On (hereinafter the ‘Site’), the personal data controller is :

  • La Belle Plante

La Belle Plante (hereinafter ‘we’ or ‘us’) is committed to ensuring that the collection and processing of your data is carried out in a lawful, fair and transparent manner, in accordance with the ‘GDPR’ (General Data Protection Regulation) of 25 May 2018 and the new ‘Loi Informatique et libertés’ (Law no. 78-17 of 6 January 1978 relating to information technology, files and freedoms) of 29 May 2019 following Decree no. 2019-536.

Our collection is limited to what is necessary, in accordance with the principle of data minimisation. The definitions provided in Article 4 of the GDPR are applicable to this policy. In the event of a change to this policy, we undertake not to lower the level of confidentiality substantially without informing you in advance.

We hereby endeavour to answer the following questions:

  • What personal data do we process?
  • For what purposes?
  • On what legal grounds?
  • How long is the data kept?
  • What are your rights?
  • How can you exercise them?

You will also find our commitments regarding subcontracting, transfers, communication to third parties and in the event of a security breach. If you have any queries or complaints, please contact us.

Article 1 – Categories of personal data collected and processed

As part of our activity on this Site, you provide us with the following information by filling in the information form(s) and communicating with us:

  • When you browse this Site, data collected through the use of cookies and similar technologies (in particular the date and time of connection and/or browsing, the type of browser, the language of the browser, its IP address and location data);
  • Civil status and contact information (title, surname, first name, company, position, postal address, telephone number and e-mail address) will enable us to identify you and communicate with you;
  • Information relating to the contractual and commercial relationship (in particular details of the products and/or services ordered) that you may enter into with us, as well as banking information (bank details, card numbers and cryptogram) and transactional information (transaction date, amount, order number and invoice number).

Article 2 – Aims

  • The identification of persons using this Site to order our products and/or services;
  • The creation and management of the customer account of the person concerned as well as the execution of payment operations made at his/her request;
  • The processing of operations relating to the management of files concerning: orders; deliveries; invoices; accounting and the monitoring of commercial relations;
  • Management of relations with prospective customers and customers and their opinions on products, services or content;
  • Handling queries and any complaints from individuals, as well as managing requests for rights of access, rectification and opposition;
  • Compliance with online account access procedures and management of any authentication procedures (registration, connection and loss of password);
  • Execution of payments;
  • Compiling commercial and advertising statistics;
  • Canvassing and/or sending information (newsletter), including chasing up prospective customers, managing technical canvassing operations, selecting people to carry out loyalty-building, canvassing, surveys, tests and promotions, and carrying out solicitation operations;
  • Participation in special events, such as competitions, games, prize draws, offers and participation in loyalty programmes, excluding online gambling subject to approval by the Autorité de Régulation des
  • Jeux en Ligne;
  • Preventing and combating fraud and means of payment, in particular bank card fraud;
  • The management of unpaid invoices and disputes;
  • Improving the Site and our offers;
  • Site security.

Article 3 – Legal basis

The legal basis for the processing of personal data, within the meaning of Article 6 of the GDPR, is that :

  • The processing is necessary for the performance of the contractual relationship that exists between us and/or that you wish to enter into with us, since the personal data that we collect and process are necessary for making the purchases requested under our General Terms and Conditions of Sale (GTCS);
  • Or the processing is also necessary to protect our legitimate interests, in particular by enabling us to carry out commercial canvassing, to keep proof of transactions carried out and/or, if necessary, to carry out debt recovery;
  • If the law so requires or if it is not necessary in one of the two previous cases, we will ask you for your consent.

Article 4 – Storage time

Personal data that is processed will not be kept beyond the time required to fulfil the obligations defined when the contract was concluded or imposed by current legislation. We keep personal data for the time strictly necessary to achieve the purposes described herein. After this period, the data may be rendered anonymous and stored exclusively for statistical purposes.

Means of deleting data are put in place to ensure that it is effectively deleted as soon as the storage or archiving period required to fulfil the purposes determined or imposed has been reached.

Article 5 – Cookies

You are informed that we may place cookies on your terminal. The cookie records information relating to navigation on the service (the pages you have consulted, the date and time of consultation, etc.) which we will be able to read during your subsequent visits.

Cookies are kept for a maximum of 13 months after they are first placed on your terminal, as is the period of validity of your consent to the use of these cookies. The lifespan of cookies is not extended with each visit. Your consent must therefore be renewed at the end of this period.

Cookies may be used for statistical purposes, in particular to optimise the services provided, based on the processing of information concerning the frequency of access, the personalisation of pages, the operations carried out and the information consulted. They may also be used for advertising purposes, in particular to offer you targeted content in banners and inserts on the Internet. Certain functions on the site, such as video players or interactive content, are likely to use services offered by third parties and to deposit cookies enabling them to identify your consultation of the content. Some cookies are also used to save customer account information or the contents of a shopping basket.

