N&C Conciergerie Privacy Policy
This website was produced and published by Poulp’UP, a company whose registered office is located in Mallemort and which is listed in the Trade and Companies Register.
As a result, we are responsible for the collection, processing and use of your personal data and for managing that data in accordance with the law. These data protection provisions form an integral part of the terms of use, which you will find here.
We are committed to handling your personal data responsibly. We therefore take it for granted that we comply with the legal requirements of the French Data Protection Act, the national data protection implementing ordinance, telecommunications legislation, as well as the European Union General Data Protection Regulation (GDPR) and other provisions of French and European data protection law.
We would like to inform you below of how we handle your personal data.
Please note that the information set out below may be reviewed and amended from time to time. We therefore recommend that you consult this privacy policy regularly. During your visit to our website https://nc-conciergerie.com/ we collect and use your personal data to the extent and for the purposes set out below:
SCOPE AND PURPOSES OF THE COLLECTION, PROCESSING AND USE OF PERSONAL DATA
When you visit our website
When you visit our website, our servers temporarily record each access in a log file.
We store the following data:
- the IP address of the computer from which the request originates,
- the date and time of access,
- the name and URL of the data retrieved,
- the website from which our domain was accessed,
- the operating system of your computer and the browser you use,
- the country from which our website is accessed, and
- the name of your internet service provider.
The collection and processing of this data is generally anonymised, with no personal reference, in order to enable the website to be used (establishing the connection), to ensure the security and long-term stability of the system and to optimise the website, as well as for internal statistical purposes. The above information will not be associated with, or stored together with, any personal information.
In the event of an attack on the network infrastructure of https://nc-conciergerie.com/ alone, or where any other unauthorised or improper use of the website is suspected, the IP address will be assessed for the purposes of clarification and defence and, where necessary, used in criminal proceedings to identify the users concerned and to bring legal action against them under civil and criminal law.
When you use the contact form
When you use the contact form, it is essential that you accurately enter the following personal data (*mandatory):
- First name*
- Last name*
- Email address*
- Reason for getting in touch*
- Your question*
The legal basis on which we process your contact request is Art. 6(1)(f) GDPR. That legal basis permits the processing of personal data for the purposes of our “legitimate interest”. It is in our legitimate interest to process your request.
You may object to this data processing at any time where there are grounds relating to your particular situation that argue against the processing of the data (see the “Contact” section).
When you contact us by email, telephone or post
We give you the option of contacting us by email (e.g. at the addresses shown on https://nc-conciergerie.com/), by telephone or by post. You can contact us and ask us questions about elements of the website and our services.
You are responsible for the communications and/or any content you send or communicate to us by email, telephone or post. We recommend that you do not provide sensitive information. Personal data will only be collected if you provide it to us voluntarily. You therefore control the information you supply to us. In order to be able to answer your questions, we may ask you to provide us with additional information, e.g. your postal address, your email address, etc. We will only collect personal data from you where this is necessary to answer your questions or to provide the services you have requested.
You may object to this data processing at any time (see the “Contact” section).
CENTRAL STORAGE
We store the information set out in this data privacy policy in a central electronic data processing system. Data concerning you will be automatically collected, matched and assessed for the purposes of processing your requests and providing our services.
You may object to this data processing at any time (see the “Contact” section below).
TRANSFER OF YOUR DATA TO THIRD PARTIES
We will only pass on your data if you have expressly consented to do so, we are obliged to do so by law or to the extent this is necessary to assert our rights.
In addition, we disclose users’ personal information to third parties to the extent necessary in connection with the use of the website, answering questions, processing requests or providing the services requested by the user. The use of this data by third parties is strictly limited to the purposes mentioned.
For the distribution of our printed materials, we use, for example, the marketing services provided by POULP UP
USE FOR MARKETING PURPOSES
a. DoubleClick by Google/DoubleClick Floodlight
This website uses DoubleClick by Google, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For these purposes, Google uses the “DoubleClick” cookie, which makes it possible to recognise the browser used by the user when they visit other websites. The information generated by the cookie about visits to these websites (including the IP address) will be transmitted to Google in the USA and stored on one of its servers (see below for more information about data transfers to the USA).
