Privacy policy

QUAI DES CELESTINS, a simplified joint stock company with capital of €9,050, registered in the Paris Trade and Companies Register under number 522 306 265, having its registered office at 207 rue du Faubourg Saint-Martin, 75010 Paris (hereinafter the "Company" or "QUAI DES CELESTINS"), represented by Fleur PHELIPEAU in her capacity as President, collects and processes personal data concerning the Company's customers, users of the Company's website (hereinafter the "Site") and users of its services (hereinafter the "Services"), as defined in the General Terms and Conditions of Sale accessible at the following link https://birdienutrition.com/pages/conditions-generales-de-vente, hereinafter the "Terms and Conditions"), hereinafter collectively referred to as the "Users" or "You" or "Customers".

The Company is concerned with the protection of Users' privacy and personal data. Accordingly, it ensures that it adopts and complies with a personal data processing policy that complies with current regulations and in particular with the General Data Protection Regulation no. 2016/679 of April 27, 2016 (the "GDPR") and the French Data Protection Act of 1978 as amended.

Accordingly, the purpose of this privacy and personal data protection policy (the "Policy") is to set out the terms and conditions under which the Company processes personal data concerning Users.

The Company reserves the right to modify the Policy at any time and undertakes to inform Users of such changes via notification when using the Services.

1. The data controller

The Company is responsible for the processing of personal data collected and processed under the conditions of this Policy applicable to Users.

You may contact the Company using the contact details provided in article 8 "Contact" of this Policy.

The data controller is the person, in this case the Company, who determines the terms and purposes of the processing of personal data. As his name indicates, he is responsible for the processing of personal data that he implements, and is the User's main contact for asserting his rights in relation to the processing.

2. Sources and categories of personal data

2.1. Source and collection of personal data

The Company collects Users' personal data in connection with the use of the Services. In particular, the Company collects and processes Users' personal data when :

• ORDERING ;
• the provision of Services ;
• Invoicing and payment of orders, as well as preliminary credit card checks;
• the creation of the User's profile on the Site (hereinafter the "Profile");
• browsing on the Site (in particular through cookies); and/or
• statistical and commercial data analysis ;
• sending informative mass or targeted emails;
• order tracking and finished product creation emails

The Company also processes all personal data provided spontaneously and voluntarily, in particular when Users contact the Company.

2.2 Categories of personal data

The Company collects and processes the following categories of personal data:

• Ordering information :
• Personal data: surname, first name, telephone number and e-mail address of the customer (if an individual) or of the main contact person within the customer's company.
• Necessary information for possible exchanges with You :
• Personal data: surname, first name, telephone number and e-mail address of the customer (if an individual) or of the main contact person within the customer's company.
• Information required for invoicing and payment of orders:
• Personal data: surname, first name, telephone number and e-mail address of the customer (if an individual) or of the main contact at the customer's company, as well as the billing postal address. We do not store bank details for credit card payments.
• Information required to create a Profile :
• Personal data: e-mail address, telephone number, login, password
• Information collected when using the "Contact" form:
• Personal data: last name, first name, e-mail address, as well as any other information that You may spontaneously communicate to us in your message.
• Company data: distribution sector, country/city of sale
• Information on the type of device used, IP address, browser type and language.
• Information collected by cookies installed on our Site and previously accepted or refused, such as the pages consulted.

2.3. Mandatory provision of data

Certain information may be mandatory for the implementation of Services. When placing an order, creating a Profile or using the "Contact" form, mandatory data is indicated on our forms by an asterisk or by the explicit mention "Information mandatory". Failure to provide the mandatory data will prevent us from providing the Services concerned.

2.4. Data accuracy

The Company makes every effort to keep personal data accurate and complete. To ensure that we have the most up-to-date information, You may notify us of any change in your contact details or any other data by contacting the Company at the address mentioned in Article 8 "Contact" below, or by regularly updating your Profile.

2.5. Location of personal data

3. Purposes and legal basis of processing

• To compile statistics on the use of the Services and on the behaviour of Users;
• Newsletter dispatch ;
• Company Service Proposals; and
• Provision, maintenance and improvement of our Services and Website.

In addition, processing in the context of legitimate interest also makes it possible to :

• Managing collections ;
• Detect, investigate, prevent or take action regarding illegal activities, abuse, suspected fraud or situations involving potential threats to the security or rights of a person or entity and to use as evidence in litigation;
• Investigate, prevent and deter breaches of our T&Cs and this Policy; and
• Protect and defend our rights and interests, including our intellectual property rights, before competent courts or tribunals.

The company also seeks to enable employee training and compliance and safety audits.

