September 2021 version
KARIBAN France is a limited liability company with a single shareholder, entered on the Toulouse Trade and Companies Register under number 421 346 461, whose registered office is located in Villeneuve-lès-Bouloc (31620) (hereinafter the “Company”), and is part of the Tex Groupement economic interest grouping located at 10 Avenue du Girou, 31620 Villeneuve-lès-Bouloc, and entered on the Toulouse Trade and Companies Register under number 752 032 888 (hereinafter the “Group”).
Aware of the importance in protecting privacy and individual freedoms, we agree to protect such privacy and freedoms in accordance with applicable laws and especially Regulation (EU) 2016/679 of 27 April 2016 (hereinafter the “Regulation”) and France’s Data Protection Act 1978, as amended.
The aim of this Policy is to inform you of the principles that govern how the Company processes your personal data on its website and its social media in its capacity as the data controller within the meaning of the Regulation and/or as the joint controller with the Group. This Policy also informs you of your rights for protecting your personal data.
01- Methods of processing personal data
1.1. Categories of personal data
As part of our relationship, the Company and the Group, whether individually or jointly, are required to process information that is likely to identify you. This information constitutes personal data.
To be more precise, the Company is required to process the following categories of personal data:
- Identification data: first name and surname;
- Professional data: the name of your company, business mailing address, email address and telephone number;
- Any personal information appearing in documents associated with the processing activities implemented;
- Login details: IP address and information relating to your account on our website;
- Social media data.
1.2. Purposes and lawfulness of the processing
The personal data collected on our website are used exclusively for the purposes described below and for the legal basis associated with the processing activities:
|Purposes of processing||Responsibility||Legal bases|
|Responding to questions from customers and potential customers||Processing carried out jointly by the Company and the Group||Consent or implementation of pre-contractual measures, as applicable. In case of pre-contractual measures, we cannot enter into a contract unless you provide the requested information.|
|Sending commercial offers from Kariban and its business partners||Processing carried out jointly by the Company and the Group||Consent or our legitimate interest in communicating about our products, as applicable.|
|Carrying out satisfaction and quality surveys on purchased products||Processing carried out jointly by the Company and the Group||Consent or our legitimate interest in improving our service quality, as applicable.|
|Managing communication and requests for information on social media||Processing carried out jointly by the Company, the Group and social media (LinkedIn, Instagram, YouTube and Facebook)||Legitimate interest in communicating about the brand and dealing with enquiries.|
02 – Data storage periods
The personal data that we collect are processed for no longer than is necessary for the purposes pursued, while taking account of applicable prescription periods and the principle of proportionality.
03 – Data recipients
The recipients of the personal data are as follows (strictly in consideration of the purposes pursued):
- the in-house departments of the Group and the Company, including in particular the management, the accounts, IT, marketing, imports, technical, sourcing and sales departments;
- the other Group companies;
- our IT service providers;
- our marketing service providers.
The personal data collected may be transferred outside the European Union. When your personal data are transferred outside the European Union, we always take all the necessary measures to ensure that recipients offer guarantees ensuring an adequate level of protection that is equivalent to national and European regulations, especially through the use of standard contractual clauses by implementing technical, organisational and legal measures to improve transfer security.
04 – Security measures
We are committed to protecting the confidentiality, integrity, availability and security of your personal data. In accordance with Article 32 of the Regulation, we use our best efforts to implement the appropriate technical, logical and organisational measures to guarantee a level of security that is most suited to the risks incurred when processing your personal data. Wherever possible, we also take steps to prevent any loss, accidental destruction, alteration or unauthorised access to your personal data.
05 – Terms for exercising your rights
In accordance with applicable law, you have the right to:
- Access or rectify your personal data (right of access and rectification);
- Object to the processing of your personal data on legitimate grounds (right to object);
- To the extent permitted by the Regulation and applicable laws, request that the processing of your personal data be restricted or that your personal data be deleted (right to restriction of processing and right to erasure);
- Request the portability of your personal data (right to data portability);
You also have the right to lodge a complaint with the supervisory authority (France: Commission Nationale de l’Informatique et des Libertés – CNIL) regarding how we process your personal data.
06 – Data protection officer
We have appointed EDOS SAS to act as the Data Protection Officer (DPO).
You can contact our DPO at the following address if you have any questions concerning this policy or if you have any queries about the processing of your personal data: [email protected].
Kariban – A l’attention du délégué à la protection des données
10 Avenue du Girou
BP32168 Villeneuve les Bouloc
31621 Eurocentre Cedex