Personal data is any data relating to an identified or identifiable natural person. A person can be identified:

• Directly by name or surname;
• Indirectly through a customer number, a loyalty account number, a telephone number for example.

In the context of your purchases or when you create an account on our website, you are led to transmit some of your data, hereinafter the "Data", allowing you to benefit from the products and services concerned. We encourage you to ensure that the Data you provide is accurate and kept up to date.

We attach great importance to the protection and confidentiality of your personal data, which we consider to be a guarantee of reliability and trust. The data privacy policy specifically reflects our commitment to enforce compliance with applicable data protection rules and, in particular, with the General Data Protection Regulation ("GDPR"). In particular, the privacy policy aims to inform you about how and why we process your data in connection with the services we provide.

The policy applies to you, regardless of where you live, whether you are a customer, a potential customer ("prospect") or a simple visitor to the Lafont website.

If you are under 15 years of age, you are not allowed to use our services without the prior and explicit consent of one of your parents, which must be provided to us in writing. If you believe that we may be holding information about a child of yours under the age of 15 without your consent, you may request that we delete that information at the contact information provided.

As part of the services offered, we may need to process your personal data for the following reasons and purposes:

• So that you can benefit from our services (e.g., creating an account, accessing our services, creating websites, etc.) and to respond to your requests (e.g., requests for information, complaints, etc.) on the basis of our general terms and conditions of sale, our general terms and conditions of use, and our legitimate interest in providing you with the best possible service.
• To keep you informed of our latest promotional offers and events (e.g. webinars) by email on the basis of our legitimate interest in retaining our customers and on the basis of your consent, in case you are not yet one of our customers
• So that you can follow us on social networks and share your opinions on the basis of the general terms of use of the platform used (e.g. Facebook, LinkedIn...) and our legitimate interest in having a dedicated page on social networks.
• So that you can subscribe to and receive our newsletter which will inform you of all the news concerning our services based on your consent.
• To ensure and enhance the security and quality of our services on a daily basis (e.g. statistics, data security, etc.) based on our legal obligations, our general terms and conditions of sale and our legitimate interest in ensuring the proper functioning of our services

Finally, we may also install "cookies" on your terminal. For more information on the use of "Cookies", we invite you to consult our "
Cookies Policy
".

We undertake to process your data only for the purposes described above. However, when you voluntarily post content on the pages we publish on social networks, you acknowledge that you are fully responsible for any personal information you may transmit, regardless of the nature and origin of the information provided.

• Professional identification data and contact information (e.g. last name, first name, professional email address, business address, etc.) kept for the duration of the provision of the service plus the legal limitation periods, which are generally 5 years.
• When there is a confusion between the name of your organization and your personal name (e.g.: auto-entrepreneur, VSE, etc.), economic and financial data (e.g.: bank account number, verification code, etc.) kept for the time necessary for the transaction and for the management of invoicing and payments, plus the legal limitation periods which are generally 5 to 10 years
• Data for commercial prospecting, marketing and subscription to our newsletter (e.g.: email address, etc.) kept for a maximum of 3 years from the last contact we had with you.
• Connection data (e.g. logs, IP address, etc.) kept for a period of 1 year.

Upon expiration of the retention periods summarized above, we delete all of your personal data to ensure your privacy for years to come. The deletion of your personal data is irreversible and we will not be able to communicate them to you after this period. At most, we can only keep anonymous data for statistical purposes. Please also note that in the event of litigation, we are obliged to keep all data concerning you throughout the processing of the case, even after the expiry of the retention periods described above.

The applicable data protection regulations give you specific rights that you can exercise, at any time and free of charge, to control the use we make of your data.

• Right of access and copy of your personal data as long as this request is not in contradiction with business secrecy, confidentiality, or the secrecy of correspondence.
• Right to rectify personal data that are erroneous, outdated or incomplete.
• Right to object to the processing of your personal data for commercial prospecting purposes.
• The right to request the deletion ("right to be forgotten") of your personal data that are not essential to the proper functioning of our services.
• Right to limit your personal data which allows you to photograph the use of your data in case of a dispute about the legitimacy of a processing.
• The right to data portability, which allows you to retrieve part of your personal data in order to store it or transmit it easily from one information system to another.
• The right to give instructions on what to do with your data in the event of your death, either through you or through a trusted third party or successor.

For a request to be taken into account, it is imperative that it is made directly by you to our services. We will respond to your request as soon as possible, within two months of receipt, if the request is technically complex or if we receive many requests at the same time. Please note that we can always refuse to respond to any excessive or unfounded request, especially if it is repetitive.

We will only share your data with those persons who are authorized to use it to implement our services. This may include our staff in charge of service implementation, accounting, marketing, or even the security of our premises.

We may also share your data with public authorities, external advisors and practitioners, and service providers or possibly business partners.

At no time does Lafont transfer or share your Data with companies whose purpose is to acquire prospects and send commercial solicitations by SMS or e-mail without your consent.

We implement all the technical and organizational means required to guarantee the security of your data on a daily basis and, in particular, to fight against any risk of destruction, loss, alteration, or disclosure of your data that would not be authorized.

For example, your data has regularly renewed backups and is encrypted in order to reinforce its daily security.

Do not hesitate to contact us via our
contact form
.

For more information about some of the information we use to recognize you when you return to
a-lafont.com
you can consult our "
cookie policy
".