Updated on 21 April 2021
With this policy, Lagardère Travel Retail SAS (hereinafter, the “Company”) intends to inform users of the “hellofreshbakery.com” website (hereinafter the “Website”) of the policy adopted in terms of the protection of personal data, emphasizing its commitment and attention to protecting the privacy of visitors to the Website.
Please read this privacy policy carefully, which applies to the use of all areas of the Website that may collect your personal data.
Navigation within the Website does not require registration, with the exception of certain areas where the user can freely and expressly provide a set of data concerning him to access specifically identified services (for example, to register under the heading “Contact us”).
Therefore, if the user intends to provide his personal data to access these additional services, he will be expressly informed under Regulation (EU) 679/2016, on the protection of personal data (hereinafter , the “Regulations”) of the purposes and methods of use of data by the Company, as well as the right to request at any time, the deletion or update of its data.
In accordance with, and for the purposes of applying Article 13 of the Rules, the Company provides you with the following information.
1. Identity and contact details of the data controller
The Website is managed by Lagardère Travel Retail SAS whose head office is located at 52 Avenue Hoche 75008 Paris, France, RCS No. 330 814 732, tel +33 (0) 142990700, e-mail contact.foodservice@lagardere-tr.com, as data controller within the meaning of the Regulation.
2. Types of personal data processed
No registration is required to access the Website. However, some sections of the Website require the provision of personal data (for example, to contact us and be contacted).
Each online service collecting personal data is accompanied by information on: the purposes for which these data are requested and the way in which they will be used, the legal basis of the processing, the compulsory or optional nature of the data collection, the recipients of the data, the retention period.
3. Data processing methods and scope of communication
The data will be processed electronically. The Company ensures the lawful and correct processing of personal data provided through the Website, in full compliance with current legislation, as well as the maximum confidentiality of the data provided at the time of registration. The data will not be disclosed and will be processed by the Company staff expressly authorized to manage the Website.
For specific and functional requirements, the Company has appointed a number of service providers related to the management of the Website as external managers for the processing of users’ personal data. A complete list of data processors can be requested by contacting contact.foodservice@lagardere-tr.com.
4. Links to other sites
This information is provided only on the Website and not on other sites that may be consulted by the user via links. The Company cannot be held responsible for personal data provided by users to external subjects or to websites linked to this Website.
5. Cookies
The Website uses “cookie” technology. A cookie, as well as all similar tracking files, are text files that may be saved on your device (computer, tablet, smartphone) when you visit the Website.
Cookies, throughout their period of validity, allow their issuer to recognize your device, track your browsing and collect additional information.
Cookies have a maximum validity period of 13 months. After this period, they are deleted from your device.
Cookies placed on the WebSite allow the Site to function properly and measure the audience on the Website.
You can accept or refuse the deposit of Cookies making it possible to measure the audience of the Website by clicking on the icons “I accept” or “I refuse” on the information banner visible when you first connect to the Website, or by using the means described below.
You can modify your choices regarding the deposit of Cookies at any time.
5-1 Purpose of the cookies used
- Browser cookies
These cookies allow navigation on the WebSite and its proper functioning. These Cookies do not require your prior consent to be placed on your device.
More precisely, these browsing cookies make it possible in particular to adapt the presentation of the WebSite to the display preferences of the device (language used, display resolution, operating system used, etc.), allow the visitor to systematically access to the site via the same host server, to implement security measures, to access the videos.
Disabling browser cookies, for example via the setting of your browser, is likely to disrupt your use of the WebSite and prevent you from benefiting from all of its functionalities. - Statistical Audience measuring cookies
Audience-measuring cookies help to draw up statistics and figures on the visiting and use of the various constituent parts of the Site (sections and content visited, path followed), so that we can improve the interest and ergonomics of the site.
Disabling the deposit of Audience-measuring cookies has no impact on your browsing on the WebSite, but will not allow us to improve our WebSite.
5-2. Choice management
• You consent to the placement of audience measurement cookies:
- by clicking on the “I accept” icon on the information banner visible when you first connect to the WebSite;
- by managing your choices regarding cookies by clicking on the “Learn more and configure cookies” icon.
