Privacy policy
Privacy policy
This Privacy Policy is addressed to you, as a user of the site www.h2gremm.fr (hereinafter referred to as “the SITE”) and aims to inform you of the manner in which your personal information may be may be collected and processed by H2Gremm SAS, a simplified joint stock company, registered in the Quimper trade and companies register under number 852 892 645, with its head office at 7 ZA de Langelin, 29510 Edern – 29510 Edern.
Respect for your privacy and your personal data is a priority for H2Gremm which is committed to respecting the provisions of Regulation (EU) No. 2016/679 of April 27, 2016 relating to the protection of personal data.
H2Gremm undertakes in any case to respect the following two (2) essential principles:
- You remain in control of your personal data;
- Your data is processed transparently, confidentially and securely.
Article 1. Definitions
- SITE: designates the website accessible at the address www.h2gremm.com; the SITE brings together all the web pages, services and functionalities offered to you as a USER or CUSTOMER via H2Gremm;
- USER: refers to any person who accesses and browses the SITE as an Internet user.
Article 2. Identity of the Data Controller
The person responsible for processing personal data implemented as part of the operation of the SITE is the company H2Gremm.
Article 3. Collection and processing of data
As part of the operation of the SITE, H2Gremm may collect personal data relating to the USERS of its SITE. This data is processed in accordance with the purposes intended during collection.
In particular, H2Gremm may collect personal data:
- During your visit to the SITE;
- When you use features and/or services offered on the SITE;
- During exchanges with H2Gremm via the SITE;
- When requesting contact with H2Gremm.
Whatever the method of collection, H2Gremm undertakes to inform you of the purposes of the processing, the obligatory or optional nature of the responses to be provided, the possible consequences, with regard to it, of a failure to respond, the recipients of the data, of the existence and methods of exercising their rights of access, rectification and opposition to the processing of their data.
When necessary with regard to Regulation (EU) No. 2016-679 of April 27, 2016, H2Gremm undertakes, depending on the case, to obtain your consent and/or allow you to object to the use of your data. for certain purposes.
The data that may be collected and processed by H2Gremm for the achievement of the purposes described in article 4 of this confidentiality policy concerns:
Identification data (surname, first names, postal, telephone and electronic contact details, date of birth, nationality, language, where applicable copy of identity card, copy of identity document for the purposes of proof of exercise a right of access, rectification or opposition or to meet a legal obligation);
Connection data (IP addresses, connection logs);
Data relating to the selection of people to carry out loyalty, prospecting, survey, product testing and promotion actions;
Data relating to contributions from people who post reviews on products, in particular their pseudonym;
Article 4. Purposes of processing
The data collected as part of the use of the SITE is processed with the aim of meeting the purposes described in the table below.
The regulations in force protect the privacy of users and require any data controller to be able to demonstrate a legitimate basis. The regulation thus provides among the legal bases for processing:
The execution of a contract between the CUSTOMER and H2Gremm. Thus certain personal data of the CUSTOMER are necessary in particular to deliver the order, manage the ACCOUNT;
The prior consent of the person concerned;
The legitimate interest of the data controller, while respecting the rights and freedoms of USERS. Thus, improving the customer experience or preventing fraud may justify data collection.
Purposes of processing
Operations of statistics, analysis, selection and segmentation of CUSTOMERS in order to improve knowledge of CUSTOMERS
Provision of sharing tools on social networks
Sharing information with business partners
What are the justifications?
Legitimate interest of H2Gremm
CUSTOMER Consent
Exécution du contrat conclu entre le CLIENT et H2Gremm et Consentement du CLIENT (pour les opérations à des fins de prospection)
Article 5. Consent
When browsing the SITE, you fill out various forms and communicate various personal data about yourself to benefit from all the services offered by H2Gremm.
By spontaneously communicating your personal data, you expressly consent to the data being collected and processed by H2Gremm for the purposes brought to its attention.
Article 6. Data recipients
Only the persons listed below may have access to USER data:
H2Gremm’s management and sales, marketing, administrative, logistics and IT departments in charge of customer relations, order processing and service support.
