INTRODUCTION :

In accordance with regulation (EU) 2016/679 of 27 April 2016 (known as the “GDPR”) and Law No. 78-17 of 6 January 1978, as amended (known as the “Loi informatique et libertés”), personal data must be processed lawfully, fairly and transparently. The purpose of this Privacy Policy is to provide you with simple, clear and complete information on how we process and use the personal information that you provide to us and that allows us to identify you.

WHO IS RESPONSIBLE FOR PROCESSING ?

The publisher is responsible for processing the data it collects in connection with your use of the services provided.

DEFINITION :
Personal data : any information relating to an identified or identifiable natural person.
Processing of personal data : any operation or set of operations relating to personal data, regardless of the procedure used (collection, recording, organisation, storage, adaptation, modification, extraction, consultation, use, communication by transmission or dissemination or any other form of making available, comparison). The publisher: the natural or legal person who publishes the online public communication services (Mr Pierre-Olivier Veynat – Transports Veynat – 62 avenue de Branne – 33370 TRESSES).
The site: all the sites, web pages and online services offered by the publisher. The User: the person who uses the site and services.

Article 1 – Scope of application

This privacy policy describes how the publisher uses any personal data that psers may provide to it.
The publisher undertakes to ensure the highest level of protection for the personal data of its Users, in accordance with European and French regulations.

Article 2 – Type of information collected

We may collect information about you when you browse the Site or in the course of providing our services. This information may be provided directly by you or collected automatically.
Data that the user may communicate to us:
As a user of the Site, you may voluntarily provide us with information that we request from you; some of the information collected may identify you (“Personal Information”).
Depending on the services you use, we may collect:
● Your title,
●Your surname, first name,
●Your telephone number,
●Your email address,
●Your postal address,
●Your login and password.

The publisher does not collect your payment details. All your bank details are only collected by our PCI-DSS certified payment service providers, which ensures payment security.
We do not collect sensitive information as defined in Article 9 of the RGPD, which describes what constitutes “special categories of data” within the meaning of the Regulation (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health, sexual orientation).
If you connect to our site through your social network, the said service may transmit to us your profile and connection information, as well as any other information you have authorised to be disclosed.
Information collected automatically:
●We collect certain information automatically when you browse our site.
●Automatically collected information includes:
●The IP address of your computer;
●Information about your computer, your connection type, your operating system
●Operating system of your tablet or mobile phone
●The URL address of your connections, including the date and time, and the content you access on the sites.
●Your activity on the site;

Article 3 – Purposes of the collection of personal data

3-1. Management of relations with interested parties:

Purposes:
● to manage technical prospecting activities,
● selecting individuals for customer loyalty, canvassing, surveys, product testing and promotions
product testing and promotions (provided that these activities do not result in the creation of profiles that are likely to reveal sensitive data),
● to conduct canvassing activities.

3-2. Customer Relationship Management

Purpose: to carry out operations relating to customer management concerning
● Establishing contact
● monitoring customer relations in order to carry out satisfaction surveys, manage after-sales services and complaints
● Carrying out surveys and product tests,

3-3. Compilation of commercial statistics and use of Matomo.

● The consent of the user / data subject is required.

Article 4 – What communications I am likely to receive

● Order tracking emails
● Newsletters / commercial offers
Following an order or as part of the monitoring of a contract, you will receive an email to enable you to monitor your order. Receipt of this information is not linked to any choice you may have made about receiving newsletters and commercial offers.
You will receive newsletters from us to inform you of news, current or future commercial offers, etc. if you have given us your free, informed, unambiguous and specific consent.

Article 5 – Our commitments regarding the protection of your personal data.

The publisher undertakes to process your personal data in accordance with the regulations and, in this respect, undertakes to
● Collect your personal data only for the purposes specified in article 3 and for which you have given your consent;
● Maintain the security, integrity and confidentiality of personal data once collected or recorded;
● Not to disclose your personal data to third parties of any kind, with the exception of third parties to whom it is strictly necessary to disclose personal data in order to provide the services described in Article 6;
● Not to transfer personal data outside the territory of the European Union, except to a subcontractor authorised by the customer and signatory to the standard contractual clauses issued by the European authorities (e.g. carrier);
● Establish a data security system;
● Notify you immediately of any breach, loss or unauthorised disclosure of personal data.
of personal data.