Your agreement is only valid for a period of thirteen (13) months from the first deposit of Cookies on your device, following the collection of your consent; which means that We will ask You again for Your consent at the end of this period of thirteen (13) months, with regard to the deposit of this type of Cookies
• Google Analytics refusal
The Site uses Google Analytics audience measurement cookies. You can also refuse the deposit of Google Analytics cookies by clicking on the deactivation link below:
Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=fr
• NAVIGATION SOFTWARE CONFIGURATION
You can configure your browser so that Cookies are saved on your device or, on the contrary, that they are rejected, either systematically or according to their issuer. You can also configure your browser so that the acceptance or rejection of Cookies is offered to you from time to time, before a Cookie is likely to be saved on your device.https://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies,
- For Safari ™:
https://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html - For Chrome ™:
https://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 - For Firefox ™:
https://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies - For Opera ™:
https://help.opera.com/Windows/10.20/fr/cookies.html
To find out about the options offered by your browser software and the methods of Cookies stored in your terminal, depending on the browser (s) installed in your terminal, the Company also invites you to consult the “Your tracks” section of the website. the CNIL (National Commission for Information Technology and Freedoms):
https://www.cnil.fr/vos-libertes/vos-traces/les-cookies/
6. Place of processing and transfer of data outside the European Union
The processing operations connected to the services provided by the WebSite are carried out at the Company’s registered office, in Paris.
The authorized staff of the Company and other companies of the Lagardère Travel Retail Group shall have access to the personal data collected, solely in the context of the use of the Services or based on the User’s consent.
The data collected and processed through the WebSite will be transferred to countries outside the European Union, such as the USA, within the limits of the use of third-party cookies. In this regard, please refer to the Cookie Policy.
7. Period of storage
Your data will be processed at the times specified in the specific information provided at the time of collection (for example, for the use of the contact service). Your data, collected via the “Contact us” section of the Site, will be processed for the time necessary to properly manage your request, then deleted.
8. Rights of the User and exercise of rights
In accordance with the applicable Regulations, you have the following rights:
– Right of access and rectification: you have the right to access your personal data, as well as to rectify, update when they are inaccurate or incomplete.
– Erasure. You can also request the erasure of personal data concerning you as soon as their retention by the Company is no longer necessary.
– Object. You can also object to the processing of your personal data or request its limitation, (except, if need be, when the processing is necessary for the execution of one’s order or the management of one’s account).
– Withdrawal of the consent. When the processing of your personal data is based on your consent, you can withdraw this consent at any time without this affecting the legality of the processing based on your consent and implemented before the withdrawal of your consent.
– Portability. You can also exercise your right to portability (i.e. obtain them in a structured computer-readable form) regarding the personal data concerning you that you have provided to us directly on the basis of consent or a contract concluded with you and which are subject to automated processing.
– Guidelines. You can also tell us about your guidelines for the retention, erasure and disclosure of your personal data after your death and change these guidelines at any time.
The User has the right to register on the ‘bloctel’ list to object to the use of cold calling http://www.bloctel.gouv.fr/.
The User may make a claim with the CNIL, following the process set out on its site (https://www.cnil.fr) or with the data protection authority of the Country in which the User habitually lives, works, or where the alleged violation of his/her personal data took place.
For any information or exercise of rights, you can send a request:
– by using this form
– by post: Lagardere Travel Retail, Communication Department, 52 avenue Hoche, 75008 Paris-France
– by email: contact.foodservice@lagardere-tr.com
9. Data security
The Company has put in place appropriate organizational, technical and administrative measures to protect your personal data against any destruction, loss, alteration or unauthorized disclosure.
The Company strives to protect your personal data by taking into account the sensitivity of the information involved and the potential risks induced by a data breach. The Company implements all useful means to guarantee the confidentiality, integrity, availability and resilience of your data, ensures that your data is stored in information systems offering an appropriate level of security, including access is protected, restricted and recorded, we enter into strict confidentiality agreements with all persons involved in the processing of data on our behalf.
10. Who to contact to file a complaint
We remind you that if you think that your processing violates the provisions of the Regulation, you can always file a complaint with the National Commission for Informatics and Freedoms (www.cnil.fr) or, where the alleged violation occurs. is produced.
11. The data protection officer
The data protection officer appointed by the Company, in accordance with Article 37 of the Regulations, can be contacted at the e-mail address: donneesperso@lagardere-tr.com
12. Applicable law
This privacy policy is governed by the Regulation which guarantees that the processing of personal data is carried out with respect for fundamental rights and freedoms, as well as the dignity of the person concerned, in particular with regard to confidentiality, identity and the right to personal data protection.
13. Review clause
The Company reserves the right to revise, modify or simply update, at its sole discretion, in any way and / or at any time, without notice, all or part of this privacy policy, also taking into account take into account changes in applicable law or the Regulations. Changes and updates to the privacy policy will be notified to users through a publication on the home page of the Site. They will be mandatory as soon as they are published and communicated. We therefore ask you to periodically review this section to verify the publication of the most recent privacy policy.
The full text of the Regulation is available here: https://eur-lex.europa.eu/legal-content/FR/TXT/?uri=CELEX%3A32016R0679