Within the meaning of Article 4.7 of the RGPD, SAS ECOSUD assumes the capacity of controller of the personal data collected on the website www.ceres-flore.fr. SAS ECOSUD determines the purposes and means of the processing or processing carried out.
Why does ECOSUD collect personal data?
SAS ECOSUD collects data for several purposes explained below: analysis of website consultation behavior, carrying out sales operations, after-sales service and commercial canvassing. Some data are collected automatically. You are then scrupulously informed beforehand. Other data is collected as required by law and/or regulation (for example, for the preparation of invoices), and other data is of strategic and commercial importance and requires your prior consent.
In each case, SAS ECOSUD ensures that it complies with the regulations, whose requirements vary from simple information to the prior collection of your consent.
Data collected automatically
In accordance with the legislative and regulatory provisions in force, we automatically collect certain information when you browse our site. This data is as follows:
- the device and browser used
- the IP address
- the date and time of your browsing
- your browsing history
In order for this data collection to be permitted by regulation, we inform you that you may object to this collection by contacting customer service.
Contact us at this address contact [a] ceres-flore.fr to let us know your choice.
In accordance with the regulation, we inform you moreover that :
The data collected is not cross-checked with other treatments (customer files or statistics of frequentation of other sites for example).
The data collected by this means only gives rise to the production of anonymous statistics
We do not follow your navigation on other websites.
The IP address collected does not allow us to obtain a more precise geolocation than the scale of a city:
This data is not kept beyond 13 months from your first visit.
the raw data of frequentation associating an identifier must not be kept more than 13 months.
Any collection of data going beyond those aiming at feeding these statistics give place to the collection of your preliminary consent if it is not assists on another legal base.
Data collected at the creation of your customer account and during an order
In order to create your account and to access the ordering process, you will have to provide us with your company information as well as contact information, considered as personal: your name, your coordinates (email and postal address and phone number), your banking information. The legal basis for this collection and processing is based on Article 6.1.b of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”).
Data collected when you contact the customer service
You may provide us with personal data when you contact customer service, so that we can process your requests. Again, the legal basis for this is Article 6.1.b of the GDPR. The legal basis for this collection and processing is Article 6.1.b of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”).
In accordance with the regulations in force, ECOSUD informs you that the data will be kept for the period strictly necessary for its processing, in accordance with the regulations in force locally. For example, in accordance with French law, we are obliged to keep payment and billing information for a period of 10 years.
ECOSUD informs you that it will process data in a lawful, fair, transparent, adequate, relevant, limited, accurate and up-to-date manner. Therefore, ECOSUD undertakes to take all reasonable steps to ensure that such data is deleted or rectified without delay when it is inaccurate. An ECOSUD agent may contact you by telephone to verify the accuracy of the information provided.
ECOSUD will process your data in order to fulfil its contractual obligations for printing your order and managing your customer account. Without this data, we may not be able to bill you for the services you have ordered.
ECOSUD will also process your information to send you promotional offers and product information if you have given consent to do so. You may withdraw your consent to receive marketing and product information at any time by updating your contact preferences in the “my account” section of our website or by contacting customer service.
In accordance with Articles 15 to 22 GDPR, regarding the data we hold about you, you have the following rights:
- right of access (Article 15 of the RGPD)
- right of rectification (Article 16 of the GDPR)
- right to erasure (Article 17 of the GDPR)
- right to restriction of processing (Article 18 of the GDPR)
- right to notification of data: rectifications, erasures, limitation (Article 19 of the RGPD)
- right to data portability (Article 20 of the GDPR)
- right to object (Article 21 of the GDPR)
- right not to be profiled ( (Article 22 of the GDPR)
You can exercise these rights by sending your request to the following postal address: SAS ECOSUD 5, rue de la Lucque Ecoparc Coeur d’Hérault – La Garrigue 34725 Saint-André-de-Sangonis or to the email address contact bonjour [a] ceres-flore.fr. Any request for the exercise of a right must be accompanied by a copy of a valid proof of identity to enable us to ensure that the request is made by the legitimate owner of the data concerned. You may also contact the relevant supervisory authority (CNIL) to make any complaint you consider appropriate.
SAS may transfer data when necessary (for example to subcontractors such as graphic designers and/or workshops or carriers such as DHL, TNT, UPS, and La Poste).
The Site may automatically collect standard information as well as any type of personalized information that allows the site to identify its visitors.
Any information collected indirectly will only be used to track the volume, type and pattern of traffic using this site, to develop the design and layout of the site and for other administrative and planning purposes and generally to improve the service we provide to you.
You have the possibility to refuse the presence of cookies on your computer via the axeptio module provided for this purpose.
Duration of data retention
The length of time we keep your data varies according to the state of the law and when the constraints are lesser, according to the recommendations of the CNIL and our needs. For example, we must legally keep invoices for a period of 10 years. Invoice data is therefore kept for 10 years.