Personal data protection

What is the purpose of this policy?

This policy aims to inform users of the terms and conditions for the collection, processing, and use of their personal data, as well as the rights granted to them in this context under the applicable provisions in this area.

When do we process your data?

Data concerning you is notably collected or processed in whole or in part when you browse the website and when you enter information into the data collection forms found therein, and more generally in the context of your relationship and subsequent exchanges with the company.

In general, your data is therefore collected directly from you in the aforementioned circumstances.

In addition to this information, you are informed that the data we collect and process about you may potentially be enriched by us, in particular for commercial, prospecting, communication, or marketing purposes, using other sources of information (social networks, so-called "public" information, file rentals, etc.).

What categories of data do we collect?

Several categories of personal data concerning you may be collected, in particular the following:

identification data: this includes data such as your title, first and last name, and contact details (email address, phone number, postal address), etc.;

your traffic and browsing history on the website, including information relating to the traceability of your actions on and interactions with the site, as well as location data (e.g. IP address geolocation), data relating to your device, and tracking data regarding your interactions with emails we may send you (opens, clicks, etc.);

data relating to the monitoring of your relationship with the company: contact requests, information or documentation requests, correspondence exchanged, data relating to transactions carried out and means of payment, information of an economic and financial nature, data relating to family, personal, and possibly professional circumstances, subscribed services / ordered products and details, order history, data relating to invoice settlement, data required for loyalty, prospecting, research, survey, product testing, and promotional activities, etc.

your information and documents (in particular your CV and cover letter) provided in the context of job applications, as well as information we may gather for this purpose during recruitment operations (academic and university background, training and qualifications, professional experience and career path, general information relating to professional life, information of an economic or financial nature, information relating to personal life where applicable, etc.)

Is the collection of this data mandatory?

On the website, you are informed, on each personal data collection form, of the mandatory nature of the responses, and more generally of the information collected, by the presence of an asterisk next to the relevant field(s). In the absence of an asterisk, the information requested is optional.

If mandatory information is not provided, the request linked to this data collection (for example: online order, information request, application, etc.) may not be able to be processed, or its processing may be delayed.

For what purposes is your data collected?

Depending on the case, the company processes your data collected via the website in whole or in part for the following main purposes:

the management, processing, and follow-up of your requests and exchanges with the company made through or initiated via the website (for example: contact requests, information or documentation requests, applications, etc.), and of the company's relationships with its contacts (customers, prospects, etc.) in general;

the management of your relationship with the company regarding contracts, orders, invoices, payments and transactions (including the management of unpaid amounts and disputes, and the associated accounting) as well as the provision of a reserved member area;

the carrying out of prospecting, solicitation, and communication operations (emails including newsletters and postal mail, telemarketing, targeting, segmentation and personalization of communications, sharing of job offers);

the management and implementation of the company's commercial, communication, and marketing operations in the broadest sense;

the monitoring and processing of applications and pre-recruitment operations, including the evaluation and selection of applications and professional profiles, in particular through the creation of a candidate database (or CV library), as well as methods and techniques to assist with recruitment, with a view to filling certain positions (job offers matching your profile may also be sent to you for this purpose);

access to and use of the features offered on the website;

understanding and studying how website users use the site and their browsing behavior, with a view to improving our online communication;

the improvement and optimization of the quality and functionalities of the website;

the carrying out and preparation of studies, analyses, reports, and statistics;

the management and processing of requests from website users, and more generally from the company's contacts, seeking to exercise their rights regarding the protection of personal data;

compliance with the legal and regulatory obligations arising in particular from the company's activities.

Depending on the purposes pursued, the legal basis for such personal data processing may vary. In general, such processing is necessary:

for the management, processing, and follow-up of your requests addressed to the company (including responses to information requests, order and transaction processing, review of applications, etc.), these operations being in some cases qualifiable as operations necessary for the performance of a contract to which you are a party (in the context of an online order, for example) or as pre-contractual measures taken at your request (in the context of a job application, for example);

to pursue the legitimate interests of the company in the management and monitoring of its relationships, particularly commercial ones, with website users and more generally with its contacts, and in organizing its marketing, prospecting, and communication operations in general;

to comply with the legal and regulatory obligations applicable to the company.

Who are your data recipients?

Your personal data is intended for the authorized departments and personnel of the company and the entities of the group to which it belongs.

They may be shared, for certain of the aforementioned purposes, and only when such sharing is necessary, with any service providers and partners, contractual and commercial, who may be involved in the personal data processing operations referred to above.

Furthermore, your data may be shared with any authority legally empowered to receive it, in particular in the event of a requisition from judicial, police, or administrative authorities.

