1.1 About us
La Cité du Chocolat is a Valrhona simplified joint-stock company (or "SAS") with a head office at 12 Av. du Président Roosevelt, Tain-l'Hermitage (26600). It specializes in the skills tourism sector and focuses on cocoa, chocolate and confectionery product manufacturing.
La Cité du Chocolat, a Valrhona SAS company, respects your privacy and undertakes to process your personal data fairly and transparently, in accordance with the applicable data protection regulations and the General Data Protection Regulation (GDPR) in particular.
Please read the following carefully to see our policy and practices regarding your personal data and how we process them.
1.2 Who is responsible for processing your data?
La Cité du Chocolat, a Valrhona SAS company, acts as data controller, hereinafter referred to as "the Data Controller" or "we", for the processing of the personal data referred to in this document.
The Data Controller has appointed a data protection policy officer, who can be contacted via:
Service communication
Cité du Chocolat Valrhona
37 avenue du Président Roosevelt, 26600 Tain l'Hermitage
Please provide proof of your identity when contacting the Data Controller. You must also clearly state your full name and the address to which you would like a reply to be sent.
The data protection officer can be contacted at the following address: dpo@savencia.com.
1.3 What types of personal data are collected from you?
We collect and process the following types of data for the purposes stated:
Purposes | Types of personal data processed |
Personalising the "Le Chocolat & Vous" ("Chocolate & You") experience | Personal details: first name Contact details: email |
Sending newsletters | Contact details: email address |
Sales promotions / Promotional offers | Personal details: name, date of birth, gender Contact details: email, telephone |
Information marked with an asterisk in our forms must be provided. If it is not supplied, the associated service cannot be provided.
1.4 Our commitments
La Cité du Chocolat, a Valrhona SAS company, undertakes to process your personal data fairly and transparently. To this end, we inform you every time we process your data by means of notices at the bottom of each form collecting data.
Your personal data are collected fairly, with no processing taking place without your knowledge or without prior information.
We will process your personal data for specific purposes. Each data processing operation will have a legitimate, specific and explicit purpose.
We ensure that your data are kept up to date, and we implement procedures to enable inaccurate data to be deleted or rectified.
1.5 What are the purposes and legal basis for processing your data, and how long can they be kept for?
The purposes, legal basis and retention periods implemented by the Data Controller are set out below.
We will retain your personal data in accordance with a retention policy that ensures data are kept for a period of time appropriate to the purpose for which they were collected, except where laws and regulations require a different retention period.
Accordingly, our policy is set out as follows:
| Purposes | Legal basis | Retention period |
-
| Personalising the "Le Chocolat & Vous" ("Chocolate & You") experience | Legitimate interest | 3 months from participation in the quiz. The results of the quiz will be anonymized after this 3-month period. |
-
| Sending newsletters | Consent | Until you withdraw your consent or, failing that, 3 years after the last deliberate contact from you |
-
| Sales promotions, promotional mailouts | Consent | Until you withdraw your consent or, failing that, 3 years after the last deliberate contact from you |
Data in interim storage may only be consulted on a one-off basis by specifically authorized persons.
1.6 With whom do we share your personal data?
The personal data we collect, and those collected subsequently, are intended for our use in our capacity as Data Controller.
We ensure that only authorized persons have access to this data. Our subcontractors/service providers may access this data in order to carry out the services we entrust to them.
When we use a service provider, we only disclose personal data after obtaining a commitment and guarantees from them regarding their ability to meet these security and confidentiality requirements.
La Cité du Chocolat, a Valrhona SAS company, signs contracts with its subcontractors in compliance with its legal and regulatory obligations. These contracts precisely define the terms and conditions for data processing by subcontractors, in accordance with data protection regulations.
Your personal data may be combined with, pooled or shared between all the parent, sister and subsidiary bodies of the Data Controller.
It may be communicated to these bodies for the purposes set out in this data protection policy. These operations are carried out using tools that comply with the applicable regulations and ensure that your rights are protected and respected.
1.7 Have your data been transferred outside the European Union?
As part of the services we offer, we do not transfer personal data to recipients outside the European Union.
1.8 How do we protect your data?
We take your data security very seriously.
La Cité du Chocolat, a Valrhona SAS company, has implemented technical and organizational procedures to suit the degree of sensitivity associated with your personal data. This is to ensure their integrity and confidentiality and to protect them against any malicious access, loss, alteration or disclosure to unauthorised third parties.
However, despite our best efforts, no security measure can offer complete protection against all risk of misappropriation or hacking, for which we, as the data controller, cannot be held responsible.
In the event of a personal data breach, we undertake to notify the CNIL (the French data protection authority) in accordance with current data protection regulations. We will inform you as soon as possible in the event of a data breach presenting a high level of risk to your rights and freedoms, in accordance with the conditions set out in data protection regulations.
