Privacy policy

The companies of the KERGOLAB CROISSANCE Group, listed in Annex 1 (hereinafter the “KERGOLAB CROISSANCE Group”), attach particular importance to respecting privacy and protecting personal data. They undertake to implement appropriate measures to ensure this protection and to process such data in accordance with the applicable provisions, in particular Regulation (EU) 2016/679 of 27 April 2016 (the “General Data Protection Regulation” or “GDPR”) and Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties.

Data Controller

Your Data are collected by the KERGOLAB CROISSANCE Group acting in the name and on behalf of:

• Company KERGOLAB CROISSANCE
• Company FILAB
• Company COVALSENS

KERGOLAB CROISSANCE is a simplified joint-stock company with share capital of €56 041 043, registered with the Dijon Trade and Companies Register under number 913 597 761, whose registered office is at Ecoparc Dijon Bourgogne, 80 rue Jean-Louis Auguste Petitjean 21850 Saint Apollinaire, FRANCE, acting as Data Controller.

Within the meaning of Article 24 of the General Data Protection Regulation 2016/679 of 27 April 2016, the KERGOLAB CROISSANCE Group acts as Data Controller.

Identification of the data collected, purposes and use of the data processed

As Data Controller, the KERGOLAB CROISSANCE Group may collect, consult, use, modify, store, transmit and erase Personal Data (hereinafter the “Data”) in the course of its commercial and contractual activities.

In accordance with Article 4 of the General Data Protection Regulation 2016/679 of 27 April 2016, the terms “Data” or “Personal Data” mean any information relating to an identified or identifiable natural person (hereinafter the “Data Subject”); an “identifiable natural person” is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to that person's physical, physiological, genetic, mental, economic, cultural or social identity.

These data are mostly collected directly from Data Subjects, particularly when they:

• Request information or a quotation on one of the KERGOLAB CROISSANCE Group's websites;
• Place an order with the KERGOLAB CROISSANCE Group through any other medium;
• Take part in a game or competition;
• Contact Customer Service or an employee of one of the KERGOLAB CROISSANCE Group's websites;
• Write a review/comment visible on one of the KERGOLAB CROISSANCE Group's websites.

As part of the collection activities mentioned above, the KERGOLAB CROISSANCE Group collects the following data:

• Identity data (surname, first name),
• Contact details,
• Billing and payment arrangement data,
• Details of the services subscribed to,
• The history of the contractual relationship,
• A copy of individuals' correspondence with the Customer Relations department,
• Where applicable, responses to surveys and questionnaires and comments/reviews,
• Technical information relating to browsing (e.g. IP address).

To clearly present the processing carried out, the KERGOLAB CROISSANCE Group informs Data Subjects that their data may be processed for the following purposes:

Processing relating to the management of:

• Contracts and customer accounts
• Orders and their delivery
• Billing and debt collection

Processing relating to customer relationship management:

• Managing individuals' reviews of products, services or content,
• Monitoring the customer relationship, for example by conducting satisfaction surveys,
• Selecting customers and users for loyalty initiatives.

Processing relating to direct marketing, in particular:

• Selecting individuals for marketing activities;
• Organising promotional operations of any kind.

Processing relating to complaints management:

• Managing complaints and after-sales service,
• Handling requests to exercise the rights of access, rectification, objection and erasure,
• Managing disputes.

Processing relating to the management of commercial activities:

• Selecting individuals for studies and/or surveys,
• Producing commercial statistics.

The processing carried out by the KERGOLAB CROISSANCE Group is based on:

• Performance of the contract for processing relating to the management of contracts, orders, billing and the relationship with customers/users of the KERGOLAB CROISSANCE Group's services,
• Consent for direct marketing to individuals who are not customers,
• Compliance with a legal obligation, for processing relating to taxation, for example.

Data hosting

The Personal Data collected and processed by the KERGOLAB CROISSANCE Group are hosted in France, on servers providing all the required safeguards in terms of security, integrity and continuity of access.

Recipients of the Data collected

The data collected may also be transmitted to Google Ads in the form of a pseudonymised code.

The data collected may be transmitted to all companies of the KERGOLAB CROISSANCE Group.

The data collected may be processed outside the European Union. In such cases, the KERGOLAB CROISSANCE Group undertakes to make the necessary arrangements with its processors and partners to ensure an adequate level of protection for your data, in full compliance with the applicable regulations.

Data retention period

The data are retained for a period appropriate to the purposes of the processing and in accordance with the legislation and regulations in force.

Customer data are retained throughout the contractual relationship and may be retained after the contractual relationship ends to comply with commercial, accounting or tax obligations, for a maximum period of five (5) years.

• Data relating to prospective customers who are natural persons may be retained for up to five (5) years after the last contact initiated by the prospective customer.
• Data relating to an unsuccessful applicant who applied to companies of the KERGOLAB CROISSANCE Group will be retained by the Human Resources department for two (2) years, or for a shorter period if the applicant requests their erasure;
• Personal data used for the organisation's administrative purposes (for example, managing a potential dispute) or which must be retained to comply with a legal obligation, such as billing data, are retained for ten (10) years from the end of the commercial relationship, in accordance with the French Commercial Code.

Tracking of electronic communications

When sending electronic communications (including newsletters, invitations and technical or commercial information), the KERGOLAB CROISSANCE Group may use tracking technologies, such as a tracking pixel, to measure email opens and certain interactions with those emails.

These data are used to:

• Measure the performance of our communication campaigns;
• Improve the relevance of our content and services;
• Produce anonymised statistics on recipient engagement;
• Where applicable, ensure the deliverability of our electronic communications.

