The application of the General Data Protection Regulation (GDPR) has been applicable within the European Union since May 25, 2018. The purpose of this regulation is to ensure total transparency between Mic Mac Pâtisserie and its customers. This also allows for better control of personal data. Mic Mac Pâtisserie therefore provides its users with complete details of all the data collected and their uses.

Definitions

The Publisher : The person, natural or legal, who publishes the online public communication services.

The Site : All sites, Internet pages and online services offered by the Publisher.

The User : The person using the Site and the services.

• Nature of the data collected

As part of the use of the Sites, the Publisher is likely to collect the categories

of the following data concerning its Users:

• Civil status, identity, identification data...
• Data relating to personal life (lifestyle, family situation, excluding sensitive or dangerous data).
• Connection data (IP addresses, event logs...).
• Location data (movements, GPS data, GSM, etc.)

2- Communication of personal data to Third Parties

Communication to the authorities on the basis of legal obligations

On the basis of legal obligations, your personal data may be disclosed pursuant to a law, a regulation or pursuant to a decision of a competent regulatory or judicial authority. In general, we undertake to comply with all legal rules that could prevent, limit or regulate the dissemination of information or data and in particular to comply with Law No. 78-17 of January 6, 1978 relating to the computing, files and freedoms.

Disclosure to third parties based on account settings

Your personal data is strictly confidential and cannot be disclosed to third parties, except in the case of express agreement obtained via your account settings.

Communication to third parties for commercial solicitation for equivalent products and services

If you have made a purchase on our Site, we may, with our business partners and on an occasional basis, keep you informed of our new products, news and special offers, by email, by post and by telephone regarding products or services. similar to the products or services which were the subject of your order.

Communication to third party partners

We may make certain personal data available to strategic partners working with us, providing products and services or helping us market our products to customers.

Communication to third parties with restrictions linked to recipients

The personal data that you communicate to us when placing your order is transmitted to our suppliers and subsidiaries for the processing thereof. This information is considered by our suppliers and subsidiaries to be strictly confidential.

Communication to third parties for direct marketing

We may share information with advertising partners in order to send you promotional communications, or to show you more tailored content, including relevant advertising for products and services that may be of interest to you, and to understand how users interact with advertisements.

3- Virality of the conditions of reuse of personal data

Commitment to the virality of the conditions

In the event of communication of your personal data to a third party, the latter is required to apply confidentiality conditions identical to those of the Site.

4- Prior information for the communication of personal data to third parties in the event of merger / absorption

Collection of opt-in (consent) prior to the transmission of data following a merger / acquisition

In the event that we take part in a merger, acquisition or any other form of asset transfer, we undertake to obtain your prior consent to the transmission of your personal data and to maintain the level of confidentiality of your personal data to which you have consented.

5- Data aggregation

Aggregation with non-personal data

We may publish, disclose and use aggregate information (information relating to all of our Users or to specific groups or categories of Users that we combine in such a way that an individual User can no longer be identified or mentioned) and information non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes, and other business purposes.

Aggregation with personal data available on the User 's social accounts

If you connect your account to an account of another service in order to make cross-mailings, said service may communicate to us your profile information, connection information, as well as any other information whose disclosure you have authorized. We may aggregate information about all of our other Users, groups, accounts, personal data available about the User.

6- Collection of identity data

Free consultation

Consultation of the Site does not require registration or prior identification. It can be done without you communicating personal data concerning you (surname, first name, address, etc.). We do not register any personal data for the simple consultation of the Site.

7- Collection of identification data

Use of the user's identifier for connection proposal and commercial offers

We use your electronic identifiers to search for relationships present by connection, by email address or by services. We may use your contact information to allow others to find your account, including through third-party services and client applications. You can upload your address book so that we can help you find acquaintances on our network or to allow other Users of our network to find you. We may provide suggestions to you and other Network Users based on contacts imported from your address book. We are likely to work in partnership with companies that offer incentive offers. To support this type of promotion and incentive, we may share your email ID.

8 – Geolocation

Geolocation for the purpose of providing the service

We collect and process your geolocation data in order to provide you with our services. We may need to make use of personal data in order to determine your geographical position in real time. In accordance with your right of opposition provided for by law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms, you have the possibility, at any time, of deactivating the functions relating to geolocation.

Geolocation for crossing purposes

We collect and process your geolocation data in order to allow our services to identify crossing points in time and space with other Service Users in order to present you with the profile of Cross Users. In accordance with your right of opposition provided for by law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms, you have the possibility, at any time, of deactivating the functions relating to geolocation. You then acknowledge that the service will no longer be able to present you with the profile of other Users.

Geolocation with provision of partners for referencing and aggregation (with opt-in)

We may collect and process your geolocation data with our partners. We are committed to anonymizing the data used. In accordance with your right of opposition provided for by law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms, you have the possibility, at any time, of deactivating the functions relating to geolocation.

9- Collection of terminal data

Collection of profiling data and technical data for the purpose of providing the service

Some of the technical data of your device is collected automatically by the Site. This information includes your IP address, Internet service provider, hardware configuration, software configuration, browser type and language, etc. The collection of this data is necessary for the provision of services.

Collection of technical data for advertising, commercial and statistical purposes

The technical data of your device is automatically collected and recorded by the Site, for advertising, commercial and statistical purposes. This information helps us personalize and continually improve your experience on our Site. We do not collect or store any personal data (surname, first name, address, etc.) that may be attached to technical data. The data collected may be resold to third parties.

