Privacy Policy
At Trone, the protection of your personal data is a priority. When you use our website https://www.trone.paris/ (the "Site") and in the context of our contractual relationships with our clients, we are required to collect personal data concerning you.
The purpose of this policy is to inform you about the terms under which we process this data in accordance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "GDPR") and Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms (together the "Applicable Regulation").
1. Who is the data controller?
The data controller is the company Trone, a simplified joint-stock company, registered with the Paris Trade and Companies Register under number 833 412 661 and whose registered office is located at 6 rue des Bateliers, 92110 Clichy (hereinafter "We" ).
2. What personal data do we collect?
'A personal data is data that allows for the identification of an individual directly or by cross-referencing with other data. When you browse the Site, we collect data that falls under the following categories:'
-
Identification data (names, first names, email address, phone number) ;
-
Data related to your professional life (your industry and the name of your company);
-
Browsing data (IP address, pages viewed, date and time of connection, browser used, operating system, user ID, MAID)
-
Any information you wish to provide us in the context of your contact request.
As part of managing our contractual relationships, we also collect data that falls under the following categories:
-
Data related to your orders (products, delivery address);
-
Economic and financial data (data related to your bank cards via Stripe);
The mandatory data is indicated when you provide us with your data. They are marked by all means.
3. For what purposes, on what legal bases, and for how long do we retain your personal data?
Purposes of processing |
Legal bases |
Shelf life |
Execute your order, carry out operations related to customer management concerning quotes, contracts, orders, deliveries, invoices, and customer relationship management. |
Execution of the contract that you or your company have entered into with Us |
Personal data is retained for the entire duration of the contractual relationship. Furthermore, data related to your transactions is archived for evidential purposes for a period of 5 years. |
Create a file of clients and prospects |
Our legitimate interest in developing and promoting our business |
For customers: data is retained for the duration of the business relationship and is deleted after a period from the end of the business relationship. For prospects: data is retained for a period of 3 years from your last contact. In any case, your data may be archived for evidential purposes for a duration of 5 years. |
Manage your reviews on our products |
Our legitimate interest in gathering your opinion on our products. |
|
Send newsletters, solicitations, and promotional messages |
For customers: our legitimate interest in informing you of our latest news. For prospects: your consent if you qualify as a consumer or our legitimate interest in informing you of our latest news if you are a professional. |
Data is retained for 3 years from your last contact with Us or until you withdraw your consent. |
Develop statistics (navigation, audience of the Site) and improve the functionalities of the Site through the deposit of audience measurement cookies. |
Your consent |
Data is retained for [to be completed |
Respond to your contact requests |
Our legitimate interest in responding to your requests |
The data is kept for the time necessary to process your information request and deleted once the contact request has been processed. |
Comply with the legal obligations applicable to our activity |
Legal and regulatory obligations |
Invoices are archived for a period of 10 years. Data related to your transactions is retained for 5 years. For buyers who qualify as consumers, data related to your contract and elements related to the signing of the contract will be kept for 10 years from the date of delivery of the goods. |
Processing applications and managing interviews (pre-selection of candidates, contacting to assess the candidate's ability to fill the position, finalization of the recruitment process) |
Execution of pre-contractual measures |
Your data is kept in an active database for the entire duration of the recruitment process until the hiring decision is made. In the event of your application being rejected, your data may be retained for 3 months after the end of the recruitment process in order to provide you with explanations regarding the reasons for the rejection of your application. Your data may be kept in intermediate archiving for evidential purposes for 5 years from the date of the hiring decision. |
Establishment of a CV database |
Your consent |
Data is retained for two years from the last contact with the person concerned. |
Manage requests for the exercise of rights |
Our legitimate interest in complying with the legal obligations to which we are subject. |
If we ask you for proof of identity: we only keep it for the time necessary to verify your identity. Once the verification is completed, the proof is deleted. If you exercise your right to object to prospecting: we keep this information for 3 years. |
4. Who are the recipients of your personal data?
Will have access to your personal data:
-
The staff of our company;
-
Our subcontractors: hosting provider; newsletter sending provider; CRM tool; billing tool; resource planning software (ERP);
-
Our carriers for the delivery of products;
-
If applicable: public and private organizations, exclusively to meet our legal obligations.
5. Is your data likely to be transferred outside of the European Union?
Your data is kept and stored for the duration of the processing on the servers of the company Gandi.net in France.
As part of the tools we use (see Article 5 on recipients regarding our subcontractors), your data may be subject to transfers outside the European Union. The transfer of your data in this context is secured using the following tools:
-
either the data is transferred to a country that has been the subject of an adequacy decision by the European Commission, in accordance with Article 45 of the GDPR: in this case, this country provides a level of protection deemed sufficient and adequate to the provisions of the GDPR;
-
either the data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, these transfers are based on appropriate safeguards indicated in Article 46 of the GDPR, tailored to each provider, including but not limited to the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules, or under an approved certification mechanism.
-
either the data is transferred on the basis of one of the appropriate safeguards described in Chapter V of the GDPR.
6. What are your rights regarding your data?
You have the following rights regarding your personal data:
-
Right to information: this is precisely the reason why we have drafted this policy. This right is provided for by Articles 13 and 14 of the GDPR.
-
Right of access: you have the right to access your personal data at any time under Article 15 of the GDPR.
-
Right to rectification: you have the right to rectify at any time your inaccurate, incomplete, or outdated personal data in accordance with Article 16 of the GDPR.
-
Right to restriction: you have the right to obtain the restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
-
Right to erasure: you have the right to request that your personal data be erased, and to prohibit any future collection for the reasons stated in Article 17 of the GDPR.
-
Right to lodge a complaint with a competent supervisory authority (in France, the CNIL), if you believe that the processing of your personal data constitutes a violation of the applicable texts, in accordance with Article 77 of the GDPR).
-
Right to define guidelines regarding the retention, deletion, and communication of your personal data after your death.
-
Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR states that you can withdraw your consent at any time. This withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.
-
Right to data portability: under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a commonly used and machine-readable format and to request their transfer to the recipient of your choice.
-
Right to object: under Article 21 of the GDPR, you have the right to object to the processing of your personal data. However, please note that we may continue to process your data despite this objection, for legitimate reasons or for the establishment, exercise, or defense of legal claims.
You can exercise these rights by writing to us at the contact details below. We may ask you at that time to provide us with additional information or documents to verify your identity.
7. What cookies do we use?
To learn more about cookie management, we invite you to consult our Cookie Policy.
8. Contact point for personal data
- Contact email: contact@trone-paris.com
- Contact address: Trone, 6 rue des Bateliers, 92110 Clichy, France
9. Modifications
We may modify this policy at any time, particularly to comply with any regulatory, jurisprudential, editorial, or technical developments. These modifications will take effect on the date the modified version comes into force. You are therefore encouraged to regularly consult the latest version of this policy. Nevertheless, we will keep you informed of any significant changes to this privacy policy.