Personal data protection | Maison Ladurée

Introduction

The company PATISSERIE E. LADUREE (hereinafter referred to as "Ladurée" or "we") attaches great importance to the protection of your personal data and, more generally, to your privacy.

In the course of operating the website www.laduree.ch (hereinafter the "Website"), Ladurée may collect and process personal data about you. In this respect, this Privacy Policy describes how we process your personal data when you use the Website.

All your personal data is processed by us in accordance with the applicable regulations in this area. The processing of your personal data and its characteristics are specified in the table at the end of this Privacy Policy.

Who processes your personal data?

Your personal data is processed under the responsibility of PATISSERIE E. LADUREE, a simplified joint stock company with a single shareholder, registered in the Paris Trade and Companies Register under number 572 045 540 and having its registered office at 41/43 rue de Varenne - 75007 Paris. In accordance with the applicable regulations, Ladurée is responsible for the processing described in this Privacy Policy.

What categories of personal data do we collect and for what purpose(s)?

In accordance with the applicable regulations, we will only process your personal data if one of the following conditions is met:

The processing of your personal data is necessary for the performance of a contract to which you are a party, and in particular the performance of your order on our Website, or the performance of pre-contractual measures taken at your request;

The processing of your personal data is necessary to pursue our legitimate interests;

You have expressly consented to the processing of your personal data for one or more specific purposes.

The personal data we process is listed by purpose in the table at the end of this Privacy Policy. We will only process your personal data for the purposes we have identified and in accordance with the legal basis that is made known to you.

Please note that in order to benefit from certain services and features on our Website or to receive communications from us, you will be asked to provide certain personal data on a mandatory basis via collection forms. The mandatory nature of the answers is indicated by an asterisk (*). The data identified as mandatory are necessary in order to benefit from the corresponding features of the Website. If you do not fill in these fields, you will not be able to obtain the requested service.

We only collect data that is strictly necessary for the purposes described below. Thus, the communication of your personal data is indispensable for the pursuit of these purposes and the non-provision of such data is likely to compromise the proper execution of these purposes.

In addition, when you visit or browse the Website, we may place cookies on your terminal. For more information about the processing of your personal data through these cookies, please see our Cookie Policy .

Who has access to your personal data?

Within Ladurée, and with regard to each processing operation, your personal data is only communicated or made accessible to those persons to whom it is necessary to communicate it for the purposes and in view of the purpose of the processing in question.

Your personal data may also be communicated to third parties for the purpose of the corresponding processing.

The recipients or categories of recipients of your personal data are identified in the table below.

In addition, your personal data is stored, in principle, on servers located in the European Union. However, we may transfer some of your personal data to recipients outside Ladurée, located in various countries, including outside the European Union. In this case, these transfers of personal data to countries outside the European Union will be regulated to ensure an appropriate level of protection, either by a decision of the European Commission (adequacy decision), or through legal instruments such as data transfer agreements. If you have any queries regarding transfers of personal data outside the European Union, you can contact us at the addresses listed in the "Contact Us" section below.

For each processing operation, any transfers outside the European Union and the legal framework governing them are indicated in the table below.

How long do we keep the data collected?

We only keep your personal data for the period of time that is strictly necessary for the purpose of the processing. For each processing operation, these periods are indicated in the table below.

How is your personal data protected?

We are committed to protecting your personal data. To this end, we take all physical, technical and organisational measures to prevent unauthorised or unlawful processing, as well as accidental loss, destruction or damage of your personal data.

What are your rights?

You have the right to access, rectify, delete, limit and object to the processing of your personal data, as well as the right to define directives concerning the fate of your data after your death and the right to the portability of your personal data by sending your request to the addresses indicated in the section below entitled "Contact us", in accordance with the conditions laid down by the applicable regulations. You must indicate which right you wish to exercise and all the details necessary for us to respond to your request.

These rights shall be exercised in accordance with the applicable regulations.

The right of access means that you can ask us at any time to tell you whether we are processing personal data about you and, if so, what personal data is involved and the nature of the processing.

The right of rectification means that you can ask us to rectify your personal data if they are inaccurate. You may also request that your personal data, if incomplete, be completed insofar as this is relevant to the purpose of the processing in question.

The right to erasure means that you may request the erasure of your personal data in particular when: (i) their retention is no longer necessary for the purposes for which they were collected (ii) your personal data is processed on the basis of your consent, you wish to withdraw that consent, and there is no other legal basis for the processing (iii) you have objected to the processing of your personal data and therefore wish it to be erased (iv) your personal data has been unlawfully processed ; (v) your personal data must be erased in order to comply with a legal obligation which is provided for either by European Union law or by French law.

The right to restriction means that you can ask us to restrict the processing of your personal data (i) if you dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy of your personal data, (ii) if, following a processing operation that has been established as non-compliant, you prefer the restriction of the processing to the complete erasure of your personal data (iii) if we no longer need your personal data for the purposes of the processing operation, but they are still required for the establishment, exercise or defence of legal claims; (iv) where you have objected to the processing of your personal data and you wish to restrict the processing for the period of time necessary for us to verify whether the legitimate reason you are invoking is justified. Limiting the processing means that the processing of your personal data will be limited to the storage of the relevant personal data. We will not carry out any further processing on the personal data in question.

The right to object means that you may object to the processing of your personal data, where such processing is based on the pursuit of the legitimate interests of Ladurée. The right to object can be exercised provided that you can demonstrate a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons to continue it in accordance with the applicable regulations.

The right to set out instructions on what to do with your data after your death allows you to make known your instructions on the retention, deletion and disclosure of your personal data after your death.

The right to portability means that you can ask us, under the conditions laid down by the applicable regulations, to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to you, or to ask us to transmit it directly to a third party of your choice where this is legally and technically possible.

Where we process your personal data on the basis of your consent, you may withdraw your consent at any time by contacting us at the addresses listed in the "Contact Us" section below or by clicking on the unsubscribe link in any of our commercial communications. However, the withdrawal of your consent does not affect the validity of the processing carried out prior to this withdrawal.

Changes to the Privacy Policy

This Privacy Policy may be updated from time to time.

Where you have provided us with a valid email address, we will notify you of any material changes to the Privacy Policy by email and will communicate the new version to you before implementing the relevant changes. We also recommend that you regularly review this Privacy Policy so that you are fully aware of our commitment to the security and protection of your personal data.

Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, you can contact us at

- by email: privacy@laduree.com
- by post: PATISSERIE E. LADUREE, Legal Department, 41/43 rue de Varenne - 75007 Paris, France.

If you are not satisfied with the response, you have the right to lodge a complaint with the Préposé fédéral à la protection des données et à la transparence ("PFPDT")
- by post:

Préposé fédéral à la protection des données et à la transparence
Feldeggweg 1
CH-3003 BERN
Switzerland

- on the PFPDT website: www.leprepose.ch