At KABIOCA we value the protection of the personal data of our customers, but also of our employees and service providers. We are committed to complying with European and French legislation.
We may collect and process your personal data in order to fulfil our contractual obligations and our legitimate interests in developing and maintaining customer loyalty. The sending of newsletters is subject to your consent.
What is personal data?
Personal data is information that allows you to be identified, either directly or indirectly. This may include your name, surname, telephone number or e-mail address.
What are our personal data practices?
We collect your personal data in a fair, lawful and transparent manner. Your personal data, thus collected, is proportionate to the purposes of our processing.
We also ensure the protection of your personal data by implementing strict security measures.
Why do we collect your personal data?
We collect and process various categories of personal data in order to manage our contractual and commercial relations with our customers.
The processing of your personal data is carried out in particular for the following purposes :
– managing contracts and orders;
– managing the delivery of our products;
– customer’s follow-up;
– managing invoices, accounting, in particular customer accounts;
– carrying out sales prospecting operations;
– carrying out loyalty operations;
– sending newsletters;
– drawing up commercial statistics;
– managing unpaid invoices and disputes;
– processing your requests.
Who can access your personal data?
Your personal data is transmitted, within our services, only to persons authorised by their functions to process it.
It is also passed on to our external service providers who are responsible for carrying out some of our processing on behalf of and for the account of KABIOCA.
We take great care to ensure that all of our service providers have appropriate security and confidentiality measures in place to ensure the protection of your personal data.
Other than in these cases, KABIOCA will not share your personal data with third parties unless required by law and/or you have given your express prior consent.
What categories of personal data do we collect?
In order to meet the purposes of the above-mentioned processing, we collect in particular
– your first and last name ;
– your postal address
– your e-mail address;
– your telephone number.
In addition to your data listed above, you are required to provide certain payment data to enable certain transactions and deliveries of our products on kabioca.com.
Our payment service provider will collect, process and use the payment data in order to provide payment services to every Internet user who wishes to order products on our website. The payment data will be processed in accordance with the strictest security rules applicable in the e-commerce sector.
How long are your personal data stored?
Your personal data is kept for the time necessary to achieve the purposes of the processing implemented, in accordance with the recommendations of the CNIL.
Thus, the maximum period of retention of your data in our files relating to the management of our commercial relations is equivalent to the duration of our relationship. Beyond this period, we may keep your data in the form of intermediate archiving to establish proof of a right or contract, or to ensure compliance with a legal obligation. The archiving will be carried out in accordance with the recommendations of the CNIL: the archived data will be selected and stored separately from the active database and limited in time, in particular in accordance with the provisions of the Civil Code and the Commercial Code.
Data used for prospecting purposes is kept for a period of three years, starting from the end of the commercial relationship when the prospect is a customer or from the collection of the data or the last contact from the prospect when the latter is not a customer.
What rights do you have regarding your personal data?
In accordance with the applicable regulations, you have the right to access, rectify and delete your personal data. You may also exercise your right to portability in order to obtain your personal data in a structured, usable and machine-readable format, so that it can be transmitted to a third party, if your request is eligible.
You also have the right to request the restriction of the processing of your personal data and the right to object to the processing of your personal data on the basis of circumstances specific to your personal situation.
You can exercise your right to erase your personal data by filling in the contact form in the “Contact us” section.
Your requests will be examined as soon as possible.
You may also withdraw your consent to the sending of newsletters at any time.
You also have the right to define general or specific directives concerning the post-mortem fate of your personal data. Special instructions can be registered with our internal data protection officer. General directives can be registered with a trusted digital third party certified by the CNIL. You can change or delete these instructions at any time.
Who can you contact on matters relating to the protection of your data?
You can contact us directly or exercise the rights referred to in the previous paragraph via the following email address: firstname.lastname@example.org
In the event that you feel that your rights are not respected with regard to the protection of your data or that an action relating to the conditions of processing of your personal data is incompatible with the provisions of this policy or the applicable regulations, you may lodge a complaint directly with the CNIL.