You have arrived on the English website.

Personal data

PERSONAL DATA MANAGEMENT POLICY

FAYAT FONDATIONS is committed to protecting its customers' personal data and ensuring the highest level of protection. 

To provide its service, FAYAT FONDATIONS collects personal data from visitors to its FAYAT FONDATIONS website as well as from customers in stores.

FAYAT FONDATIONS, as Data Controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of personal data (GDPR) and the law No. 78-17 of 6 January 1978 as amended.

 

CONTENTS 


1. IDENTITY OF THE DATA CONTROLLER

2. PURPOSES OF DATA COLLECTION AND LEGAL BASIS

3. INDIVIDUAL RIGHTS

4. DATA RECIPIENTS

5. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION

6. DATA RETENTION PERIOD

7. COLLECTION OF DATA FROM MINORS

8. COMMERCIAL PROSPECTING

1. IDENTITY OF THE DATA CONTROLLER

The company collecting the personal data and carrying out the data processing is: 

SEFI-INTRAFOR, an SAS (French simplified joint-stock company) with capital of €3,500,000, whose registered head-office address is 9/11, rue Gustave Eiffel, Grigny, SIREN (French company registration number) ‎398 903 203. 

2. PURPOSES OF DATA COLLECTION AND LEGAL BASIS

FAYAT FONDATIONS ensures that it has one or more of the following legal bases for collecting personal data:

  • the execution of a contract (e.g. to process and send an order or to open and manage a FAYAT FONDATIONS customer account), or; 

  • the performance of a legal obligation (e.g. keeping invoices), or; 

  • where it is in FAYAT FONDATIONS's, legitimate interest, or; 

  • where the customer has given his/her consent to the collection of the data. 

 

FAYAT FONDATIONS’s legitimate interest must not conflict with the rights and freedoms of Customers. Examples of legitimate interests mentioned in the GDPR include fraud prevention, direct marketing and data sharing within a group of companies. 

FAYAT FONDATIONS collects and processes the personal data of its customers to carry out the following processing operations:

Purposes of processing implemented by 

FAYAT FONDATIONS 

Legal basis 
- Customer, visitor, prospect, candidate, local authority, business, journalist, etc. relations management (telephone / e-mail)  - Legitimate interest 
- Customer satisfaction management   - FAYAT FONDATIONS’s legitimate interest in improving service quality
- Statistical work, analysis, selection and segmentation of customers, visitors, prospects, candidates, local authorities, businesses, journalists, etc. to improve our understanding of customers, visitors, prospects, candidates, local authorities, businesses, journalists, etc.;  - FAYAT FONDATIONS’s legitimate interest in improving its knowledge of its customers
- Sending targeted commercial offers by email, SMS on social networks, other websites or any other medium; 

- Customer consent 

- Legitimate interest for paper-based prospecting mailings 

- Site traffic measurement (mobile and desktop) and mobile applications;  - FAYAT FONDATIONS’s legitimate interest in improving its knowledge of its customers.
- Setting up competitions and advertising them;  - Legitimate interest 
- Sharing information with business partners; 

- Execution of the contract between a Customer and FAYAT FONDATIONS

- Customer consent (for electronic prospecting operations) 

 

3. INDIVIDUAL RIGHTS

3.1 What rights can be exercised? 

Under Articles 15 to 22 of Regulation 2016/679 of 27 April 2016, any natural person whose data have been collected may exercise the following rights: 

  • A right of access 

  • A right of rectification 

  • A right to object to the processing of their data and to delete their data 

  • A right to oppose profiling 

  • A right to limitation of processing 

  • A right to data portability  

 

The Customer may also formulate instructions relating to the storage, erasure and communication of their personal data after their death in accordance with Article 40-1 of Law 78-17 of 6 January 1978. These guidelines may be general or specific. 

When FAYAT FONDATIONS detects a violation of personal data likely to create a high risk for the Customer's rights and freedoms, the Customer will be informed of this violation promptly. 

Finally, the Customer may withdraw his/her consent at any time. 

