Privacy Policy

This Policy aims to inform you about the processing of your personal data and the use of cookies while browsing the website https://www.groupeblacherefranchise.com, operated by HOLDING BERNARD BLACHERE (the "Site").

Through this Policy, we want you to understand the nature of the personal information we collect, how we use it, with whom we share it, how we strive to protect it, how you can exercise your rights, and finally, how to contact us.

This Policy also aims to provide you with all the information required by Article 13 of the EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ("GDPR").

Finally, we draw your attention to the fact that we may make changes to this Policy, notably to comply with any new regulations or to adapt it to our practices.

Article 1 – Data Controllers

The personal data collected on the Site is processed by HOLDING BERNARD BLACHERE, a company within Groupe Blachère, registered with RCS Tarascon under number 513 060 236, with its headquarters at 615 Avenue de la Chaffine 13160 Châteaurenard (the "Holding").

Depending on your actions on the Site, other Groupe Blachère companies may also process your personal data as data controllers. These companies will be indicated in the data recipients section, Article 4 of this Procedure.

The data controllers are collectively referred to as "Groupe Blachère", "we" or "us" within this Policy.

Article 2 – Personal Data Collected

The term "personal data" refers to any information related to an identified or identifiable natural person.

In accordance with the principle of data minimization, we ensure that only the personal data strictly necessary for the purpose of the processing is collected.

While navigating the Site, and depending on your actions, we may collect personal data about you.

Action 1: While browsing the Site

Personal data collected includes navigation data such as IP address and other technical details provided by your device. This data may be collected automatically upon arrival or after obtaining your consent. Statistical data may also be collected to optimize your experience. For more information, refer to the "Cookies" section of this Policy.

Action 2: When you contact us via the contact form

Collected data includes identification details (name, surname, etc.), contact information (email, postal address, phone number), and information related to your request to become a franchisee.

Action 3: When you subscribe to the newsletter or agree to receive solicitations

When subscribing to the newsletter, only your email address is collected. If you contact us via the contact form and agree to receive communications, your identification and contact details will be used to send you updates about Groupe Blachère and its brands.

Article 3 – Purposes and Legal Bases for Data Processing

The purposes and legal bases for data processing on the Site are as follows:

ActionsPurposesLegal Basis
Action 1: When you browse the SiteSee the "Cookies" section of this Policy.Your consent or our legitimate interest.
Action 2: When you contact us via the contact formTo be able to consider and process your franchise application.

Execution of pre-contractual measures.

Action 3: When you subscribe to the newsletter or do not opt out of receiving solicitationsTo be able to send you news about Groupe Blachère.Our legitimate interest in offering you news related to Groupe Blachère's activities.

Your data may also be processed for the following purposes and legal bases:

PurposesLegal Basis
Responding to your requests to exercise rights (right of access, rectification, erasure, objection, portability, etc.).Our legal obligation.
If applicable, to demonstrate compliance with our legal and regulatory obligations.Our legal obligation.

Article 4 - Recipients or categories of recipients of your personal data

Recipients within the Blachère Group

our personal data is intended for and accessible to our internal teams whose functions require such access to carry out their missions and the purposes for which your data is processed.

Thus, within the Holding and depending on your actions on the Site, your personal data is intended for services such as:

  • Our Marketing & Communication service for cookie management.
  • Our Legal service for handling franchise requests.

Within other companies of the Group, your personal data may be intended for certain companies, such as:

  • Boulangeries Marie Blachère, Côté Boulange, Café de Marie, Provenc’Halles, Mangeons Bio, and any other company of the Group in case of franchise requests concerning them.
  • M.B Franchise and C.F Franchise in case of franchise application.

Within the Group, certain companies whose activities involve processing your request may access your data, such as:

  • Boulangeries Marie Blachère, Côté Boulange, Café de Marie, Provenc’Halles, Mangeons Bio, and any other company of the Group. These companies will have access to your data in case of franchise requests concerning them.
  • M.B Franchise and C.F Franchise in case of franchise application.

Subcontractors recipients

Your personal data may, where appropriate, be transmitted to subcontractors when such access is necessary for the performance of their missions, such as:

  • Our subcontractor responsible for data hosting or website hosting (Gandi France).
  • Our consultants or external experts for managing the Group's franchise activity.

