Privacy Policy
Website: nouvellesgaleriesannecy.fr
Last updated: September 1, 2022
ARTICLE 1: PREAMBLE
Les Nouvelles Galeries d’Annecy places great importance on protecting your personal data and respecting your privacy.
This policy is intended to inform you of our practices regarding the collection, processing, and sharing of the data you provide to us on the website.
“Nouvelles Galeries d’Annecy” refers to the company GRANDS MAGASINS GALERIES LAFAYETTE of the GALERIES LAFAYETTE Group, whose registered office is located at 27 rue de la Chaussée d’Antin – 75009 Paris.
This privacy policy is supplemented by legal notices and general terms of use, which you can view by clicking on the links.
PREAMBLE
We consider your personal data to be confidential information to which we pay special attention. Personal data includes any information that can be used to identify you directly or indirectly, such as your name, gender, age, mailing address, phone number, email address, IP address, as well as any other information you provide directly—including on our website—or that is generated as a result of your browsing activity.
In accordance with legal and regulatory obligations, we collect, use, share, and retain this information under enhanced security measures and for limited periods of time, commensurate with the purposes for which you provided it to us.
1. DATA COLLECTION
You trust us to handle your data, and we are committed to being transparent about how we collect it.
We collect the data you provide when you use our online services, including when you:
● Browse and explore our website:
● Enter a game or contest:
● Fill out a form to submit information, such as a questionnaire or survey.
Under no circumstances do we automatically collect visitors’ email addresses without them voluntarily providing them to us. In the event that certain sections are specifically intended for children under the age of 15 and offer them the opportunity to provide us with personal data (such as registering for a game or contest), we ask that they obtain their parents’ permission beforehand.
Furthermore, certain information requested in the forms is required and is marked with an asterisk. Providing this information is essential for processing your request. Therefore, if you do not provide this information, we will not be able to process your request.
2. TYPE OF DATA AND PURPOSES OF DATA PROCESSING
The data controller is GRANDS MAGASINS GALERIES LAFAYETTE, whose registered office is located at 27 rue de la Chaussée d’Antin – 75009 PARIS.
The information we collect about you allows us to better understand your needs so that we can send you targeted offers and thereby improve and personalize our services.
We use your personal data in accordance with the purposes for which you provided it to us, which are based on one or more of the following legal grounds:
● Your consent;
● Our legitimate interests;
● A legal, regulatory, judicial, or administrative obligation.
The table below outlines the data we may collect, how we use it, and the intended purpose and legitimate interests.
| Personal Information | Objectives | Legal Basis |
| Title / Last Name / First Name | – To improve our services and your customer experience – To personalize our communications – To participate in a contest – To conduct statistical analyses | – To fulfill a contract – Legitimate interest: to improve our services |
| Email address | – To identify you – To contact you – To provide you with information – To invite you to events – To send you marketing communications if you have consented to receive them | – To fulfill a contract – Legitimate interest: to improve our services – Consent |
| Opt-in via checkbox or social media opt-in | – Send you marketing communications if you have consented to them – Communicate with you via instant messaging | – Consent |
| Cell phone and/or landline number | – To identify you – To contact you and provide you with information – To improve your customer experience – To send you marketing communications if you have consented to receive them | – To fulfill a contract – Legitimate interest: to improve our services – Consent |
| Contact History | – To manage customer relationships and speed up case processing times. – To improve our services and your customer experience – Analytics to combat fraud | – To fulfill a contract – Legitimate interest: to improve our services |
| Login Information | – Keep track of the relationship | – To fulfill a contract – Legitimate interest: to improve our services |
3. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Your personal data, collected through our websites, may be shared with third parties within the limits set forth by applicable laws and in accordance with this policy. “Third parties” refers to any company other than GRANDS MAGASINS GALERIES LAFAYETTE.
These third parties are:
3.1 Subcontractors
Your personal data may be shared with third-party service providers who process it on our be
, in accordance with our instructions, including:
– for advertising purposes,
– for IT system security,
– for statistics and surveys,
– for support, the Annecy Shopping Center Management,
– entities combating fraud,
– providers of technology, logistics, transportation, and delivery services,
– services that analyze our websites to compile statistics aimed at improving our performance,
The transfer of your data to our subcontractors is strictly regulated to ensure the security of your data.
3.2 State Authorities
In order to comply with legal, regulatory, judicial, or administrative obligations, or to respond to requests from administrative and judicial authorities, we may be required to disclose your data to these authorities whenever we are legally obligated to do so.
4. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Your personal data is processed and hosted on servers located in the European Union; however, on rare and exceptional occasions, it may be transferred to a data processor whose servers are located in a country outside the European Union.
