​

The Moulin à Grain soap factory pays attention to your personal data, which is very important personal data. This document aims to inform our customers about the data collected with our website savonneriedumoulinagrain.fr.

  We are committed to taking the greatest care of it by  explaining to you in a transparent way, how we collect and use them.

What is personal data?

A personal data or DCP corresponds in French law to any information relating to a natural person identified or who can be identified, directly or indirectly, by reference to an identification number or to one or more elements which are specific to him.

Processing of personal data?

The word "processing" means any operation, or set of operations, relating to personal data, regardless of the process used (collection, recording, organization, storage, modification, consultation, use, communication, reconciliation or interconnection, blocking, deletion or destruction…)

We are committed to respecting your privacy by keeping your confidentiality and securing your personal data while remaining in control of your own personal data.

Collection of data ?

All your personal data is collected on our website,  during the purchase process or when making an appointment for the workshop.

Don't worry, a confirmation email will be sent to you in case of non-consent. A subscription link will be linked to you with the right of withdrawal, deletion, opposition.

Your data is secretly stored and secured within our company where only the staff of the soap factory  have access.

For what purpose do we collect your personal data?

We collect your personal data for the purpose of:

​

- management and monitoring

quotes, orders, deliveries and invoices

legal: processing is necessary for the performance of a contract.

​

- Respond to any information requested

about our products, workshops, deliveries or even about the company.

Legal: your consent

- Propose commercial offers

Legal: your consent

- Respond to your requests regarding the exercise of "Informatique & Libertés" rights

Legal: Legal obligation (GDPR and Data Protection Act)

What personal data is collected?

The data we collect

are the following :

-Civility               -Last name First Name

- Mail address         - Phone

-Delivery address   - Billing address

What are your rights ?

In accordance with the Data Protection Act and the GDPR, you have the following rights:

- Right of access (Article 16 GDPR), rectification (Article 16 GDPR), updating, completeness of your data

-Right to block or erase your personal data (Article 17 GDPR), when they are inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or conversation is prohibited

- Right to withdraw your consent at any time (Article 13-2c GDPR)

-Right to limit the processing of your data (Article 18 GDPR)

- Right to object to the processing of your data (Article 21 GDPR)

- Right to portability of the data you have provided to us, when your data is subject to automated processing based on your consent or on a contract (Article 20 GDPR)

- Right to define the fate of your data after your death and to choose whether or not we communicate your data to a third party that you have previously designated

These rights can be exercised by a simple request by e-mail to the following address: lesportesouvertes@gmail.com.