Data protection policy

1. Who are we?

1.1. The Data Controller

The following information is provided to you in order to inform you of the personal data protection commitments made by Elvor, société Sofivo SAS, whose head office is located in 50890 Condé-sur-Vire - France, which is the data controller for the personal data processing referred to in this document, hereinafter referred to as “the Data Controller” or “we/us”.

1.2. Our data protection policy manager

The Data Controller has appointed a person responsible for data protection, who you can contact by e-mail at: mesdonneespersonnelles@armor-dairy.com
or by letter at the following address:
Sofivo
19 bis rue de la Libération
Saint-Brice-en-Coglès
35460 MAEN ROCH
France

The data protection officer can be contacted at: dpo@savencia.com

2. The personal data we process

Within the framework of personal data processing, the Data Controller collects and processes the following data:

  • Identification data: Last name, first name, e-mail address, telephone, country, IP.
  • Professional life data: Professional category (Farmer, Student, Distributor, Other).

Data marked with an asterisk in our forms must be provided. Otherwise, the service associated with the form cannot be provided.

3. Purpose and legal basis for data processing

3.1. Processing purpose

We process personal data for the purposes of:

  • Website content management;
  • Audience analysis;
  • Managing requests resulting form the contact form;
  • Statistics and reporting.
3.2. The legal basis for our processing

We only process data if at least one of the following conditions is met:

  • you have given your consent to the processing operations;
  • the existence of our legitimate interest or that of a third party justifies the processing of the personal data concerned;
  • we are required process the personal data concerned in order to fulfil a contract that binds us;
  • we are bound by legal and regulatory obligations that require the processing of the personal data concerned.

4. The recipients of your data

The personal data we collect, along with data that is subsequently collected, is intended for us in our capacity as Data Controller.

We ensure that only authorised persons can access this data. Our subcontractors / service providers may receive this data to carry out the services we entrust to them.

Your personal data may be reconciled, pooled or shared between all the parent, sister and subsidiary entities of the Data Controller.

It may be sent to these entities for the purposes stated in this data protection policy. These operations are conducted on the basis of instruments in compliance with applicable regulations and are capable of ensuring the protection and respect of your rights.

5. Transferring your data

Within the framework of the services proposed, we transfer your personal data to recipients situated in the following countries:

  • USA (as part of Google Analytics cookies)

Each transfer is supervised by legal instruments that comply with the applicable legal framework.

6. How long we store your data

The storage periods we apply to your personal data are proportionate to the purposes for which it was collected. Consequently, we organise our data storage policy in the following way:

  • Processing purpose: Cookies
  • Storage period: Refer to the cookies policy
  • Cookies: 13 months from their installation on your device
  • In the event of exercising your right of access, rectification, deletion or restriction, data concerning identity documents and information enabling these rights to be taken into account: 1 year from receipt of the request.
  • In the event of exercising your right of objection, data concerning identity documents and information enabling the right of objection to be taken into account: 6 years from receipt of the request.
  • Requests made via the contact form: For the time it takes to process the request plus the statutory limitation period (1 year).

The storage periods presented may be increased by the applicable statutory limitation periods.

7. Your rights

7.1. How to exercise your rights

You can exercise your rights
by sending an e-mail to the following address: mesdonneespersonnelles@armor-dairy.com
or by letter to the following address:
Sofivo
19 bis rue de la Libération
Saint-Brice-en-Coglès
35460 MAEN ROCH
France

To do this, please clearly indicate your surname(s) and first name(s), and the address to which you would like the reply to be sent.

In principle, you can exercise all your rights free of charge. However, in terms of access rights, you may be asked to pay a reasonable fee based on administrative costs for any copies of the data you request.

Concerning the right of information, the Data Controller has no obligation to act upon your request if you already have the information you are requesting.

The Data Controller shall inform you if they cannot act upon your requests.

These rights are not absolute and are subject to various conditions under:

  • applicable local personal data protection or privacy law; and
  • laws and regulations that apply to you.

The Data Controller hereby informs you that not providing or modifying your data may have consequences on the processing of certain requests within the framework of the execution of the contractual relationship and that your request to exercise your rights will be kept for follow-up purposes for six years concerning the exercise of the right of objection and one year concerning the exercise of other rights.

