Personal data policy
and cookies

The company CARRÉ BLANC DISTRIBUTION attaches great importance to the protection of your personal data. CARRÉ BLANC DISTRIBUTION, acting in its capacity as data controller, undertakes to ensure the protection and confidentiality of the information that you are led to communicate to it in compliance with the provisions of French law and European regulations on data protection (EU Regulation 2016/679).

This Policy sets out how we process the personal data we collect and how we use cookies on the www.carreblanc.com website (hereinafter the "Site"). In particular, it explains what information we may collect, how it is used, what your rights are in relation to your personal data and who to contact for information.

We invite you to read this policy carefully so that you are aware of our practices with regard to the processing of your personal data.

When you provide information, when using our Website www.carreblanc.com, you consent to the application of this policy.

2.Personal data

2.1. Who is responsible for the data processing?

The data controller is:
Carré Blanc Distribution SAS, company par actions simplifiée (simplified joint stock company), registered in the Paris Trade and Companies Register under number 400 102 349, with its registered office at:
12/14 Rond-Point des Champs Elysées 75008 PARIS.

Data Protection Officer (DPO) / Data Protection Officer
Phone number: 04 77 23 60 60
Email:[email protected]
(hereafter referred to as "CARRÉ BLANC").

2.2. What information is collected?

2.2.1. Information you send us

By using our website www.carreblanc.com, you voluntarily provide us with certain information:

• The data required to create a customer account, in particular your first and last name, e-mail address, postal address, telephone number and password. This information is compulsory. Otherwise, you will not be authorised to create a customer account on our Website.
• The following additional data: title, company name, date of birth, preferred shop. This optional information will also be requested when you create a customer account.
• Information relating to your bank details when you place an order on our Website.
• The above-mentioned information will be collected when you use other services on the Website, in particular when you:

> subscribe to newsletters or alerts,
> place an order or a request for a return on the Site,
> use the in-store collection service,
> contact www.carreblanc.com customer service,
> enter a competition,
> write a comment or review on an item,,
> share an opinion with a friend by sending an e-mail from an item file,
> share a review on Facebook, Instagram, Pinterest, Youtube, Linkedin, Avis Vérifiés or from an article page.

When you are asked to provide this information, the information marked with an asterisk is compulsory. If you fail to provide the mandatory information, you will not be able to use the service concerned.

2.2.2. Information we collect automatically

When you use our Website, CARRÉ BLANC may use cookies to automatically collect certain additional technical information.
To find out more about the use of cookies, see section 3. «Cookies».

2.3. What do we use your data for?

CARRÉ BLANC collects and records personal data for the following purposes:

PURPOSE	LEGAL BASIS
Customer account, shopping basket and order management	Performance of our respective contractual obligations
Managing payment transactions, combating fraud and managing non-payments	Performance of our respective contractual obligations. CARRÉ BLANC's legitimate interests
Transport and delivery management	Performance of our respective contractual obligations
Management of customer relations, order tracking, after-sales service, product returns and refunds	Performance of our respective contractual obligations
Management of online bookings and in-store availability	Performance of our respective contractual obligations
Sending users newsletters and alerts	Customer consent
Customer satisfaction management (customer opinions on products and customer service performance)	CARRÉ BLANC's legitimate interest in improving the quality of the service
Setting up competitions	CARRÉ BLANC's legitimate interests and the customer's consent
Statistics, analysis, selection and segmentation of customers to improve customer knowledge	Legitimate interests of CARRÉ BLANC
Sending targeted commercial offers tailored to the user's profile, interests and needs	CARRÉ BLANC's legitimate interests
Inform you of changes to our services	Performance of our respective contractual obligations and compliance with our legal obligations

2.4. To whom are your details passed on?

Your personal data may be communicated within the CARRÉ BLANC group.

Under no circumstances do we transfer or sell your data for marketing purposes to parties outside the CARRÉ BLANC group.

Data transferred to third parties will only be used for the purposes of providing our services, in particular to the sub-contractors used by CARRÉ BLANC to carry out orders and provide services:

• Parcel delivery
• Secure payment on the Site
• In-store collection service (online booking)
• Product recommendations

2.5. How long is your data kept?

Your personal data is processed in accordance with current legislation and stored to enable you to use the services offered by the Website.

The length of time we retain your data varies according to the purpose for which it was collected, unless there is a specific legal requirement to do so. This means that your personal data may be kept for a reasonable time even after you stop using our services.