It is noted that the recipients referred to above are not necessarily recipients of all of your data, but only of the data necessary for the purpose requiring such communication.

How long is your data retained?

Unless otherwise specified:

your data collected and processed by the company is retained for a period of three years from your last contact with the company (online request, email or postal correspondence, phone call, newsletter subscription, click in an email sent to you by the company, participation in an event, etc.) or from the end of your contractual or commercial relationship with the company;

payment card data is retained only for the time necessary to complete the transaction;

information relating to your applications is retained for a maximum period of two years;

connection, browsing, and traffic data is retained for a maximum period of one year.

It is noted that all of this data may nevertheless be retained for longer than the aforementioned periods:

or after obtaining your consent;

or, in archived form, to meet any applicable legal and regulatory obligations binding on the company, or during the applicable legal limitation or opposition periods (cf. Payments).

The aforementioned retention periods have been defined so as to enable us to process your requests (information, orders, contact, etc.) and/or carry out our commercial, communication, marketing, and recruitment operations, while respecting the principle of proportionality, according to which personal data must not be retained for longer than necessary to achieve the purpose for which it was collected.

What are your rights?

In accordance with the aforementioned legal and regulatory provisions, you have the right to query and access your data.

You also have the right to rectification, erasure, and restriction of the processing of your data to a certain extent, as well as the right to data portability.

You also have the right to object to the processing of personal data concerning you, and the right to object to your data being used for prospecting purposes, in particular commercial prospecting.

You also have the right to define general and/or specific instructions regarding the fate of your personal data and the manner in which you wish your rights to be exercised after your death. In this regard, in the event of death brought to our attention, your data will be deleted, unless retention for a specified period is necessary for reasons relating to our legal and regulatory obligations and/or applicable legal limitation periods, and after having been, where applicable, communicated to a third party potentially designated by you.

All requests for the exercise of these rights, as well as all requests for information regarding the protection of personal data, must be submitted to the following email address: contact@celine-opticien-lunetier.fr

In the interest of confidentiality and the protection of your personal data, the company must verify your identity before responding to such a request. Accordingly, any request for the exercise of these rights must be accompanied by a copy of a signed identity document.

Some online forms on our website invite users to enter their phone number. Users who do not wish to be subject to prospecting, in particular commercial prospecting by phone, are informed of their right to register free of charge on the national opt-out list for telephone canvassing via the website accessible at www.bloctel.gouv.fr

Please note that you also have the right at any time to lodge a complaint with a national authority responsible for the protection of personal data (in France, this is the Commission Nationale de l'Informatique et des Libertés or "Cnil") if you consider that the processing of your data is not being carried out in accordance with the applicable provisions.

Cookies and other trackers or similar technologies

Cookies and other trackers or similar technologies (hereinafter "cookies") may be installed and/or read in your browser during your visit to the website.

Cookie settings

What measures are in place to ensure the security of your data?

Committed to ensuring the security of your data, the company takes all useful and appropriate precautions and measures, whether physical, logical, technical, functional, administrative, or organizational, taking into account the state of knowledge, the costs of implementation, and the nature, scope, context, and purposes of the processing as well as the risks — whose degree of probability and severity varies — to the rights and freedoms of natural persons, in order to preserve the security and confidentiality of data and guarantee an appropriate level of security in relation to the risk, and in particular to prevent data from being distorted, damaged, or accessed by unauthorized third parties.

Due to the inherent difficulties of conducting business online and the risks, which you are aware of, resulting from the electronic transmission of data, the company cannot however be held to an obligation of result.

In the event of difficulties arising, the company will use its best efforts to contain the risks and will take all appropriate measures, in accordance with its legal and regulatory obligations (corrective actions, notification of the national authority responsible for personal data protection and, where applicable, the individuals concerned, etc.).

In the event that part or all of a personal data processing operation is subcontracted, the company contractually imposes on its subcontractors security guarantees, and in particular confidentiality guarantees, with respect to the personal data they may access (appropriate technical and organizational data protection measures).

What happens to your data on third-party websites?

Links on the website may redirect you to third-party websites, external to those of the company.

In this regard, your attention is drawn to the fact that the personal data protection policies of these websites may differ from that of the company.

It is therefore recommended, in all cases, to read the personal data protection policy of each of the relevant websites.

In any event, the company cannot be held liable in cases where data processing carried out via one of these sites would contravene the applicable legal and regulatory provisions.

What should you do to be informed of updates to this policy?

This personal data protection policy may be modified or adjusted at any time.

In the event of a modification or adjustment, the new policy will be published online on the website in the dedicated section. Furthermore, all personal data collection forms on our website include a link to this policy.

We invite you to consult it regularly.