2.1. Collection

We collect and record personal data to carry out the following processing:

• Contract performance
  • Managing orders, delivery, invoicing, payment, customer services, order queries, returns and refunds; Sharing data with commercial partners supporting our operations (e.g. parcel couriers)
• With your consent
  • Personalizing our websites and applications to customers; Sending targeted marketing promotions in particular by email, or other websites or via other media as technology develops.
    Sharing data with commercial partner so that they can market their products and services to you.
• Vertbaudet legitimate interests
  • Detecting, investigating, reporting and seeking to prevent financial crime (e.g. fraud during payment processing for orders placed)
    Statistics, analytics, selection and segmentation of customers to improve knowledge of customers, Running competitions (e.g. prize draws)

When you visit our website, we may request information by means of questionnaires, forms and notably when you create your customer account.
Marked by an asterisk, the requested data are requested in order for Vertbaudet to deliver the products and/or services and to process your requests. If you do not provide the mandatory information, Vertbaudet will not be able to respond to your requests.
Intended to help us learn more about you, any other information is optional. You are not required to respond.

2.2. Data processors

The collected information is aimed at Vertbaudet as data controller.
However, they may be conveyed to third parties (the processors) linked to Vertbaudet by contract for the purposes of subcontracted tasks required for the management of your account, your orders, products delivery, anti-fraud services, payments, customer services or collection of customer reviews.

The processor shall undertake to:

1. process the data solely for the purpose(s) subject tosub-contracting
2. process the data in accordance with the documented instructions from VERTBAUDET
3. guarantee the confidentiality of personal data processed under this agreement
4. ensure that the persons authorized to process the personal data
   • have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality
   • receive the appropriate personal data protection training
5. take into consideration, in terms of its tools, products, applications or services, the principles of data protection by design and by default

2.3. Data communication

Only specifically authorized VERTBAUDET staff are legitimate to implement processing your personal data. Unless you opposed this when submitting, your data can be communicated to the commercial partners of VERTBAUDET or can be conveyed to other companies in the Cyrillus-Vertbaudet Group, that may send commercial offers to you by post (we do not communicate land phone number). They will be able to send you their offers by e-mail if you explicitly accepted this when creating your customer account.

2.4. Hosting of your personal data

Vertbaudet is present across different countries but your personal data is only stored on secure servers located in France.

However, to operate certain services, VERTBAUDET may have to send your data through servers that may be located around the world or gives access to personal data to service providers located abroad.

VERTBAUDET will then take appropriate measures to maintain the security of personal information during the transfer and upon receipt of such information. Processors and service providers will be bound by contract with VERTBAUDET, which will incorporate standard contractual clauses (as published by the European Commission). For the United States, the subcontractor must be on the Privacy Shield list. VERTBAUDET also requires its process and service providers to guarantee a level of security, confidentiality and sufficient protection of privacy and fundamental rights

2.5. How long are the data kept?

VERTBAUDET has set the retention period of your personal data to 5 years from:

• For prospects (who have never made a purchase from VERTBAUDET and its partners), the date of the last contact with our brand
• For customers (who have already made a purchase), the date of the last purchase

However, for certain types of processing, the retention of data is subject to specific retention periods (for example, the recording of telephone conversations in the customer service department is kept for a period of 6 days, the invoices related to purchases are kept 10 years, etc.).

3.1. Fraud prevention

To ensure the security of payments in transactions on the website, and to prevent fraud and protect consumers in the context of distance selling, Vertbaudet has implemented the necessary measures to fight against fraud and can be required to proceed with treatment automated some of your personal data, whose purpose is to control, or have it checked by subcontractors, the orders placed on the website to verify the regularity of information communicated to him at thereof.

Therefore, if an order does not present all the necessary guarantees to ensure a consistent and secure payment, Vertbaudet reserves the right to cancel the order or ask for additional information and documents to validate the order.

3.2. Payment security

We are committed to ensuring the security of personal data via strict procedures in our company.

For data collected on our websites, we use SSL (Secure Socket Layer) which guarantees a high level of protection. Thus, on this site, transactions and online payments are fully secure.

In order to ensure the security of payments, Vertbaudet uses the services of PCI-DSS certified providers. This standard is an international safety standard which aims to ensure the confidentiality and integrity of data of cardholders, and so secure the protection of card and transaction data.