You are therefore informed that we may use cookies, and you authorise us to do so by clicking on the dedicated banner. If you do not wish cookies to be used on your terminal, most browsers allow you to disable cookies via the settings options. However, you should be aware that some services may no longer function correctly.

Article 6 – Your rights and remedies

You have the right to access the data concerning you, to correct or delete it, to ask questions, to limit the processing of your data, to portability and to erasure.

You also have the right to object at any time, for reasons relating to your particular situation, to the processing of personal data whose legal basis is our legitimate interest, as well as the right to object to commercial canvassing. You may also withdraw your consent to the processing at any time, without affecting the lawfulness of the processing based on the consent given prior to the withdrawal of consent.

In addition, you have the right to define general and specific directives defining the way in which you would like the above-mentioned rights to be exercised after your death. Finally, you may lodge a complaint with the CNIL if you consider our responses to be unsatisfactory.

For any request, you will be asked to prove your identity by any useful means and to justify, where appropriate, the reasons for your request.

Requests to exercise your rights must be sent electronically.

As from the exercise of the right to erasure, to object to processing or to withdraw consent, the proper functioning of the Site may be disrupted or even interrupted. For example, if these rights are exercised when ordering products or services, the said order may be cancelled and the said service may be suspended.

The e-mail you provide may be used to send you information, for example by electronic mailing. If at any time you wish to unsubscribe and no longer receive these emails, you will find unsubscribe instructions at the end of each email.

Find out more about your rights: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles

Article 7 – Subcontracting

You are informed that we may use one or more subcontractors to carry out specific processing activities.

We undertake that any subcontractor will provide sufficient contractual guarantees regarding the implementation of appropriate technical and organisational measures, so that the processing meets the requirements of the GDPR (General Data Protection Regulation).

Article 8 – Third parties

We do not share any personal data for commercial purposes with third parties without your consent.

If we disclose your personal data to a third party, we will ensure that the third party is bound by the same confidentiality conditions as we are.

On the basis of legal obligations, your personal data may be disclosed to public authorities in application of a law, a regulation or by virtue of a decision by a competent regulatory or judicial authority. In the event of delivery of products abroad, the customs services in particular will be recipients of personal data.

The personal data you provide when placing your order will be sent to our suppliers, subcontractors and/or subsidiaries for processing. This information is considered to be strictly confidential, and these recipients will only have access to the data required to fulfil the contract between us.

In the event that we become involved in a merger, acquisition or any other form of transfer of assets, we undertake to guarantee the confidentiality of your personal data and to inform you before such data is transferred or subjected to new confidentiality rules.

If you link your account to an account on another service, such as a social network, that service may share your profile and login information with us, as well as any other information you have authorised to be shared.

This Site may provide links to other sites, applications and services which may be operated by third parties. In this case, we are not responsible for the processing of personal data by these third-party sites, whose personal data protection policies the user is invited to consult for further information.

Article 9 – Transfer abroad

We undertake to comply with the applicable regulations relating to the transfer of data to countries outside the European Union, in particular as follows:

  • We will only transfer visitors‘, prospects’ and customers’ data to countries recognised as offering an equivalent level of protection. In the case of transfers to the United States, only to organisations that have signed up to the EU-US Privacy Shield;
  • We will only transfer personal data outside countries recognised by the CNIL as having a sufficient level of protection if we have obtained authorisation from the CNIL to do so.

Article 10 – Safety

We undertake to implement all appropriate technical and organisational measures using physical and logistical security measures in order to guarantee a level of security appropriate to the risks of accidental, unauthorised or illegal access, disclosure, alteration, loss or destruction of your personal data.

In the event that we become aware of illegal access to your personal data stored on our servers or those of our service providers, or of unauthorised access resulting in the risks identified above, we undertake to :

  • Notify you of the incident as soon as possible if this is required by law;
  • Examine the causes of the incident;
  • Take all necessary measures within reasonable limits to mitigate the negative effects and damage that may result from the said incident.

Under no circumstances may the undertakings defined in the above point be assimilated to any recognition of fault or responsibility for the occurrence of the incident in question.

Article 11 – Legislation

This Privacy Policy is governed by French law. It is written in French. In the event that it is translated into one or more languages, only the French text will be deemed authentic in the event of a dispute. The temporary or permanent non-application of one or more clauses of this policy shall not constitute a waiver of the other clauses of this policy, which shall continue to have full effect.

Article 12 – Consent

By using this Site, you consent to its confidentiality policy.