Google will use this information to evaluate your use of the website with regard to the advertising to be displayed, to compile reports for the website operator on website and advertising activity, and to provide other services relating to the use of the website and the internet. Google may also pass this information on to third parties where required to do so by law or where those third parties process the information on Google’s behalf. Nevertheless, Google will under no circumstances associate users’ IP addresses with any other data it holds.
Through the marketing tools used, your browser establishes a direct connection with Google’s server. We have no influence over the extent and subsequent use of the data collected by Google through the use of this tool, and the information we provide to you therefore reflects the current state of our knowledge. Through the integration of DoubleClick, Google receives information about which elements of our website you have identified as essential or about which advertisements you have clicked on. If you are signed up to a Google service, Google may associate the visit with your account. Even if you are not registered with Google or are not logged in, the provider may still discover and store your IP address.
In addition, the DoubleClick Floodlight cookies used allow us to understand whether you carry out any action on our website after opening or clicking on (conversion tracking) one of our advertisements/video ads that we display on Google or any other platform via DoubleClick. DoubleClick uses this cookie to understand the content you interact with on our website so that we can offer you targeted advertising in the future.
For more information about Google’s DoubleClick, please visit https://www.google.com/doubleclick and refer to Google’s general privacy policy: https://policies.google.com/privacy?hl=en.
In order to create pseudonymised user profiles for advertising and analytics purposes, we rely on a legitimate interest within the meaning of Art. 6(1)(f) GDPR. This applies to all of the data processing activities set out here. Our legitimate interest lies in direct marketing and in analysing the use of our website.
You may object to the above data processing in several ways: a) by configuring your browser accordingly, in particular by deleting third-party cookies so that you do not receive advertising from third parties (see section 6 below); b) by disabling conversion tracking cookies by setting your browser to block cookies from the domain https://www.google.com/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating interest-based advertising from providers that are part of the “About Ads” self-regulatory campaign at http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by deactivating it permanently in the Firefox, Internet Explorer or Google Chrome browsers at http://www.google.com/settings/ads/plugin.
b. Facebook Pixel/Facebook Custom Audience
On our website we use the “Facebook Pixel” from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the European Union, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Facebook uses the Facebook Pixel to identify visitors to our website and to define a target group for displaying advertisements (known as “Facebook ads”). We therefore use the Facebook Pixel in order to display Facebook ads, which we place ourselves, only to users of the social network who have shown an interest in our website or who meet certain criteria (e.g. interest in certain topics or products based on the web pages visited) and whom we have reported to Facebook (custom audiences).
We also use the Facebook Pixel to ensure that our Facebook ads match users’ potential interests and do not annoy them. Through our use of the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether or not users were redirected to our website after clicking on a Facebook ad (a process known as “conversion”).
The Facebook Pixel is integrated directly by Facebook when you visit our website and may store a “cookie” on your device. If you log in to Facebook or visit Facebook while logged in, your visit to our website is recorded in your profile. The data we collect about you is anonymous and therefore does not allow us to draw any conclusions as to users’ identities. However, the data is stored and processed by Facebook so that it can be linked to the profile of the user concerned. The data may therefore be used by Facebook for its own market research and advertising purposes.
In addition, when using the Facebook Pixel, we use the additional “advanced matching” function, through which data for the creation of target groups (“Custom Audience” or “Lookalike Audience”) is transmitted to Facebook in encrypted form.
Data processing by Facebook is carried out in accordance with Facebook’s privacy policy. For specific information and details about the Facebook Pixel and its functionality, please refer to Facebook’s help pages.
You can refuse to allow the Facebook Pixel to collect and use your information to display Facebook ads. To set the type of advertising you wish to see on Facebook, go to the Facebook Settings page and follow the instructions in the section on advertising based on user activity.
