Privacy Policy

1. Privacy Policy & Cookie Management

This privacy policy defines and informs you of how LVD uses and protects the information you provide to us, where applicable, when you use this website accessible from the following URL: www.levapoteur-discount.fr (hereinafter the “Website”).

Please note that this privacy policy may be amended or supplemented at any time by LVD, in particular to comply with any legislative, regulatory, case-law or technological developments. In such cases, the update date will be clearly indicated at the top of this policy. These amendments are binding on the User as soon as they are published online. The User should therefore consult this privacy and cookie policy regularly in order to be aware of any amendments.

In accordance with the General Data Protection Regulation adopted by the European Parliament on 14 April 2016, and the amended French Data Protection Act of 6 January 1978, LVD informs you of the following:

a) Contact details

The website www.levapoteur-discount.fr is owned by LVD:

LVD located at: 23 rue Sylvabelle, 13006 Marseille

SIRET number: 84320667300108

Customer service telephone number: 03.65.95.96.25

Email: [email protected]

Website creator and publisher: SAS LVD (SIRET: 84320667300108)

For processing carried out in shops operated by LVD SHOP, the company concerned is:

LVD SHOP: a simplified joint-stock company, with its registered office at 23 rue Sylvabelle, 13006 Marseille, registered with the Marseille Trade and Companies Register under number 933 129 520.

Email: [email protected]

b) Identity of the data controller

The data controller is LVD, whose registered office is located at: 23 rue Sylvabelle, 13006 Marseille

Email: [email protected]

c) Purposes of processing

LVD may process your Personal Information, such as:

  • Last name
  • First name
  • Billing address
  • Delivery address
  • Country
  • Telephone number
  • Email address
  • IP address

For the purpose of providing you with the goods that you have ordered/purchased on our website;

For the purpose of collecting information, including users’ behaviour on the website, enabling us to improve our Website, products and services (in particular through cookies); and/or

For the purpose of contacting you about various events relating to LVD, including product updates and customer support.

Subject to the express consent of the data subject, contact details may also be used to enable communications to be sent by the other companies in the LD Groupe group under the conditions set out in section “f) Communications to group companies”.

d) Recipients

Personal data are intended for authorised LVD departments. They may also be communicated to processors acting on behalf of LVD under the conditions set out in this privacy policy.

Where you have expressly consented when creating your account, your contact details may also be communicated to the other LD Groupe group companies identified in section “f) Communications to Group companies”, exclusively for communication purposes.

e) Retention period

Your Personal Information is retained by LVD only for the time corresponding to the purpose of collection, i.e. a maximum of 3 years for marketing data and a maximum of 6 years for billing data.

f) Communication to Group companies

Consent to receive communications from other group companies is obtained when the account is created by means of a dedicated, unticked checkbox. Ticking this box constitutes a free, specific, informed and unambiguous expression of the user’s wish authorising the communication of their contact details to the companies concerned, solely for communication purposes.

Refusing to consent to the communication of data to other group companies has no impact on account creation or access to the services offered by LVD.

Companies concerned belonging to LD Groupe:

  • LVD, a simplified joint-stock company with capital of €1,000, 843 206 673 Marseille Trade and Companies Register;
  • LCBDD, a simplified joint-stock company with capital of €1,000, 101 968 428 Marseille Trade and Companies Register, data controller: [email protected];
  • Le Sport Discount (LSDT), a simplified joint-stock company with capital of €1,000, 951 391 101 Marseille Trade and Companies Register, data controller: [email protected].

The sole purpose of this communication is to enable these companies to send you their communications, information and/or news by email:

  • LCBDD: information on products, services and news;
  • Le Sport Discount: information on sports promotions and news.

The legal basis for this processing is your consent (Article 6(1)(a) of EU Regulation 2016/679 on the protection of personal data, known as the “GDPR”). No communication of your personal data to other group companies is made without your prior consent.

Categories of data communicated:

  • Last name;
  • First name;
  • Email address;

Telephone number.

The data may be communicated to the other group companies identified above, within the limits of the consent you have given.

You may withdraw your consent for each group company at any time by clicking the unsubscribe link in each email, changing your preferences or contacting us.

The personal data used are retained for a period of three (3) years from the last contact initiated by the data subject or until consent is withdrawn, if this occurs before that period expires.

LVD, LCBDD and Le Sport Discount, belonging to LD Groupe, act as joint data controllers (Art. 26 GDPR).