When you set an order by credit card, our order entry system logs in real time with the system of our payment providers, which collect data and carry out the various checks to prevent abuse and fraud. Data is stored on the servers of these payment providers and are not at any time transmitted to the servers of Vertbaudet.

So when you provide your credit card number, authorization searches are automatically transmitted in encrypted mode. Permissions and data are then checked with your bank to prevent abuse and fraud.

When paying, you have the option to save the details of your payment card to facilitate future purchases on the website. This information is well recorded and secure with our partners submitted to the security standard called "PCI-DSS" (Payment Card Industry Data Security Standard). You can view the list of your saved credit cards (in hidden mode), but also remove all or part of its content.

In order to debit the account when billing or crediting following a return, our payment providers keep banking data related to the authorization number, the time required for the completion of the transaction and the treatment of any claims (returns, disputes).

4.1. General overview

VERTBAUDET will send to your attention commercial offers

• by email, sms, mms if you have accepted it and
• by post or by phone, if you have not opt out when collecting your data,
• but also by banners on partner sites ( via the installation of cookies, as explained below), etc.

In addition, if you place an order and have not previously expressed your wish not to receive marketing prospection, we can nevertheless use your email to send you commercial offers for products similar to those ordered.

For any marketing emails, the sender VERTBAUDET will be clearly identified and the nature of the commercial proposal will be indicated in the subject of the message. At the end of each message, you will have the opportunity to unsubscribe from our prospecting emails with a mere click.

Finally, by giving us your phone number, you agree to be contacted for any need relating to your order but also for commercial proposals by phone. You can oppose telephone soliciting of companies you are not a customer by registering on www.bloctel.gouv.fr.

As part of the monitoring of the quality and training of our customer service department, some phone calls (incoming and outgoing) are likely to be listened to and/or recorded.

4.2. Banners on partner sites

Thanks to the installation of advertising cookies, we can share information with advertisers on other websites to offer you relevant advertising and in line with your interests.

Our website uses computer applications created by third parties,that allow the web surfer to share our website’s content with other persons or to provide these other persons with their opinions regarding some of our site’s content. This is notably the case of the “Share” and “Like” buttons used by social networks such as Facebook, “Google+”, “Twitter”, etc.

When the customer visits a website page containing such a button, the web browser establishes a direct connection with the social network's servers. If the customer is connected to the social network while browsing, the application buttons can be used to link the visited pages to his or her user account.

If the customer interacts by means of plug-ins, for example by clicking on the “Like” button for leaving a comment, the corresponding information will be sent to the social network and published via his/her account.

If the customer does not want the social network to link the information connected via Vertbaudet to his/her user account, s/he must disconnect from the social network before visiting the Vertbaudet website.

Please consult the privacy protection policies of these social networks in order to review the intended usage, notably for advertising purposes, of the browsing information that they collect by means of these application buttons.

Under the EU General Data Protection Regulation (GDPR), you have a right of access, a right of rectification, a right to object to the processing or to ask the stop using your data, a right to limit processing a right to object to profiling and a right to portability.

To exercise this right, please contact us as follow:

• Proceed directly to the update of your personal data and preferences in "My Account" section of our website
• Contact us via the dedicated form by clicking on this link «Contact us», section «My personal data»
• Unsubscribe from commercial offers sent by email by clicking on the unsubscribe link at the bottom of each email sent,
• Unsubscribe from commercial offers sent by SMS answering answer "STOP" on a non-premium number
• Determine your preferences for Cookies as described above
• Contact the data protection officer at the following address: dpo@vertbaudet.com
• Write to us at the following postal address VERTBAUDET - Customer Relations - 36 Av. Alfred Lefrançois - 59200 Tourcoing

We may require proof of identity before fulfilling any request. Please remember to include your contact details (surname, first name, address, customer n°…) so that we can take the necessary steps as quickly as possible.

In the event of a request for the deletion of your Data, we will however be able to keep it in our archives for the time necessary to fulfill our legal, accounting and tax obligations.

For more information about exercising your rights

• the UK, the ICO: www.ico.org.uk
• In France, the CNIL: www.cnil.fr
• In Spain, the AEPD: www.agpd.es/
• In Portugal, the CNPD: www.cnpd.pt/index.asp
• In Belgium, the CPVP: www.privacycommission.be/fr
• In Switzerland, the PFPDT: www.edoeb.admin.ch/edoeb/de/home.html