Privacy Policy

www.rebellesnacks.com

Last updated on 23/11/2022.

PREAMBLE

This privacy policy informs you of the manner in which REBELLE SAS, uses and protects the information you transmit to us when you use this site accessible from the following URL: www.rebellesnacks.com (hereinafter the "Site").

Please note that this privacy policy may be modified or supplemented at any time by REBELLE SAS, in particular in order to comply with any legal or technological developments. In such a case, the date of its update will be clearly identified at the top of this policy. These modifications are binding on the user once they have been informed of the publication of the updated privacy policy and have accepted it.

ARTICLE 1. PARTIES

This privacy policy applies between the publisher of the Site, hereinafter referred to as « the Publisher », and any person connecting to the Site, hereinafter referred to as « the User ».

ARTICLE 2. DEFINITIONS

« Site Content »: elements of any kind published on the Site, whether or not protected by intellectual property rights, such as texts, images, designs, presentations, videos, diagrams, structures, databases or software.

« Publisher »: REBELLE SAS, acting in its capacity as publisher of the Site.

« User »: any person connecting to the Site.

"Site": website accessible at the URL www.rebelle.co, as well as the sub-sites, mirror sites, portals and URL variations related thereto.

ARTICLE 3. SCOPE OF APPLICATION

This privacy policy applies to all Users. Clicking "I accept" when registering on the Site constitutes your full and unreserved acceptance of it. Likewise, clicking "I accept" on the cookie information banner displayed on the Site constitutes your confirmation of this acceptance, whilst allowing you to personalise the cookies that will or will not be applied to you. You thereby acknowledge having fully read and accepted them without restriction.

The User acknowledges the evidentiary value of the Publisher's automatic recording systems and, unless they can provide proof to the contrary, waives the right to contest them in the event of a dispute.

Acceptance of this privacy policy requires Users to have the legal capacity necessary to do so, or to be at least 16 years of age, or failing that, to have the authorisation of a guardian or curator if they are incapacitated, of their legal representative if they are under 16 years of age, or to hold a mandate if they are acting on behalf of a legal entity.

ARTICLE 4. PERSONAL DATA

In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016 and applicable national legislation, the Publisher provides you with the following information:

4.1. Identity of the Data Controller

The controller of the data collected and processed on the Site is Rebelle SAS, whose registered office is located at 16 RUE DE LA GRANGE BATELIERE, 75009 PARIS.

4.2. Data Collection by the Publisher

4.2.1. Data Collected

4.2.1.1 Data Collected during Browsing on the Site

When browsing the Site, you consent to the Publisher collecting information relating to: the content you view and click on; demographic data; the device used and its software environment; your location; your connection data (times, IP address, etc.).

4.2.1.2. Data Collected when Using the Contact Form or the Contact Email Address

The use of the contact form or contact email address by the User involves the collection by the Publisher of the following personal data: surname, first name, email address*, telephone number.

Personal data followed by an asterisk is mandatory for use of the contact form. Users who do not wish to provide the information required to use the contact form will not be able to send a message to the Publisher directly from the Site.

4.2.1.3. Data Collected upon Registration on the Site

Use of the registration form by the User implies the collection by the Publisher of the following personal data: surname*, first name*, postal address*, email address*, date of birth, telephone number.

Personal data marked with an asterisk is mandatory for registration on the Site. Users who do not wish to provide the information required to use the registration form will not be able to register directly from the Site.

4.2.1.4. Data Collected when Using the Newsletter Form

In the context of using the newsletter form, the Publisher may collect and process: your email address.

4.2.2. Purposes of Personal Data Collection

The data collected during browsing is subject to automated processing with the purpose of:

Verify the identity of individuals;
Ensure and improve the security of services;
Develop, operate, improve, provide and manage the Site;
Contextualise and improve the User experience;
Send information and contact individuals, including by email;
Target advertising content;
Avoid any unlawful or illegal activity;
Enforce the terms and conditions relating to the use of the Site.

The data collected when using the contact form or the contact email address is subject to automated processing with the purpose of:

Verify the identity of individuals;
Ensure and improve the security of services;
Contextualise and improve the User experience;
Send information and contact individuals, including by email;
Target advertising content;
Avoid any unlawful or illegal activity.

