Data Protection Policy

The protection of your personal data is important to A l'Abordage. This policy clearly explains the data we may collect when you use the www.alabordage.fr website, why we use it, how long we retain it, who may have access to it and the rights available to you.

Personal data processing carried out by ESPRIT YACHTING is performed in accordance with the General Data Protection Regulation (GDPR), the French Data Protection Act (Loi Informatique et Libertés) and other applicable personal data protection provisions.

1. Who is responsible for your data?

The data controller responsible for personal data processing carried out on the www.alabordage.fr website is:

2. What data may we collect?

We collect only the data necessary for the operation of the website, the processing of your requests and the management of our relationship with you.

Identification and contact data

Depending on the services you use, we may collect your surname, first name, email address, telephone number, as well as your billing and delivery addresses.

Data relating to your customer account

When you create an account with A l'Abordage, we process the information necessary for its creation, authentication and management, as well as the addresses and information you choose to save in your account.

Order data

We process the information necessary to prepare and monitor your orders: products ordered, quantities, prices, billing, delivery method, payment status, shipping, returns, withdrawals, credit notes, after-sales service and communications relating to your order.

Payment data

Bank card payments are processed using the secure Sogecommerce solution provided by Société Générale.

ESPRIT YACHTING does not retain your complete bank card number. However, we may receive and retain information necessary for monitoring the transaction, such as its status, reference or payment confirmation.

Requests and communications with A l'Abordage

When you contact us by form, email, telephone or another communication channel, we may retain the information you provide to us as well as the content necessary to process your request.

Technical data

When you use the website, certain technical data may be processed, including your IP address, information relating to your browser or device, technical logs, as well as certain data required for security, abuse prevention and the proper operation of the website.

3. Why do we use your data?

Each processing operation involving personal data is carried out for a specific purpose and is based on a legal basis provided for by applicable regulations.

4. Newsletter and marketing communications

You may choose to subscribe to the A l'Abordage newsletter in order to receive our news, new products, product information and marketing communications.

Where your consent is required, subscription is based on your agreement. You may withdraw this consent at any time, without having to provide a reason and free of charge, by using the unsubscribe link included in each newsletter.

Unsubscribing from the newsletter has no effect on communications necessary for the performance of an order, such as order confirmations or information relating to delivery, payment or after-sales service.

In order to protect our subscription form against automated registrations and spam, certain technical data may be used temporarily for security purposes. The information used by this system is limited and may notably take the form of cryptographic hashes of the email address or IP address, retained for a very short period.

5. Who may access your data?

Your data is accessible only to persons who require it as part of their duties within ESPRIT YACHTING and to service providers to whom certain information must be transmitted in order to provide the requested services.

Depending on the nature of the processing, recipients of certain data may include:

• authorised ESPRIT YACHTING employees;
• hosting and IT maintenance providers;
• the payment service provider;
• carriers responsible for delivering your order;
• service providers necessary for sending communications and newsletters;
• service providers involved in administrative, accounting or IT management;
• ESPRIT YACHTING's professional advisers where necessary;
• public authorities, administrative bodies or courts where required by law.

These recipients have access only to the data necessary to carry out their duties.

6. How long do we retain your data?

We do not retain all data for the same length of time. The retention period depends on the reason for which the data was collected and the applicable legal obligations.

Customer account

Data relating to your account is retained for as long as the account remains active. An account that remains inactive for an extended period may subsequently be deleted or anonymised, subject to information that must be retained in order to comply with our legal obligations or protect our rights.

Orders and customer relationship

Data necessary for managing the commercial relationship is retained throughout that relationship and subsequently, where necessary, for a period allowing us to comply with legal obligations or manage any complaints and disputes.

Customer data used for direct marketing purposes is, in principle, not retained for more than three years following the end of the commercial relationship or the last relevant contact with the Customer, subject to applicable legal obligations.

Invoices and accounting documents

Invoices and accounting data that must be retained pursuant to applicable regulations are archived for 10 years.

Newsletter

Data used to send the newsletter is retained until you unsubscribe and within the retention periods provided for by regulations applicable to direct marketing.

Contact requests

Information provided in connection with a request is retained for the period necessary to process it and subsequently, where justified, for a limited period in order to monitor the relationship or protect our rights.

Technical security data

Technical data used exclusively for security, spam prevention or abuse prevention is retained for a limited period proportionate to that purpose.

7. Cookies and other trackers

The website may use cookies or other trackers necessary for its operation, for example to maintain a session, remember a shopping basket, ensure security or enable certain features.

Cookies strictly necessary for the operation of the website may be used without consent where they meet the conditions provided for by applicable regulations.

Where cookies or trackers that are not strictly necessary are used, particularly for audience measurement, personalisation or third-party services, they are subject to the user's consent where such consent is required.

Users must be able to accept or refuse trackers subject to consent and subsequently change their choice.

Cookie retention periods depend on their purpose and the settings of the relevant tools. No tracker subject to consent should be retained beyond the period necessary for the purpose for which it was placed.

8. External services and websites

The A l'Abordage website may contain links providing access to services operated by third parties, for example a carrier, payment service, social network or messaging service such as WhatsApp.

When you choose to access an external service directly, the processing of data carried out by that service is also subject to the privacy policy of its operator.

9. Can your data be transferred outside the European Union?

ESPRIT YACHTING gives preference to service providers offering appropriate data protection safeguards.

However, certain service providers or third-party services may process data from a country located outside the European Economic Area.

Where such a transfer falls under ESPRIT YACHTING's responsibility, it must be governed in accordance with the GDPR, notably by means of an adequacy decision by the European Commission or appropriate safeguards provided for by applicable regulations.

10. How do we protect your data?

ESPRIT YACHTING implements technical and organisational measures designed to protect personal data against loss, unauthorised access, alteration, disclosure or misuse.

Access to data is restricted to persons and service providers who require it in order to carry out their duties. Communications with the website use a secure connection when personal data is transmitted.

Card payments are processed using the secure Sogecommerce solution provided by Société Générale. Information required for payment is processed within the payment service provider's environment.

As no IT system can guarantee absolute security, our protection measures are regularly adapted according to the risks and available technical resources.

11. What are your rights?

Depending on the nature of the processing and the applicable legal basis, you may have the following rights:

• right of access to your personal data;
• right to rectification of inaccurate or incomplete data;
• right to erasure, where the legal conditions are met;
• right to restriction of processing;
• right to object to certain processing operations;
• right to data portability where this right applies;
• right to withdraw your consent at any time for processing based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

The right to erasure is not absolute. Certain information may notably have to be retained due to a legal, accounting, tax or contractual obligation or in order to establish, exercise or defend legal claims.

12. How can you exercise your rights?

For any questions concerning your personal data or to exercise any of your rights, you may contact ESPRIT YACHTING:

In order to prevent an unauthorised person from accessing your data, we may ask you for additional information allowing us to verify your identity where there is reasonable doubt in this regard.

We respond to requests as quickly as possible and, in principle, within a maximum period of one month from receipt. This period may be extended under the conditions provided for by the GDPR where the request is complex or where the number of requests justifies such an extension.

You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the French data protection authority, if you believe that the processing of your personal data does not comply with applicable regulations.

CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07 – France

13. Changes to this policy

ESPRIT YACHTING may update this policy in order to take account, in particular, of changes to the website, its services, its service providers or applicable regulations.

The applicable version is the version published on this page. The date of its most recent update appears at the top of the document.