You can also opt out of the use of cookies for reach measurement and advertising purposes via the Network Advertising Initiative opt-out page. Please see the following pages for further opt-out options:
http://optout.aboutads.info/?c=3&lang=EN
The legal basis for the above data processing lies in our legitimate interest in analysing, optimising and operating our online offering cost-effectively (Art. 6(1)(f) GDPR).
c. Google AdWords Remarketing
We use Google AdWords on our website. Google AdWords is an online advertising programme from Google. We use the remarketing function. This allows us to use cookies to serve advertising based on the interests of the users of our website. For these purposes, user interactions on our website are analysed, which allows us, for example, to see what a user is interested in so that we can serve them targeted advertising on other pages even after their visit to our website. The cookies used serve to identify a web browser uniquely on a given computer and not to identify an individual. No personal data is stored.
You can opt out of Google’s cookies by following the instructions provided and by downloading and installing the browser add-on available at the following address: https://support.google.com/ads/answer/7395996?hl=en.
For more information about remarketing and Google’s privacy policy, please visit: https://policies.google.com/technologies/ads?hl=en.
The legal basis for the above data processing lies in our interest in advertising our products and services in a personalised way that is tailored to your interests (Art. 6(1)(f) GDPR).
d. Sizmek retargeting
We use technology from the provider Sizmek Inc., 401 Park Avenue S, 10016 New York City, USA, which allows us to offer you relevant, targeted advertising media and advertisements based on your interests and your usage behaviour on our website, as well as in relation to third-party offers. We also use Sizmek to measure and statistically evaluate the success of our advertising (e.g. interaction with an advertisement or a click on it).
Cookies are used for these purposes to analyse and evaluate your usage behaviour (e.g. clicks) and your interactions with advertisements. The data collected includes usage-related data (e.g. clicks on advertisements, websites, time and duration of the visit) and browser-related data (e.g. language settings, screen resolution), which does not allow any conclusions to be drawn as to your identity.
For more information about privacy and your setting options, please refer to https://www.sizmek.com/privacy-policy/. You may object at any time to the use of Sizmek technology by means of the opt-out tool available at https://www.sizmek.com/privacy-policy/.
The legal basis for the above data processing lies in our interest in offering our products and services in a personalised way that is tailored to your interests (Art. 6(1)(f) GDPR).
TRANSFER OF PERSONAL DATA ABROAD
SAS Goldshteynsaatortgallery is entitled to transfer your data to third-party companies established abroad to the extent that this is necessary in connection with processing your requests, providing services and running marketing campaigns. These third-party companies are required to respect users’ privacy in the same way as the provider itself. If the level of data protection in a country is considered inadequate under Swiss standards or within the meaning of the EU General Data Protection Regulation, we will ensure by contract that your personal data is protected at all times in accordance with Swiss regulations and the EU General Data Protection Regulation.
An overview of the third-party service providers and the places where they are established can be downloaded here. Most of the service providers are established in Switzerland or Germany. The website is hosted on a Planet Hoster shared server in Paris, France. However, some of the third-party service providers mentioned in this privacy policy are based in the USA (see the “Retargeting”, “Tracking tools” and “Social network features” sections). For more information about data transfers to the USA, please see the “Tracking tools” section.
COOKIES
Cookies help us, among other things, to make visiting our website easier, more enjoyable and more useful. Cookies are information files stored by your browser on your computer’s hard drive when you visit our website.
Cookies do not damage your computer’s hard drive and do not transmit personal data to us.
We use cookies, for example, to recognise you as a registered user so that you do not need to register each time. In this case, such use does not mean that we obtain new personal data about you as an online visitor.
Most internet browsers accept cookies automatically. However, you can adjust your browser settings so that cookies are not placed on your computer, or so that you receive a warning message each time you encounter a new cookie. For more information, please refer to your browser settings.
However, if you disable cookies, you may not be able to use all of the services on our portal.
