GAMARDE LABORATORIES CHARTER FOR THE PROTECTION OF PERSONAL DATA

When you browse our site, you are likely to send us personal data, directly or indirectly. Your personal data is precious, it is part of your privacy. This is why we are committed to collecting, using and storing them in conditions that ensure their protection and confidentiality, in accordance with the laws in force.

We invite you to carefully read this Personal Data Protection Charter (hereinafter “the Charter”). There you will find all the information on the data we collect, how we use it, its retention periods, the means we implement to ensure their protection, the rights you enjoy, etc.

Our Personal Data Protection Charter may be updated or modified, depending on the evolution of our tools and regulations. We therefore invite you to consult it regularly.

I. What data is affected by the Charter?

This Personal Data Protection Charter applies to all personal data that you communicate to us, directly or indirectly, when browsing our site (hereinafter “gamarde.com”).

“Personal data” is information that directly or indirectly identifies a natural person. This is, for example, your name, your e-mail address, your telephone number, but also data relating to your consumption habits, your skin type, etc.

II. Who is the data controller?

The law defines the data controller as the company that determines the purposes and conditions for the collection and use of your data.

This is the company LABORATOIRES GAMARDE with a capital of 121 euros, registered with the RCS under the number 493 447 296 00010, whose registered office is located at 121 chemin de la Portette, 46140 Mercuès, France.

III. What is the legal basis for our processing of personal data?

The processing of personal data that we carry out as part of our activity may have several legal bases:

• Legitimate interest: we need to collect your personal data to get to know you better in order to provide you with personalized offers and services, ensure the security of our Site, improve our content, etc.
• The execution of a contract: the collection of your data is necessary when you subscribe to one of our online services (creation of an account in our loyalty program, participation in a promotional offer, etc.)
• Your consent: the law requires you to collect your consent to collect or use your data. This is the case, for example, when we collect data relating to your health or your ethnic origin in order to advise you on appropriate products (e.g. skin problems revealing a pathology, color of your skin, etc.), or when we would like to send you commercial solicitations (eg: information on our products, etc.) by e-mail or by SMS / MMS.

IV. Why do we collect your personal data?

We collect your personal data only when necessary, for explicit, legitimate and specified purposes.

Thus, we collect and process your personal data, in particular for:

• provide you with information relating to your order (tracking, delivery, etc.)
• improve the operation and content of our Website and our services, in order to better meet your needs and requests;
• collect your opinion on our products and services;
• carry out audience analyzes and statistical studies, for example in order to know and measure the number of visits to our Site, the activity and path of Internet users on our Site, the subscription rate to our services, etc. ;
• carry out satisfaction surveys on our products and services;
• detect fraudulent behavior and manage disputes;
• ensure the security of our site and our services.

V. What data is collected, when and for how long is it kept?

We respect the principle of data minimization. That is to say that we only collect the data strictly necessary for the achievement of our purposes.

Data can be collected:

• either directly from you, for example when you complete our collection forms on our Site (eg: when placing your order);
• either indirectly or automatically, for example when you browse our Site.

In our collection forms, the fields marked with an asterisk are mandatory. Failure to respond will prevent or compromise the provision of the services concerned.

We define the retention period of your data according to the time necessary to achieve the objectives of the collection. When our objectives are achieved, we delete your data, except in certain cases where the law requires us to keep it. In these cases, your data is archived under the conditions provided for by law.

The table below tells you when your data is collected, what data is collected and how long it is kept:

VI. How do we collect data from minors?

Our site is accessible to anyone, major or minor.
However, the additional consent of the holder of parental authority is required for minors under the age of fifteen who subscribe to our services or provide us with personal data concerning them.

VII. Who are the recipients of your data?

We may need to transmit your data to the following companies or persons, who are involved in achieving the purposes described in IV above:

• Google, to measure the audience on our Site,
• administrative or judicial authorities at their request.

We choose subcontractors, service providers and suppliers who offer sufficient guarantees to ensure the protection, security and confidentiality of your personal data, in particular by implementing appropriate technical and organizational measures and meeting the requirements of the law. They are only allowed to process your data according to our instructions.

We do not sell or transfer your data to commercial companies other than those mentioned above.

VIII. How do we ensure the security of your data?

LABORATOIRES GAMARDE undertakes to implement reasonable means to ensure that your personal data is sufficiently protected, taking into account the sensitive nature of certain information collected. We use several technologies and procedures to protect your data from unauthorized access, use or disclosure. We require an equivalent level of security from our subcontractors.

For example, we or our subcontractors store your data on computer servers located in controlled places and to which access is limited. Unfortunately, the complete security of data transmission over the Internet cannot be guaranteed. Thus, we cannot fully guarantee the security of the data that you transmit to us by electronic means.

IX. Where do we store your data?

Our company and our subcontractors process and store your data only in countries that are members of the European Union.

X. How can you exercise your rights?

In accordance with the laws in force, you benefit from:

• a right of access to data concerning you,
• a right to rectify your data,
• a right to erasure of data, for legitimate reasons,
• the right to oppose the processing of your data, for legitimate reasons,
• the right to withdraw your consent to the processing of your data,
• a right to restriction of processing,
• the right to data portability,
• the right to oppose commercial prospecting,
• the right to formulate directives concerning the storage, erasure and communication of your post-mortem personal data,
• the right to lodge a complaint with the CNIL

You can exercise these rights at any time at the following address: Service Consommateurs LABORATOIRES GAMARDE – ZAC des Grands camps, 46090 Mercuès France, or by sending us a message via our contact form.

XI. How to contact the DPO?

LABORATOIRES GAMARDE has appointed a Data Protection Officer (DPO) who can be contacted at the following coordinates: [email protected]