English
French
Privacy Policy
We will collect and process personal data about you in the context of our relationships with you.
As the data controller of your personal data, we are required to protect your privacy and use Your Personal Data in accordance with all laws and regulations regarding personal data and privacy, including the GDPR.
This Policy may be modified from time to time to comply with applicable laws and technical changes that must be made. We will duly inform you of any material, substantial changes or updates to this Policy. The latest version of this Policy will be published on our Site.
2. What personal data do we collect from you and for how long will we keep it?
When you create your account, use our Services or visit our Site, we collect directly from you and indirectly from third parties (e.g. our partners or service providers):
Your Personal Data
Retention period
Identification data (e.g. first name, last name, postal address, email, telephone number, login username and password)
For the entire duration of the service contract that binds us to you and for 1 year from the end of the contractual relationship.
Financial data (e.g. credit card, banking information)
This data is kept only by our payment service providers for the duration of the service contract between us and you.
This data may be retained by these service providers at the end of the contract, to the extent necessary to comply with their legal and regulatory obligations.
Transaction data (e.g. order details, delivery data, payment method, promotional code)
Throughout the duration of the service contract that binds us to you and at the end of the contract, to the extent necessary to comply with our legal and regulatory obligations.
Content provided by you (e.g. ratings and reviews, photos)
For the entire duration of the service contract that binds us to you and for 1 year from the end of the contractual relationship.
Communication data
Throughout the duration of the service contract that binds us to you and at the end of the contract, to the extent necessary to comply with our legal and regulatory obligations.
Location data
This data is used in real time and is not subject to any retention processing.
Cookies
13 months from collection.
Connection and traffic logs (e.g. IP address, connection period, type of device used)
1 year from collection.
Data from third parties (e.g. marketing service providers, business partners)
For the entire duration of the service contract that binds us to you and for 1 year from the end of the contractual relationship.
You can visit our Site without providing us with Your Personal Data, with the exception of data that we may legitimately collect through cookies without your prior consent. Use of our Application requires the creation of your account with the provision of Your Personal Data.
To the extent permitted by law, we will process Your Personal Data for commercial prospecting purposes. Electronic prospecting can be unsubscribed at any time (e.g. by clicking on the “unsubscribe” link displayed at the bottom of our emails or by writing to us at support@hyper-marche.com .
3. How do we use Your Personal Data?
We have listed below the purposes for which we use Your Personal Data, as well as the legal bases justifying the use of Your Personal Data.
Processing purposes
Legal basis
Provide, personalize, maintain and improve our Services:
For example, we will use Your Personal Data to manage your account or to place any order and communicate with you about your order.
Contractual necessity – we use Your Personal Data to ensure the proper execution of the contract we have entered into with you.
Offer customer support:
For example, we use Your Personal Data to study and deal with your problems.
Contractual necessity – we use Your Personal Data to ensure the proper execution of the contract we have entered into with you.
Ensure research and development of our Services:
For example, we contact you to obtain an opinion on our Services or feedback once your order has been placed or our Services have been provided.
Legitimate interest – we use Your Personal Data to obtain your advice and feedback in order to improve our Services.
Send non-promotional communications:
For example, we use Your Personal Data to inform you of changes to our Services or to all our legal documents, such as this Policy and our General Conditions of Use, and to respond to any questions you have submitted to us .
Legitimate interest – we use Your Personal Data to keep you informed about our Services and answer your questions.
Ensure marketing operations:
For example, we use Your Personal Data to send you our advertising communications about our Services or those of our commercial partners, including offers and discounts.
Legitimate interest – we use Your Personal Data to promote our Services.
Comply with legal/regulatory obligations or initiate legal proceedings:
For example, we may disclose Your Personal Data to competent authorities or to protect our rights, legitimate interests, property, safety or that of our customers, employees or third parties.
Compliance with legal obligations – we process Your Personal Data to ensure compliance with the legal standards to which we are required .
Legitimate interest – we use Your Personal Data to establish, exercise or defend legal claims.
Ensure automated decision-making:
For example, we use Your Personal Data to connect our commercial partners / delivery people with you or to carry out anti-fraud checks.
Contractual necessity – we use Your Personal Data to ensure the proper execution of the contract we have entered into with you.
Legitimate interest – we use Your Personal Data to establish, exercise or defend legal claims.
4. Who do we share Your Personal Data with? We may share Your Personal Data:
· with our commercial partners / delivery providers as part of the execution of the contract we have concluded with you;
· with the general public (e.g. your ratings, opinions or comments published on our Site or on the pages of our social networks);
· with our service providers (e.g. payment services, marketing services, cloud storage services and customer support services);
· with the competent authorities in order to comply with our legal/regulatory obligations or initiate legal proceedings.
5. Where will your Personal Data be processed?
We store and process Your Personal Data in any country where we engage service providers. If one of our service providers is established outside the European Economic Area (EEA), including in one of the countries which does not ensure an adequate level of protection of personal data, we ensure that the service provider the service in question complies with the mechanisms for transferring personal data as authorised by the European Commission, including in particular the Standard Contractual Clauses of the European Union.
Please contact us using our contact details below if you would like further information on the specific safeguards put in place when transferring Your Personal Data outside the EEA.
6. How do we protect Your Personal Data?
We take all appropriate measures to protect Your Personal Data from any accidental or illegal destruction, loss, modification, as well as any unauthorised disclosure or access.
7. How can you exercise your rights?
In accordance with the GDPR, you have the following rights:
· Right of access – confirm what personal data we hold about you, and provide you with a copy of that data if applicable.
· Right of rectification – correct any personal data concerning you which is inaccurate or erroneous, and complete, where applicable, your data if it is incomplete.
· Right to deletion/erasure – erase any personal data about you when there is no longer a valid reason for retaining that data.
· Right to restrict processing – have any processing of Your Personal Data suspended while any complaints regarding Your Personal Data (such as the accuracy of that data) are resolved.
· Right to data portability – recover Your Personal Data in a structured, readable format commonly used by an electrical machine, or transmit Your Personal Data directly to another company if this is technically feasible.
· Right to object – stop the use of Your Personal Data to send you advertising communications.