TRACKING TOOLS
a. Google Analytics
This website uses Google Analytics, a web statistics service provided by Google. Google Analytics uses methods that make it possible to analyse the use of the website, such as “cookies” (see the “Cookies” section above). The information generated by the cookie about your use of this website, such as:
- your navigation path through the website,
- the length of time spent on the website or on one of its pages,
- the page you are on when you leave the website,
- the country, region or city from which access takes place,
- the device used (type, version, colour depth, resolution, browser window width and height),
- returning visitors and new visitors,
- the browser type/version,
- the operating system used,
- the referring URL (the previously visited page),
- the host name of the computer from which access takes place (IP address), and
- the time of the request to the server
will be transferred to the USA and stored on servers in that country by Google, a company belonging to the holding company Alphabet Inc. The IP address is truncated by activating IP anonymisation (“anonymizeIP”) on this website before transmission within the member states of the European Union or to other states party to the Agreement on the European Economic Area, or Switzerland. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Only in certain exceptional cases may the full IP address be transmitted to a Google server in the USA, where it will then be truncated. In such cases, we provide contractual safeguards to ensure that Google maintains an adequate level of data protection.
The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to the use of the website for market research purposes and for the tailored design of the website. This information may also be transferred to third parties where required by law or where third parties process this data as processors. According to Google, the IP address will never be linked to any other data concerning the user.
Users can prevent Google from collecting the data generated by the cookie and relating to their use of the website (including their IP address), as well as the processing of that data by Google, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plug-in, you can click on this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on the user’s device. If the user deletes their cookies (see the “Cookie” section above), they must click the link again.
b. Google AdWords Conversion
As part of our use of Google AdWords, we use “conversion tracking”. For these purposes, we track conversions using Google Analytics. If you visit certain pages of our website, Google and we ourselves may determine whether you clicked on a Google advertisement and whether you were redirected to that page.
The information collected through conversion tracking is used to generate conversion statistics. We receive the total number of users who clicked on our advertisement and were redirected to a page containing a conversion tracking tag. However, we will not receive any information that personally identifies users. If you do not wish to be subject to this tracking, you can opt out of this use by simply disabling the Google conversion tracking cookie in your browser via the user preferences section. In that case, you will not be included in the conversion tracking statistics.
The storage of conversion cookies is based on Art. 6(1)(f) GDPR. It is in our legitimate interest to analyse user behaviour in order to optimise our website and our advertising.
For more information about Google AdWords and Google Conversion Tracking, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.
You can set your browser to notify you when cookies are used and to accept them only in specific situations or to refuse them generally, and you can enable the automatic deletion of cookies when you close your browser. If cookies are disabled, website functionality may be limited.
DATA TRANSFERS TO THE USA
For the sake of completeness, please note that under US law the US authorities may take surveillance measures that allow the general storage of all data transferred from the European Union or Switzerland to the USA. This is done without distinction, restriction or exemption based on the objective pursued and without objective criteria that would limit the US authorities’ access to personal data and its subsequent use to precise and strictly limited purposes that would justify access to that data.
We inform users residing in an EU member state that the USA does not have an adequate level of data protection from the point of view of the European Union, partly because of the issues mentioned in this section. Insofar as we have indicated in this privacy policy that certain data recipients (such as Google) are located in the USA, we will ensure that your data is protected at an appropriate level with our partners, either through contractual agreements with those companies or by ensuring that those companies are certified under the EU-US Privacy Shield.
SOCIAL NETWORK SERVICES
On our website we provide you with certain social network services, in particular sharing product information on Facebook, posting tweets about it, etc. You will find these services on the individual product pages under the heading “Share”.
On our website, social network features (“plug-ins”) are integrated by the bookmarking service AddThis, operated by AddThis LLC, Inc., 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA (“AddThis”). You will find an overview of the AddThis plug-ins and how they look here: https://www.addthis.com/get/share/en/.
When you visit our website, which contains this plug-in, your browser establishes a direct connection with AddThis’s servers. The content of the plug-in is transmitted by AddThis directly to your browser and integrated into the page. Through the integration of the plug-in, AddThis receives information indicating that your browser has requested the corresponding page of our website and stores a cookie on your device to identify your browser (see the “Cookies” section). This information (including your IP address) is transmitted directly from your browser to an AddThis server in the USA and stored there. AddThis uses the data to create anonymous user profiles, which serve as the basis for delivering personalised advertising tailored to the interests of visitors to sites with AddThis plug-ins. The purpose and scope of the data collection and the further processing and use of the data by AddThis are set out in AddThis’s privacy policy: http://www.addthis.com/privacy/privacy-policy.
