The Customer is informed of the regulations concerning marketing communication, the Law of 21 June 2014 on trust in the Digital Economy, the French Data Protection Act of 6 August 2004 and the General Data Protection Regulation (GDPR: No. 2016-679).

7.1 Persons responsible for collecting personal data

For Personal Data collected in connection with the creation of the User’s personal account and its browsing of the Website, the Personal Data controller is: CLAYRTON’S. https://www.clayrtons.com is represented by its legal representative, LEPOUTRE

As the controller of the data it collects, https://www.clayrtons.com undertakes to comply with the legal provisions in force. In particular, it must inform the Customer of the reasons for this data processing, provide its prospects and customers with complete information on the processing of their personal data after obtaining their informed consent, and maintain an accurate register of processing operations. Every time https://www.clayrtons.com processes Personal Data, it will take all reasonable measures to ensure the accuracy and relevance of the purposes for which this Personal Data is processed.

7.2 Purpose of the data collected

https://www.clayrtons.com may process all or part of the data for the following purposes:

• to enable browsing on the Website and the management and traceability of the benefits and services initiated by the user: login and Website usage data, invoicing, order history, etc.
• to prevent and combat computer fraud (spamming, hacking, etc.): IT equipment used for browsing, IP address, password (hashed)
• to improve browsing on the Website: login and website usage data
• to conduct optional satisfaction surveys on https://www.clayrtons.com: email address
• to carry out communication campaigns (text message, email): telephone number, email address

https://www.clayrtons.com does not market your personal data. These are hence used only out of necessity or for statistical and analysis purposes.

7.3 Right of access, rectification and objection

In accordance with current European regulations, Users of https://www.clayrtons.com have the following rights:

• right of access (Article 15 GDPR) and right of rectification (Article 16 GDPR), right to update, right to add to Users’ data, right to block or erase Users’ personal data (Article 17 GDPR) when these data are inaccurate, incomplete, ambiguous, obsolete, or if their collection, use, communication or retention is prohibited
• right to withdraw consent at any time (Article 13-2c GDPR)
• right to limit the processing of Users’ data (Article 18 GDPR)
• right to object to the processing of Users’ data (Article 21 GDPR)
• right to the portability of the data that Users have provided, when these data are subject to automated processing based on their consent or on a contract (Article 20 GDPR)
• right to determine the fate of Users’ data after their death and to select a previously designated third party to whom https://www.clayrtons.com must communicate (or not) its data

As soon as https://www.clayrtons.com becomes aware of the death of a User, and in the absence of instructions from him/her, https://www.clayrtons.com undertakes to destroy this User’s data, unless its retention is necessary for evidentiary purposes or to meet a legal obligation.

If the User wishes to know how https://www.clayrtons.com uses its Personal Data, or would like to request the correction of their data or object to its processing, he/she may contact https://www.clayrtons.com in writing at the following address:

CLAYRTON’S – DPO, Stéphane Tharreau 
41 Rue St-Antoine, 59100 Roubaix, France.  

In this case, the User must indicate the Personal Data that he/she would like https://www.clayrtons.com to correct, update or delete by identifying himself/herself precisely with a copy of an identity document (identity card or passport).

Requests to delete Personal Data will be subject to the legal obligations to which https://www.clayrtons.com is subject, in particular with regard to the retention or archiving of documents. Finally, Users of https://www.clayrtons.com may lodge a complaint with the supervisory authorities, in particular the French Data Protection Authority (CNIL) (https://www.cnil.fr/fr/plaintes).

7.4 Non-disclosure of personal data

https://www.clayrtons.com undertakes not to process, host or transfer the Information collected about its Customers to a country located outside the European Union or recognised as “inappropriate” by the European Commission, without first informing the customer. However, https://www.clayrtons.com remains free to choose its technical and commercial subcontractors provided that it offers sufficient guarantees with regard to the requirements of the General Data Protection Regulation (GDPR: No. 2016-679).

https://www.clayrtons.com undertakes to take all necessary precautions to preserve the security of the Information and, in particular, to ensure that it is not communicated to unauthorised persons. However, if an incident affecting the integrity or confidentiality of Customer’s Information is brought to the attention of https://www.clayrtons.com, the latter must inform the Customer as soon as possible and apprise it of the corrective measures taken. Moreover, https://www.clayrtons.com does not collect any “sensitive data”.

The User’s Personal Data may be processed by subsidiaries of https://www.clayrtons.com and subcontractors (service providers), solely for the purposes of this policy.

Within the limits of their respective powers and for the purposes stated above, the main persons likely to have access to data of the Users of https://www.clayrtons.com are our customer service agents.