If you have ticked the box to receive communications from LD Groupe group companies, you may withdraw your consent for one or more companies without affecting the others. To do so, you may:

  • Click the unsubscribe link at the bottom of each email;
  • Go to your “My personal data” area;
  • Contact us at [email protected] specifying the company concerned.

g) Creating or linking an account after an in-store purchase

When a customer makes a purchase in a shop operated by LVD SHOP, LVD SHOP may offer them the option to create an account on the Website or link their existing web account to their customer account used in store. LVD then creates or manages the account on the Website and displays the purchases transmitted to it.

In this section, the “in-store customer account” means the customer record created in LVD SHOP’s till software.

Creating or linking an account is optional. Refusing this process has no impact on the purchase made in store.

If the customer agrees to create an account, they provide the email address to be used. LVD sends them a transactional email enabling them to complete the account creation themselves and choose their password. The account is created only after this action. The password is chosen by the customer, stored in encrypted form and is never communicated to the sales assistant or to LVD SHOP.

If the customer does not complete the creation process within the validity period of the link, they may request that a new link be sent directly on the levapoteur-discount.fr website.

1. Linking an existing account

If the customer wishes to link their web account to their in-store customer account, they provide the sales assistant with the email address associated with their web account. LVD sends a transactional email to this address, enabling the customer to confirm their request and choose their password.

This email states the shop, date and amount of the purchase concerned, so that the holder of the email address can recognise the request before validating the link. The sales assistant cannot access the contents of the customer’s web account.

The link is made only after the customer validates the link. It enables the information in their web account to be associated with information relating to their in-store purchases, so that they can find those purchases in their customer area. It applies to the history of in-store purchases retained in Hiboutik on the date of linking.

When an account is created or linked, LVD SHOP sends LVD, on LVD’s instructions, the necessary purchase data corresponding to this period so that they can be displayed in the customer area. After this operation, LVD SHOP also sends LVD, on its instructions, data relating to the customer’s subsequent in-store purchases so that they can be displayed in their customer area. For these transmissions carried out on behalf of LVD, LVD SHOP acts as LVD’s processor. LVD SHOP remains responsible for the separate processing consisting of managing customer records and in-store purchase history in Hiboutik.

If the customer does not recognise the creation or linking request, they must not click on the link received and may contact LVD or LVD SHOP using the contact details provided in this policy.

Creation, activation and linking links are personal, single-use and valid for a limited period of 48 hours. They must not be passed on to another person. If the customer does not complete the creation or linking of their account within the validity period of the link, they may request a new link to be sent, if necessary, via the website interface.

A request not completed within this period does not result in the creation or linking of the account.

The customer may remove this link at any time from their customer area, under “My in-store purchases”, or by writing to [email protected].

2. Data processed and retention periods

Purpose Legal basis Data processed Retention period
Process the creation or linking request made in store and enable the customer to access the relevant information in their customer area Performance of the service requested by the customer - Article 6(1)(b) GDPR Email address, information enabling the web account and in-store customer account to be identified, information relating to the request, purchase data necessary for display in the customer area, including date, shop, products and amounts Data relating to the account and purchases: retained for the duration the account remains active, then deleted or anonymised after 3 years of inactivity. Accounting documents are retained separately for the applicable statutory period.
Verify that the request is validated by the holder of the email address, secure the process and manage any disputes LVD’s legitimate interest in securing the process and being able to demonstrate that the request was validated - Article 6(1)(f) GDPR Information relating to the request and its validation, timestamp, IP address associated with validation, shop and, where applicable, identifier or name of the sales assistant who initiated the request, purchase information indicated in the confirmation email Technical and evidential data relating to incomplete requests: 6 months from the request. At the end of this period, they are deleted, unless their retention is necessary to comply with a legal obligation or deal with a dispute.
Send the transactional email enabling account creation to be completed or linking to be confirmed Performance of the service requested by the customer – Article 6(1)(b) GDPR Email address, information necessary to send the email and confirmation link, and, for a link, the shop, date and amount of the purchase concerned The data required to send the link are retained for its validity period, i.e. 48 hours. Evidential data are retained for the period stated above.

3. Data recipients

The data are accessible to authorised personnel of LVD and LVD SHOP, as well as service providers involved in this processing, within the scope of their duties:

  • the Website host: OVH - 2 Rue Kellermann, 59100 Roubaix;
  • the transactional email service provider: AMAZON WEB SERVICES EMEA SARL, 38 Avenue John F Kennedy L, 1855 Luxembourg;
  • the publisher of the till software used by LVD SHOP: Hiboutik, 8 Rue de Foix, 64000 Pau;
  • solution used for the Website customer account: PrestaShop, 82 Avenue du Maine, 75014 Paris.

When an account is created or linked, LVD SHOP sends LVD the necessary data concerning the in-store purchase history retained in Hiboutik, within the limits of the period specified above. LVD SHOP also sends LVD the necessary information relating to the customer’s subsequent in-store purchases. These transmissions are made on behalf of LVD and according to its instructions, to enable purchases to be displayed in the customer area.

