data beyond what we disclose.
The data we collect automatically is used for the following purposes:
a. Statistics
b. Marketing
The data we collect when the user performs certain functions may be used for the following purposes:
a. Communication
b. Prospecting
With whom we share personal data
Employees
We may disclose to any member of our organisation such user data as they reasonably require to fulfil the purposes set out in this policy.
Third parties
We may share user data with third parties for the following purposes:
Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given objective.
Other disclosures
We undertake not to sell or share your data with third parties, except in the following cases:
a. if required by law
b. if required for any legal proceedings
c. to prove or protect our legal rights
d. to purchasers or potential purchasers of this company in the event that we seek to sell the company
If you follow hyperlinks from our site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.
How long we store personal data
User data will be kept for a period of three years, except in the case of data that is kept for the duration of legal limitation periods, in particular with regard to accounting documents and records.
We will ensure that users are notified if their data is kept for longer than this period.
How we protect your personal data
To protect your security, we use transport layer security protocol to transmit personal information on our system.
All data stored in our system is well secured and accessible only to our employees.
We undertake to implement technical and organisational measures to guarantee the security, integrity and confidentiality of all personal data, in order to prevent it from being distorted, damaged or accessed by unauthorised third parties.
As no security measure is infallible, the user is informed that absolute security of the personal data collected cannot be guaranteed. It is the user's responsibility to take all appropriate measures to protect their own data and/or software from contamination by any viruses circulating on the Internet.
International data transfers
User data may be consulted, processed or collected in the following countries:
- United Kingdom
- Spain
- Poland
- Germany
Minors
The RGPD specifies that people under the age of 15 are considered to be minors for the purposes of data collection. Minors must have the consent of a legal representative for their data to be collected, processed and used.
Your rights as a user
Under the GDPR, users have the following rights as data subjects:
a. right of access
b. right of rectification
c. right to erasure
d. right to restrict processing
e. right to data portability
f. right of objection
Further information on these rights can be found in Chapter 3 (art. 12-23) of the RGPD.
How to modify, delete or dispute the data collected
If you would like your information deleted or amended in any way, please contact our Privacy Officer here :
Alexandre Petit
Furthermore, users are informed that they have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés in the event of any difficulty.
Cookie policy
A cookie is a small file stored on a user's hard drive by the website. Its purpose is to collect data relating to the user's browsing habits. It is used to analyse user behaviour when visiting a website, to optimise browsing, in particular by determining the browser used, and to identify the user when connecting, in particular to find out which pages have already been consulted on the site.
Any use of cookies on the site requires the prior and express authorisation of the user, valid for 13 months, which the user may modify at any time. The user is informed that the use of cookies leads to the collection of statistical data, but does not lead to the collection of personal data.
We use the following types of cookies on our site:
a. Analytical cookies
This allows us to improve the design and functionality of our site by collecting data about the content you access and engage with while using our site.
b. Targeting cookies
These cookies collect data about how you use the site and your preferences. This allows us to make the information you see on our site more promotional and targeted to you.
You can choose to be notified each time a cookie is sent. You can also choose to disable cookies entirely in your Internet browser, but this may reduce the quality of your user experience.
Changes
This Privacy Policy may be amended from time to time to maintain compliance with the law and to reflect any changes to our data collection process. We recommend that our users check our policy from time to time to ensure that they are aware of any updates. If necessary, we may notify users by email of changes to this policy.
Contact
If you have any questions, please do not hesitate to contact us using the following contact details:
21 rue Lavoisier, 17440 Aytré
FRANCE
