Personal data processing policy

EURL Pâtisserie Masmoudi France located at 46 rue Victor Hugo 69002 Lyon, registered in the Marseille trade and companies register under number 798 731 683. Is a fine pastry shop offering its products for distance selling and in physical stores.

Pâtisserie Masmoudi France Provides a range of fine artisanal oriental pastries. Its products are sold via its website as well as in physical stores. This document concerns the recovery and processing of personal data in the case of distance sales.

Pâtisserie Masmoudi France undertakes, within the framework of its activities, to respect the legislation in force in France and throughout the territory of the EU, in particular EU Regulation 2016/679 relating to the general regulations for the protection of personal data aimed at to ensure the protection, confidentiality and security of the personal data of users of the services, prospects and visitors to the website, in the context of the collection and processing of personal data.

Your personal data is collected, processed and used exclusively in accordance with legal provisions. Where possible, our processes are designed in such a way that data protection requirements are taken into account and that personal data is anonymized in such a way that the data subject cannot or no longer be identified, if this does not compromise the agreed purpose. The company P TISSERIE MASMOUDI FRANCE uses your personal data for the technical management and development of this website, for the management of customers and users as well as marketing in order to inform you about our products and services.

Data collection is carried out on the website https://www.patisseriemasmoudi.fr/fr/. This personal data is used, in particular, to ensure the smooth running of your pastry order and their delivery in accordance with our manufacturing and commercial policy and our general conditions of sale.

What types of personal data are processed by Pâtisserie Masmoudi France?

In accordance with article 4, 11) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and article 2 of law 78-17 of January 6, 1978 relating to IT, to files and freedoms, modified by law 04-801 of August 6, 2004 and law 18-493 of June 20, 2018, constitutes personal data any information relating to a natural person identified or who can be identified, directly or indirectly.

Pâtisserie Masmoudi France processes your personal data, directly collected from you or resulting from the use of the website and in particular via:

- The contact form
- The online ordering process
- Subscription to our newsletters or surveys
- All means of remote control.

Pâtisserie Masmoudi France may also be the recipient of data that has been collected from you by a third party acting on your behalf or with your authorization, particularly during your requests for information or participation on social networks.

Pâtisserie Masmoudi France may process the following types of data:

- Identification data: last name, first name, company name, email address, postal address, telephone number
- Financial data: means of payment, invoices, payment history (subcontracted)
- Products and services ordered
- Information related to food intolerances and allergies
- Technical data: navigation data, connection logs to your customer account, etc.
- Complaints and possible disputes.

When collecting personal data, you are informed whether they are mandatory or optional. Where applicable, the absence of personal data presented as mandatory may result in it being impossible to process your request.

The purpose of the processing and legal bases

The processing of your personal data is carried out in accordance with the provisions of the European General Data Protection Regulation (GDPR) and with the French Data Protection Law.

Concerning the fulfillment of contractual obligations (art. 6 paragraph 1 b GDPR):

The processing of personal data is carried out in the context of the sale of fine oriental pastries online and in physical stores, but also for the delivery by post of the boxes sold. All of our products and services are detailed on the website. You can read further details regarding the purposes of data processing in the general conditions and legal notices.

In the context of the balancing of interests (art. 6 paragraph 1 f GDPR):

If necessary, we process your data beyond the actual execution of the sales contract to protect our interests. This includes the control and optimization of needs analysis processes with the aim of a direct approach to customers (sending targeted promotions), advertising or market and opinion research, to the extent that you have not opposed the use of your data for this purpose, the assertion of legal rights and defense in the event of legal disputes, the guarantee of IT security and the operation of the P TISSERIE MASMOUDI FRANCE site, prevention and the clarification of offenses due to an order from a public authority and the business conduct and product development measures offered by the company P TISSERIE MASMOUDI France.

On the basis of your consent (art. 6 paragraph 1 a GDPR):

To the extent that we have your consent to the processing of your personal data for specific purposes (e.g. data evaluation for marketing purposes), the legality of this processing on the basis of your consent is ensured. The consent given can be revoked at any time. The revocation of consent does not affect the legality of the data processing carried out up to the revocation.

Due to legal requirements (art. 6 paragraph 1 c GDPR) or in the public interest (art. 6 paragraph 1 e GDPR):

This includes, for example, verification of identity, the ability to bind the client company (in the case of professional legal entity clients), etc. Unless explained in detail below, no personal data is in principle processed when using this website, i.e. no data is stored, modified or transmitted to third parties.

Duration of retention of your personal data.

Your data is kept for the duration:

- Necessary for the accomplishment of the aforementioned purposes,
- Defined under legal conservation obligations,
- Legal prescription.

The retention periods for personal data are applied on the basis of the following criteria:

Your rights

Any person concerned by the processing of personal data has the right:

- Information (§ 34 BDSG, art. 15 GDPR),
- Correction (art. 16 GDPR),
- Deletion (§ 35 BDSG, art. 17 GDPR),
- Limitation of processing (art. 18 GDPR),
- Data transferability (art. 20 GDPR) as well as
- Revocation (art. 21 GDPR).