Article 6 – Recipients of your personal data

Your personal data will only be used by identified and authorised persons for the purposes described in this privacy policy.
The publisher undertakes never to communicate your personal data to third parties for reasons unrelated to these purposes.
Your information will therefore only be disclosed to the categories of persons listed below:
● Our subcontractors:
● Administrative and judicial authorities:
● Within the Group:
● The data we collect is accessible to our sub-contracted service providers who contribute administratively and technically to the achievement of the above-mentioned purposes (carriers, site hosting providers, payment providers, advertising technology…); the sub-contracted service providers are subject to the same obligations as the Publisher.
In order to comply with our legal obligations, your personal data may also be communicated to the competent administrative and judicial authorities, but only if required to do so by a court of law.
Certain personal data that we collect from you may be shared with other companies in the Group for the purposes of customer research and knowledge, as well as for commercial canvassing. And with the consent of the users in the case of B2C (to be assessed on a case by case basis).
If your personal data is communicated to a third party, the confidentiality conditions of the third party will apply.

Article 7 – Shelf life

● Retention of technical data :
The technical data will be kept for the time strictly necessary to achieve the above-mentioned purposes (retention period: 12 months).
● Retention period for personal data :
Your personal data will be kept for the time necessary to support you in our mission and for the purposes mentioned above (retention period: 12 months).
For security reasons, if you have not authenticated yourself on the site for a period of three years, you will receive an email requesting that you log in as soon as possible, otherwise your data will be deleted from our databases.

Article 8 – Your rights

In accordance with the regulations on personal data, you have the following rights with regard to your personal data :
● Right of access :

You have the right to obtain confirmation as to whether or not your data are being processed and, if so, to access them;

● Right of rectification :

You have the right to have your inaccurate data corrected as soon as possible and your incomplete data completed.

● Right to erasure :

You have the right to have your data erased as soon as possible, subject to our legal obligations to retain data.

● Right to restriction :

You have the right to obtain the restriction of processing if you object to it, if you dispute the accuracy of your data, if you consider that its processing is unlawful, or if you need it for the purpose of establishing, exercising or defending your legal rights.

● Right to object:

You have the right to object at any time to the processing of your data by the publisher, except for legitimate and compelling reasons. You may also object to processing for prospecting purposes.

● Right to portability:

You have the right to receive your data in a structured, commonly used, machine-readable and interoperable format and to transmit it to another controller without us interfering with it.

● Right not to be the subject of an automated processing decision:

You have the right not to be subject to a decision based exclusively on automated processing that produces legal effects concerning or affecting you, except where that decision is necessary for the conclusion or performance of a contract or is legally authorized.

● Right to instructions in the event of death:

You have the right to give instructions regarding the fate of your personal data in the event of your death.

● How to contact us:
In accordance with the regulations on the protection of personal data, you can exercise your rights and give your instructions on the fate of your “post mortem” personal data by writing to us by e-mail (contact-site@veynat.fr) or by post (Transport Veynat – 62 avenue de Branne – 33370 TRESSES).
To enable us to respond to your request, it is essential that you provide us with your surname, first name and e-mail address. For some requests, identification may be requested if the data controller has doubts about the identity of the person requesting the exercise of rights.
You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) (https://www.cnil.fr/plaintes and the following address
CNIL – Complaints Service – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

Article 9 – Security of your information

We invest a great deal of time and resources in implementing appropriate and effective security measures for our systems and our customers’ personal information. In the event of a breach of our systems, we will promptly notify the relevant authorities and ensure that our customers are notified.
Our safeguards include firewalls, physical access controls to our data centres and authorisation controls for access to information.

Article 10 – Updating the privacy policy

If we change this privacy policy, we will post the revised version on the Site with an updated revision date. We also invite you to consult it regularly.
Last update: 24/06/22