WHAT IS THE PURPOSE OF OUR PERSONAL DATA PROTECTION POLICY?

The Groupe Rocher would like to remind you of its commitment to respect the trust you place in it and to apply the regulations in force in France and in the European Union regarding the protection of personal data.

This Personal Data Protection Policy informs you of the conditions under which the Groupe Rocher, as a data controller, collects and uses your personal data. It complements the information brought to your attention when you provide us with your data by filling out a form.

This policy applies to data collected and processed during your navigation on the website and when publishing editorial content relating to the "Connection to Nature" Barometer. The policy establishes rules about the personal data of all visitors of the website, journalists and content publishers with whom we interact, regardless of the channel for collecting that data. 

WHAT DATA IS PROCESSED AND FOR WHAT PURPOSES?

For each processing, we collect and use only the adequate and necessary data regarding the purpose for which they are processed.

We process your data to pursue our legitimate interests, always ensuring that your rights and sake are respected, and when necessary based on your express consent.

The retention period of your personal data depends on the purpose for which it is processed.

The main purposes for which we process your personal data are:

	Purpose	Data categories	Retention period
	Publication of editorial content	Press articles, blogs, videos, and publications	Throughout the legal retention period of press articles and journalistic content
	Answers to the Barometer	Anonymized data not related to cookies or directly identifying data	No retention period as they are no directly related to identifying data
	Social Network Sharing Buttons & Cookies	IP address, cookies related to the smooth functioning of the website, audience measurement, social networks and website performance	13 months
	Contact form	Name, first name, email address, content in contact form	2 years from the receipt of the form
	Management of events	Data related to your identity and contact data	2 years from data collection

WHO DO WE SHARE YOUR DATA WITH?

The recipients of the personal data are, within the framework of the above purposes: the duly qualified staff of the Groupe Rocher, its data processors and its partners belonging to the Barometer..

The data may also be communicated to the relevant authorities, at their request, or in order to comply with other legal obligations.

HOW DO WE KEEP YOUR DATA SAFE?

We implement appropriate technical and organizational measures to protect your data, including website encryption, anonymization and security procedures to ensure a level of security adapted to the risks associated with your personal data. We follow industry best practices to ensure that personal data is not accidentally or unlawfully destroyed, lost, altered, unauthorizedly disclosed or accessed.

We require our staff and all third parties working for the Groupe Rocher entities to respect strict standards of security and information protection, including contractual obligations under which they commit to protect all data and enforce strict data transfer measures.

IS YOUR DATA PROCESSED OUTSIDE THE EU?

We may transfer your data to a country outside the European Union.

When your data is transferred to a country outside the EEA, we will always ensure that it is protected and that the country has a level of protection equivalent to the EU. To do so, we subject every transfer of your data to appropriate and relevant safeguards.

This can be done in different ways, for example:

• • The country to which we send the data can be approved by the European Commission or the local data protection authority;
• • The recipient may have signed a contract based on the "standard contractual clauses" approved by the European Commission, or by the local data protection authority, requiring it to protect your personal data;
• • In other circumstances, the law may allow us to transfer your personal data to other jurisdictions, including outside the EEA if necessary. In any case, however, we will ensure that any transfer of your personal data complies with the current data protection law.

WHAT ARE YOUR RIGHTS?

In accordance with applicable regulations, you have different rights that you can exercise at any time:

You have a right of access, a right to rectification, a right to erasure, as well as the right to request the portability of the data you have provided us. 

You have the right to object, for legitimate reasons, to the processing carried out concerning your data, or to request the restriction of these processing.

You have the right to provide a living digital will on how your data is handled after your passing.

HOW DO YOU EXERCISE YOUR RIGHTS?

To exercise any of your rights, simply send us an email at: clients-privacy@yrnet.com or by mailing us to: Laboratoire de Biologie Végétale Yves Rocher – Group DPO, 7 chemin de Bretagne, 92130 Issy-les-Moulineaux

We will respond to your request as soon as possible and within the month of your full request receipt. If we have any reasonable doubts about your identity, we may ask you for additional information (i.e. ID) to confirm your identity. We reserve the possibility of not responding to patently unfounded or excessive requests. 

The Groupe Rocher has appointed a Data Protection Officer (DPO) whose mission is to ensure compliance with applicable regulations and the rules outlined in this Policy. 

For any questions or comments regarding the processing of your personal data, you can contact our DPO by email clients-privacy@yrnet.comor by mail at: Laboratoire de Biologie Végétale Yves Rocher – Group DPO, 7 chemin de Bretagne, 92130 Issy-les-Moulineaux.

We are committed to do everything we can to respect your rights regarding your personal data. However, if you consider that these rights have not been respected, you have the opportunity to file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the supervisory authority whose mission is to ensure compliance in France with the regulations applicable to the processing of personal data: www.cnil.fr

Cookies Policy

WHY ARE COOKIES USED ON THIS WEBSITE?

What is a cookie? A cookie is a small file left and read during your consultation on our website. A cookie can also be used when reading an email, installing or using a mobile app on your computer, smartphone, tablet, etc.

Why do we use cookies? 

We use functionality cookies. These cookies allow us to: - Improve and personalize the functionality of the website - Analyze the traffic and performance of the website (statistics, memorization of your device, implementation of security measures)                           

How long do cookies last?

Each cookie has its own lifespan, up to 13 months. You can find the lifespan of each cookie at any time in the "partner and cookie details" section by clicking on

Do we use cookies on other sites?

Our ads on other sites and apps may contain cookies that allow us to: - Calculate the amount of money due to our partners - Make display and click statistics on these content - Adapt the presentation of our website if you click on our advertisement