Where required by the applicable regulations, this processing is based on the Data Subject's consent, obtained separately from consent to receive our communications. This consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

The data collected in this context may include information indicating that an email has been opened, the date and time it was opened, and certain technical information relating to the device used (for example, the IP address or type of email software), limited to what is necessary for the purposes pursued.

Data Subjects may withdraw their consent to email-open tracking or object to it at any time, by following the procedures indicated in the electronic communications sent to them or by contacting the KERGOLAB CROISSANCE Group using the contact details provided in this privacy policy.

Exercising your rights

In accordance with the General Data Protection Regulation 2016/679 of 27 April 2016, every individual has the right to access, rectify, erase and port their Personal Data, and the right to restrict and object to the processing of those data.

You can exercise these rights by contacting us at:

• BY POST: KERGOLAB CROISSANCE – Ecoparc Dijon Bourgogne, 80 rue Jean-Louis Auguste Petitjean 21850 Saint Apollinaire, FRANCE

• BY EMAIL: contact@filab.fr

Individuals also have the right to lodge a complaint with the CNIL.

Furthermore, since Act No. 2016-1321 of 7 October 2016, individuals who wish to do so may make arrangements for what happens to their data after their death. For more information on this subject: https://www.cnil.fr/.

The KERGOLAB CROISSANCE Group's cookie management policy

Definitions:

For the sake of simplicity and clarity of this information page, the following terms are defined as follows:

“Cookie(s)”: a text file placed on your hard drive by the server of the Website you visit. It generally contains the name of the server that placed it, an identifier in the form of a unique number and an expiry date. Its purpose is to collect information relating to your browsing in order to offer services suited to your device (computer, mobile phone or tablet).

“Data Controller”: “unless expressly designated by the legislative or regulatory provisions relating to the processing, the person, public authority, department or organisation that determines its purposes and means. In practice and generally, this is the legal entity acting through its legal representative”.

Use of cookies by the KERGOLAB CROISSANCE Group

Functional cookies

Functional cookies are essential to the operation of the KERGOLAB CROISSANCE Group's websites and to users' browsing on those websites. They allow individuals to use the websites' main features and secure their connection.

More specifically, the session cookie used is the CAKEPHP cookie.

These cookies have a very short lifetime, lasting only as long as the session remains active.

Without these cookies, users will not be able to use the websites normally; it is therefore inadvisable to prevent their use or delete them.

Technical performance cookies

Technical performance cookies allow the KERGOLAB CROISSANCE Group to monitor the technical performance of its websites, detect problems in order to minimise inconvenience to Users, enable and support security features, and help detect malicious activity and breaches of these general terms of use.

The lifetime of technical performance cookies is limited to thirteen months.

Refusing or deleting these cookies does not affect browsing on the websites. However, it may limit the KERGOLAB CROISSANCE Group's ability to improve the quality of the services offered to visitors.

Audience measurement cookies

Audience measurement and statistical cookies allow the Data Controller to understand the use and performance of the websites and to compile statistics, traffic volumes and usage data for various elements (content visited, browsing paths, etc.) in order to improve the appeal and usability of the services offered (the pages or sections most frequently viewed, the articles most frequently read, etc.). These cookies are also used to measure website traffic.

For some of these cookies, the IP address, which is the only information linked to identifying visitors to the Websites in this context, is anonymised by removing its last octet.

The lifetime of audience measurement cookies is limited to thirteen months.

Refusing or deleting these cookies does not affect browsing on the websites. However, it may limit the KERGOLAB CROISSANCE Group's ability to improve the quality of the services offered to visitors.

Sharing cookies (social networks)

The KERGOLAB CROISSANCE Group's websites may include social network buttons or modules, such as Linkedin and X, which allow visitors to share content from the KERGOLAB CROISSANCE Group's websites with others or inform third parties of their visit to, or opinion about, content on our website.

When visitors use these sharing buttons, a third-party cookie from the social network is installed. If visitors are logged into the social network while browsing the websites, the sharing buttons allow the content viewed to be linked to their user account.

Visitors are invited to consult these social networks' privacy policies to learn about the purposes, particularly advertising purposes, for which the browsing information collected through these application buttons may be used, and the lifetime of the associated cookies.

ANNEX 1

• Company KERGOLAB CROISSANCE

Registered office: KERGOLAB CROISSANCE

Ecoparc Dijon Bourgogne, 80 rue Jean-Louis Auguste Petitjean 21850 Saint Apollinaire, FRANCE

Tel: 03 80 52 32 05

Simplified joint-stock company (SAS) with share capital of €11 516 500

Siren 851 568 055 – RCS Dijon

Siret 851 568 055 00020

APE code: 6420Z

• Company FILAB

Registered office: FILAB

Ecoparc Dijon Bourgogne, 80 rue Jean-Louis Auguste Petitjean 21850 Saint Apollinaire, FRANCE

Tel: 03 80 52 32 05

Simplified joint-stock company (SAS) with share capital of €135 000

Siren 491 631 891– RCS Dijon

SIRET: 491 631 891 00026

APE code: 7120B

• Company COVALSENS

Registered office: COVALSENS

Ecoparc Dijon Bourgogne, 80 rue Jean-Louis Auguste Petitjean 21850 Saint Apollinaire, FRANCE

Tel: 03 80 52 32 05

Simplified joint-stock company (SAS) with share capital of €50 000

Siren: 830 554 051 – RCS Dijon

Siret: 830 554 051 00011

APE code: 2651B