Privacy Policy

What is the purpose of this policy?

We attach great importance to the protection and confidentiality of your personal data, which we regard as a mark of our reliability and trustworthiness. This data privacy policy clearly demonstrates our commitment to complying with the applicable data protection rules and, in particular, those of the General Data Protection Regulation (“GDPR”) . In particular, the privacy policy aims to inform you about how and why we process your data in connection with the services we provide.

Who does this policy apply to?

This policy applies to you regardless of where you live, whether you are a Plantco customer, a potential customer (“prospect”) or simply a visitor to the website www.plantco.fr. If you are under 18, you are not permitted to use our services unless you have prior authorisation from your parents or the person with parental authority. If you believe we may hold information relating to one of your children under the age of 18 without your consent, you may request that we delete it by contacting us at contact@groupeplantco.com.

Why do we process your data and on what legal grounds?

As part of the services we offer, we are required to process your personal data for the following reasons and on the following legal grounds:

To enable you to benefit from our services (e.g. creating a customer account, arranging appointments, etc.) and to enable us to respond to your enquiries (e.g. requests for information, complaints, etc.) on the basis of our general terms and conditions of sale, our general terms and conditions of use, and our legitimate interest in providing you with the best possible service.
To keep you informed of our latest promotional offers and events by email and by telephone, based on our legitimate interest in building customer loyalty and on your consent, should you not yet be one of our customers.
To enable you to follow us on social media, based on the terms and conditions of use of the platform in question (e.g. Facebook, LinkedIn, etc.) and our legitimate interest in maintaining a dedicated social media page.
To ensure and enhance the security and quality of our services on a day-to-day basis (e.g. statistics, data security, etc.) on the basis of our legal obligations, our general terms and conditions of sale, and our legitimate interest in ensuring the smooth running of our services.
Finally, we may also place ‘cookies’ on your device. For further information on the use of ‘cookies’, please refer to our ‘Cookie Policy’.

We undertake to process your data only for the reasons described above. However, when you voluntarily post content on the pages we publish on social media, you acknowledge that you are entirely responsible for any personal information you may disclose, regardless of the nature and origin of the information provided.

What data do we process and for how long?

If you would like further details on retention periods, please contact us at: contact@groupeplantco.com.

Professional identification details and contact information (e.g. surname, first name, work email address, work address, etc.) are retained for the entire duration of the service provision, plus the statutory limitation periods, which are generally 5 years.
Where there is confusion between the name of your organisation and your personal name (e.g. sole trader, micro-enterprise, etc.), financial and economic data (e.g. bank account number, verification code, etc.) are retained for the period necessary to complete the transaction and manage invoicing and payments, plus the statutory limitation periods, which are generally between 5 and 10 years.
Data for sales prospecting and marketing purposes (e.g. email address, etc.) is retained for a maximum period of 3 years from the date of our last contact with you.
Connection data (e.g. logs, IP address, etc.) is retained for a period of 1 year.

Once the retention periods summarised above have expired, we will delete all your personal data to ensure your privacy for years to come. The deletion of your personal data is irreversible and we will no longer be able to provide it to you after this period. At most, we may only retain anonymised data for statistical purposes. Please also note that in the event of a dispute, we are obliged to retain all data relating to you for the entire duration of the case, even after the expiry of the retention periods described above.

What rights do you have to control the use of your data?

The applicable data protection regulations grant you specific rights which you may exercise at any time and free of charge to control how we use your data.

The right to access and obtain a copy of your personal data, provided that such a request does not conflict with trade secrets, confidentiality or the secrecy of correspondence.
The right to rectify personal data that is inaccurate, out of date or incomplete.
The right to object to the processing of your personal data for marketing purposes.
The right to request the erasure (“right to be forgotten”) of your personal data that is not essential to the proper functioning of our services.
The right to restrict the processing of your personal data, which allows you to document the use of your data in the event of a dispute regarding the lawfulness of such processing.
The right to data portability, which allows you to retrieve some of your personal data so that you can easily store it or transfer it from one information system to another.
The right to provide instructions regarding the handling of your data in the event of your death, either directly or through a trusted third party or a beneficiary.

For a request to be considered, it is essential that it is made directly by you to the address contact@groupeplantco.com. Any request not made in this way cannot be processed. We will respond to your request as soon as possible, within a maximum of two months from receipt, in the event that the request is technically complex or if we receive a large number of requests at the same time. Please note that we may refuse to respond to any excessive or unfounded requests, particularly if they are repetitive in nature.

Who can access your data?

We only disclose your data to individuals who are duly authorised to use it for the purpose of providing our services. This may include our staff responsible for service delivery, accounting, marketing or even the security of our premises. We may also disclose your data to public authorities, external advisers and practitioners, as well as service providers.

How do we protect your data?

We implement all the necessary technical and organisational measures to ensure the security of your data on a day-to-day basis and, in particular, to guard against any risk of destruction, loss, alteration or unauthorised disclosure of your data. For example, our staff’s passwords must be complex and changed frequently, and their computers are equipped with the latest, up-to-date antivirus software and firewalls. Furthermore, your data is backed up regularly and encrypted to enhance its day-to-day security.

Can your data be transferred outside the European Union?

Unless it is strictly necessary and on an exceptional basis, we never transfer your data outside the European Union, and your data is always hosted within Europe. Furthermore, we do our utmost to engage only service providers who host your data within the European Union. In the event that our service providers are nevertheless required to transfer your personal data outside the European Union, we take great care to ensure that they implement appropriate safeguards to guarantee the confidentiality and protection of your data.

Who can you contact for further information?

Our Data Protection Officer (“DPO”) is always available to explain in more detail how we process your data and to answer any questions you may have on this subject at contact@groupeplantco.com.

How can you contact the CNIL?

You may contact the French data protection supervisory authority (the “Commission nationale de l’informatique et des libertés” or “CNIL”) at any time using the following contact details: CNIL Complaints Department, 3 place de Fontenoy – TSA 80751, 75334 Paris Cedex 07 or by telephone on 01 53 73 22 22.

Can the policy be amended?

We may amend our privacy policy at any time to bring it into line with new legal requirements and any new data processing activities we may implement in the future. You will, of course, be informed of any changes to this policy.