1.9 What are your rights?
As the data controller, La Cité du Chocolat, a Valrhona SAS company, fully assumes its responsibility to respect your rights in relation to its processing of your data.
- Your right to be informed
You acknowledge that this data protection policy informs you of the purposes, legal framework, interests and recipients or categories of recipients with whom your personal data are shared, and of the possibility of data being transferred to a third-party country or to an international organization.
You confirm that, in addition to this information, you have received further information about the following, the aim of which is to ensure that your data are processed fairly and transparently:
- how long we keep your personal data;
- your rights and how to exercise them.
If we decide to process data for purposes other than those indicated, you will be provided with all relevant information relating to these new purposes.
A. Your right to access your data
If you exercise this right, you receive confirmation that your personal data are or are not being processed and where this takes place. You have the right to request a copy of your data and information about:
- the purposes for which they are being processed;
- the types of personal data concerned;
- the recipients or types of recipients and, where appropriate, any international organizations to which personal data have been or will be disclosed, particularly recipients in third-party countries;
- where possible, the intended retention period for personal data or, where this is not possible, the criteria used to determine that period;
- your right to ask the Data Controller to rectify or erase your personal data, your right to request that processing of your personal data be restricted, and your right to object to processing;
- your right to lodge a complaint with a supervisory authority;
- information about the source of data when they are not collected directly from the data subjects;
- the use of automated decision-making, including profiling, and in the latter case, information about the underlying rationale, as well as the importance and the expected consequences of this for the data subjects.
You may ask us to rectify or add to your personal data if they are inaccurate, incomplete, ambiguous or out of date.
B. Your right to rectify your data
You may ask us to rectify or complete your personal data if they are inaccurate, incomplete, ambiguous or out of date.
C. Your right to erasure
- General circumstances
You may ask us to erase your personal data in the circumstances provided for by legislation and regulations. Your attention is drawn to the fact that the right to erasure does not apply in all circumstances and can only be exercised on the basis of one of the grounds provided for in the applicable regulations.
- Special provisions for competitions
Requests received while a competition is ongoing will be assessed in accordance with the competition rules.
D. Your right to restrict processing of your data
You may request that processing of your personal data be restricted in circumstances provided for by law and the regulations.
E. Your right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data when the legal basis for this is legitimate interest on the part of the controller.
F. Your right to portability
You have the right to ensure the portability of your personal data. Please note that this is not a right in all circumstances. Not all data from all processing operations is portable, and this right only applies to automated processing, rather than manual or paper-based processing. This right is limited to processing for which the legal basis is your consent or the performance of pre-contractual measures or a contract.
G. Your right to withdraw your consent
Where the data processing we carry out is based on your consent, you may withdraw this at any time. We will then stop processing your personal data without affecting any previous operations for which you have given your consent.
H. Your right to decide what happens to your data after death
You also have the possibility of setting out specific directives relating to the storage, deletion and disclosure of your personal data after your death, in accordance with the procedures set out below. These specific directives only concern the processing carried out by us and will be limited to this.
You can also set out general directives about the rights of any person designated by law to make decisions about your data.
I. How can you exercise your rights?
All the rights listed above may be exercised:
- By contacting the following email address: citeduchocolat@valrhona.fr
By contacting the following postal address:
Service communication
Cité du Chocolat Valrhona
37 avenue du Président Roosevelt, 26600 Tain l'Hermitage
Please provide proof of your identity. You must also clearly state your full name and the address to which you would like a reply to be sent.
In principle, you can exercise all your rights without incurring any charges. However, if you exercise your right to access your data, you may be asked to pay a reasonable fee based on administrative costs related to any copy of the data you request.
With regard to the right to be informed, the Data Controller is not obliged to respond if you already have the information you are requesting.
The Data Controller will inform you if it is unable to comply with your requests within one month of receiving them. If necessary, this period may be extended by a further two months, in which case you will be informed and we will explain why this is required.
These rights are not absolute and are subject to various conditions under:
- applicable local legislation on personal data protection or privacy; and
- the laws and regulations applicable to you.
The Data Controller wishes to inform you that failure to provide and any modification of your data may have an impact on our ability to process certain requests when meeting contractual obligations, and that your request to exercise your rights will be kept for monitoring purposes for 6 years in the case of the right to object and 1 year in the case of other rights.
The data protection officer can be contacted at the following address: dpo@savencia.com
If necessary, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (3 place de Fontenoy, 75007 Paris or https://www.cnil.fr/fr/plaintes) or to take legal action.
1.10 Policy update
This Data Protection Policy may be modified, particularly in the event of changes to services offered by Cité du Chocolat Valrhona SAS via this terminal. We therefore recommend that you consult this policy each time you accessthe terminal.