Join us
Contact us
En

Confidentiality and privacy policy

APPLICABLE FROM 10.18.2024

We attach great importance to privacy and to the protection of your personal data.

This policy explains how your personal data are collected and processed in connection with the website available at https://paticeo.com/ (the “Site”) and/or in connection with any interaction you may have with our Company, in accordance with French Data Protection Act No. 78-17 of 6 January 1978, as amended, and Regulation (EU) 2016/679 of 27 April 2016, the General Data Protection Regulation (“GDPR”).

Protection of your personal data

  1. Data controller and recipients of personal data

The personal data collected in connection with the use of our Site and, more generally, in connection with any contact you may have with our Company, are processed by Interaliment SAS, located at 27 Avenue Franklin Roosevelt, 35400 Saint-Malo, France, acting as data controller within the meaning of applicable data protection regulations (the “Data Controller”).

“Personal data” means any information relating to an identified or identifiable natural person, directly or indirectly, including by reference to an identifier such as a name, an identification number, location data or an online identifier.

Depending on the processing purpose, the personal data collected and/or transmitted are intended for use by the Data Controller. The Data Controller’s support departments may have access to such data, including purchasing and sales administration, sales, logistics, credit management, human resources, IT, accounting and marketing departments.

Personal data may also be made available, strictly to the extent necessary for the performance of their services, to the following service providers, acting as processors or third-party recipients within the meaning of applicable data protection regulations:

  • · technical service providers, including communication agencies and the hosting provider of our Site, as further described in the Terms of Use and Legal Notice available [here];
  • · financial and accounting service providers, including auditors and banks;
  • · logistics service providers, including carriers.

Access to personal data is strictly governed by applicable security policies, so that human intervention on such data remains exceptional and limited to what is strictly necessary.

The Data Controller may be required to disclose your personal data to third parties where such disclosure is permitted and required by law or by a court decision, or where such disclosure is necessary to protect and defend its rights.

Otherwise, your personal data will not be transferred or made available to any third party without your prior consent.

The Data Controller does not transfer your personal data to countries outside the European Economic Area (“EEA”). Should such a transfer take place, it would be governed by appropriate safeguards in accordance with applicable regulations, such as the European Commission’s standard contractual clauses.

  1. Purposes of personal data collection and processing

Personal data that are required to respond to your request, manage our commercial relationship with you, perform a sales or services contract relating to the products and/or services presented on the Site, or comply with a legal obligation, will be identified as mandatory at the time of collection.

The following categories of personal data may be processed:

  • identification data, such as surname, first name, name of the company for which you work, position, and professional relationship with any person within the Company;
  • connection data;
  • location and contact data, such as postal address;
  • data relating to payment methods;
  • data relating to transactions;
  • any other personal data that you provide to us in order to contact our Company or obtain the supply of products and/or services.

Your personal data may be processed for different purposes, depending on the reason for your visit to the Site or your interaction with our Company.

On the basis of your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before such withdrawal, your personal data may be processed for the purpose of sending newsletters.

Where necessary for the performance of a commercial relationship, and in particular for the performance of a sales contract, a services contract or a supply contract, your personal data may be processed for the following purposes:

  • creation of customer or supplier accounts;
  • processing and fulfilment of orders;
  • invoicing;
  • monitoring of contract performance;
  • delivery;
  • after-sales service and complaints management;
  • organisation of satisfaction surveys;
  • management of customer and supplier files;
  • management of unpaid invoices and disputes.

Your personal data may also be processed in order to take steps prior to entering into a contract, including processing and responding to requests for information that may, where applicable, lead to the conclusion of a contract.

Your personal data may also be processed in order to comply with legal, accounting and tax obligations, including the retention of accounting supporting documents, the management of requests to exercise data protection rights, and the maintenance of an opt-out list for commercial prospecting purposes.

Your personal data may further be processed where necessary for the establishment, exercise or defence of legal claims.

Unless you object, and subject to your interests and fundamental rights, your personal data may also be processed on the basis of the Data Controller’s legitimate interests, in particular for the following purposes:

  • commercial prospecting, customer relationship management and customer loyalty activities, including the sending of commercial communications or news about
  • products, services and offers available on or outside the Site;
  • creation of customer and supplier accounts and performance of due diligence necessary to protect the Data Controller’s interests and prevent conflicts of interest;
  • optimisation of the Site, including analysis of browsing paths, identification of mass connections, and determination of search trends in order to adapt offers to demand;
  • business development activities;
  • management of opinions and feedback relating to products, services or content, with a view to improving the products and services offered on or outside the Site;
  • personalisation of the customer experience on the Site;
  • preparation of statistics, in particular sales statistics, in order to analyse commercial activity;
  • management of prospect databases in order to develop sales;
  • completion of satisfaction surveys;
  • prevention and combating of payment fraud.
  1. Cookies

Various cookies are used on the Site to improve interactivity between you, the Site and the services offered.

For more information, please refer to the Cookie Policy available [here].