If you wish to object to data collection by AddThis in the future, you can use an opt-out cookie, available for download via the following link: http://www.addthis.com/privacy/opt-out.
We provide social network services for the following social networks:
- Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA,
- Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and
- Google+ of Google Inc.
When you click on the relevant social network icons, you will be connected to the social network in question in order to carry out the service you have chosen, e.g. to share content on Facebook or to post tweets on Twitter. However, to do so you must log in to your corresponding user account or already be logged in.
If you select one of the services provided and click on the icon of the social network concerned, a direct connection is established between your browser and the server of that social network. This provides the network with information indicating that you have visited our website with your IP address and that you have followed the link. If you follow a link to a network while you are logged in to your account on that network, the content of our page may be linked to your profile on the network, which means that the network may link your visit to our website directly to your user account. If you wish to prevent this, you must log out before clicking on the links concerned. An assignment takes place in all cases if you log in to the network concerned after clicking on the link.
Links to our social network profiles
On our website, we have included links to our profiles on the following social networks:
- Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA,
- Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA,
- Instagram Inc., 1601 Willow Road, Menlo Park, California 94025, USA
- YouTube, a service provided by Google Inc.,
If you click on the icons of the social networks concerned, you will be redirected automatically to your profile on the network in question. In order to use the features of that social network there, you must be logged in to your user account on the social network concerned.
When you open a link to one of our social network profiles, a direct connection is established between your browser and the server of the social network in question. This provides the network with information indicating that you have visited our website with your IP address and that you have followed the link. If you follow a link to a network while you are logged in to your account on that network, the content of our page may be linked to your profile on the network, which means that the network may link your visit to our website directly to your user account. If you wish to prevent this, you must log out before clicking on the links concerned. An assignment takes place in all cases if you log in to the network concerned after clicking on the link.
RIGHT OF ACCESS, ERASURE AND RECTIFICATION
You may request information about the personal data we hold about you, free of charge and at any time. Requests for information must be sent in writing and accompanied by proof of identity. You are also entitled to request at any time that the data we hold about you be erased or corrected. You also have the right to ask us for the data you have provided to us (right to data portability). On request, we will also transfer the data to a third party of your choice. You have the right to receive the data in a commonly used file format.
You can do this by sending a request to that effect by email to contact@nc-conciergerie.com. You will find other ways of contacting us in the “Contact” section.
Please note that if your data is erased, our services may no longer be usable, in whole or in part. You may withdraw your consent to certain data processing at any time, such withdrawal taking effect for the future.
Please note that, by law, we must retain certain data for a certain period. We are therefore required to keep that data until the end of that period. We will block this data in our system and use it only to comply with legal requirements.
ADVICE FOR CHILDREN AND PARENTS
The website https://nc-conciergerie.com/ is aimed at an adult audience. Minors, and in particular children under the age of 13, are not permitted to send us personal data about themselves or to sign up for a service. If we become aware that data of this kind has been sent to us, it will be deleted from our database. The child’s parents (or legal guardians) may contact us and ask us to delete the data or to unsubscribe. For this purpose, we ask for a copy of an official document confirming that you are a parent or legal guardian.
DATA SECURITY
We use appropriate technical and organisational security measures that we consider suitable to protect the data we hold about you against manipulation, partial or total loss and unauthorised access by third parties. Our security measures are constantly updated to take account of technological developments.
We also take the protection of our own internal company data very seriously. Our staff and the service providers we engage are required to maintain confidentiality and to comply with data protection law. In addition, they only have access to personal data to the extent necessary.
DATA RETENTION
We only retain personal data for as long as necessary,
- to use the tracking services mentioned within the limits of our legitimate interest;
- to provide the services specified above that you have requested or for which you have given your consent.
We retain contractual data for longer where our legal retention obligations require it. The retention obligations that require us to keep data arise from accounting and tax regulations. Under those regulations, business correspondence, contracts concluded and accounting records must be kept for up to 10 years. If we no longer need this data to provide you with the services, it will be blocked. In other words, this data may then only be used for accounting or tax purposes.