However, restrictions (Art. 23 GDPR) apply to the right to information and deletion. There is also a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR).

Your obligation to provide data

As part of your request, materialized by the issuance of an offer by our company and signed by your company; creation of a customer account or request for information made on the site, you must provide us with the personal data which are necessary for the fulfillment of the contractual obligations linked thereto or which we are legally obliged to collect. In the absence of this data, we will not be able to conclude or perform this contract, or the exercise of your legal rights (e.g. warranties) will be compromised.

Automated decision making and site usage

For the establishment and execution of the contract, we do not use fully automated decision-making according to Art. 22 GDPR. If we use these processes in special cases, you will be informed separately, to the extent required by law. We partly process your data automatically in order to evaluate certain personal aspects of use of the site.

Collection of data when visiting the site

When simply using the website for information purposes, i.e. when you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect data that is technically necessary for us to display our website and to ensure its stability and security (the legal basis is Art. 6 para. 1 sentence 1 letter f GDPR):

- IP adress
- Date and time of request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Data volume respectively transferred
- Website from which the request comes
- Navigator
- Operating system and its interface
- Language and version of the navigation software
- Pages viewed

In addition to the above data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, associated with the browser you are using, and through which certain information is sent to the authority that sets the cookie.

This device is used in particular for analyzing the performance of the website using cookies, which help to improve our website by providing us with complete statistics on the number of visitors to a page, the areas of a site which are the most viewed and the city or location of the users. These may be installed by external analytics providers engaged by us.

These cookies do not identify you personally. Cookies cannot run programs or transmit viruses to your computer. They simply serve to make the Internet offering more user-friendly and effective as a whole. PATISSERIE MASMOUDI France uses the following types of cookies: temporary cookies and permanent cookies.

Temporary cookies are automatically deleted when you close the browser. These store a session ID with which different requests from your browser can be assigned to the common session. Your computer can thus be recognized when you visit our website again. Session cookies are deleted when you log out of the site or close the browser.

Permanent cookies are automatically deleted after a predetermined duration which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.

You can configure your browser settings, or before accessing the website, according to your wishes, refuse to accept third-party cookies or all cookies. In this case, you may not be able to fully use all features of this website. Most browsers offer you different options for protecting your privacy. You can e.g. ex. accept first-party cookies, but block third-party cookies or notify you each time a website wants to install a cookie. Please note that such deactivation of cookies has the effect of making it impossible to install new cookies. You can find instructions for managing cookies in the Help function of your browser or in the instructions for your smartphone or the fixed or mobile product with Internet access used.

We also use cookies to be able to identify you when you revisit our site, if you have an account or separate individual access to our offers

Information regarding your right of revocation according to article 21

You can revoke your consent to the processing of your personal data given to PATISSERIE MASMOUDI FRANCE at any time. Please note that the revocation only has effect for the future. Processing carried out before the revocation remains unaffected.

Right of revocation on a case-by-case basis

You have the right, for reasons relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out in accordance with Art. 6 paragraph 1e) GDPR (data processing in the public interest); this also applies to profiling based on this provision under the terms of Art. 4 no. 4 GDPR. If you object, we will no longer process your personal data, unless we can justify compelling and legitimate reasons for this processing which override your interests, rights and freedoms or if the processing serves to establish, for the exercise or defense of legal rights.

If we base the processing of your personal data on the balancing of interests, you can object to this processing. If you resort to such a revocation, we ask you to explain the reasons why we no longer need to process your personal data as we did before. In the event of a justified revocation, we will examine the situation and terminate the processing of your data, adapt it or explain compelling legitimate reasons why we must continue processing your data.

Right to revoke data processing for direct mail purposes

In special cases, we process your personal data for direct mailing. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling, to the extent that it is linked to such mailing. If you object to processing for direct mail purposes, we will no longer process your personal data for these purposes. The revocation is not subject to any formal conditions and must be sent if possible to: info@patisseriemasmoudi.fr

Responsible organization

The person responsible is EURL PATISSERIE MASMOUDI FRANCE

Your right of revocation (art. 21 GDPR): You have the right, for reasons relating to your particular situation, to object at any time to the processing of your personal data, which is carried out in accordance with Art. 6 paragraph 1 sentence 1 e) GDPR or Art. 6 paragraph 1 sentence 1 f) GDPR; this also applies to profiling based on these provisions. We then no longer process this personal data for these purposes, unless we can justify compelling and legitimate reasons for this processing which are paramount in relation to your interests, rights and freedoms or if the processing is used to establish, exercise or defense of legal rights.

If personal data is processed for the purpose of carrying out targeted commercial offers or advertisements, you have the right to object at any time to the processing of this personal data for the purposes of such advertising; this also applies to profiling, to the extent that it is linked to such mailing.

You can notify us of your opposition at (info@patisseriemasmoudi.fr)