Judicial, public, or governmental authorities

Where applicable, we may be required to disclose your personal data when necessary to:

  • Comply with the law (or a subpoena or court order).
  • Comply with legitimate requests from public and governmental authorities.
  • Prevent a crime or conduct an investigation, for example in cases of fraud or identity theft.
  • Protect our rights, property, or safety, those of internet users, or third parties.

Data transfer outside the European Union

In the context of this Policy, certain data transfers may occur outside the European Union, particularly for the purpose of Site usage statistics derived from your browsing data.

In any case, when transferring your personal data outside the European Union, we ensure that our service providers fulfill their obligations to protect your data in accordance with the GDPR. In this context, the transfer may be governed by an adequacy decision issued by the European Commission, confirming that the destination country provides an adequate level of protection to your data.

If no adequacy decision is planned for the destination country, we ensure that data transfers are governed by the signature of standard contractual clauses issued and published by the European Commission. These clauses outline the obligations and commitments of data recipients and ensure a high level of protection for your data.

Article 5 - Appointment of a Data Protection Officer

We have appointed a Data Protection Officer ("DPO") responsible for compliance with regulations regarding the protection of personal data, whose contact details are as follows:

Postal address:

GROUPE BERNARD BLACHÈRE
Legal Department - DPO
615 avenue de la Chaffine
13160 Châteaurenard
France

Email contact: dpo@blachère.fr.

If you wish to exercise any of your rights, as defined in the following section, you may use any of the contact methods mentioned above.

Article 6 – Your Rights

You have the right to access, rectify, erase, and port your personal data. You can also request the restriction of processing of your personal data or object to its processing. You have the right to provide us with directives regarding the fate of your personal data after your death.

Your rights can be exercised through our DPO using the means outlined in the previous section.

To protect your privacy and ensure your security, we may take reasonable measures to verify your identity before granting access to, correcting, modifying, or deleting your personal information.

If your rights are not respected, you have the right to lodge a complaint with the CNIL.

Article 7 - Security and Confidentiality of Your Personal Data

In accordance with Article 32 of the GDPR, we implement organizational and technical measures aimed at ensuring the security, confidentiality, availability, and integrity of your personal data.

Administrative, organizational, technical, and physical precautions implemented are designed to protect your personal data from loss, theft, unauthorized access, unauthorized disclosure, alteration, or unlawful destruction.

The measures and precautions implemented are assessed in relation to the nature of the personal data processed and the processing operations conducted.

Your collected personal data is stored confidentially and protected at a high level of security. The servers where your personal data is stored comply with current security standards. They are protected against digital and physical attacks.

All pages of the Site are secured via HTTPS through the application of TLS certificates (latest versions).

Article 8 – Retention Periods for Your Personal Data

We retain your personal data only for the time necessary for the purposes for which it was collected and in compliance with applicable regulations.

In general, depending on your situation, the following retention periods may apply:

Categories of DataRetention Periods
Data related to the use of cookiesUp to a maximum of 25 months.
Data collected as part of your contact request.

3 years or, if a contractual relationship is established thereafter (you become a franchisee), retention periods as stipulated in the franchise agreement.

In case of franchise application, we will retain your data for 2 years following the rejection of your application, unless you object. If you become a franchisee, the data retention periods will be specified in the franchise agreement that binds us.

Data used for sending newsletters.Until you unsubscribe or 3 years after your last contact (e.g., click in a newsletter).

Certain data may be retained for an additional period to manage claims and/or litigation, as well as to comply with our legal or regulatory obligations or to respond to requests from authorized authorities. These data will be kept in intermediate archiving and will benefit from restricted access solely for these purposes.

Article 9 – Cookies

To learn about our practices regarding the use of cookies and other trackers on the website, please visit our Cookie Policy.

Article 10 – Modifications to this Policy

We may periodically modify this Policy. In case of major changes to this Policy, we will display a visible notification on the homepage of the Site. We encourage you to regularly review this Policy.

© 2024 Groupe Blachère - Tous droits réservés