Finally, data is collected to meet legal obligations:

• Meet the legal and regulatory obligations to which the Company is subject, such as declaring transactions for tax purposes and retaining invoices,
• Training our teams, as part of the legal obligations to which the Company is subject as an employer,
• Manage Users' requests concerning their rights to personal data.

4. Communication of personal data

Personal data collected and processed may be transmitted to :

• Authorized persons in the relevant departments of the Company;
• In the event of a claim, theft or other breach of the GTCs or the law, personal data may be passed on to our insurance company and/or brokerage firm, which is obliged to maintain the confidentiality of the data transmitted, and, if necessary, to the police and the courts.
• To administrative and judicial authorities, and more generally to public bodies, in order to comply with our legal obligations or to enable us to defend our rights and interests,
• If necessary, contact our legal advisors and lawyers,
• If we sell or transfer our business or part of it and your personal data relates to that sold or transferred part, or if we merge with another company, we will share your personal data with the new owner of the business or our merger partner, respectively.

5. Personal data security

The Company implements organizational, technical, software and physical security measures to protect personal data against loss, unauthorized access, disclosure or alteration.

6. Data retention

The Company retains your personal data for the time necessary to achieve the purposes for which it was collected, plus any statutory periods for archiving, retention of certain data and prescription. At the end of processing, personal data will be either deleted or anonymized by the Company.

The retention period depends on the type of personal data and its purpose. In particular, the retention period is determined according to the following criteria:

• Closing the Profile ;
• The regularity of your use of the Services;
• The existence of legal or contractual obligations requiring us to retain data;
• The existence of a retention period specifically defined by the applicable regulations; and
• The type of personal data and in particular its sensitivity (e.g. banking information).

In this context, the Company has adopted the following retention periods:

• Data concerning your Profile is kept for as long as the account is active and, at the latest, for three years following the last transaction.
• Once your account has been closed, your data will be deleted or anonymized by the Company, unless it is required to be retained for accounting purposes, legal obligations, dispute resolution, debt collection or fraud prevention.
• In the event of a dispute relating to a transaction, we retain the data relating to the said transaction for the applicable statute of limitations.

For more information about how long we keep your personal data, please contact us using the details given in article 8 "Contact" below.

7. User rights

Users are informed that, under the conditions of the RGPD and the laws applicable in France, they have the right to access, rectify, delete and port their personal data, as well as the right to limit and object to the processing of such data.

Users also have the right to organize the fate of their personal data in the event of their death, as well as the right to lodge a complaint with the CNIL, whose website can be accessed at http://www.cnil.fr and whose head office is located at 3 Place de Fontenoy, 75007 Paris.

For processing based on consent, the User may withdraw consent at any time, without affecting the lawfulness of the processing prior to such withdrawal.

The User may exercise his rights, free of charge, by contacting the Company at the address given in article 8 "Contact" below, except in the case of a manifestly excessive request, in which case charges may be applied.

In addition to the information given below, the Company invites the User to consult the CNIL website:

• Right of access: the User has the right to obtain from the Company confirmation that his/her personal data are or are not being processed and, where they are, access to said data as well as information relating to the purposes of the processing (art. 15 of Regulation 2016/679 on the protection of personal data ("RGPD")). Requests that are manifestly unfounded, excessive or repeated are likely to receive no response or to generate costs.
• Right of rectification: the User has the right to obtain from the Company, as soon as possible, the rectification of his/her personal data that he/she deems inaccurate (art. 16 of the RGPD).
• Right to erasure: the User has the right to obtain from the Company the erasure of his/her personal data, under the conditions provided for in Article 17 of the RGPD.
• Right to portability: the User has the right to receive, or request to be sent to a third party, the personal data concerning him that he has provided to the Company, in a structured, commonly used and machine-readable format (art. 20 of the RGPD).
• Right to restrict processing: the User may request the Company to restrict the processing of his/her personal data in accordance with article 18 of the GDPR.
• Right to withdraw consent: Users have the right to withdraw their consent to the processing of your data if such processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing based on consent carried out prior to the withdrawal of consent.
• Right to object: the User has the right to object at any time, for reasons relating to his or her particular situation, to processing of his or her personal data, where such processing is based on legitimate interest and under the conditions of Article 21 of the RGPD.
• Right to organize the fate of personal data in the event of death: Users may define general or specific directives relating to the retention, deletion and communication of their personal data after their death (amended law 78-17 of January 6, 1978, art. 40, II).
• Right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, the User has the right to lodge a complaint with a supervisory authority if he considers that the processing of personal data concerning him constitutes a breach of the regulations applicable to personal data (art. 77 of the RGPD).

8. Contact

For further information on the processing of your personal data or to exercise your rights, please contact us at the following address:

QUAI DES CELESTINS / Birdie
207 rue du Faubourg Saint-Martin
75010 Paris

Email : [email protected]
Telephone : 01 84 80 44 20