However, the length of data retention may also be dictated by certain legal constraints.

For certain types of processing, data is kept for specific periods, such as invoices relating to purchases, which are kept for 10 years.

In any event, the data relating to your account will be deleted within 1 year of the deletion of your account or when your account has remained inactive for more than 3 years.

2.6. What rights do you have over your personal data?

2.6.1. Right of access

You have the right to know whether CARRÉ BLANC processes personal data about you, and if so, to access such personal data and to obtain the following information:

- the purposes for which the data is used; the categories of data collected; the recipients or categories of recipients who may have access to the data; the data retention period or the criteria determining this period; any information relating to the source of the data collected if it has not been collected directly from you; the existence of automated decision-making, including profiling, and the underlying logic, importance and consequences for you of such a decision; the possible transfer of your data to a third country (non-EU member) or to an international organisation.

2.6.2. Right of rectification

You have the right to ask CARRÉ BLANC to rectify personal data if it is inaccurate, or to complete it if it is incomplete.

2.6.3. Right to erasure, right to be forgotten

You may ask CARRÉ BLANC to delete your personal data. We may, however, retain certain information when required to do so by law or for legitimate reasons, in particular when:

• contesting the accuracy of the personal data during the period allowing CARRÉ BLANC to verify the accuracy of the latter
• unlawful processing by us and you request that their use be restricted rather than erased
• if we no longer need the personal data for the purposes of processing but it is still necessary for the establishment, exercise or defence of legal claims
• if you exercise your right to object while we check whether the legitimate reasons we are pursuing override yours.

2.6.4. Right to limit processing

You may request the restriction of data processing in the following situations:

• contesting the accuracy of the personal data during the period allowing CARRÉ BLANC to verify the accuracy of the latter
• unlawful processing by us and you request that their use be restricted rather than erased
• if we no longer need the personal data for the purposes of processing but it is still necessary for the establishment, exercise or defence of legal claims
• if you exercise your right to object while we check whether the legitimate reasons we are pursuing override yours.

2.6.5. Right to object

You have the right to object to the processing of your personal data based on the legitimate interests of CARRÉ BLANC, in particular for marketing or profiling purposes.

2.6.6. Right to portability

You have the right to ask to receive your personal data in a structured, commonly used and machine-readable format, and to pass it on to another data controller.

2.6.7. Automated individual decisions

You may not be the subject of a decision based solely on automated processing, including profiling, which would result in legal consequences against you or affect you in a similar way.

2.6.8. What happens to personal data after death

You have the right to give instructions concerning the fate of your personal data after your death.

2.6.9. Accessing, updating and deleting your information

You can access your information at any time and correct, modify or delete any information that is not correct by going to your account, "dashboard" section. You can delete your account at any time by sending your request to the following address: [email protected]. CARRÉ BLANC may, however, retain certain information when required to do so by law or for legitimate reasons.

2.6.10. Right to unsubscribe from newsletters - promotional offers and good deals

Please note that you can refuse to receive newsletters by post, e-mail or SMS from CARRÉ BLANC DISTRIBUTION in the following way:

• when creating your account, by not ticking the boxes for the newsletter,
• by going to your CARRÉ BLANC account in the newsletter section,
• by contacting Customer Services.

These rights may also be exercised by contacting CARRÉ BLANC DISTRIBUTION, which has collected the data in the following manner:

• By email: [email protected]
• By post: CARRÉ BLANC DISTRIBUTION - Service client -, 10 boulevard de Nancy, 43200 Roanne

The request must be accompanied by proof of identity. If there is no response or if the response is unsatisfactory, the person concerned may refer the matter to the supervisory authority in his or her country of residence, and in France to the CNIL : https://www.cnil.fr/.

2.7. Links to other websites / Sharing functionalities

The Website may contain links to other Websites, in particular social networks, which have different personal data protection policies. CARRÉ BLANC assumes no responsibility for the content or practices of linked Sites. Content exported from our Website to social networks is done so under your sole responsibility. CARRÉ BLANC shall in no event be liable for any use, exploitation or action once content is exported from its Website.