10-Cookies

Cookie retention period

In accordance with the recommendations of the CNIL, the maximum retention period for cookies is a maximum of 13 months after their first deposit in the User's terminal, as is the duration of the validity of the User's consent to the use of these cookies.

The lifetime of cookies is not extended with each visit. The User's consent must therefore be renewed at the end of this period.

Cookie purpose

Cookies can be used for statistical purposes, in particular to optimize the services provided to the User, from the processing of information concerning the frequency of access, the personalization of the pages as well as the operations carried out and the information consulted.

You are informed that the Publisher is likely to deposit cookies on your terminal. The cookie records information relating to navigation on the service (the pages you have consulted, the date and time of the consultation, etc.) that we can read during your subsequent visits.

User's right to refuse cookies

You acknowledge having been informed that the Publisher may use cookies. If you do not want cookies to be used on your device, most browsers allow you to disable cookies through the settings options.

11- Retention of technical data

Shelf life of technical data

Technical data is kept for the time strictly necessary to achieve the purposes referred to above.

12- Period of retention of personal data and anonymization

Retention of data for the duration of the contractual relationship

In accordance with article 6-5° of law n°78-17 of January 6, 1978 relating to data processing, files and freedoms, the personal data subject to processing are not kept. beyond the time necessary to fulfill the obligations defined at the conclusion of the contract or the predefined duration of the contractual relationship.

Retention of anonymized data beyond the contractual relationship / after deletion of the account

We keep personal data for the time strictly necessary to achieve the purposes described in these Privacy Policies. Beyond this period, they will be anonymized and kept for exclusively statistical purposes and will not give rise to any exploitation of any kind whatsoever.

Data deletion after account deletion

Means of purging data are put in place in order to provide for their effective deletion as soon as the retention or archiving period necessary for the fulfillment of the determined or imposed purposes has been reached. In accordance with the law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms, you also have a right of deletion on your data which you can exercise at any time by contacting the 'Editor.

Deletion of data after 3 years of inactivity

For security reasons, if you have not authenticated yourself on the Site for a period of three years, you will receive an e-mail inviting you to connect as soon as possible, otherwise your data will be deleted from our databases. data.

13- Account deletion

On-demand account deletion

The User has the possibility of deleting his Account at any time, by simple request to the Editor OR by the Account deletion menu present in the Account parameters if necessary.

Deletion of the account in case of violation of the Privacy Policy

In the event of violation of one or more provisions of the Privacy Policy or any other document incorporated herein by reference, the Publisher reserves the right to terminate or restrict without any prior warning and at its sole discretion, your use and access to the services, your account and all Sites.

14- Indications in the event of a security breach detected by the Publisher

User information in the event of a security breach

We undertake to implement all appropriate technical and organizational measures in order to guarantee a level of security adapted to the risks of accidental, unauthorized or illegal access, disclosure, alteration, loss or destruction of personal data about you. In the event that we become aware of illegal access to your personal data stored on our servers or those of our service providers, or of unauthorized access resulting in the realization of the risks identified above, we undertake to: Notify you of the incident as soon as possible;

Examine the causes of the incident and inform you thereof; Take the necessary measures within reason to reduce the negative effects and damages that may result from the said incident.

Limitation of Liability

Under no circumstances can the commitments defined in the point above relating to notification in the event of a security breach be assimilated to any acknowledgment of fault or liability for the occurrence of the incident in question.

15- Transfer of personal data abroad

Transfer of data to countries with an equivalent level of protection

The Publisher undertakes to respect the applicable regulations relating to the transfer of data to foreign countries and in particular according to the following methods: The Publisher transfers the personal data of its Users to countries recognized as offering an equivalent level of protection.

The Publisher transfers the personal data of its Users outside countries recognized by the CNIL as having a sufficient level of protection: The Publisher has obtained authorization from the CNIL to proceed with this transfer.

For a list of these countries: CNIL - Data protection in the world

https://www.cnil.fr/fr/la-protection-des-donnees-dans-le-mondehttps://www.cnil.fr/fr/laprotection-des-donnees-dans-le-monde

16- Modification of the privacy policy

In the event of modification of this Privacy Policy, commitment not to lower the level of confidentiality in a substantial way without the prior information of the persons concerned

We undertake to inform you in the event of a substantial modification of this

Privacy Policy, and not to lower the level of confidentiality of your data substantially without informing you and obtaining your consent.

17- Applicable law and terms of appeal

Application of French law (CNIL legislation) and jurisdiction of the courts

This Privacy Policy and your use of the Site are governed by and interpreted in accordance with the laws of France, and in particular Law No. 78-17 of January 6, 1978 relating to data, files and freedoms. The choice of applicable law does not affect your rights as a consumer under the applicable law of your place of residence. If you are a consumer, you and we agree to submit to the non-exclusive jurisdiction of the French courts, which means that you may bring an action relating to this Privacy Policy in France or in the EU country in which you live. If you are a professional, all actions against us must be brought before a court in France.

In the event of a dispute, the parties will seek an amicable solution before any legal action. In the event of failure of these attempts, all challenges to the validity, interpretation and / or execution of the Privacy Policy must be brought, even in the event of multiple defendants or warranty claims, before the French courts. .

18- Data portability

Data portability

The Publisher undertakes to offer you the possibility of having all the data concerning you returned to you on simple request. The User is thus guaranteed better control of his data, and retains the possibility of reusing it. This data should be provided in an open and easily reusable format.