The data collected upon registration is subject to automated processing with the purpose of:

Fulfil its contractual obligations;
Verify the identity of individuals;
Ensure and improve the security of services;
Develop, operate, improve, provide and manage the Site;
Contextualise and improve the User experience;
Send information and contact individuals, including by email;
Avoid any unlawful or illegal activity;
Enforce the terms and conditions relating to the use of the Site.

The data collected when using the newsletter form is subject to automated processing with the purpose of:

send newsletters to the User.

4.2.3. Legal Bases for Processing

The legal basis for processing the data collected during browsing is the legitimate interest of the Publisher, namely to carry out an analysis of behaviour on the Site and to obtain improved security and operation of the Site. Some of this data, such as that arising from the placement of certain cookies, may have the consent of the persons concerned as its legal basis.

The data collected when using the contact form or the contact email address is based on the consent of the persons concerned.

The legal basis for processing the data collected upon registration is a contractual relationship.

The legal basis for processing the data collected when using the newsletter form is the consent of the persons concerned.

4.2.4. Recipients of Data

The collected data may only be viewed by members of the Publisher's management, by staff responsible for preparing your order, and by staff responsible for managing the Site, and is never made freely viewable by any third party.

4.2.5. Retention Period for Personal Data

Personal data collected during browsing is retained for a reasonable period necessary for the proper administration of the Site and for a maximum of 12 months, or until the consent of the persons concerned is withdrawn.

Personal data collected when using the contact form or when sending a message to the contact email address is retained for a reasonable period necessary for the proper handling of the User's request, and for a maximum of 12 months.

The data collected upon registration is retained for the duration of the contractual relationship between the Publisher and the User.

The data collected when using the newsletter form is retained until the consent of the persons concerned is withdrawn.

At the end of each of these retention periods, the Publisher will archive this data and retain it for the period during which its liability may be invoked.

After this retention period, the Publisher undertakes to permanently delete the data of the persons concerned.

4.2.6. Security and Confidentiality of Personal Data

Personal data is stored under secure conditions, using current technical means, in compliance with the provisions of the General Data Protection Regulation and applicable national legislation.

4.2.7. Minimisation of Personal Data

The Publisher may also collect and process any data voluntarily transmitted by a User, in particular via the free-text field of the contact form.

The Publisher guides Users as much as possible when they provide unnecessary or superfluous personal data.

The Publisher undertakes to retain and process only the data strictly necessary for its activities, and will delete any received data that is not useful as soon as possible.

4.3. Respect for Rights

You have the following rights regarding your personal data, which you may exercise by writing to our postal address or by sending an email to the following address: hello@rebellesnacks.com.

4.3.1. Right to Information, Access and Communication of Data

You have the right to access the personal data relating to you.

Due to the obligation of security and confidentiality in the processing of personal data incumbent upon the Publisher, your request will only be processed if you provide proof of your identity, in particular by producing a scan of your valid identity document (in the case of a request by email) or a signed photocopy of your valid identity document (in the case of a request submitted in writing), both accompanied by the statement "I hereby certify on my honour that this copy of my identity document is a true copy of the original. Done at … On …", followed by your signature.

To assist you in your approach, you will find here a template letter drawn up by the Cnil.

4.3.2. Right of Rectification, Erasure and Right to be Forgotten

You have the right to request the rectification, update, blocking or erasure of your personal data that may prove to be, where applicable, inaccurate, erroneous, incomplete or outdated.

You may also set general and specific instructions regarding the handling of your personal data after your death. Where applicable, the heirs of a deceased person may request that their loved one's death be taken into account and/or that the necessary updates be made.

To assist you in your approach, you will find here a template letter drawn up by the Cnil.

4.3.3. Right to Object to Data Processing

You have the right to object to the processing of your personal data.

To do so, you will need to send an email to the following address: hello@rebellesnacks.com. In this email, you will need to specify the data you wish to have deleted as well as the reasons justifying this request, except in the case of commercial prospecting.

4.3.4. Right to Data Portability

You have the right to receive the personal data you have provided to us in a transferable, open and readable format.

4.3.5. Right to Restriction of Processing

You have the right to request that the processing of your personal data by the Publisher be restricted. As a result, your data may only be retained and may no longer be used by the Publisher.

