DATA PROTECTION
Home > Data Protection
OUR PRIVACY AND DATA PROTECTION POLICY
At PETE SORENSEN, we are very concerned about the privacy of our users.
It is fundamental for us to ensure total confidentiality and security of all personal information collected.
This section aims to explain, transparently, how we process your personal data and the different information we handle.
PETE SORENSEN, as the data controller, undertakes to comply with the provisions of Law n°78-17 of January 6, 1978, as amended, relating to data processing, files and freedoms, as well as Regulation (EU) n°2016/679 of April 27, 2016, in force since May 25, 2018.
1 – WHY DO WE COLLECT PERSONAL DATA?
During your visits to our site, when you subscribe to our newsletter, order product(s), or interact with us on our social networks, by email or by phone, we collect data about you.
This data allows PETE SORENSEN to understand its customers and thus better meet their needs and continuously improve our services.
For example, we can send you personalized content, small surprises, or it prevents you from seeing the same advertisement on social networks over and over again.
Most importantly: we only collect your data on behalf of PETE SORENSEN, and we undertake not to disclose this information to third-party service providers and subcontractors unless strictly necessary. These third parties undertake to respect the same level of confidentiality and security as ours.
We will never resell, transfer or assign this data to third parties for commercial purposes without your prior written consent (e.g., during a partnership for a contest).
2 – WHAT PERSONAL DATA IS COLLECTED AND FOR WHAT PURPOSE?
Personal data includes any information that directly or indirectly identifies a natural person, particularly by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more specific elements specific to their physical, physiological, genetic, psychological, economic, cultural, or social identity.
When you create an account with PETE SORENSEN or place an order, personal information is requested.
Mandatory information is what we need to communicate with you and deliver your products in the best conditions. This is the information necessary for the execution of the contract or for the execution of pre-contractual measures.
Other optional information may be provided (birthdays of your family and friends, date of your event, etc.). We collect and process this information exclusively for ourselves and will not communicate it to third parties (except for technologies and solutions used for sending emails such as Mailchimp). This data is used to send you personalized content, help you organize your event, or thank you for your loyalty.
2.1 – Types of data collected:
- Mandatory customer identification data (surname, first name, address, email, phone number, etc.)
- Optional personal characteristic data (age, date of birth, gender, type of party, birthdays of relatives, etc.).
- Electronic identification data (IP address, cookies, etc.).
- Order-related data (delivery method, delivery and billing address, people to whom purchases should be shipped, order history, purchase orders, invoices...)
- Customer service data (complaints, exchanges by email or phone...)
- Customer reviews left through our partner Avis Vérifiés.
- Email campaign data (email address, open rate, click-through to our site...).
- Website traffic data (pages viewed, time spent on page, items viewed, added to cart or purchased, exit page...)
Personal data relating to credit card payments is not stored by PETE SORENSEN.
PETE SORENSEN uses a secure SSL (Secure Socket Layer) payment method.
Bank details are encrypted (made unreadable) during transmission over the network. Encryption is made visible by the appearance of a padlock symbol in the browser.
The transaction is carried out through a payment service provider. Only the latter records the banking information provided on its secure server.
No intermediary retrieves this data.
2.2 – Usefulness of this data and legal basis:
|
Purpose of processing |
Legal basis(es) for processing |
|
Management of customer account, pre-purchase cart, and placed orders |
This processing is necessary for the performance of the contract or for the performance of pre-contractual measures |
|
Management of deliveries and order tracking |
This processing is necessary for the performance of the contract |
|
Customer service management, by phone or email. Exchanges between customer service and the customer may be retained |
This processing is necessary for the performance of the contract, for the purposes of our legitimate interests (improving the quality of our products and services) and/or based on your consent |
|
Sending targeted offers and advice through various channels: directly on our site, by email, on social networks, or any other future medium |
This processing is based on your consent and is necessary for the purposes of our legitimate interests (offering you relevant content) |
|
Collection and management of customer reviews on our products and services |
This processing is based on your willingness to share a review, and is necessary for the purposes of our legitimate interests (improving the quality of our products and services) |
|
Display of targeted advertisements on social networks |
This processing is necessary for the purposes of our legitimate interests (offering you relevant content) |
|
Possibility to customize site content according to user preferences |
This processing is necessary for the purposes of our legitimate interests (offering you relevant content) and/or based on your consent |
|
Sharing site content to social networks |
This processing is based on your consent and/or is necessary for the purposes of our legitimate interests (offering you relevant content) |
|
Measurement of site traffic, performance of on-site and off-site marketing actions |
This processing is necessary for the purposes of our legitimate interests (measuring and improving our marketing actions and optimizing the presentation and structure of our website) |
|
Setting up targeted contests |
This processing is based on your consent and is necessary for the purposes of our legitimate interests (offering you relevant content) |
2.3 – Cookies, what exactly are they?
A cookie is a condensed piece of information transmitted to an internet server by a user's computer. Its purpose is to facilitate user navigation or to generate statistics. Cookies allow the server of the visited site or a third-party server (advertising agency, web analytics service) to recognize the visitor's machine (by its IP address) and not the user. This way, thanks to cookies, it is possible to automatically access a personalized page without identifying oneself.
Cookies therefore allow PETE SORENSEN to:
- measure the audience and performance of specific content on our site,
- adapt our site based on the technology used (device, browser), and our users' affinities,
- store previously entered information (form, login, cart...) and facilitate user navigation,
- allow sharing on social networks.
2.4 – How can I avoid disclosing information about cookies and trackers?
In accordance with the GDPR, data collected through the use of cookies by PETE SORENSEN is subject to prior consent.
