PRIVACY POLICY

PreambleArticle 1. Definitions​Article 2. Identity of the Data Controller​Article 3. Data Collection and Processing​Article 4. Purposes of Processing​Article 5. ConsentArticle 6. Data Recipients​Article 7. Data Retention​Article 8. Your Rights​Article 9. Cookies and Connection Data​Article 10. Social Networks​Article 11. Security​

Preamble

This Privacy Policy is addressed to you as a user of the website www.h2gremm.fr (hereinafter referred to as “the SITE”) and aims to inform you about how your personal information may be collected and processed by H2Gremm SAS, a simplified joint-stock company registered with the Quimper Trade and Companies Register under number 852 892 645, with its registered office located at 7 ZA de Langelin, 29510 Edern – 29510 Edern.

Respect for your privacy and personal data is a priority for H2Gremm, which undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of April 27, 2016 on the protection of personal data.

H2Gremm commits in all cases to respecting the following two (2) essential principles:

  • You remain in control of your personal data;
  • Your data is processed in a transparent, confidential, and secure manner.

Article 1. Definitions

  • SITE: refers to the website accessible at www.h2gremm.com; the SITE includes all web pages, services, and features offered to you as a USER or CUSTOMER via H2Gremm.
  • USER: refers to any person accessing and browsing the SITE as an internet user.

Article 2. Identity of the Data Controller

The data controller responsible for the personal data processed in connection with the operation of the SITE is the company H2Gremm.Le responsable de traitement des données à caractère personnel mis en œuvre dans le cadre de l’exploitation du SITE est la société H2Gremm.

Article 3. Data Collection and Processing

As part of operating the SITE, H2Gremm may collect personal data relating to SITE USERS. This data is processed in accordance with the purposes defined at the time of collection.

In particular, H2Gremm may collect personal data:

  • When you visit the SITE;
  • When you use features and/or services offered on the SITE;
  • When you communicate with H2Gremm via the SITE;
  • When you request contact from H2Gremm.

Regardless of the collection method, H2Gremm undertakes to inform you of: the purposes of processing, whether responses are mandatory or optional, the possible consequences of failing to respond, the recipients of the data, the existence and procedures for exercising your rights of access, rectification, and objection.

Where required under Regulation (EU) 2016/679, H2Gremm undertakes, as applicable, to obtain your consent and/or allow you to object to the use of your data for certain purposes.

The data that may be collected and processed includes:

  • Identification data (surname, first name, postal address, telephone number, email address, date of birth, nationality, language, and where applicable, a copy of an identity document for legal purposes);
  • Connection data (IP addresses, login logs);
  • Data related to customer selection for loyalty actions, prospecting, surveys, product testing, and promotions;
  • Data related to user contributions such as product reviews, including pseudonyms.

Article 4. Purposes of Processing

The data collected through the use of the SITE is processed for the purposes described in the table below.

Current regulations protect users’ privacy and require all data controllers to justify a lawful basis for processing personal data. The regulation provides, among others, the following legal bases for processing:

  • The performance of a contract between the CUSTOMER and H2Gremm. Certain personal data of the CUSTOMER is therefore necessary, in particular, to deliver orders and manage the ACCOUNT;
  • The prior consent of the data subject;
  • The legitimate interest of the data controller, while respecting the rights and freedoms of USERS. For example, improving customer experience or preventing fraud may justify data collection.


Purposes of Processing

Legal Basis

Statistical operations, analysis, selection, and segmentation of CUSTOMERS in order to improve customer knowledge

Legitimate interest of H2Gremm

Provision of social media sharing tools

CUSTOMER consent

Sharing information with commercial partners

Performance of the contract concluded between the CUSTOMER and H2Gremm and CUSTOMER consent (for marketing and prospecting purposes)

Article 5. Consent

When browsing the SITE, you provide personal data through various forms in order to access H2Gremm services.

By voluntarily providing your personal data, you expressly consent to its collection and processing by H2Gremm for the purposes communicated to you.

Article 6. Data Recipients

Only the following may access USER data:

Management and staff from sales, marketing, administrative, logistics, and IT departments of H2Gremm responsible for customer relations, order processing, and support.

Your data is not shared, sold, exchanged, or rented to any other parties.

Article 7. Data Retention

H2Gremm retains personal data only for the time necessary for the purposes for which it was collected.

Cookies and audience measurement data are retained for a maximum of thirteen (13) months, after which they are deleted or anonymised.

Article 8. Your Rights

In accordance with Articles 14 to 22 of Regulation (EU) 2016/679, you have the right to:

  • Access, correct, and delete your data;
  • Object to processing;
  • Data portability;
  • Define instructions regarding the storage, deletion, and communication of your data after death.

In case of a personal data breach likely to result in high risk, H2Gremm will inform affected users promptly.

You may exercise your rights by contacting: Email: contact@h2gremm.com Postal address: H2Gremm, 7 ZA de Langelin, 29150 Edern

Identity verification is required.

More information: http://cnil.fr

Article 9. Cookies and Connection Data

The SITE uses connection data (date, time, IP address, browsing data) and cookies to identify users, remember browsing activity, and perform audience measurement.

By browsing the SITE, you accept the use of technical cookies necessary for site operation.

Cookies are used only to:

  • Facilitate electronic communication;
  • Provide online services requested by the user.

You may disable cookies via your browser settings. contact@h2gremm.com par courrier papier à l’adresse H2Gremm : 7 ZA de Langelin, 29510

​

EH2Gremm also uses Google Analytics to measure site traffic. You can opt out via: http://tools.google.com/dlpage/gaoptout?hl=fr

Cookies are retained for up to six (6) months for analytics purposes before being deleted or anonymised.

Article 10. Social Networks

The SITE may include links to LinkedIn and YouTube.

Information publicly available on your LinkedIn and YouTube profiles may be accessed by H2Gremm, which you expressly authorize.

However, H2Gremm does not create independent databases from these platforms nor process private data from them.

You can restrict access via your social network privacy settings.

Article 11. Security

H2Gremm implements appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized access, or disclosure, including: Physical security of premises; Authentication systems with secure login credentials; Connection logging; Encryption of certain data.