 

3.2 How can you exercise them? 

These rights can be exercised with the company FAYAT FONDATIONS, which collected the personal data as follows: 

The request must indicate the name, first name, postal address, email, and, if possible, the customer reference. 

After verifying your identity, FAYAT FONDATIONS sends a reply within one month after you exercise your right. In some cases, due to the complexity of the request or the number of requests, this period may be extended by an extra month, making a total of 2 months. 

These rights may in certain cases provided for by the regulations be subject to exceptions. 

In the event of a non-response or unsatisfactory response, the data subject may refer the matter to the data protection supervisory authority (CNIL: www.cnil.fr). 

4. DATA RECIPIENTS

Your data are sent to FAYAT FONDATIONS partners who can process the data on their behalf (they are recipients), or only on behalf of and according to FAYAT FONDATIONS’s instructions (they are subcontractors). 

 

The recipients of the data are: 

  • payment institutions (banks) 

  • business partners for business development purposes. To view the list of business partners, click here. 

 

FAYAT FONDATIONS also uses subcontractors for the following operations: 

  • secure payment on the site                                     

  • the fight against fraud  

  • the shipment of orders and parcels 

  • carrying out technical maintenance and development operations on the FAYAT IT website, internal applications and the central information system. 

  • collection of customer opinions 

  • sending sales prospecting emails 

  • call centre management 

5. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION

For certain operations, personal data may be transmitted to companies located in countries outside the European Union. Prior to the transfer outside the European Union, and in accordance with the regulations in force, FAYAT IT ensures the security of these data transfers. 

Transfers outside the European Union can be made in particular within the framework of the following activities:  

Activity

Country of destination of the data 

Supervision of data transfer  
The processing of data around social media  United States  Privacy Shield 
Cloud Office Solution  United States / Japan / Canada / Australia  Binding Corporate Rules 
CRM management solution and prospecting  United States  Privacy Shield 

 

6. DATA RETENTION PERIOD

FAYAT FONDATIONS has established precise rules concerning the length of time for which Customers' personal data are kept. As a matter of principle, unless otherwise required by law, data shall be kept for as long as necessary to fulfil the purposes for which it was collected. 

 

The storage periods used are as follows: 

  • Prospect data (person who has never made a purchase) is stored for three years after the last contact from the prospect; 

  • Customer data is kept for three years from the last purchase; 

  • Cookies for audience measurement, targeted advertising and sharing on social networks are stored on the customer's device or computer for a period of 13 months; 

  • Purchase invoices are kept for 10 years. 

7. COLLECTION OF DATA FROM MINORS

FAYAT FONDATIONS does not collect data on minors under 16 years of age without the consent of the holder of parental authority who himself or herself communicates the data.

8. COMMERCIAL PROSPECTING

FAYAT FONDATIONS uses your contact information to send you targeted advertising, in particular by email, post, SMS or on social networks.

 

FAYAT FONDATIONS complies with the rules laid down by Directive 2002/58/EC of 12 July 2002, which provides for the prior collection of express consent from the customer to send commercial prospecting by electronic means (email or SMS).

 

Thus, when creating your account on the site, you are expressly asked for your consent to receive offers from FAYAT FONDATIONS by email. 

 

FAYAT FONDATIONS will not send you personalised solicitations by email or SMS if you have not consented.

 

There is an exception when, without having given his/her prior consent, the Customer may nevertheless be approached if he/she is already a customer of FAYAT FONDATIONS, and the purpose of the prospecting is to offer similar products or services if he/she was able to oppose this at the time of collection. 

 

In all cases, the customer has the option to oppose the receipt of these requests by carrying out the following actions: 

  • For e-mail, by clicking on the unsubscribe link provided in each email; 

  • For SMS, by sending the message SMS stop to the number indicated in it; 

  • By contacting customer services. 

 

FAYAT FONDATIONS has the possibility of contacting you by phone to propose offers on products or services. If you do not wish to be solicited, you have the option to register on the list of opposition to telephone solicitation available on the website www.bloctel.gouv.fr