All of your rights are detailed below.

7.2. Votre droit à l’information

You acknowledge that this information notice informs you of the purposes, the legal framework, the interests, the recipients or recipient categories with whom your personal data is shared, and the possibility of data being transferred to a third country or to an international organisation.

In addition to this information and with the purpose of ensuring fair and transparent processing of your data, you confirm that you have received additional information concerning:

  • the storage period of your data;
  • the existence of your rights and how to exercise them.

If we decide to process data for purposes other than those provided, all information concerning these new purposes will be sent to you.

7.3. Your right to access and rectify your data

By exercising this right, you have confirmation as to whether your personal data is being processed or not, and when it is, you have access to your data and to information concerning:

  • the processing purposes;
  • the categories of personal data concerned;
  • the recipients or categories of recipients, in particular recipients established in third countries;
  • where possible, the envisaged storage period: for personal data or, where this is not possible, the criteria used to determine this length of time;
  • the existence of the right to ask the Data Controller to rectify or delete your personal data, the right to request a restriction of the processing of your personal data, the right to object to processing;
  • the right to issue a complaint with a supervisory authority;
  • information concerning the source of the data when it is not collected directly from the data subject;
  • the existence of automated decision-making, including profiling and, in this case, relevant information about the underlying logic, as well as the significance and intended consequences of such processing for the data subject.

You may ask us to rectify or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.

7.4. Your right to delete your data

You may ask us to delete your personal data when one of the following grounds apply:

  • the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you withdraw your consent that you had previously given;
  • you object to the processing of your personal data when there are no legal grounds for such processing;
  • the personal data processing does not comply with applicable legislation and regulations;
  • your personal data was collected when you were still a minor.

However, it will not be possible to exercise this right if it is necessary to store your personal data for legal or regulatory reasons, and in particular, for example, for the establishment, exercise or defence of legal claims.

7.5. Your right to restrict data processing

You may request the restriction of your personal data processing in the circumstances provided for by legislation and regulations.

7.6. Your right to object to data processing (unsubscribe)

You have the right to object to the processing of your personal data when the processing is based on the legitimate interest of the Data Controller.

In the event of direct communication, this right may be exercised by all means, particularly by clicking on the unsubscribe links at the bottom of the communications sent.

7.7. Your right to data portability

You have the right to the portability of your personal data. The data on which this right can be exercised is:

  • personal data only, which excludes anonymised personal data or data that does not concern you;
  • personal declarative data and personal operational data;
  • personal data that does not damage the rights and freedoms of third parties such as those protected by trade secrecy.

This right is limited to processing based on consent or on a contract and to personal data that you have personally generated.

This right does not include derived data or inferred data, which is personal data created by the Data Controller.

7.8. Your right to withdraw your consent

When the data processing we carry out is consent-based, you can withdraw your consent at any time. We will then stop processing your personal data, without the earlier operations to which you consented being affected.

7.9. Your right to complain

You have the right to complain to the competent supervisory authority without prejudice to any other administrative or judicial remedy.

7.10. Your right to define post-mortem instructions

You can define instructions relating to the storage, deletion and communication of your personal data after your death with a trusted third party, certified and responsible for enforcing the wishes of the deceased, in accordance with the requirements of the applicable legal framework.

7.11. Your right to object to telephone canvassing

You are hereby informed that if you do not wish to be the subject of telephone canvassing, you have the right to object to telephone canvassing by adding your landline and/or mobile telephone numbers to the free objection list accessible on www.bloctel.gouv.fr.

You are informed that your request will be processed within 30 days of confirmation of your registration. This registration is valid for a period of three years.

8. Security of your data

The protection, integrity and confidentiality of your data is extremely important to us. Therefore, we have implemented technical and organisational measures to ensure a level of security adapted to the risk and to thus protect your data against any loss, alteration, access or disclosure to unauthorised third parties.
However, despite our efforts, no security measure can prevent all risks of misappropriation or piracy, for which we, as Data Controller, shall not be held liable.
In the event of a breach of personal data and in compliance with regulations in force on protection, we shall inform the Cnil. In the event of a data breach that poses a high risk for your rights and freedoms, we shall inform you as quickly as possible and always in the conditions provided for by regulations in force concerning personal data protection.