Privacy Policy

This Privacy Policy is intended to inform you about how SAS PHARM AUTO ALPES LEMAN collects, uses and protects your personal data when you use the website www.pharm-auto.com, in accordance with the General Data Protection Regulation (GDPR) No. 2016/679 and the amended French Data Protection Act ("Loi Informatique et Libertés").

The information is collected and processed by SAS PHARM AUTO ALPES LEMAN, acting as the Data Controller. All the data you provide to us forms part of our customer database and is essential to the development of our business, while ensuring strict respect for your privacy.

1. Purposes and Legal Bases for Processing Your Data

We collect and process your personal data (including browsing data) only when we have a valid legal basis for doing so. Your data is processed for the following purposes:

Based on the performance of a contract or pre-contractual measures:

• Managing operations relating to your contracts, orders, deliveries, quotations and invoices;

• Managing the creation and use of your customer account;

• Handling your enquiries and managing after-sales service (SAV).

Based on our legitimate interests:

• Monitoring our customer relationships through satisfaction surveys, online customer reviews and complaint management, in order to improve the quality of our services;

• Preparing commercial statistics (e.g. website traffic) and analysing your activity (e.g. quotations prepared in-store or your shopping basket on www.pharm-auto.com) to improve our services;

• Updating your data through standardisation, enrichment and deduplication processes;

• Preventing and combating fraud.

Based on your consent:

• Carrying out direct marketing activities and sending you personalised marketing offers tailored as closely as possible to your vehicle and purchasing habits;

• Conducting online advertising campaigns, which may be personalised;

• Organising competitions, prize draws and other promotional activities;

• Using cookies that are not strictly necessary (analytics and advertising cookies).

Based on our legal obligations:

• Retaining invoicing and accounting records;

• Handling requests relating to the exercise of your data protection rights (access, rectification, etc.).

2. Access to and Disclosure of Your Data

Your data, or certain parts of it, is accessible only to employees of the company who strictly need it to carry out the sale of our products and respond to your requests.

Certain information relating to you may be shared with external service providers and data processors (for example, website hosting providers, payment service providers, transport companies, and email/SMS delivery services).

We have entered into agreements with these partners that include strict confidentiality and data security clauses to ensure the protection of your information.

Your data is hosted and processed within the European Union. Should a transfer of data outside the European Union become necessary for exceptional technical reasons, such transfers will be subject to appropriate legal safeguards, including the European Commission's Standard Contractual Clauses.

3. Data Retention Periods

Your personal data is retained only for as long as strictly necessary to fulfil the purposes for which it was collected:

• Order management and customer account data: Retained throughout the duration of our contractual relationship, then archived for a period of 5 years following the end of the relationship, in accordance with applicable statutory limitation periods.

• Invoicing and accounting data: Retained for 10 years, in accordance with legal requirements.

• Data used for direct marketing purposes: Retained for 3 years from the end of the business relationship, or from the last contact initiated by you if you are a prospective customer.

• Cookies: Their retention period is limited to a maximum of 13 months.

Once these legal retention periods have expired, your data is securely deleted or permanently anonymised.

4. Data Security

We implement all appropriate technical and organisational measures to ensure a level of security proportionate to the risks involved and to protect your personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.

5. How to Exercise Your Rights

In accordance with applicable data protection regulations, you have the following rights regarding your personal data at any time:

• Right of access and to obtain a copy of your data;

• Right to rectification;

• Right to erasure (right to be forgotten);

• Right to restriction of processing;

• Right to data portability;

• Right to object, particularly to direct marketing;

• Right to establish instructions regarding the handling of your personal data after your death.

To exercise these rights, you may contact our dedicated department through the following channels:

• By email: info@pharm-auto.com

• By post: SAS PHARM AUTO ALPES LEMAN – Data Protection – 17 Rue de Montréal, 74100 Ville-la-Grand, France.

• Directly online: Through your customer account on www.pharm-auto.com.

Please note: If there is reasonable doubt about your identity, you may be asked to provide a copy of a valid identity document.

For any questions relating to the processing of your personal data, you may contact our Data Protection Officer (DPO) / GDPR Representative at: info@pharm-auto.com.

Finally, if you believe, after contacting us, that your rights have not been respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

6. Geolocation

The website www.pharm-auto.com allows your IP address to be automatically and anonymously geolocated in order to display your location in relation to the nearest PHARM AUTO retail outlet.

This feature is intended solely to improve your user experience.

7. Cookie Management

When you visit our website, tracking technologies (cookies) may be stored on your device (computer, tablet or smartphone).

There are several types of cookies:

• Essential technical cookies: Required for the proper functioning of the website and your shopping basket. These cookies cannot be disabled.

• Functional, analytics and advertising cookies: These allow us to analyse website traffic, measure audience engagement and provide you with relevant advertising. These cookies may be placed by us or by third parties.

These cookies are in no way intended to collect personal data fraudulently and do not allow us to directly identify you by name.

On your first visit, a cookie banner allows you to accept, reject or customise your cookie preferences.

You may change your preferences and withdraw your consent at any time by clicking the "Cookie Settings" link available at the bottom of our website, or by configuring your internet browser directly.