Bacha Coffee France ("Bacha Coffee France"), is aware that you may wish to be informed about how your personally identifying data and information, such as name, address, telephone/fax numbers or e-mail address etc. ("Data") that you may provide to Bacha Coffee France, are treated. Accordingly, we have developed this Privacy Policy ("Policy") to explain our use of your Data as well as all our reasonable precautions to keep your Data confidential and secure, in particular in accordance with French Law No. 78-17 and the European General Data Protection Regulation No. 2016/679, known as the “GDPR” (collectively the “Data Protection Laws”).
Bacha Coffee France, acting as data controller, is collecting and processing your Data as described in this Policy, as modified from time to time by us. We reserve the right to modify our Policy and invite you to consult this Policy from time to time in order to familiarise yourself with any changes. We will post any new Policy on our eCommerce website (“the Website”) and the mobile application (“the App”), changing the date in the last paragraph of such Policy.
The terms of this Policy are without prejudice to any contractual terms you may enter into with us, which shall prevail over the terms of this Policy.
1. PLEDGE ON PRIVACY
Bacha Coffee France does not collect and process Data except when voluntarily provided by you. We ensure compliance by our staff with strict standards of security and confidentiality and in processing your Data we pledge to fully comply with internationally recognized standards of privacy protection.
2. INTENDED USE OF DATA
Bacha Coffee France collects and processes Data only for specific and limited purposes as described below:
Purpose | Legal basis | Data | Duration of processing |
Contractual relationship between us (provision of products and services you ordered, invoicing, after-sales) | Contract between us | name, address, telephone number, e-mail address, birth date | 5 years from the deletion of the customer account |
Newsletter | If you have already ordered products and services to us: our legal interest to keep you informed of our products and services If you have never ordered products and services to Bacha Coffee: your consent to receive our newsletters and information | e-mail address | 5 years from the deletion of the customer account |
Analysis and improvement of Bacha Coffee’s website through cookies | Your consent | IP address, logs | 13 months from collection |
Most of our services do not require any form of registration, thereby allowing you to visit our website, mobile application, coffee rooms & boutiques without telling us who you are. However, some services may require registration. When you register with us, you may need to complete certain fields (some are required, some are optional) as well as to choose an username and password. In these situations, if you chose to withhold any Data requested by us, it may not be possible for you to gain access to certain parts of our websites or mobile applications and for us to respond to your queries.
3. NON-DISCLOSURE OF INFORMATION
Bacha Coffee France shall never sell, rent, share or otherwise distribute or make available your Data to third parties, except when required to do so for legal or regulatory purposes.
Data may be transferred to third parties, who act for or on behalf of Bacha Coffee France, for further processing in accordance with the purposes for which your Data were originally collected and in particular to IT service providers (including hosting services), accounting firms, providers of payment services, carriers. In addition, Bacha Coffee is an international group and has databases in different jurisdictions. Bacha Coffee France may disclose your Data to one of its databases or to companies within the Bacha Coffee group, always accordance with the purposes for which your Data were originally collected.
When disclosure of Data to third parties is likely or necessary for whatever reason, Bacha Coffee France shall ensure that such third parties provide the same level of protection as Bacha Coffee France, and shall contractually require them to process Data transferred only for the purposes authorised by you and on a confidential and secure basis.
4. RIGHT OF ACCESS
Subject to the conditions set forth in the Personal Data Laws, you are entitled to exercise the following rights:
Right of access | You have the right to ask us to confirm that we are processing your Data, and to request that we send you a copy of the processed data. |
Right to rectification | You have the right to have inaccurate or incomplete Data processed by us rectified or completed. |
Right to erasure | You have the right to obtain the erasure of your Data as soon as possible, in particular when it is no longer required for the purposes for which it was collected, or when you withdraw your consent on which the processing of your Data was based. |
Right to restriction | You have the right to obtain restriction, i.e. a freeze on the processing of your Data, in particular where this is necessary for the establishment, exercise or defence of your legal rights. |
Right to object | You have the right to object at any time, for reasons relating to your particular situation, to the processing of your Data. This right can be opposed by Bacha Coffee for legitimate and compelling reasons, or for the establishment, exercise or defence of legal claims. |
Right to portability | You have the right to receive from Bacha Coffee the Data that you have provided to us in a structured, commonly used and machine-readable format, in particular for the purpose of transmission to a third party. Where technically possible, you also have the right to have your Data transmitted directly to that third party. |
Post-mortem instructions | You have the right to provide instructions on how your Data is to be stored, deleted and communicated after your death. |
If you wish to exercise one of your rights, please contact Bacha Coffee France at: CustomerCare.fr@BachaCoffee.com.
5. SECURITY & CONFIDENTIALITY
We undertake to take all reasonable steps in order not to allow your Data to be seen by third parties other than those who act for or on behalf of Bacha Coffee France and have agreed to treat your Data confidential and secure. Access to Data is restricted to those of our employees on a need to know basis and who have been trained to observe strict standards of confidentiality in handling your Data.
