Data protection policy.

Article 1: General
 In accordance with the provisions of the General Data Protection Regulation (GDPR), the collection and processing of your personal data respects the following principles:

- the collection and processing of personal data can only be based on a previously defined legal basis (performance of a contract, legal obligation, consent, legitimate interest, preservation of vital interests).

- the collection and processing of personal data are carried out to meet one or more defined objectives.

- minimization of data collection and processing: only data strictly necessary for the proper execution of the objectives pursued are collected.

- limited data retention time: the data controller is required to define retention periods for the personal data processed.

- integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

Article 2: Data controller
As data controller, SAOLA SAS (27 rue Adrastée, 74650 Chavanod SIREN No.: 823 558 689, hereinafter “We”) undertakes to comply with the obligations concerning the collection and processing of personal data.

We implement all technical and organizational measures to ensure the protection of your personal data.

Article 3: The persons concerned
This policy is intended for Internet users browsing the Saola.com or fr.saola.com website, for customers who have placed orders, for our partners who would like further information on data processing and, more generally, for all persons who have contacted us.

Article 4: Personal data collected and processed
In accordance with the principle of minimization, we only collect data necessary for the proper functioning of the SAOLA brand activity.

SAOLA may collect this data, either directly from you, or via the website, its partners (business providers, web agencies, etc.).
Thus, as part of our sales activity, SAOLA may collect and process the following information:

Last name, first name, gender, date of birth, address, telephone number, initial temporary login IDs and passwords for the customer area, IP address, login history, cookies, audience measurement, browsing data, email address, payment method (CB-RIB).

We do not collect any sensitive data such as:

Data revealing racial or ethnic origin
Data revealing political opinions
Data revealing religious or philosophical beliefs
Data revealing union membership
Genetic data
Biometric data for the purpose of uniquely identifying a natural person
Health data
Data concerning sexual life or sexual orientation
Data relating to criminal convictions or offenses


Article 5: Personal data collected and processed, why?
 All data related to browsing the site, advertising targeting, account creation, order management, statistics, shipping management, after-sales service support and returns management, newsletters and automation scenarios, geolocation allow us to:

- send you information communications, such as the newsletter (if you have requested it)
- contact you when you fill out the contact form
- carry out audience analyses or produce statistics (if agreed)
- take into account your request to register for our training courses
- allow you to access your customer area
- offer you personalized services
- monitor and improve our website
- secure our website

If you would like to obtain detailed information on the specific processing of your data, please do not hesitate to send your request to the following email address: connect@saola.com .
We make regular updates to these items to keep them as current as possible.

Article 6: Your rights
In accordance with current regulations, you have the following rights regarding your personal data, namely:
- right of access (by email to connect@saola.com)
- right of rectification (by email to connect@saola.com )
- right of opposition (by email to connect@saola.com )
- right to limitation
- right to erasure
- right to portability

Article 7: The DPO
As stipulated by law, SAOLA has appointed an internal contact and you can exercise your rights by contacting us at connect@saola.com or at:


SAOLA SAS
27 Adrastea Street
74650 Chavanod
France

Article 8: Complaint to the CNIL
You can at any time file a complaint with the competent authority, namely the National Commission for Information Technology and Civil Liberties (CNIL) by following the following link: https://www.cnil.fr/fr/plaintes.


Article 9: Our security measures
 SAOLA SAS places the utmost importance on protecting personal data in accordance with the General Data Protection Regulation (GDPR). To ensure the security and confidentiality of sensitive information, we have implemented rigorous security measures.

In accordance with Article 32 of the GDPR relating to the security of processing, SAOLA SAS has implemented the following measures:

  • devices that permanently ensure the confidentiality, integrity, availability and resilience of processing systems and services.
  • means of restoring data availability and access to them within appropriate timeframes in the event of a physical or technical incident.
  • a systematic procedure for regularly testing, analyzing and evaluating the effectiveness of technical and organizational measures ensuring the security of processing.
  • Secure partnerships: When we work with partners and suppliers, we ensure that they also adhere to high data protection standards. Specific contractual clauses related to confidentiality are included in our agreements.
  • Privacy by Design and by Default: We integrate privacy by design and ensure that, by default, only data necessary for processing is collected, processed and stored.

It is important to emphasize that the security obligation remains an obligation of means, meaning that we make every effort necessary to guarantee the confidentiality and integrity of your personal data.
All persons having access to your personal data have been made aware of good data protection practices.
They are bound by an obligation of confidentiality and are liable to disciplinary sanctions in the event of non-compliance with this provision.

Article 10: Cookies
 Our website uses cookies which can be classified into five categories:

  • Advertiser:
    These cookies are designed to offer you more targeted advertising from our partners, based on your browsing activities and customer profile.

  • Social Networks:
    These cookies allow you to share your interactions on our site with social media platforms. We invite you to consult the privacy policies of these platforms to understand how their cookies work.

  • Features:
    These cookies remember your choices to enrich your experience on our site, making it more personalized and user-friendly. The data collected by these cookies may be anonymized and will not be used to track your browsing activities on other websites.

  • Performance :
    These cookies collect anonymous data about your use of our site. The information collected is used exclusively to optimize your experience on our platform, without ever being used to identify you. Sometimes, these cookies are placed by third-party providers of web traffic analysis services, such as Google Analytics.
  • Strictly necessary:
    These cookies are essential to facilitate your navigation on our websites and benefit from their functionalities, for the processing of your orders, the management of invoicing, accounting, and customer account management.

Article 11: Updating the data protection policy

This personal data protection policy may be subject to change.

Last updated on 01/16/2024.