1. WHO ARE WE?

A.1 Data controller
The following information is provided so that you may be aware of the commitments regarding the protection of personal data of PASTORALE, a simplified joint stock company, whose registered office is ROUTE DE NEMOURS, 77760 URY, which acts as data controller for the processing of personal data referred to in the present document

A.2 Our person in charge of the data-processing policy and freedoms
PASTORALE has appointed a person in charge of the data-processing policy and freedoms whom you can contact by e-mail at the following address: vieprivee@canasuc.com

1. WHAT PERSONAL DATA DO WE PROCESS?

Within the framework of the processing of personal data PASTORALE collects and processes the following data:
- Name, first name, billing address, delivery address, email address, telephone number;
- Customer number
- Statistics of opening and clicks of emails sent by CANASUC (PASTORALE's brand) and activity on the site (pages viewed, products viewed, abandoned shopping carts, ...).

1. WHY DO WE PROCESS YOUR DATA?

C.1 Purposes of our processing
The processing that we carry out is done for the following purposes:
- Management of the content of the website;
- Management of orders;
- Management of communication with customers and prospects;
- Monitoring of the customer journey;
- Monitoring of customer relations and customer complaints;
- Audience analysis.

C.2 The legal basis for our processing
We only carry out data processing if at least one of the following conditions is met:
Your consent to the processing operations has been obtained;
The existence of our legitimate interest, or that of a third party, which justifies us implementing the relevant personal data processing;
The performance of a contract between us and you requires us to implement the relevant personal data processing;
We are bound by legal and regulatory obligations which require the implementation of the relevant personal data processing.

C.3 Legitimate interests pursued
The legitimate interests pursued by PASTORALE may include enabling the continuity of its business, improving the consumer experience, building consumer loyalty, understanding consumer expectations.

1. WHO DOES YOUR PERSONAL DATA GO TO?
   The personal data we collect, as well as those collected subsequently, are intended for us in our capacity as data controller.

We ensure that only authorised persons have access to this data. Our service providers may receive this data in order to carry out the services we entrust to them. Your personal data will not be passed on to third parties other than our service providers.

1. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
   Your personal data will be processed for as long as necessary for the purposes stated above in accordance with all data protection regulations. This means that we will delete your data when this personal information is no longer required to complete a request or order, to manage your account or our customer relationship. Anonymous statistics may be kept for longer.

1. YOUR RIGHTS

In relation to the personal data we hold about you, you have the right to :

• Request a copy of your personal data stored in our systems
• Request that we correct or delete your personal data (although this may mean that we cannot process requests or orders, or that your account expires)
• Ask us to stop processing your personal data (e.g. in relation to the use of the data to improve our website), or to restrict the way we process it (e.g. if you believe the data is incorrect)
• Request personal data used to provide you with information you have requested, process an order, or manage your account or our relationship in a machine-readable format. You also have the right to transfer that data to another Data Controller
• Withdraw your consent for processing for marketing purposes at any time.

We may not accept a request to delete your personal data where we need to do so to comply with a legal obligation or claim.

Requests to exercise your rights should be addressed to vieprivee@canasuc.com

If you have a complaint about the processing of your personal data, you have the right to complain to the CNIL at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 (www.cnil.fr) or to the supervisory authority of the country where you live or work.