Privacy Policy

GREEN ETHNIES

At GREEN ETHNIES your personal data are particularly important for us since, whenever you provide them to us, we must treat them with the utmost care and above all explain to you transparently how we collect and use them.

This Privacy Policy is directed at you as internet users or as Clients accessing the website: https://green-ethnies.fr

The purpose of this document is to inform you how your personal data may, depending upon the circumstances, be collected and processed by GREEN ETHNIES.

What are personal data?

The term "Personal data " means any information relating to you that enables you to be identified either directly or indirectly. For example, your surnames and first names or a photograph may enable you to be identified directly. It may be possible to identify you indirectly via your email address.

What is processing?

The term " processing " refers to any operation or set of operations relating to personal data, irrespective of the procedure used (collection, registration, organisation, storage, adaptation, modification, extraction, consultation, utilisation, communication by transmission, diffusion or any other form of making available, comparison or cross-referencing, blocking, erasure or destruction...)

Respect for your private life and your personal data is a priority for us and we undertake to process your data in strict compliance with the French Act on Information Technology and Civil Liberties [IT and Civil Liberties Act] of 6 January 1978 (hereafter the “IT and Civil Liberties Act”), as amended, and the (EU) General Data Protection Regulation of 27 April 2016 (hereafter “GDPR”).

In any case, we undertake to comply with the following two fundamental principles:

• You retain control over your personal data;
• Your personal data are processed transparently and in a confidential and secure manner.

WHO IS RESPONSIBLE FOR PROTECTING YOUR DATA?

The controller responsible for processing your data is the company GREEN ETHNIES (CHE-476.958.222), company limited by shares with share capital of CHF 100 000 registered in the Commercial Register of the Canton of Vaud with registered office at Rue du Bourg 17, 1095 Lutry.

Legal notice: The controller for the purposes of the IT and Civil Liberties Act is the person who establishes the means of and reasons for processing. Where two or more controllers jointly determine the reasons for and means of processing, they are joint controllers (or co-controllers). The processor is a person who processes personal data on behalf of the controller, acting under the authority and on the instructions of the controller.

GREEN ETHNIES SA is a company limited by shares with share capital of CHF 100,000 registered in the Commercial Register of the Canton of Vaud with registered office at Rue du Bourg 17, 1095 Lutry - SWITZERLAND

GREEN ETHNIES is represented by Mr Renzo Del Mastro, as Executive Officer

If you have any questions concerning the management and usage of your personal data, you can contact us:

• Either by sending an email to info@greenethnies.com
• Or writing to GREEN ETHNIES - Rue du Bourg 17, 1095 Lutry- SWITZERLAND

HOW DO WE COLLECT YOUR DATA?

All of the personal data relating to you are collected directly from you either when placing your order on the website or when interacting with our services.

In addition, data relating to your browsing activity on the website may be used in order to identify your needs and particular interests and to target our commercial offers and advertising in line with these.

WHY AND ON WHAT BASIS DOES GREEN ETHNIES PROCESS YOUR DATA?

Your various data may be collected by GREEN ETHNIES for:

• Managing and implementing your contracts, orders, deliveries and invoices

Legal basis: Contractual, processing is necessary for the performance of a contract or to take steps prior to entering into a contract

• Answering your requests for information concerning our products or our Terms and Conditions of Supply

Legal basis: Your consent

• Sending you our newsletter

Legal basis: Your consent

• Proposing commercial offers to you concerning our products and services

Legal basis: Your consent

• Managing and responding to your requests to exercise  “IT & Civil Liberties” rights

Legal basis: Legal obligation (GDPR and French IT & Civil Liberties Act)

• Ensuring the proper operation and ongoing improvement of our website and its functionalities

Legal basis: Our legitimate interest in guaranteeing the optimum operability and quality of the website thanks in particular to visitor statistics;
- Your consent where this is required.

GREEN ETHNIES is also authorised to use these data for the purpose of compliance with a legal or regulatory obligation.

In any case, in relation to each purpose defined, GREEN ETHNIES will do everything within its power to ensure the security and confidentiality of any personal data provided to it, in accordance with applicable laws and regulations.

WHICH DATA ARE PROCESSED?

The mandatory or optional status of the personal data requested along with any consequences for you of a failure to respond will be specified at the time they are collected.

You may obtain details concerning the personal data that we may hold concerning you :

In order to manage and implement your contracts, orders, deliveries and invoices	Surname, first name; Email address; Telephone number; Postal delivery address; Postal invoicing address; Data relating to the means of payment: bank card number, expiry date, cryptogram, bank account details.
In order to answer your requests for information concerning our products or our Terms and Conditions of Supply	First name, surname; Email address; Telephone number.
In order to send our newsletter	Surname, first name; Email address. Profession.
In order to send offers to you concerning our products and services	Surname, first name; Email address; Date of birth; Profession.
In order to manage and respond to your requests to exercise “IT & Civil Liberties” rights	Surname, first name; Email address;
In order to ensure the proper operation and ongoing improvement of our website and its functionalities	Data relating to your browsing activity on our website via cookies.