For each internet browser, it is possible to set whether or not to accept cookies on all visited sites or by a specific selection. To learn more, please refer to the Help menu of your preferred browser.
Here is a list of help pages for the main browsers used by our customers:
- For Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
- For Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- For Safari: https://support.apple.com/kb/PH21411?viewlocale=en_US&locale=en_US
- For Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
3 – WHO HAS ACCESS TO THE DATA COLLECTED BY PETE SORENSEN?
Most of the collected data is processed internally by PETE SORENSEN's various departments, including web marketing, communication, customer service, and accounting.
It is also communicated to subcontractors with whom we collaborate to enable the execution of the contract (payment and delivery services, for example) or to improve the quality of our products, services, our marketing actions, and the presentation of our website (marketing assistance).
We only communicate to them the personal data essential for the performance of their service, it being reminded that our subcontractors are subject to the same obligations as PETE SORENSEN regarding the protection of personal data.
Furthermore, we work with external agencies (statistical data collection, remarketing operations, free and paid referencing of our site, etc.) that have access to certain traffic data. These agencies only collect secondary data through statistical tools (Google Analytics, Facebook Business, AdRoll...).
Secondary data is information about user traffic and journey on the site. This data does not allow the identification of a specific person in any way and therefore cannot be traced back to a specific individual.
With your consent, the reviews you provide on our products and services are published on our website and are therefore accessible to all visitors to our website. Only your first name and the first letter of your last name are visible.
Your personal data is also transmitted when we have a legal obligation to do so or if we believe, in good faith, that it is necessary to:
- Respond to any claim against PETE SOREENSEN;
- Comply with any judicial request;
- Enforce any contract concluded with our members;
- In case of emergency involving public health or the physical integrity of a person;
- In the context of inquiries and investigations;
- To guarantee the rights, property, and safety of PETE SORENSEN, its members, and more generally any third party.
Finally, if PETE SORENSEN were acquired by a third party, the data in our possession would be transferred to the new owner.
4 – WHAT ARE YOUR RIGHTS REGARDING PERSONAL DATA?
In application of Regulation 2016/679 of April 27, 2016, any natural person may exercise their data protection rights upon simple request, namely:
- right of access to all collected data,
- right of rectification and portability of this data,
- right of opposition and erasure of this data (also known as the "right to be forgotten").
These rights must be exercised directly with PETE SORENSEN:
- either by email to the address: info@march-lab.com
- or by postal mail to the address:
PETE SORENSEN
Data Protection
50 rue Charlot
75003 Paris
We undertake to respond to any request within 15 days of receiving the email or postal mail. If the response provided does not seem satisfactory, the data owner has the right to contact the CNIL.
5 – HOW LONG IS DATA RETAINED BY PETE SORENSEN?
The personal data collected by PETE SORENSEN cannot be kept beyond the period strictly necessary for the purposes for which it is processed, and in compliance with the legal and regulatory provisions in force.
With the exception of certain categories of personal data, the retention period of which may vary depending on the legal or regulatory provisions in force, we process the data we collect for a period of 3 years from the end of the commercial relationship. Thus, when there is no longer any interaction with PETE SORENSEN for 3 years, this data is no longer used in accordance with simplified standard NS-048.
Data relating to the management of orders, deliveries, billing, and customer accounts must be kept for a period of 10 years in accordance with article L. 123-22 paragraph 2 of the Commercial Code and simplified standard NS-048.
Concerning data related to credit card payments recorded by our service provider, they may be kept, in intermediate archives, for evidentiary purposes in case of any dispute of the transaction, for a period of 13 months in accordance with article L. 133-24 of the Monetary and Financial Code. This period may be extended to 15 months to take into account the possibility of using deferred debit payment cards in accordance with simplified standard NS-048.
Finally, information stored on your terminal (e.g., cookies) or any other element used to identify users and allow their traceability will not be kept beyond a period of 13 months.
6 – WHAT SECURITY MEASURES ARE IN PLACE TO PROTECT DATA?
The personal data collected by PETE SORENSEN is secured and will never be transmitted to partners who do not guarantee the same level of security as we require.
The main measures taken for the security of your data are:
- The use of encrypted passwords (to which we do not have access) containing at least one uppercase letter, one lowercase letter, and one special character.
- Strict limitation of access to personal data to only those individuals using it within the scope of their duties, using a strictly personal username and password.
- The definition of authorization profiles to limit user access to only the data strictly necessary for the performance of their duties.
- The use of secure internal and external servers for data backup.
- The use of secure payment systems by our partners: Ogone INGENICO (to learn more: https://ingenico.fr/politique-de-confidentialite
NB: The CNIL recommends that users never:
- Communicate their password to others.
- Store their passwords in a plain text file, on paper, or in a place easily accessible by others.
- Save their passwords in their browser without a master password.
- Use passwords that are related to themselves (name, date of birth, etc.).
- Use the same password for different accesses.
- Keep default passwords.
- Email their own passwords to themselves.”
7 – WHO TO CONTACT FOR DATA PROTECTION QUESTIONS?
The data controller for the personal data mentioned in this data protection policy is Mr. Kevin Serpaggi, President.
They can be contacted at info@petesorensen.com, or by postal mail at PETE SORENSEN - Data Protection - 5, rue de Charonne Paris XIème.
We commit to answering all your questions within 15 working days.
For any additional information regarding data protection law, we invite you to visit the CNIL website.
8 – REVISION OF THE DATA PROTECTION POLICY
The data protection policy may be subject to updates. To be aware of them, we invite you to consult this page regularly.