If this occurs, we will take all necessary measures to ensure the security of your
data and compliance with legal and regulatory obligations, in particular by signing
standard contractual clauses. In particular, we will ensure that your data is protected in the same manner as if it were being processed within the European Union.
5. DATA RETENTION PERIOD
We retain data for up to 3 years after your last interaction with us, if you have expressed an interest in our products and/or services at
.
6. RIGHTS OF DATA SUBJECTS
We may use your data because you have expressly consented to it (e.g., to send marketing communications), and to pursue our legitimate interests or comply with a legal obligation.
However, you have the following rights at any time:
● Right of access (Article 15 of the GDPR);
● Right to rectification (Article 16 of the GDPR);
● Right to erasure (Article 17 of the GDPR);
● Right to restriction of processing (Article 18 of the GDPR);
● Right to data portability (Article 20 of the GDPR);
● Right to object (Article 21 of the GDPR).
You can submit your request:
● by mail to NOUVELLES GALERIES D’ANNECY – MANAGEMENT – 2 bis rue Thomas Ruphy – 74 000 ANNECY
● or by email at: contact@nouvellesgaleriesannecy.fr
You may also object, on legitimate grounds, to the processing or storage of your personal data in our files.
With regard to marketing communications, you may exercise your right to object to the processing of your data without having to provide a legitimate reason. If you have given us your
consent to use your data—for example, to send you newsletters—you may withdraw your consent at any time.
If, for any reason, you feel that our response is unsatisfactory, you may file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the French data protection authority, by clicking on this link.
7. CYBER SECURITY
7.1 General Principle
We implement all appropriate technical and organizational measures to
ensure the security, integrity, and confidentiality of your personal data and to prevent any
potential destruction, loss, alteration, disclosure, intrusion, or unauthorized access to such data, whether accidental or unlawful.
7.2 Security Vulnerability Management
We have established a procedure for the prevention, management, and remediation of security breaches, as well as for the notification of personal data breaches, in accordance with legal and regulatory provisions
. This procedure enables us to effectively address
vulnerabilities and potential personal data breaches.
We are committed to notifying the competent supervisory authority—namely, the CNIL—of any personal data breaches as
soon as possible and, if possible, no later than 72 hours after becoming aware of them, if the breach in question is likely to pose a risk to your rights and freedoms.
We also commit to notifying you as soon as possible if this breach is likely to pose a high risk to your rights and freedoms. We will also inform you of the measures taken to address the breach of your data, including measures to mitigate its consequences.
8. CHANGES TO THE PRIVACY POLICY
We may need to modify this policy. If it turns out that these modifications
could result in a reduction of your rights, we will notify you directly using the contact information you have provided to us.
9. COOKIE MANAGEMENT
9.1 What is a “cookie”?
A cookie is a file stored on your device (computer, mobile phone, or tablet) when you visit
a website or view an advertisement. Its purpose is to collect information about
your browsing activity in order to provide you with services and offers tailored to your device and your
interests.
When you visit our website for the first time, cookies may be
placed, subject to any choices you have made regarding cookies.
We notify you of the placement of these cookies via the informational banner that appears the first time
you open the webpage you are viewing. You are then informed that by clicking the “I ACCEPT” button
, you are giving your consent to the placement of all cookies. If you click the “I REFUSE” button, no cookies will be placed except for the cookie that records your refusal.
Your choices are not final and can be changed at any time by adjusting your cookie settings. Click here to change your choice.
Your cookie preference is stored for 6 months. Cookies placed on the site have a
maximum lifespan of thirteen months.
9.2 What information do cookies collect?
Cookies store and/or read files to obtain information related to
your interaction with the site, including your browsing activity and behavior. This
information includes your IP address.
In this context, subject to your consent and/or your chosen settings, GRANDS
MAGASINS GALERIES LAFAYETTE collects and processes all or part of the following information in connection with the operations detailed below:
Analytics and performance cookies:
We may use partner companies to analyze and measure traffic and visits to our websites, compile statistics, and conduct audits, primarily to optimize our services and/or improve our understanding of our customers.
● Google uses trackers to collect statistics and audience metrics.
9.3 How do I configure cookies?
There are several options available to you for configuring your cookie preferences. However, any changes you make may affect your browsing experience and your ability to access certain services that require the use of cookies: you will no longer be able to use a number of features that are necessary for navigating certain sections of our website. This would be the case if, for technical compatibility reasons, we are unable to recognize the type of browser used by your device, its language and display settings, or the country from which your device appears to be connected to the internet.
You can configure your cookie settings in the following ways:
– by directly configuring your browser (Internet Explorer, Chrome, Safari, Mozilla, etc.) to accept or reject cookies.