Your data will not be communicated, exchanged, sold or rented to anyone other than those mentioned above.
Article 7. Duration of data retention
H2Gremm undertakes to ensure that the data collected is kept in a form allowing your identification for a period which does not exceed the duration necessary for the purposes for which this data is collected and processed.
With regard to the cookies referred to in Article 9 of this Privacy Policy, it is specified that the information stored in your terminal (e.g. cookies) or any other element used to identify you for audience statistics purposes does not are not kept beyond a period of thirteen (13) months. Beyond this period, the raw attendance data associated with an identifier is either deleted or anonymized.
Article 8. Your rights over your personal data
In accordance with articles 14 to 22 of regulation 2016/679 of April 27, 2016, any natural person using the SITE has the right to exercise the following rights:
- A right of access, rectification and deletion of the data collected;
- A right to object to the processing of your data;
- A right to portability of the data collected;
- Formulate directives relating to the conservation, erasure and communication of their personal data after their death in accordance with article 40-1 of law n°78-17 of January 6, 1978.
If H2Gremm detects a personal data breach likely to create a high risk for the rights and freedoms of USERS, it undertakes to inform the USERS concerned as soon as possible.
These rights can be exercised, by simple request by email to the address contact@h2gremm.com, by paper mail to the address H2Gremm: 7 ZA de Langelin, 29150 Edern, providing proof of your identity and a legitimate reason when this is required by law.
The USER must attach proof of identity to his or her request.
To better understand your rights, you can also consult the website of the Commission Nationale de l’Informatique et des Libertés, accessible at the following address: http://cnil.fr.
Article 9. Données de connexion et cookies
H2Gremm uses connection data on its SITE (date, time, Internet address, visitor’s computer protocol, page viewed) and cookies (small files saved on your computer) to identify you, remember your visits, and to benefit from SITE audience measurements and statistics, particularly relating to the pages consulted.
By browsing the SITE, you accept that H2Gremm installs this type of so-called “technical” cookies which have the exclusive purpose of allowing or facilitating electronic communication of your terminal equipment with our site, by facilitating management and navigation on the site. -this.
Our access to information stored in your terminal equipment or the recording of information therein will therefore only be in the following cases:
- Allow or facilitate communication by electronic means;
- When necessary for the provision of our online communication service at your express request.
You can, as for other data, exercise your right of access to this connection data by making a request by email contact@h2gremm.com by paper mail to the address H2Gremm: 7 ZA de Langelin, 29510, attaching imperatively upon request, proof of identity.
If the browser allows it, you can deactivate these cookies at any time, following the procedure indicated by that browser
In addition, H2Gremm informs you that it uses Google Analytics services to measure the audience of its SITE. You can refuse to have your navigation on the SITE tracked via the Google Analytics tool by downloading and installing Google Analytics Opt-out Browser addon for your browser accessible at the following address: http://tools.google.com/dlpage /gaoptout?hl=fr.
In any case, the information stored in your terminal (e.g. cookies) or any other element used to identify you for audience statistics purposes is not kept beyond a period of six (6) months. . Beyond this period, the raw attendance data associated with an identifier is either deleted or anonymized.
Article 10. Social networks
You can click on the icons dedicated to the LINKEDIN and YOUTUBE social networks appearing on the SITE.
As such, the personal information that you have indicated as public and accessible from your LINKEDIN and YOUTUBE profiles will be accessible to H2Gremm, which the USER expressly authorizes.
However, H2Gremm does not create or use any database independent of LINKEDIN and YOUTUBE from the personal information that you may publish there and the H2Gremm Company will not exploit any data relating to your private life through this means.
If you wish to oppose access by H2Gremm to personal information published in the public area of your profiles or your social accounts, you must then use the means made available to you by LINKEDIN and YOUTUBE to limit access to your data.
Article 11. Security
As data controller, the company H2Gremm SAS undertakes to take all necessary precautions, taking into account the nature of your data and the risks presented by our processing, to preserve the security of the data and, in particular, to prevent they are distorted, damaged, or that unauthorized third parties have access to them (physical protection of premises, authentication process for our customers with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain data …).