PRIVACY POLICY AND DATA PROTECTION

Following the entry into force of the European GDPR legislation, GROUPE VOLTAIRE SAS provides transparent information on the use of personal data processed (under articles 12,13 and 14 of the GDPR legislation).

​

​

DATA FROM THE CREATION OF AN ACCOUNT ON ONLINE STORE, (IN PARTICULAR VOLTAIRE-DESIGN, FORESTIER, REBELLE SELLIER, STELLA) AND PROSPECT INFORMATION REQUESTS

Data controller: Groupe Voltaire SAS

​

Purposes: 

• Account creation and management

• Pre-contractual relationship management

​

Processed data: Civility, First name, Last name, Password, Date of birth, eventual consent, eventual information requests

​

Intended recipients and possible origins: Only the marketing team is authorized to have access to the data communicated or recorded. 

​

Retention periods: The maximum retention period for data is set at 2 years after account inactivity or prospect relationship. 

​

Legal basis: The legal basis for the use and processing of personal data is based on the execution of pre-contractual measures or, failing that, the consent of the relevant interlocutors.

​

​

ORDER DATA, INCLUDING VOLTAIRE-DESIGN, FORESTIER, REBELLE SELLIER, STELLA ONLINE STORES, INVOICE AND CUSTOMER SERVICE DATA - Data from social media contest winners

Data controller: Groupe Voltaire SAS

​

Purposes: 

• Customer relationship management

• Order management

• Transaction and billing management

• Customer service management

• Delivery management

• Billing and customer support management

• Associated statics management

• Discount management

​

Processed data: Identity, contact information, ordered products, order status, possible transaction summary, shipping address, delivery status

​

Intended recipients and possible origins: Only the management in case of a problem, the customer service department, the accounting department, the marketing department, and the shipping department are authorized to have access to the necessary data. 

​

Retention periods: 6 years after an order (billed or free), only accounting records are kept in the archive. Accounting records with personal data that are more than 10 years old are not kept. 

​

Legal basis: The legal basis for the use and processing of personal data is based on the execution of the commercial relationship or, failing that, our legitimate interests of a commercial nature. 

​

​

DATA FOR VOLTAIRE-DESIGN, FORESTIER, REBELLE SELLIER AND STELLA AMBASSADORS WHO CAN ORDER FOR FREE

Data controller: Groupe Voltaire SAS

​

Purposes: 

• Partner Relationship Management

• Order Management and Discounts

​

Processed data: Identities, contact details, signed partnership contract, scoring of the rider's potential, start and end of the contract, "prestashop ID", budget amount

​

Intended recipients and possible origins: Only the management in case of a problem, the customer service department, the accounting department, and the marketing department are authorized to have the necessary data. 

​

Retention periods: 2 years after the end of the contractual activity

​

Legal basis: The legal basis for the use and processing of personal data is based on the execution of the contractor or, failing that, our legitimate interests of a commercial nature.

​

​

DATA FOR NEWSLETTERS AND EVENT INVITATIONS

Our clients, consenting subscribers, and professional contacts (suppliers, institutions, partners, etc.) may receive our informative or commercial communications via email, phone, or mail. In this context, our company, which is the data controller, may establish a newsletter or guest list system. You can inform us at dpo@groupe-voltaire.com if you no longer wish to receive our communications or click on the dedicated buttons. The purpose of this recording, which contains personal data (name, first name, address, job title, phone, email, etc.), is the dissemination of news or commercial offers, as well as the organizational and promotional management of events. Only the marketing team and management, in case of issues, are authorized to access the provided or recorded data. We would like to point out that, in rare cases, we may enrich our invitation data to external event organization companies. The retention period for personal data is set at 3 years after the relationship with guests or subscribers becomes inactive (subject to technical geasibility). The legal basis for the use and processing of personal data relies on the consent of the concerned parties or our legitimate interest as a company or the legitimate interest of the concerned person. 

​

​

DATA FOR POTENTIAL OR REFERENCE SUPPLIERS

The identities of the contacts at our referenced or potential suppliers, all documents or data provided to become a supplier, as well as the financial records of our suppliers, are collected by Groupe VOLTAIRE, which is the data controller, for the purpose of managing the suppliers relationship and accounting. Only the Management, the personnel responsible for the procurement and supplier-related projects, as well as the accounting and quality control departments, are authorized to access the recorded or provided data. The maximum retention period for data is set at 3 years for potential suppliers, 5 years after the last purchase for active suppliers, and 10 years for financial records. The legal basis for the use and processing of your personal data is based on the consent of the concerned contacts or, in the absence of consent, our legitimate interest as a buyer, or in the absence of both, the executive of a purchase contract. We would like to note that, in rare cases, we may enrich our active or potential supplier data with publicly available information. 

​

​

DIRECTORY AND PARTNER CONTACT LIST

A partner contact list system (potential or active) has been established by GROUPE VOLTAIRE, which is the data controller. The purpose of this record, which contains personnal data (name, first name, job title, phone, email, etc.), is the management of the partner relationship. Only the Management and the relevant staff are authorized to access the communicated or recorded data. We inform our partners that we may enhance our data with publicly available information. The retention period for personal data is determined by the end of the operational need. The legal basis for the use and processing of personal data relies on the consent of the concerned contacts or on our legitimate interest as a company. 

​

​

APPLICATION FOR A JOB REQUEST FOR AN INTERNSHIP

Data controller: Groupe Voltaire SAS

​

Purposes: 

• Evaluate the suitability of the candidate for a possible position to be filled

• Feed our resume database

• Organize interviews

​

Processed data: Resume, possible cover letter, as well as all other documents or data provided (by yourself or your former employers) during a job application

​

Intended recipients and possible origins:

Only the Management, the recruitment department, and the managers involved in the recruitment process can access the communicated or recorded data. 

We would like to inform you that we may transfer data to partner organizations, including schools, institutions, and subsidiaries (sometimes outside the EU with specific consent).

We would like to inform you that we may enrich our candidate data with publicly available information, job boards, or partners. 

​

Retention periods: The maximum data retention period is set at 2 years after the candidate's relationship becomes inactive. 

​

Legal basis: The legal basis for the use and processing of your personal data is based on the execution of pre-contractual measures, or in the absence of that, the consent of the individuals concerned, or in the absence of both, our legitimate interest as a recruiter, or in the absence of that, the legitimate interest of the candidate. 

​

​

SECURE COMPUTER ARCHITECTURE

Our data is securely hosted on our premises or in certified ISO27001 external data centers located in the European Union, including Google Workplace, Google Cloud, OVH, and AWS. However, we would like to note the possible use of American clouds, including Google Firebase, which can transfer data outside the EU securely under framework of CTT (Contractual Clauses) or BCR (Binding Corporate Rules) as well as Privacy Framework. 

​

​

YOUR RIGHTS

We would like to inform you that information about our contacts of all types (clients, suppliers, partners,etc.) may be transferred to dispute resolution or control partners: external lawyers, accounting and HR firms, institutions, parent companies, etc. In accordance with European laws and the law of January 6, 1978 (relating to data processing, files, and freedoms), you have the rights to access, rectify, limit, port, and delete your personal data, as well as the right to object to their processing for legitimate reasons. You can exercise all of these rights via email at the address dpo@groupe-voltaire.com or by postal mail addressed to Service DPO, Groupe Voltaire - SAS - Technopôle Izarbel, 231 allée Fauste d'Elhuyar, 64210 Bidart. Furthermore, you have the right to withdraw your consent at any time and to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), notably through its website https://cnil.fr/en.