Hiboutik is the tool in which LVD SHOP manages customer records and in-store purchases.

4. Marketing

Creating or linking an account does not result in automatic subscription to LVD communications.

The customer may choose separately, using dedicated unticked checkboxes, whether they wish to receive communications. Refusing to receive these communications does not prevent the creation or linking of the account.

5. Responsibility and exercising rights

LVD SHOP is responsible for the processing consisting of managing customer records and the history of purchases made in store in Hiboutik. LVD is responsible for the processing consisting of creating or managing the account on the Website and displaying the in-store purchases transmitted for this purpose. For transmissions of purchase information carried out on LVD’s instructions, LVD SHOP acts as LVD’s processor. The corresponding obligations are governed by a processing agreement compliant with Article 28 GDPR.

The customer may exercise their rights with LVD at [email protected] for processing related to the Website account and the display of purchases in their customer area.

For processing relating to the customer record and history retained by LVD SHOP in Hiboutik, they may contact LVD SHOP using the contact details provided in section “a) Contact details”.

Once the account has been created or accounts linked, the corresponding data are retained in accordance with the periods indicated in this policy for the management of customer accounts and purchases.

Data relating to incomplete requests are retained only for the period necessary to manage and secure the process, i.e. 6 months.

h) Data protection rights

You have the following rights regarding your Personal Information, which you may exercise by writing to us at the postal address mentioned in point 1.

i) Right of access and disclosure of data

You may access the Personal Information concerning you.

However, due to LVD’s obligation to ensure security and confidentiality in the processing of personal data, you are informed that your request will be processed subject to your providing proof of identity, in particular by submitting a scan of your valid identity document (where the request is made through our dedicated electronic form) or a signed photocopy of your valid identity document (where the request is made in writing).

LVD informs you that it may, where appropriate, object to manifestly abusive requests (because of their number, repetitive or systematic nature).

To assist you in this process, particularly if you wish to exercise your right of access by means of a written request sent to the postal address mentioned in point 1, you will find, by clicking the following link, a template letter prepared by the French Data Protection Authority (the “CNIL”).

https://www.cnil.fr/fr/comprendre-mes-droits/le-droit-dacces-connaitre-les-donnees-quun-organisme-detient-sur-vous

j) Right to rectification of data

Under this right, legislation entitles you to request the rectification, updating, restriction or deletion of data concerning you which may, where applicable, be inaccurate, incorrect, incomplete or obsolete.

You may also define general and specific instructions regarding what happens to your personal data after your death. Where applicable, the heirs of a deceased person may request that the death of their relative be taken into account and/or that the necessary updates be made.

To assist you in this process, particularly if you wish to exercise, on your own behalf or on behalf of one of your deceased relatives, your right to rectification by means of a written request sent to the postal address mentioned in point 1, you will find, by clicking the following link, a template letter prepared by the CNIL.

https://www.cnil.fr/fr/cnil-direct/question/le-droit-de-rectification-cest-quoi

k) Right to object

This right may only be exercised in one of the following two situations:

  • Where the exercise of this right is based on legitimate grounds; or
  • Where the exercise of this right is intended to prevent the data collected from being used for marketing purposes.

To assist you in this process, particularly if you wish to exercise your right to object by means of a written request sent to the postal address indicated in point 1, you will find, by clicking the following link, a template letter prepared by the CNIL.

https://www.cnil.fr/fr/definition/droit-dopposition

l) Response times

LVD undertakes to respond to your request for access, rectification or objection, or to any other supplementary request for information, within a reasonable period not exceeding 1 month from receipt of your request.

m) Authorised service providers and transfer to a country outside the European Union

LVD informs you that it uses authorised service providers (add-on modules) to facilitate the collection and processing of the data you have provided to us. These service providers may be located outside the European Union and receive data collected through the various forms on the Website (with the exception of the form enabling you to exercise your data protection rights, which is provided and operated by LVD).

LVD has ensured beforehand that its service providers implement adequate safeguards and comply with strict conditions concerning confidentiality, use and data protection. In particular, attention has been paid to the existence of a legal basis for any transfer of data to a third country. In this regard, one of our service providers is subject to Binding Corporate Rules approved by the CNIL in 2016, while the others comply with Standard Contractual Clauses.

n) Complaint to the competent authority

If you consider that LVD is not complying with its obligations regarding your Personal Information, you may submit a complaint or request to the competent authority. In France, the competent authority is the CNIL, to which you may send a request electronically.

