I. Purpose and scope of this policy

1. Purpose of this policy

BERSA is committed to the ongoing protection of its users’ data in accordance with French and European regulations, in particular the French Data Protection Act of 1978 (Loi Informatique et Libertés) and the General Data Protection Regulation of 27 April 2016 (GDPR).

This policy sets out our rules on the protection of users’ personal data. In particular, it describes how data is collected and processed and how users can exercise their rights.

We are the data controller for personal data collected through our website https://www.mazzolina.fr/

This means that we determine the purposes and means of processing the personal data collected.

We apply a strict policy to guarantee the protection of your data:
• We do not sell your personal data to third parties
• We make sure your personal data is always secure

2. Scope of the policy

This policy covers the use of our website https://www.mazzolina.fr/ and of the services available from it.


II. The data we collect

1. Legal basis for collection

Personal data is collected on the basis of a legal obligation, a legitimate interest or your consent.

2. Data you provide to us

You provide personal data through forms you fill in on our website to sign up for our services or those of our partners. You may also provide personal data when you correspond with us, in particular with our customer service, by email. In that case, we keep a copy of the exchange.

The personal data you provide includes in particular:
• Identification data: last name, first name and email address
• Contact and interaction data: messages and emails

III. Use of the data collected

1. We collect and use your personal data for the following purposes:

• To keep you informed of changes to our service, in particular new features or new partnerships.
• To offer you products or services from us or our partners that may interest you.
• To make your interactions with our services easier, in particular with our customer support, so we can help you as effectively as possible.
• To improve your browsing experience on our website
• To let you give us feedback on our services so we can keep improving them.
• To keep your data secure

2. Security

The transmission of your information over the Internet is secured by an HTTPS connection protected by an SSL certificate (SHA-256/RSA Encryption).

IV. Data retention period

We keep your data only for as long as necessary for the purposes pursued, and never for longer than one year.

V. Users’ rights

In accordance with the applicable regulations, you have rights over your personal data.

• Right of access: you have the right to receive a copy of all the personal data we hold about you. In that case, we will provide your data in a structured, easily readable format.
• Right to data portability: you can receive the data concerning you from us in a structured, commonly used and machine-readable format, in particular so that it can be transferred to a third party.
• Right to rectification: you have the right to ask us to correct the personal data we hold about you if it is incomplete or inaccurate. In that case, we may contact you to verify the new data provided.
• Right to erasure: you can ask us to delete your personal data when we no longer have a legitimate interest in keeping it. Please note, however, that this right does not apply where we have a legal obligation to keep some of your personal data, for example to combat money laundering or terrorist financing.
• Right to restriction: in certain cases, you can ask us to restrict processing.
• Right to object, right to suspend or right to withdraw consent: you can object to processing, and to profiling where applicable, or suspend the processing of some of your personal data, for example when we collect it on the basis of our legitimate interest. For personal data we collect on the basis of your consent, you have the right to withdraw your consent at any time.
• Right to decide what happens to your data after your death: you can tell us what you wish to happen to your data in the event of your death.
• Exercising your rights: you can exercise any of these rights by sending a request to our Data Protection Officer, stating your request and providing proof of identity. We usually process requests of this kind within one month. For this purpose, we may ask you for additional information or documents.

VI. Contact us – DPO contact details

For any question about the processing of your personal data, or any comment, request or complaint about its confidentiality, you can contact our Data Protection Officer:
• By post at the following address: Mazzolina - Data Protection Officer, 14 Rue de la Colombette, 31000 Toulouse, France
• By email at the following address: ciao@mazzolina.fr