4.3.6. Withdrawal of Consent

Your consent is required for the processing of your data by the Publisher. However, you may withdraw it at any time. Such withdrawal will result in the deletion of your personal data.

Services requiring the processing of your data by the Publisher will no longer be accessible, however.

4.3.7. Response Times

The Publisher undertakes to respond to your request for access, rectification or objection, or any other additional request for information, within a reasonable period not exceeding 1 month from the receipt of your request.

4.3.8. Complaint to the Competent Authority

If you consider that the Publisher is not complying with its obligations regarding your personal information, you may submit a complaint or request to the competent authority. In France, the competent authority is the Cnil, to which you can submit a request here.

4.4. Transfer of Collected Data

4.4.1. Transfer to partners

The Publisher informs you that we use authorised service providers to facilitate the collection and processing of the data you have shared with us. These service providers may be located outside the European Union and have access to the data collected on the Site.

The Publisher has previously ensured that its service providers have implemented adequate safeguards and comply with strict requirements regarding confidentiality, use and data protection, for example through the US PrivacyShield.

The User consents to the collected data being transmitted by the Publisher to its partners and being processed by those partners in the context of third-party services, namely:

No known partner at this time.

4.4.2. Transfer upon Requisition or Court Order

The User also consents to the Publisher communicating the collected data to any person, upon requisition by a state authority or court order.

4.4.3. Transfer in the Context of a Merger or Acquisition

If the Publisher is involved in a merger, sale of assets, financing transaction, liquidation or bankruptcy, or in an acquisition of all or part of its business by another company, the User consents to the collected data being transferred by the Publisher to that company and to that company carrying out the personal data processing described in this privacy policy in place of the Publisher.

ARTICLE 5. TRACKER/COOKIE POLICY

Upon your first connection to the Publisher's Site, you are informed by a banner at the bottom of your screen that information relating to your browsing may be recorded in files called "cookies". Our cookie policy allows you to better understand the measures we implement regarding browsing on our Site. In particular, it informs you about all the cookies present on our Site, their purpose, and provides guidance on how to configure them.

5.1. Use of Trackers/Cookies

The Publisher of this Site may place a cookie and other trackers on the hard drive of your device (computer, tablet, mobile, etc.) in order to ensure smooth and optimal browsing on our website.

"Cookies" (or connection tokens) are small text files of limited size that allow us to recognise your computer, tablet or mobile device for the purpose of personalising the services we offer you.

To give you a better understanding of the information that cookies identify, you will find below a table listing the different types of cookies that may be used on the Publisher's site, their name, their purpose, and their retention period.

5.2. Purposes of Trackers

Using the information contained in the trackers and cookies used, the Publisher can analyse the traffic and usage of the Site and, where applicable, facilitate and improve navigation, carry out prospecting operations, compile commercial statistics or display targeted advertisements.

5.3. Trackers Used

Partner	Purpose of processing	Partner Terms and Conditions
Shopify	Access to secure areas, browsing history management	https://www.shopify.com/legal/cookies

5.4. Configuring Your Cookie Preferences

When you first connect to the Publisher's Site, a banner briefly presenting information about the use of cookies and similar technologies appears at the bottom of your screen. This banner allows you to make a choice regarding the cookies you accept or refuse to be stored on your device. You will be deemed to have given your consent to the use of cookies by clicking on the "I accept" icon, either globally or on an individual basis. Conversely, you will be deemed to have refused the use of cookies by clicking on the "I decline" icon; again, this choice may apply to all cookies, or only to some of them. In the absence of a choice, you will be deemed to have refused the use of cookies. Your decision will be recorded for 6 months and may be modified at any time.

5.4.1 Cookies Exempt from Consent

In accordance with the recommendations of the Commission Nationale de l'Informatique et des Libertés (Cnil), certain cookies are exempt from the prior collection of your consent insofar as they are strictly necessary for the operation of the website or are intended solely to enable or facilitate electronic communication. These include in particular session identifier cookies, authentication cookies, load-balancing session cookies, and interface personalisation cookies. These cookies are fully subject to this policy insofar as they are issued and managed by the Publisher.

