Privacy policy

Last updated: 26 May 2025

I. Our Commitment

CAMUS LA GRANDE MARQUE places great importance on the protection of your privacy and personal data. The purpose of this privacy policy is to inform you in a clear, concise and transparent manner about how we collect, use, share and protect your personal data, in accordance with Articles 12 and 13 of the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).

This policy applies to all services offered by CAMUS LA GRANDE MARQUE, including our website camus.fr, our mobile applications and any other interaction you may have with CAMUS LA GRANDE MARQUE (hereinafter collectively referred to as the “Services”). We are committed to ensuring that the information we provide you with is easily accessible and understandable.

II. Who Are We?

The terms “CLGM”, “CAMUS LA GRANDE MARQUE”, “we”, “our” and “us” refer to CAMUS LA GRANDE MARQUE SAS, with its registered office at 29 rue Marguerite de Navarre, 16100 COGNAC, registered with the Angoulême Trade and Companies Register under number 905420014, acting as data controller for your personal data.

III. What Personal Data Do We Collect and How Is It Collected?

Personal data refers to information relating to an identified or identifiable natural person. This includes, for example, a person’s name, address and gender.

CLGM collects your personal data directly from you (for example via the contact form or when you take part in our visitor tour) or indirectly (for example from your electronic devices that interact with our website and electronic forms).

CLGM may collect different categories of personal data about you, depending on your use of our Services. We are committed to collecting only data that is strictly necessary for the purposes for which it is processed (principle of data minimisation).

The categories of data we may collect include in particular:

• Identification data: Last name, first name, title, date of birth.

• Contact details: Email address, telephone number, postal address (for example, for order delivery or communication).

• Connection and browsing data: IP address, connection logs, browser type, operating system, information about your browsing on our Services (pages viewed, visit duration), cookies and other trackers (for more details, please refer to our dedicated Cookies Policy).

• Order and transaction data: Details of products or services purchased, order history, payment information.

• Preferences and interests data: Product preferences, saved products, frequently viewed products, favourite products and browsing data.

If CLGM collects information about allergies or food intolerances, these are considered sensitive health data. Their collection will be subject to your explicit consent and enhanced protective measures.

• Data from your communications with CLGM: Content of messages you send us via contact forms, by email, or during exchanges with our customer service team; reviews and comments you may leave about our products or services.

• Application data: Curriculum vitae (CV), cover letter, and any other information you provide in the context of an application for a position within CLGM.

The exact nature of the data collected will depend on the specific CLGM features you use. For example, merely visiting the website will primarily involve the collection of browsing data, whereas placing an order will require identification, contact and transaction data.

IV. Why Does CAMUS LA GRANDE MARQUE Collect Your Personal Data and How Is It Used?

CLGM collects and processes your personal data for specific, explicit and legitimate purposes.

Each processing activity is based on a legal basis as provided for by the GDPR (consent, contract, legal obligation, protection of vital interests, public interest task, or legitimate interest). The legal basis is specified for each purpose and is not indicated on an overall basis.

The table below sets out the main purposes for which we process your personal data, the corresponding legal bases, and the applicable retention periods (or the criteria for determining them):

Where the legal basis for processing is CLGM’s legitimate interest, we ensure that this interest does not disproportionately infringe upon your fundamental rights and freedoms. You have the right to object at any time to processing based on our legitimate interest.

V. Who Are the Recipients of Your Personal Data?

CLGM does not sell or rent your personal data to third parties for marketing purposes without your explicit consent. Your personal data may be disclosed to the following categories of recipients, only when necessary and justified:

• Authorised CLGM staff: Our employees in the relevant departments (e.g. customer service, marketing, technical, logistics, legal, human resources for applications) only have access to data that is strictly necessary for the performance of their duties, in accordance with the “need-to-know” principle.

• Sub-processors: We use technical and operational service providers (sub-processors within the meaning of the GDPR) who process your personal data on our behalf and according to our instructions. This includes for example:

• Hosting providers for our website and databases.

• Secure payment service providers.

• Email and newsletter sending solutions.

• Audience and site performance analysis tools.

• Logistics providers for order delivery.

• The provider managing applications.

We carefully select our sub-processors for their guarantees in terms of data security and confidentiality, and we ensure they comply with the GDPR requirements, in particular through the signing of Data Processing Agreements (DPAs, which include Standard Contractual Clauses where applicable for transfers to third countries).

• Public and judicial authorities: Your personal data may be disclosed to the competent authorities (administrations, courts, law enforcement agencies) if required by law, or in the context of judicial proceedings or an investigation.

• Commercial partners (with your specific consent): If CLGM intends to share certain of your data with commercial partners for their own purposes (for example, so that they may offer you their products or services), we will only do so with your prior, free, specific, informed and unambiguous consent. You would then be clearly informed of the identity of the partner and the purpose of such sharing.

Transparency regarding the recipients of your data is a key element. CLGM undertakes to disclose your data only to entities that offer sufficient guarantees of protection.