WITH WHOM ARE YOUR DATA SHARED?

The main people who may gain access to your data, within the ambit of their respective responsibilities and for the purposes indicated below, are the following:

• Authorised personnel from the various departments of GREEN ETHNIES (administrative, accounts, marketing, sales, logistics and IT departments);
• The companies responsible for managing the website;
• The companies responsible for shipping the products;
• The authorised staff of our subcontractors (if there are any subcontractors), such as banking partners;
• Where applicable, any relevant courts, mediators, accounting experts, auditors, lawyers, bailiffs, debt recovery companies, law enforcement authorities or police in the event of theft or seizure by order of the courts or the provision of assistance;
• Any third parties that have potentially saved cookies on your devices (computers, tablets, mobile telephones…), should you consent to this.

Your data will not be disclosed, exchanged, sold or leased to any person other than those mentioned above.

FOR HOW LONG ARE YOUR DATA STORED?

We shall retain your data exclusively for as long as is necessary for the purposes pursued, as described above, which are summarised in the following table:

In order to manage and implement your contracts, orders, deliveries and invoices	For the full duration of the relationship and for a period of 3 years after the end of the business relationship.
In order to answer your requests for information concerning our products or our Terms and Conditions of Supply	3 years starting from the end of the business relationship Or 3 years after the time you were last in contact with GREEN ETHNIES
In order to send our newsletter	3 years starting from the end of the business relationship Or 3 years after the time you were last in contact with GREEN ETHNIES
In order to send offers to you concerning our services	3 years starting from the end of the business relationship Or 3 years after the time you were last in contact with GREEN ETHNIES
In order to manage and respond to your requests to exercise “IT & Civil Liberties” rights	1 year in the event that the right of access or the right to rectification is exercised 3 years in the event that the right to object is exercised
In order to ensure the proper operation and ongoing improvement of our website and its functionalities	13 months. After this period, raw visitor data associated with particular credentials will be erased or anonymised.

WHAT RIGHTS DO YOU HAVE?

You have the following rights under the IT and Civil Liberties Act and the GDPR:

• Right of access (Article 15 GDPR), right to rectification (Article 16 GDPR), right to update or complete your data (find out more)

• Right to block or erase your personal data (Article 17 GDPR), should they be inaccurate, incomplete, unclear, obsolete or in the event that their collection, usage, disclosure or storage is prohibited (find out more)

• Right to withdraw your consent at any time (point (c) of Article 13(2) GDPR)

• Right to restrict the processing of your data (Article 18 GDPR)

• Right to object to the processing of your data (Article 21 GDPR) (find out more)

• Right to portability of the data that you have provided to us, where your data are subject to automated processing based on your consent or on a contract (Article 20 GDPR)

• Right to determine what will happen to your data following your death and to choose whether (or not) we should disclose your data to a third party previously designated by you (find out more).

If we have not been provided with instructions about what to do in the event of your death, we undertake to destroy your data, unless their retention is necessary as evidence or in order to comply with a legal obligation.

These rights may be exercised by sending a request by email to info@greenethnies.com or by writing to: GREEN ETHNIES - Rue du Bourg 17, 1095 Lutry - SWITZERLAND

Finally, you can also lodge a complaint with the supervisory authority, in particular with the French Data Protection Authority, the CNIL.

WHAT HAPPENS TO CONNECTION DATA AND COOKIES?

GREEN ETHNIES uses connection data on its website (date, time, internet address, visitor computer protocol, page visited) and cookies (small files saved on your computer), which make it possible to identify you, to memorise the pages visited by you, and to benefit from website visitor functions and statistics, in particular concerning the pages visited.

You may consent, opt out or choose the types of cookie that you allow to be saved on your computer.

Find out more

In order to find out more about cookies (how to manage, remove and identify them), please visit the CNIL website:

ARE YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?

The company GREEN ETHNIES processes your personal data in Switzerland, a country which has been recognised as adequate by the European Union. This means that transfers of personal data to this country do not need to be regulated by transfer tools.

Having regard to the nature of its operations, GREEN ETHNIES may make other transfers of your data outside the European Union, although you will be informed of this in advance. Should this occur, GREEN ETHNIES will inform you concerning the steps taken to control such transfers and to ensure compliance with them.

WHAT SECURITY MEASURES HAVE BEEN PUT IN PLACE IN ORDER TO PROTECT YOUR DATA?

GREEN ETHNIES and any processors undertake to put in place all technical and organisational measures in order to ensure the security of the personal data processed by us and the confidential status of your data, in accordance with the IT and Civil Liberties Act and the GDPR.

In this regard, GREEN ETHNIES will take the necessary precautions, having regard to the nature of your data and the risks that processing by us entails, in order to maintain data security and, in particular, to prevent data from being corrupted, damaged or accessed by unauthorised third parties (physical protection of premises, authentication procedure of our clients with personal and secure access via user names and confidential passwords, connection logging, encryption of certain data,…).