  1. Your rights in relation to your personal data

Data subjects whose personal data are processed by the Data Controller have, under the conditions and within the limits provided for by applicable regulations, the following rights:

  • the right of access to their personal data;
  • the right to rectify inaccurate or incomplete personal data;
  • the right to object to the processing of their personal data;
  • the right to request the erasure of some of their personal data;
  • the right to withdraw their consent at any time, where processing is based on consent;
  • the right to request the restriction of processing;
  • the right to data portability, where applicable;
  • the right to define instructions regarding the retention, deletion and disclosure of their personal data after their death.

To exercise your rights, you may write to one of the contact addresses set out in Section 6 below and, where necessary, enclose any document proving your identity and supporting your request.

  1. Retention period for personal data

Your personal data will be retained for no longer than is necessary for the purposes for which they are collected and processed.

In particular, your personal data may be retained for the following periods:

  • for a period of three years following the last contact, and then kept in intermediate archives for the applicable legal retention period, generally five years, for all data except banking/payment data and cookies;
  • for cookies, for a period of thirteen months from their storage or creation.

Banking and payment data are retained only for as long as necessary for payment management and, where applicable, for the period required by applicable legal obligations and payment security rules.

At the end of these periods, personal data will be deleted from active databases and, where necessary, archived for a period not exceeding the applicable statutory limitation periods or legal archiving obligations.

Once these periods have expired, the personal data will be permanently deleted or destroyed.

  1. Contacting the Data Protection Officer

For any further information, or in the event of any difficulty relating to the processing of your personal data, you may contact the Data Protection Officer:

By email: [email protected]

By post: DPO – Pâtisseries Gourmandes 36 rue du Bourgeon 22600 Loudéac France

In the event of an unresolved difficulty or any complaint relating to the processing of your personal data, you may also lodge a complaint with the French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (“CNIL”), via

its online complaint form available on the CNIL website, or by post at the following address:

Commission Nationale de l’Informatique et des Libertés 3 Place de Fontenoy – TSA 80715 75334 Paris Cedex 07 France

Protection of your HR and recruitment data

Collection and processing of personal data in connection with unsolicited applications or responses to job offers

We are committed to respecting privacy and protecting personal data, in accordance with applicable data protection regulations and our ethical and compliance commitments.

By submitting an unsolicited application or responding to a job offer, you are informed that the Data Controller collects and processes your personal data as part of the recruitment process.

Your personal data are processed in order to review your application and assess the suitability of your profile, experience and qualifications for roles that may be offered to you within the Roullier Group.

To facilitate the review of applications, recruitment support features and tools designed to match skills, experience and open positions may be used within the Group’s recruitment tools. These features help identify opportunities that may match your profile and assist recruiters in assessing applications.

No decision producing legal effects concerning you, or similarly significantly affecting you, is made solely on the basis of automated processing. Recruitment decisions always involve human intervention.

This processing is necessary in order to take pre-contractual steps at your request as part of the recruitment process. The Data Controller may also have a legitimate interest in retaining your application in order to offer you other opportunities that may match your profile.

Job offers published on our main website may redirect applicants to the external Cornerstone platform, which is used for recruitment management and acts as a processor on behalf of the Data Controller.

The Roullier Group, its establishments and subsidiaries may receive your personal data for the purposes of processing your application.

Only persons involved in the recruitment process are authorised to access your personal data, within the scope of their respective responsibilities. This may include the recruitment department, human resources teams and relevant management.

Your application may also be shared with other recruiters within the Group in order to offer you opportunities that may match your profile.

Your personal data may also be disclosed to processors involved in the recruitment process, in particular external recruitment agencies or IT service providers involved in the administration and operation of recruitment tools.

These service providers may access your personal data only to the extent necessary for the performance of the services entrusted to them and in accordance with the instructions of the Data Controller.

Once the recruitment process has been completed, and unless you object, your personal data may be retained in our candidate database for a maximum period of two years from the date of our last contact with you, so that we may offer you other career opportunities that match your profile.

Your personal data are hosted within the European Union. In the event of a transfer of personal data to a country outside the European Economic Area, such transfer will be governed in accordance with applicable data protection regulations and will be subject to appropriate safeguards.

In accordance with applicable national and European data protection regulations, you have the right to access, rectify, erase and transfer your personal data, as well as the right to request the restriction of processing or to object to the processing of your personal data.

Where certain processing activities are based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.

To exercise your rights, obtain further information or report any issue regarding the processing of your personal data, you may contact the Data Protection Officer:

By email: [email protected]

By post: DPO – Pâtisseries Gourmandes 36 rue du Bourgeon 22600 Loudéac France

If you have an unresolved issue or wish to lodge a complaint regarding the processing of your personal data, you may contact the French Data Protection Authority, the CNIL, via its online complaint form available on the CNIL website, or by post at the following address:

Commission Nationale de l’Informatique et des Libertés 3 Place de Fontenoy – TSA 80715 75334 Paris Cedex 07 France

We recommend that you do not include any special categories of personal data in your application, in particular data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, or data concerning your sex life or sexual orientation, unless this is specifically requested or legally required.

Version: V_2026.06