VI. Transfers of Data Outside the European Union (EU) / European Economic Area (EEA)

Some of our sub-processors or partners may be located outside the European Union (EU) or the European Economic Area (EEA), in countries whose personal data protection legislation may differ from that of the EU. This is particularly the case for certain global IT services, for example based in the United States.

If CLGM transfers your personal data outside the EU/EEA, we are committed to ensuring that such transfers are governed by appropriate safeguards to ensure a sufficient and equivalent level of protection to that offered by the GDPR. These safeguards may include:

• Transfer to a country recognised by the European Commission as ensuring an adequate level of protection (adequacy decision).

• The signature of Standard Contractual Clauses (SCCs) adopted by the European Commission with the recipient of the data located in the third country. These clauses impose contractual obligations on the recipient to protect your data.

• For transfers to companies in the United States, reliance on the EU-US Data Privacy Framework (DPF), if the recipient company is self-certified thereunder. This framework has been recognised by the European Commission as providing an adequate level of protection.

• The adoption of Binding Corporate Rules (BCRs) approved by data protection authorities, if CLGM is part of an international group of companies that has implemented such rules.

• In specific and limited cases, derogations provided for under Article 49 of the GDPR may apply (for example, if you have explicitly consented to the transfer after being informed of the risks, or if the transfer is necessary for the performance of a contract between you and CLGM).

You will be informed if your data is likely to be transferred outside the EU/EEA and of the safeguards in place. CLGM must carefully identify all cross-border data flows, including those arising from the use of common cloud services or SaaS tools, to ensure their compliance.

VII. How Long Is Your Personal Data Retained?

Your personal data is retained for a period that does not exceed what is strictly necessary for the purposes for which it was collected, for compliance with our legal and regulatory obligations, and for the establishment, exercise or defence of our legal rights.

The determination of applicable retention periods is based in particular on the following criteria: the quantity, nature and sensitivity of the data concerned, the purposes pursued by their processing, the services you are entitled to expect from us, as well as applicable legal and regulatory requirements.

In this regard, the following retention periods apply:

• Prospects (potential customers): Data is retained for a period of three (3) years from the last contact initiated by the prospect (request for information, click on a communication, etc.). At the end of this period, data is deleted or archived in accordance with applicable legal obligations.

• Customers: Data is retained throughout the duration of the contractual relationship, then archived for a period of up to ten (10) years, in order to comply with our legal and accounting obligations, as well as the needs arising from the management of any disputes.

• Cookies and other trackers used on our digital platforms: Cookies are retained for a maximum period of thirteen (13) months from the date they are placed on your device, in accordance with applicable regulations.

At the end of these periods, your personal data is either securely deleted or irreversibly anonymised (meaning that it no longer allows you to be identified) for use for statistical purposes. Anonymisation is an irreversible operation.

CLGM puts in place internal procedures to ensure compliance with these retention periods and to guarantee the effective deletion or anonymisation of data once these periods have expired.

VIII. What Are Your Rights and How Can You Exercise Them?

In accordance with the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have several rights over your personal data in order to retain control of it. CAMUS LA GRANDE MARQUE undertakes to facilitate the exercise of these rights.

You have the following rights:

• Right of access (Article 15 GDPR): The right to obtain confirmation as to whether or not data relating to you is being processed and, where it is, to obtain access to that data as well as certain information about its processing.

• Right to rectification (Article 16 GDPR): The right to obtain the rectification of personal data concerning you that is inaccurate or incomplete.

• Right to erasure (“right to be forgotten”) (Article 17 GDPR): The right to obtain the erasure of your personal data under certain conditions (for example, if it is no longer necessary in relation to the purposes, if you withdraw your consent, or if you object to the processing).

• Right to restriction of processing (Article 18 GDPR): The right to obtain restriction of the processing of your data in certain situations (for example, if you contest the accuracy of the data, or if the processing is unlawful but you object to its erasure).

• Right to data portability (Article 20 GDPR): The right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller without hindrance from CLGM, where the processing is based on your consent or on a contract and is carried out by automated means.

• Right to object (Article 21 GDPR): The right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on CLGM’s legitimate interest. You also have a specific and unconditional right to object to the processing of your data for direct marketing purposes. For example, you may unsubscribe from our marketing communications by clicking the unsubscribe link in each email.

• Right to withdraw consent at any time (Article 7 GDPR): Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

• Right to organise the fate of your data after death: You have the right to define instructions regarding the retention, erasure and communication of your personal data after your death (French law).

To exercise these rights, you may send your request to CAMUS LA GRANDE MARQUE:

• By email: personal_data@camus.fr

• By post: CAMUS LA GRANDE MARQUE SAS, Legal Department, 29 rue Marguerite de Navarre, 16100 Cognac

We undertake to respond to your request as soon as possible, and at the latest within one month of receipt. This period may be extended by two months in the event of the complexity or number of requests received, in which case you will be informed accordingly.

For security reasons and to avoid any unauthorised disclosure of personal data, we may ask you to prove your identity before responding to your request, if reasonable doubts remain as to your identity. The exercise of these rights is in principle free of charge. However, in the event of manifestly unfounded or excessive requests, in particular due to their repetitive nature, CLGM may charge a reasonable fee or refuse to act on those requests.