2. Cookie policy

When you first connect to the LVD website, you are notified by a banner at the bottom of your screen that information relating to your browsing may be stored in files known as “cookies”. Our cookie policy enables you to better understand the measures we implement regarding browsing on our website. In particular, it informs you about all cookies present on our website, their purpose (part 1) and explains how to configure them (part 2).

a) General information about cookies present on the LVD website

LVD, as the publisher of this website, may place a cookie on the hard drive of your device (computer, tablet, mobile phone, etc.) in order to guarantee smooth and optimal browsing on our website.

“Cookies” are small text files of limited size that enable us to recognise your computer, tablet or mobile phone in order to personalise the services we offer you.

The information collected through cookies does not enable us to identify you by name in any way. It is used exclusively for our own purposes in order to improve the interactivity and performance of our website and to provide you with content tailored to your interests. None of this information is communicated to third parties unless LVD has obtained your prior consent or disclosure of this information is required by law, by order of a court or by any competent administrative or judicial authority.

b) Configuring your cookie preferences

You may accept or refuse the placement of cookies at any time.

When you first connect to the LVD website, a banner briefly presenting information about the placement of cookies and similar technologies appears at the bottom of your screen. This banner informs you of the purposes of the cookies used and enables you to accept, refuse or customise their use.

Cookies requiring consent may only be placed on your device after you have given your consent. [... ]LVD disclaims all liability for the consequences related to any deterioration in your browsing conditions resulting from your choice to refuse, delete or block cookies necessary for the website to function. Such consequences cannot constitute damage and you will not be entitled to any compensation as a result.

Your browser also enables you to delete existing cookies from your device or notify you when new cookies may be placed on your device.

These settings do not affect your browsing, but you lose all the benefits provided by the cookie.

Please see below the various tools available to you for configuring cookies placed on your device.

4. Configuring your Internet browser

Each Internet browser offers its own cookie management settings. To find out how to change your cookie preferences, you will find below links to the help pages required to access the relevant browser menu:

Chrome: https://support.google.com/chrome/answer/95647?hl=fr

Firefox: https://support.mozilla.org/fr/kb/activer-desactiver-cookies

Edge: https://support.microsoft.com/fr-fr/microsoft-edge

Opera: http://help.opera.com/Windows/10.20/fr/cookies.html

Safari: https://support.apple.com/fr-fr/safari

For further information about cookie management tools, you may consult the CNIL website: https://www.cnil.fr/fr/cookies-et-autres-traceurs/comment-se-proteger/maitriser-votre-navigateur.

For any questions or requests for further information regarding this cookie policy, please contact us using our contact form.

Before placing or reading a cookie, website or application publishers must inform internet users of the purpose of the cookies, obtain their consent and provide internet users with a means of refusing them.

The validity period of this consent is a maximum of 13 months.

The European General Data Protection Regulation requires that a website visitor’s consent be obtained before cookies can be placed in their browser.

However, certain types of cookies and trackers are strictly necessary to provide a service expressly requested by the user and are therefore exempt and do not require prior consent:

  • “Shopping basket” cookies for an e-commerce website.
  • “Session identifier” cookies, for the duration of a session, or persistent cookies limited to a few hours in certain cases:
  • Authentication cookies.
  • Session cookies created by a media player.
  • Load-balancing session cookies.
  • Certain audience measurement analytics solutions.
  • Persistent cookies for personalising the user interface (choice of language or layout).

In accordance with legal requirements, we generate a banner to inform internet users of the purpose of cookies, obtain their consent and choose the consent validity period, with a maximum of 13 months, after which the banner will be displayed again.

Cookies generated by the PrestaShop software (the solution used for levapoteur-discount.fr) are strictly necessary for providing the service and are exempt from prior consent.

Certain types of cookies require prior information and consent. These cookies include, for example:

  • Cookies related to advertising operations.
  • Social network cookies generated by social network sharing buttons where they collect personal data without the consent of the persons concerned.
  • Certain audience measurement cookies.

In addition, levapoteur-discount.fr has a module developed by the PrestaShop CMS and compliant with user data protection (GDPR) | Official GDPR

It meets the main obligations of this European regulation concerning our customers’ personal data, including:

  • The right to access their personal data and the right to data portability.
  • The right to obtain rectification and/or deletion of their data.
  • The right to withdraw their consent where it has been requested.

It also enables us to keep a log of all our customers’ activities relating to their personal data (including accessibility, consent and data deletion).

If you believe that we do not respect your rights and our obligations, you may lodge a complaint with the CNIL at the following address: cnil.fr

Would you like to contact us about your personal data? You may contact us at: [email protected]

If an additional module installed on levapoteur-discount.fr creates cookies in these categories, the developer of that module must take the necessary measures to make their module GDPR-compliant.