Privacy and Personal Data Protection Policy of “CHAMPALM”
This document explains the principles and our commitments regarding the protection of your Personal Data and aims to inform you about:
The Personal Data that “CHAMPALM” collects and the reasons for this collection,
How this Personal Data will be used,
Your rights as a data subject.
This Policy applies to all services provided by “CHAMPALM” regardless of their nature (website, applications, services, etc.).
Data Controller
The data controller is “CHAMPALM”.
The contact details are as follows:
Email: contact.champalm@gmail.com
HOW DOES “CHAMPALM” IMPLEMENT PERSONAL DATA PROTECTION?
“CHAMPALM” is committed to considering the protection of your Personal Data and your privacy from the design stage of the services offered to you (Privacy by Design). To ensure security and guarantee the respect and proper exercise of your rights, measures to ensure the protection of your Personal Data are implemented (Privacy by Default).
WHAT PERSONAL DATA IS USED BY “CHAMPALM”?
“CHAMPALM” is committed to collecting only the data strictly necessary to provide the services offered, mainly: first name, last name, postal address, email, and phone number. If optional data is requested, “CHAMPALM” will clearly inform you which Personal Data is required for the service.
The Personal Data collected directly from you is used only for the purposes previously disclosed to you.
If the data was not collected directly from you, “CHAMPALM” will inform you as soon as possible about the processing and its purpose.
Personal Data may also be used to offer you other services, only if you have agreed to receive such services or communications.
WHAT IS THE LEGAL BASIS FOR OUR DATA PROCESSING?
“CHAMPALM” relies on the following legal bases to process your Personal Data:
Contract Performance
The legal basis for processing the user’s Personal Data is the performance of the contract. Therefore, the user is required to provide the data necessary for its execution. Without this data, including for the online payment provider if applicable, the service cannot be provided.
Legal Obligations
This includes any processing necessary for “CHAMPALM” to comply with a legal or regulatory obligation, such as issuing and managing invoices related to the customer relationship.
Consent
For the following purposes, the legal basis for processing is the user's consent, if given:
- Managing registration on the site and applications,
- Managing the sending of information about site activities and personalized content based on the user’s profile,
- Responding to the exercise of user rights, questions, and complaints.
The withdrawal of consent does not affect the performance of contracts entered into with “CHAMPALM”.
Legitimate Interest
For the following purposes, processing is based on the legitimate interests of “CHAMPALM”:
- Profiling based on browsing behavior of registered users or any users who have shared their data,
- Sending information about exclusive offers, new releases, and personalized content based on the user’s profile,
- Sending satisfaction surveys about purchased products to gather customer feedback and improve services.
Our legitimate interest is to ensure the site remains secure and to better understand the needs, expectations, and satisfaction levels of users in order to improve products and services. All actions are performed with the aim of improving customer satisfaction and providing a unique browsing and shopping experience.
Personal Data of Minors
Some services may be used by minors under the age of fifteen. In this case, parental or legal guardian consent is required.
WHO CAN ACCESS YOUR PERSONAL DATA?
Your data may be transmitted to:
- Internal services of “CHAMPALM”: departments responsible for executing the subscribed services, such as Customer Service, Sales Administration, etc.,
- External providers of “CHAMPALM”: technical service providers, including subcontractors,
- Business partners of “CHAMPALM”, only after informing you and allowing you to opt-in via a checkbox.
CAN YOUR PERSONAL DATA BE TRANSFERRED OUTSIDE THE EU?
“CHAMPALM” processes all your Personal Data within the European Union (EU).
However, for certain specific services, “CHAMPALM” may use subcontractors located outside the EU. In this case, only the data necessary to perform the service is shared, and “CHAMPALM” requires those subcontractors to provide adequate safeguards, particularly through the use of standard contractual clauses approved by the European Commission.
HOW LONG DOES “CHAMPALM” KEEP YOUR PERSONAL DATA?
The retention period depends on the subscribed service. “CHAMPALM” commits not to retain your Personal Data longer than necessary for providing the service, plus the legally required retention period.
IS YOUR PERSONAL DATA PROTECTED?
“CHAMPALM” takes all necessary measures to ensure the security and confidentiality of your Personal Data, especially to prevent it from being altered, lost, or accessed by unauthorized third parties.
In case of a security incident affecting your Personal Data (destruction, loss, alteration, or disclosure), “CHAMPALM” will comply with its obligation to notify data breaches, particularly to the CNIL (French Data Protection Authority).
WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
At any time, you may exercise your rights under applicable data protection regulations, provided the legal conditions are met:
- Right of access: You can request access to your Personal Data processed by “CHAMPALM”,
- Right to rectification: You can update or correct your Personal Data,
- Right to object, especially to commercial communications: You can choose not to receive commercial messages or object to the processing of your data,
- Right to erasure: You can request the deletion of your Personal Data,
- Right to restriction: You can request the suspension of the processing of your Personal Data,
- Right to data portability: You can ask “CHAMPALM” to retrieve your Personal Data to transfer it elsewhere.
When subscribing to a service or when your data is collected, you will be provided with the postal and/or electronic address to send your request.
Each request must include proof of identity. “CHAMPALM” commits to respond promptly and in compliance with legal deadlines.
WHO TO CONTACT?
You may contact the French Data Protection Authority (CNIL) at 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07 (https://www.cnil.fr/) for any complaint regarding how “CHAMPALM” processes your Personal Data.
Changes to This Policy
Any updates to this Privacy Policy will be published on the “CHAMPALM” website.
COOKIE POLICY
The “CHAMPALM” website and all its web pages use cookies to distinguish you from other users. This allows us to improve our services and optimize your user experience.
A cookie is a text string transferred by a website to your computer’s hard drive so the website can recognize you. Cookies help a site tailor content more quickly to your interests. Most major websites use cookies. Generally, a cookie contains the name of the domain it came from, the “lifetime” of the cookie, and a value—usually a randomly generated unique number.
On the “CHAMPALM” site, there are:
- Temporary cookies, which remain in your browser’s cookie file until you leave the website, and
- Persistent cookies, which stay much longer (depending on the cookie's lifespan).
Temporary cookies are used:
To allow you to transfer information from one page to another without re-entering it,
To access stored registration information.
Persistent cookies are used:
To help recognize you as a returning visitor (by a number, not personally),
To personalize content and ads based on your interests, or to prevent showing you the same ads multiple times,
To compile anonymous, aggregated statistics that help us understand how visitors use our site and improve its structure. This data does not personally identify you.
You can choose to accept or decline cookies by modifying your browser settings. However, some interactive features of the site may be unavailable if cookies are disabled.
A pop-up window will appear when you access the website, allowing you to learn about the nature of cookies and to refuse those that are not strictly necessary for browsing or for transactions; the service may be degraded as a result.
GLOSSARY
Each term beginning with a capital letter has the meaning assigned to it below.
- “Privacy and Personal Data Protection Policy” and “Policy”: Refers to this Policy describing the measures taken for the processing, use, and management of your Personal Data and your rights as a data subject.
- “Personal Data”: Refers to any information relating to you that allows you to be identified directly or indirectly.
- “Processing”: Refers to any operation or set of operations applied to your Personal Data.
- « Responsable du traitement » : Désigne « CHAMPALM » qui réalise le traitement de vos Données à Caractère Personnel.
- “Personal Data Breach”: Refers to a breach of security resulting, whether accidentally or unlawfully, in the destruction, loss, alteration, disclosure of, or unauthorized access to your Personal Data.
- “Recipient”: Refers to the service or company that receives and may access your Personal Data.