IX. Right to Lodge a Complaint

If, after contacting us, you believe that your rights over your personal data are not being respected, or that the processing operations carried out by CAMUS LA GRANDE MARQUE do not comply with data protection rules, you have the right to lodge a complaint with a competent supervisory authority.

In France, the supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL). You may contact it:

• By post: CNIL, 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France.

• Via its website: www.cnil.fr

This information is a requirement of Article 13(2)(d) of the GDPR and is intended to ensure that you are fully informed of your rights of redress.

X. How to Contact Us?

For any question relating to the protection of your personal data or to exercise your rights, you may contact us:

• By email: personal_data@camus.fr

• By post: CAMUS LA GRANDE MARQUE SAS, Legal Department, 29 rue Marguerite de Navarre, 16100 Cognac

These details are essential to allow you to identify who is responsible for your data and how to get in touch for any questions relating to their processing. It is essential that these details are accurate and kept up to date to ensure transparency and to facilitate the exercise of your rights.

Regarding advertising electronic communications, you may withdraw your consent and object to receiving them at any time by clicking on the “unsubscribe” link included in each advertising email we send you.

For any question, request for information or complaint relating to this Privacy Policy or to the personal data processing operations carried out by the group, you may contact the Data Protection Officer (DPO) at the following address: juridique@camus.fr

XI. Automated Decision-Making and Profiling

CLGM may use profiling or automated decision-making techniques. Article 13(2)(f) of the GDPR requires specific information to be provided on this subject.

Fully automated decision-making producing legal effects or similarly significantly affecting you:

CLGM does not, at this time, use fully automated decision-making (i.e. without significant human intervention) that would produce legal effects concerning you or similarly significantly affect you (within the meaning of Article 22 of the GDPR). If CLGM were to implement such processing operations, you would be specifically informed thereof, as well as of the underlying logic, the significance and the envisaged consequences of such processing. You would then have the right to obtain human intervention, to express your point of view and to contest the decision.

Profiling for other purposes:

CLGM may use profiling techniques to analyse or predict your personal preferences, interests or behaviour, in order to:

• Personalise your experience on our Services (for example, to suggest recipes, products or content that may interest you).

• Send you targeted marketing communications (if you have consented to this or have not objected).

• Improve our products and services. This type of profiling is not intended to make decisions producing legal effects or similarly significantly affecting you.

You have the right to object to this profiling under the conditions set out in Section VIII above.

Transparency regarding the use of these techniques is essential to maintaining your trust. CLGM undertakes to use profiling responsibly and in compliance with your rights.

XII. How Do We Protect Your Personal Data?

CLGM takes the security of your personal data very seriously and implements all appropriate technical and organisational measures to ensure a level of security appropriate to the risks, and to prevent in particular the destruction, loss, alteration, unauthorised disclosure of personal data transmitted, stored or otherwise processed, or unauthorised access to such data, whether accidental or unlawful.

Among these measures, the following are notably implemented (non-exhaustive list, provided by way of example):

• Access management and access control: Limiting access to personal data to authorised personnel who need it for their duties (principle of least privilege).

• Regular backup measures: To prevent data loss.

• Securing communications: Use of secure protocols such as HTTPS/TLS to encrypt data exchanged on our online Services.

• Information systems protection: Implementation of firewalls, antivirus software and robust password policies.

• Workstation security: Automatic session locking, restriction of administrator rights.

• Raising awareness and training staff: Regular awareness-raising activities for our employees on data protection issues and best security practices.

• Sub-processor management: Rigorous selection of sub-processors on the basis of their security guarantees.

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, CLGM undertakes to notify this breach to the CNIL as soon as possible and, where required by law, to inform you accordingly.

Although we do everything in our power to protect your personal data, no security measure is infallible. CLGM undertakes to continuously maintain and improve its level of security.

XIII. Cookies and Other Trackers

When you browse CAMUS LA GRANDE MARQUE’s Services (in particular our website and mobile applications), cookies and other trackers may be placed on your device (computer, tablet, smartphone).

These tools may serve different purposes:

• Ensuring the proper technical functioning of the Services (strictly necessary cookies).

• Measuring audience and analysing your browsing in order to improve our Services.

• Personalising your user experience.

• Offering you targeted advertisements tailored to your interests.

• Enabling content sharing on social networks.

For detailed information about the cookies we use, their purposes, their lifespan, and how you can manage your preferences (accept, refuse, configure), we invite you to consult our dedicated Cookies Policy. This approach enables us to keep this privacy policy concise while providing you with comprehensive information on a specific and technical subject.

XIV. Amendments to the Privacy Policy

CLGM reserves the right to amend this privacy policy at any time in order to adapt it to changes in its Services, technologies and applicable regulations.

Any material amendments will be notified to you by any appropriate means (for example, by a notification on our website, or by email for users with an account). We encourage you to consult this page regularly to keep abreast of any updates.

The date of the last update to this policy is indicated at the top of this page. Your continued use of our Services following the publication of amendments constitutes acceptance of the new privacy policy.