7. Management of Personal Data

The Client is hereby informed of the regulations governing marketing communications, including the Law of June 21, 2004, on Confidence in the Digital Economy, the French Data Protection Act of August 6, 2004, as amended, and the European General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).

7.1 Data Controller

For personal data collected in connection with the creation of a User account and the User’s navigation on the Website, the data controller is Le P’tit Délire, represented by Joëlle SALIOU, its legal representative.

As the data controller, Le P’tit Délire undertakes to comply with the applicable legal framework. In particular, it is responsible for determining the purposes and means of data processing, for providing its prospects and clients with full information on the processing of their personal data, and for maintaining an accurate record of processing activities.
Whenever Le P’tit Délire processes personal data, it takes all reasonable measures to ensure that such data is accurate, relevant, and limited to what is necessary for the purposes for which it is processed.

7.2 Purpose of Data Collection

Le P’tit Délire does not sell, rent, or otherwise commercially exploit personal data.
The data collected are used solely where necessary for operational purposes or for statistical and analytical objectives.

7.3 Rights of Users

In accordance with the applicable European regulations, Users of Le P’tit Délire have the following rights regarding their personal data:

Right of access (Article 15 GDPR), rectification (Article 16 GDPR), and update or completion of their data;
Right to erasure or “right to be forgotten” (Article 17 GDPR) of personal data that is inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication, or storage is prohibited;
Right to withdraw consent at any time (Article 13-2(c) GDPR);
Right to restriction of processing (Article 18 GDPR);
Right to object to the processing of personal data (Article 21 GDPR);
Right to data portability for data provided by the User when such data are processed automatically based on consent or a contract (Article 20 GDPR);
Right to define instructions regarding the handling of their data after death, including the right to designate a third party to whom Le P’tit Délire may or may not communicate such data.

Upon being informed of a User’s death, and in the absence of specific instructions, Le P’tit Délire undertakes to delete the User’s personal data, unless retention is required for evidentiary purposes or to comply with a legal obligation.

To exercise any of the above rights or to obtain information about the processing of personal data, Users may write to:

Le P’tit Délire
Kergo
56400 Ploemel
France

The request must specify the data concerned and be accompanied by a copy of a valid identity document (national ID card or passport).

Requests for deletion of personal data are subject to the legal obligations imposed on Le P’tit Délire, particularly regarding record-keeping and archiving.

Users also have the right to lodge a complaint with a supervisory authority, such as the Commission Nationale de l’Informatique et des Libertés (CNIL) – https://www.cnil.fr/en/home.

7.4 Non-Disclosure of Personal Data

Le P’tit Délire undertakes not to transfer, host, or process personal data collected from its clients in any country outside the European Union or one not recognized by the European Commission as providing an adequate level of protection, without prior notice to the client.

However, Le P’tit Délire remains free to select its technical and commercial subcontractors, provided that they offer sufficient guarantees of compliance with the requirements of the GDPR (Regulation (EU) 2016/679).

Le P’tit Délire takes all necessary precautions to ensure the security and confidentiality of personal data and to prevent access by unauthorized persons.
In the event of an incident affecting the integrity or confidentiality of the client’s data, Le P’tit Délire will inform the client as soon as possible and communicate the corrective measures implemented.

Le P’tit Délire does not collect any “sensitive data” as defined by the GDPR.

Personal data may be processed by subsidiaries or service providers (acting as data processors) solely for the purposes described in this privacy policy.

Within the limits of their respective responsibilities and for the purposes mentioned above, access to user data is strictly limited to the personnel of Le P’tit Délire, primarily those within customer service operations.

Customer satisfaction form

This questionnaire aims to collect information in order to improve the quality of our services.