To ensure the security and confidentiality of Data that Bacha Coffee France collects online, we use data networks protected, inter alia, by industry standard firewalls and password protection. Although we have tried to create secure, reliable and trustworthy websites or applications for our visitors, please be aware that the Internet is generally not regarded as a complete secure environment, and that therefore the confidentiality of the Data provided by you or material transmitted via our website or mobile application or by e-mail cannot be guaranteed by Bacha Coffee France. Thus, we cannot be responsible or liable for the security of your Data whilst in transit via the Internet or any electronic communications to us.
All information which you post to the media of Bacha Coffee France is kept confidential to the best of Bacha Coffee France’s ability. You hereby acknowledge and accept that Bacha Coffee France cannot guarantee the security of transmission.
6. DATA TRANSFER ABROAD
Some third parties or entities of Bacha Coffee group being located outside the European Economic Area, we ensure that these transfers ensure the adequate level of protection of Data.
In particular, if the level of privacy protection in a country does not comply with the European recognized standards, we will ensure that Data transfers in such countries do not occur without having signed the standard contractual clauses of the European Commission and having requested the implementation of appropriate guarantees to ensure the protection, confidentiality and security of Data.
7. CAREER OPPORTUNITIES
If you are interested in applying for either a position published or any future job opportunity within Bacha Coffee, you may provide us with your Curriculum Vitae ("CV"). We will then match your qualifications and experience to the position you applied for, or any other current job opportunity. If your profile corresponds to our requirements, we will contact you.
By sending your CV, you agree that we may, and provide your express consent for us to keep your CV in our databases for a reasonable period of 2 years, after which it will be deleted. By applying for a position, your CV and Data will be used to process your job application on the legal basis of the pre-contractual discussions and you are expressly consenting to have such CV and Data communicated to other companies within the Bacha Coffee group and to our partners, who have agreed to keep such CV and Data confidential and secure, and to this end being transmitted across national borders. Bacha Coffee France undertakes to use your CV and Data only in relation to your career opportunities.
8. ANONYMOUS DATA / "COOKIE" TECHNOLOGY
Most of the information we collect from our website or mobile application is anonymous information. When you visit our website or mobile application, we do not collect any personal Data from you unless specifically, voluntarily and knowingly provided by you. Anonymous information is processed by Bacha Coffee France to help improve the content of our website or mobile application, to customise our website or mobile application for our visitors and to learn more about them and how they use our website or mobile application. In doing so, Bacha Coffee France may use tracking technology (cookies) to gather anonymous information, such as browser type, operating systems and the date and time of access in accordance with the cookie policy. Your consent will be required before any use of cookies which are not essential for the strict operation if the website or mobile application. "Cookies" by themselves cannot be used to discover the identity of the user. A "cookie" is a small piece of information which is sent to your browser and stored on your computer hard drive.
9. SPAMMING
Bacha Coffee France does not conduct "spamming". Spamming is defined as sending unsolicited e-mails, usually of commercial nature, in large numbers and repeatedly to individuals with whom the sender has had no previous contact or who have declined to receive such communications. On the contrary, where we believe that one of our products is of importance to you, we will inform our customers by e-mail whilst giving them the choice of opting out of such service.
10. DATA & CHILDREN
To respect the privacy of children and to comply with the laws designed to protect children, children under the age of 15 should not provide any Data. Bacha Coffee France will not knowingly collect, use, or disclose Data from a minor under the age of 15, without obtaining prior consent from a person with parental responsibility (parent, guardian).
Our website and/or mobile application are general audience sites/applications that are not designed nor intended to collect Data from children under the age of 21. We ask that parents supervise their children while online.
11. LINKS TO OTHER WEBSITES OR MOBILE APPLICATIONS
As a service to our visitors, our website or mobile application may provide hyperlinks to other websites or mobile applications that are not operated or controlled by Bacha Coffee France. Therefore, Bacha Coffee France cannot be responsible or liable for the content of such websites or mobile applications or the privacy practices of such other parties. Please note that these privacy practices may differ from our Policy. We encourage you to review and understand their privacy practices before providing them with personal information.
12. CONTACT BACHA COFFEE
Should you have any queries or complaints about our compliance with this Policy, or if you wish to make any recommendations or comments to improve the quality of our Policy, please contact Bacha Coffee France at: CustomerCare.fr@BachaCoffee.com. We can assure you that we do our best efforts to constantly improve the protection and security of the Data you provide to us.
You are entitled to lodge a complaint with the competent supervisory authority, in France the Commission nationale de l’informatique et des libertés (CNIL): https://www.cnil.fr/fr.
We invite you to also carefully read our "Website Terms and Conditions of Use" for more information on the use of our website and mobile application.