5.4.2 Cookies Requiring Prior Collection of Your Consent

This requirement applies to cookies issued by third parties that are classified as "persistent" insofar as they remain on your device until they are deleted or until their expiry date.

As such cookies are issued by third parties, their use and placement are subject to their own privacy policies. This category of cookies includes audience measurement cookies, advertising cookies, and social network sharing cookies (such as Facebook, Twitter, YouTube and Instagram).

Audience measurement cookies compile statistics on the traffic and use of various elements of the Site (such as the content/pages you have visited). This data contributes to improving the ergonomics of the Publisher's Site.

5.5. Maximum Retention Period for Trackers

Trackers are intended to be stored on the User's computer for a period of up to 12 months. This data is stored under secure conditions, in accordance with current technical means, in compliance with the provisions of the General Data Protection Regulation and applicable national legislation.

5.6. Objecting to the Use of Trackers

5.6.1. Right to object to the use of trackers

You may accept or refuse the placement of cookies at any time.

The User may delete or disable the use of trackers at any time by modifying their browser settings. It is possible to browse the Site without trackers. However, certain additional functions of the Site may not work if the User has disabled the use of trackers, such as form auto-completion or navigation indicators.

5.6.2. Settings

For further information on cookie management tools, you may consult here the dedicated page on the Cnil website.

5.6.2.1. Browser Settings

Each Internet browser has its own cookie management settings. The User may configure their browser software so that cookies are rejected, either systematically or according to their source. The User may also configure their browser software so that they are prompted to accept or refuse cookies on a case-by-case basis, before a cookie is likely to be saved on their device.

For the management of cookies and User choices, each browser has different configuration settings. This is described in the browser's help menu, which will explain how to change your cookie preferences:

5.6.2.2. Settings via add-on modules

The User may also delete or object to the installation of cookies on their device by installing a browser extension, such as Ghostery, available for download here.

ARTICLE 6. INTELLECTUAL PROPERTY

6.1. Legal Protection of Site Content

Site Content may be protected by copyright and database rights. Any representation, reproduction, translation, adaptation or transformation, in whole or in part, carried out illegally and without the consent of the Publisher or its rights holders or successors constitutes an infringement of Books I and III of the Intellectual Property Code and may give rise to legal proceedings for counterfeiting.

6.2. Contractual protection of Site Content

The User contractually undertakes towards the Publisher not to use, reproduce or represent, in any manner whatsoever, the Site Content, whether or not protected by intellectual property rights, for any purpose other than reading by a robot or browser. This prohibition does not apply to indexing robots whose sole purpose is to scan the content of the Site for indexing purposes.

ARTICLE 7. FINAL PROVISIONS

7.1. Modifications

This Privacy Policy may be modified at any time by the Publisher. The conditions applicable to the User are those in force at the time of their connection to the Site. Any substantial modification to this privacy policy will be communicated to the User upon their first connection following its entry into force. This new privacy policy must then be subject to a new acceptance.

7.2. Entirety

The invalidity of any clause of this contract shall not entail the invalidity of the other clauses of the contract or of the contract as a whole, which shall retain their full force and effect. In such a case, the parties shall, to the extent possible, replace the annulled provision with a valid provision corresponding to the spirit and purpose of the present agreement.

7.3. Non-Waiver

The failure of the Publisher to exercise any of the rights granted to it hereunder shall not under any circumstances be interpreted as a waiver of the right to enforce said rights.

7.4. Languages

These terms and conditions are offered in French.

7.5. Unfair Terms

The provisions of these terms and conditions apply subject to compliance with the mandatory provisions of the Consumer Code concerning unfair terms in contracts concluded between a professional and a consumer.

ARTICLE 8. DISPUTES

8.1. Applicable Law

This Privacy Policy is subject to the application of French law and European regulations, in particular the European Data Protection Regulation.

8.2. Disputes

Pursuant to Order No. 2015-1033 of 20 August 2015, any disputes that may arise in connection with the performance of these general terms and conditions and for which a solution could not previously be reached amicably between the parties must be submitted.

Since 1 January 2016, mediation has been mandatory for everyone. As a result, any professional selling to consumers is required to provide the contact details of a competent Mediator in the event of a dispute, regardless of whether they sell remotely or in a physical shop (Source: FEVAD).

AMF / https://lemediateur.fbf.fr/