2.8. How do we protect your data?

As the data controller, CARRÉ BLANC DISTRIBUTION takes all necessary precautions to protect the security and confidentiality of data and in particular to prevent it from being distorted, damaged or accessed by unauthorised third parties. In order to ensure the security of payments, CARRÉ BLANC DISTRIBUTION uses the services of a service provider, Dalenys certified PCI-DSS level 1 Service Provider, i.e. the highest level of requirement in terms of security of information systems for the processing of bank card data. Dalenys Payment is a payment institution approved by the ACPR (Autorité de Contrôle Prudentiel et de Résolution) under number 16378.

3. Cookies

To find out about the different cookies used on our website, we invite you to click here.

CARRÉ BLANC uses cookies in order to provide you with an improved and more personalised web service. We explain how and why we use cookies on this Site.

3.1. What is a cookie?

A cookie is a small text file stored and/or read by your browser on the hard disk of your terminal (PC, laptop or smartphone, for example) and deposited by the Websites you visit. Virtually all the Websites use cookies in order to function properly and optimise their ergonomics and functionalities. Cookies also make interactions with the Sites safer and faster, as they can remember your preferences by sending the information they contain back to the original Site (internal cookie) or to another Site to which they belong (third-party cookie), when you visit the Site concerned again from the same terminal.
When you visit our website for the first time, we inform you that we use cookies by means of an information banner at the top of the page. By clicking on "I accept" on our Site when this banner is displayed, you consent to the use of these cookies.

3.2. What cookies are used on our site?

3.2.1. The cookies we issue

When you connect to our Site, we may, subject to your choices, install various cookies on your terminal, enabling us to recognise your terminal's browser for the duration of the cookie's validity.

These cookies allow us to:

• to compile statistics and volumes of traffic to and use of the various components of our Site (sections and content visited, routes taken), enabling us to improve the interest and ergonomics of our services;
• to count the total number of advertisements displayed by us on our advertising spaces, to identify these advertisements, their respective number of displays, the number of users having clicked on each advertisement and, where applicable, the subsequent actions carried out by these users on the pages to which these advertisements lead, in order to calculate the sums due to the players in the advertising distribution chain (advertising agency, advertising sales house, distribution Site/support) and to draw up statistics;
• to adapt the presentation of our Site and our advertising spaces to the display preferences of your terminal (language used, display resolution, operating system used, etc.) during your visits to our Site, depending on the hardware and the display or reading software that your terminal is equipped with;
• to adapt the advertising content of our Site and our offers, according to your browsing, the purchases you may make and/or according to the location data (longitude and latitude) transmitted by your terminal (with your prior consent);
• insofar as you have provided us with personal data, in particular your electronic contact details, when registering, ordering or accessing one of our services, to associate this data with browsing information in order to send you, for example, electronic advertising or to display on your terminal, within advertising spaces that we issue, personalised advertising specifically intended for you and likely to be of personal interest to you;
• to store information relating to a form that you have filled in on our Site (registration or access to your account) or to products, services or information that you have chosen on our Site (service subscribed to, contents of an order basket, etc.);
• to give you access to reserved and personal areas of our Site, such as your account, using identifiers or data that you may have previously entrusted to us;
• to implement security measures, for example when you are asked to reconnect to content or a service after a certain period of time;
• combat Internet fraud (prevention of payment fraud, identity theft, etc.).

3.2.2. Cookies issued by third parties

The issue and use of cookies by third parties are subject to the privacy protection policies of these third parties. We inform you of the purpose of the cookies we are aware of and the means available to you to make choices with regard to these cookies.

3.2.3. Cookies issued by third-party applications integrated into our Site

We may include computer applications from third parties on our Site which enable you to share content from our Site with other people or to let these other people know that you have viewed or expressed an opinion about content on our Site. This is particularly the case with "Share" buttons from social networks (such as "Facebook", "Twitter", "Pinterest", etc.). The social network providing such an application button is likely to identify you thanks to this button, even if you did not use this button when consulting our Site. In fact, this type of application button may enable the social network concerned to track your browsing on our Site, simply because your account with the social network concerned was activated on your terminal (open session) during your browsing on our Site.

We have no control over the process used by the social networks to collect information relating to your browsing on our Site and associated with the personal data they hold. We invite you to consult the privacy protection policies of these social networks in order to find out how the browsing information they may collect through these application buttons is used, particularly for advertising purposes. These protection policies should enable you to exercise your choices with regard to these social networks, in particular by configuring your user accounts for each of these networks.

