1. Definition and nature of “personal data”
During the use of our services on “Breizh Music / Brittany Music Lessons” we will ask you to communicate some personal data regarding yourself.
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, by reference to a name, surname, login, photo, post and email addresses, phone number, date of birth, bank data related to your subscription transaction, details on your purchase or subscription, bank card information and all other information you will choose to tell us about yourself
2. Purpose of this Charter
This charter aims at giving you all the necessary information about the tools we have at our disposal to collect your personal data, strictly protecting your privacy rights.
Regarding this matter we are in conformity collecting and processing your personal data in accordance with good practices and under the applicable law.
3. Identity of the Data importer
SARL BREIZH MUSIC, Pendeulen, 22530 Mûr de Bretagne, GUERLÉDAN. Ci-après nommé “BREIZH MUSIC”.
4. Personal Data Processing
Your personal data is collected to fulfil different goals:
In case you wish not to, we give you the opportunity to opt out on that matter at the moment of collecting your personal data;
We also inform you, during processing of your personal data, when data is compulsory or optional. Likewise we inform you what the consequences are when you leave a field unanswered.
5. Personal Data
The user acknowledges and accepts
6. Personal Data Processors
Breizh Music personnel, control services (notably accountants) and subcontractors may have access to your personal data.
Your personal data may also be required by public offices in accordance to our legal obligations : Representatives of the law, Administrative Authorities or debt recovery organisations
7. Sharing Personal Data
We do not sell, share or exchange your personal data to the benefit of any third parties.
8. Data Retention
(i) Regarding management of prospects and customers data processing
We will retain your personal data for as long as your account is active or as needed to provide you services. We may still retain your personal data to the extent necessary and for the legal period to comply with our legal obligations, for proof of contract or any other rights.
Regarding eventual prospects events for customers, their data may be retained for up to three years after the end of customer relationship.
Regarding prospects - non customer -, their data may be retained for up to three years after the date when it was collected or after the last contact with the prospect.
At the end of the three year period we will contact you to know whether you wish to continue receiving commercial
sollicitations.
(ii) Regarding identity documents
In the event of the exercise of the right of access or rectification, the data relating to identity documents may be retained for the period provided for in article 9 of the Criminal Procedure Code, ie one year. In the event of the exercise of the right of opposition, this data may be archived during the limitation period provided for in article 8 of the Code of Criminal Procedure, i.e. three years.
(iii) Regarding data relating to bank cards:
Financial transactions relating to the payment of purchases and charges via the site are entrusted to a payment solution provider who ensures their smooth running and security.
For the purposes of the services, this payment solution provider may have to be the recipient of your personal data relating to your bank card numbers, which it collects and stores in our name and on our behalf.
We do not have access to this data.
To facilitate regular purchases or to pay charges related to the site, the data from your bank cards are kept for the time of your membership on the site and at the very least, until you make your last transaction.
By having ticked the box on the site, expressly provided for this purpose, you give us your express consent to retain this data.
We do not keep data relating to the visual cryptogram or CVV2, written on your bank card.
If you refuse that your personal data relating to your credit card numbers be kept under the conditions specified above, we will not keep the data beyond the time necessary to allow the transaction to be carried out.
In any case, the data relating to this may be retained, for the purpose of proof in the event of a possible dispute with the transaction, in intermediate archives, for the duration provided for by article L 133-24 of the monetary and financial Code, in this case 13 months following the debit date. This period can be extended to 15 months to take into account the possibility of using deferred debit payment cards.
(iv) Regarding the management of lists of opposition to receive prospecting:
Information allowing your opposition right to be taken into account is kept for at least three years from the exercise of the right of opposition.
(v) Regarding traffic statistics
The information stored in the users terminal or any other element used to identify the users and allowing their traceability or frequentation will not be kept beyond 6 months.
9. Security
We inform you that we take all necessary precautions, appropriate organizational and technical measures to preserve the security, integrity and confidentiality of your personal data and in particular, to prevent it from being distorted, damaged or non-unauthorized third parties having access to it. We also use or can use state of the art secure payment systems that comply with the applicable regulations.
10. Cookies
Cookies are text files, often encrypted, stored in your browser. They are created when a user's browser loads a given website: the site sends information to the browser, which then creates a text file. Each time the user returns to the same site, the browser retrieves this file and sends it to the website server.
We can distinguish two types of cookies, which do not have the same purposes: technical cookies and advertisement cookies:
➢ Technical cookies are used throughout your browsing, to facilitate it and to perform certain functions. For example, a technical cookie can be used to store the responses entered in a form or the user's preferences with regard to the language or presentation of a website, when such options are available.
➢ Advertisement cookies can be created not only by the website on which the user is browsing, but also by other websites broadcasting advertisements, announcements, widgets or other elements on the page displayed. These cookies can be used, in particular, to carry out targeted advertising, that is to say advertising determined according to the user’s browsing history.
We use technical cookies. These are stored in your browser for a period which cannot exceed six months.
We use advertisement cookies. These are stored in your browser for a period which depends on the advertising management.
We use or may use Google Analytics which is a traffic analysis tool which generates a cookie to measure the number of visits to the site, the number of page views and the activity of visitors. Your IP address is also collected to determine the city from which you are connecting. The lifespan of this cookie is mentioned in article 8 (v) of this charter.
We remind you for all practical purposes that you can withdraw consent to cookies being stored in your browser by configuring it. Such a refusal could however prevent the proper functioning of the site.
If you wish, you can also delete cookies in your browser settings after each session.
11. Consent
When you choose to communicate your personal data, you expressly give your consent for the collection and use thereof in accordance with what is set out in this charter and the legislation in force.
12. Access to your personal data
All the personal data to which we have access is that which you have entered on the site. You can change and access them on your personal account or request the cancellation of your account at this email address: contact (a) breizh-music.bzh
We remind you that any person may, for legitimate reasons, oppose the processing of data concerning oneself.
13. Modifications
We reserve the right, at our sole discretion, to modify this charter at any time, in whole or in part. These changes will come into effect as of the publication of the new charter. Your use of the site following the entry into force of these modifications will constitute recognition and acceptance of the new charter. Otherwise and if this new charter does not suit you, you will no longer have to access the site.
14. Compliance with the GDPR
Breizh Music is fully involved to comply with the GDPR which came into effect on May 28, 2018.