3.2.4. Targeted advertising cookies issued by third parties on our Site

The www.carreblanc.com website may contain cookies issued by third parties (advertising agencies, audience measurement companies, targeted advertising providers, etc.) which, for the duration of the validity of these cookies, enable them to:

• to collect navigation data relating to terminals consulting our Site
• to determine the advertising content for the promotion of products and/or services offered on our Site exclusively and likely to correspond to the centres of interest deduced from the previous browsing of the terminal concerned

3.3. How do I configure cookies?

You have several options for managing cookies. Any settings you make may affect your browsing on the Internet and your conditions of access to certain services requiring the use of cookies. You can choose at any time to express and modify your wishes with regard to cookies, by the means described below.

3.3.1. By configuring your browser

If you wish to delete the cookies stored on your terminal and set your browser to refuse cookies, you can do so via the preferences of your Internet browser. These navigation options relating to cookies are usually found in the "Options", "Tools" or "Preferences" menus of the browser you are using to access this Site. However, different browsers may have different ways of disabling cookies. To find out more, follow the links below:

• Microsoft Internet Explorer
• Google Chrome
• Safari
• Firefox
• Opera

Please note that if you refuse, via your Internet browser, to save cookies on your terminal, you will still be able to browse our Site, but certain parts and options may not function correctly. In this case, we decline all responsibility for the consequences linked to the degraded functioning of our services resulting from the impossibility for CARRÉ BLANC to record or consult the cookies necessary for their functioning and which you would have refused or deleted.

3.3.2. By using online platforms to control advertising cookies

With regard to advertising cookies placed by third parties, you can also connect to the Site Youronlinechoices, offered by digital advertising professionals grouped together within the European Digital Advertising Alliance (EDAA). You will be able to find out which companies are members of this platform and which offer you the possibility of refusing or accepting the cookies used by these companies to adapt the advertising likely to be displayed on your terminal to your browsing information.

3.4. For more information on cookies

For more information on cookies and their use, you can consult the file of the Commission Nationale de l'Informatique et des Libertés at the following address: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

4. Re-use of visuals published on social networks

Have you identified us on one of your visuals on social networks? You will find below the conditions of use of these visuals.

4.1. What visuals can be used?

Only visuals for which we have asked the author for permission to use and to which the author has responded positively may be used.

4.2. How and on what media can the visuals for which Carré Blanc has received authorisation from the author be used?

The authorization of use implies that Carré Blanc receives, for a period of 5 years from the date of agreement and on the French and Canadian territory, the irrevocable, royalty-free, fully paid, non-exclusive, transferable right to use the visuals on its web pages, social networking pages, promotional emails and advertisements, and in other marketing, promotional and advertising initiatives, in all media now known or hereafter. No modification will be made to the original visual. Carré Blanc does not claim ownership of the visual and undertakes to credit the author on the medium in which the visual is used.
The author of the visual hereby declares that he holds all rights pertaining to his visual or, if the visual is subject to third party property rights, including, for example, protected by copyright, trademark, patent or trade secret laws or other property rights laws, the author of the visual has all necessary licenses, rights, consents and authorizations to publish this visual and to give the rights granted to Carré Blanc, including the authorization of all persons appearing in his visual; the author is not a minor, is legally authorized to publish the visual, and the visual is not libellous, defamatory, obscene, pornographic, abusive, indecent, threatening, harassing, hateful or offensive and the use of the visual by Carré Blanc, as described herein, will not violate any other law. The author hereby releases, discharges and agrees to hold harmless Carré Blanc, and any person acting on their behalf, from any liability related in any way to Carré Blanc's use of the visual.

4.3. How long can these visuals be used?

The visuals for which Carré Blanc obtains authorization from the author may be used for 5 years from the date of agreement.

5. The right to complain

If, despite our best efforts, you feel that your rights have not been respected, you may refer the matter to the supervisory authority in your country of residence:
In France, the CNIL : https://www.cnil.fr

6. Changes

Nous pouvons être amenés à modifier occasionnellement la présente Politique. Lorsque cela est nécessaire, nous mettrons à jour cette page et nous vous en informerons.
We advise you to check this page regularly for any changes or updates.

7. Contact

If you have any questions about this Policy or if you have any queries about your personal data, please contact us at:

• Email: [email protected]
• By post: CARRÉ BLANC DISTRIBUTION SAS – Service client, 10 boulevard de Nancy, 43200 Roanne
• Data Protection Officer (DPO) / Data Protection Officer