Personal Data Protection Policy.

The General Data Protection Regulation (GDPR), which came into effect on May 25, 2018, mandates transparent, clear, and concise information when collecting your personal data.

The purpose of this policy is to inform you about the personal data processing carried out by BAG & PACK.

I) Identity of the Data Controller

The personal data collected is processed by BAG & PACK as the data controller.

The full contact details of the organization are:

Organization Name: BAG & PACK
Legal Representative: Mr. Franck HONORE
Postal Address: 69 Rue de la Belle Etoile, 95700 Roissy-en-France
Phone Number: 01 49 89 33 00
Email Address: v.allezy@bagandpack.fr

The Data Protection Officer for the organization is:

Organization Name: ACS RGPD – BAUDE DATA PROTECTION
Legal Representative: Mr. Pierre-Antoine BAUDE
Postal Address: 7 bis Rue du Virval, 62100 Calais
Phone Number: 06 69 98 33 4
Email Address: pa.baude@baudedataprotection.com

II) Processing Activities, Purposes, and Legal Bases

A. Accounting Management

Audience: Clients, Suppliers

The personal data collected is used and retained for:

  • Preparing the company’s financial statement
    • Preparing VAT declarations
    • Processing payments and receipts
    • Recording accounting documents
    • Tax payment

The legal basis for this processing is compliance with a legal obligation (Article 6(c) of the GDPR).

In this context, BAG & PACK may collect the following personal data from you:

  • Identity data: First name, last name, professional contact details (postal address, email, phone).

B. Supplier Management

Audience: Service Providers

The personal data collected is used and retained for:

  • Managing suppliers (orders, receipt, service execution or supply of goods, invoices, and payments)

The legal basis for this processing is the performance of a contract (Article 6(b) of the GDPR).

In this context, BAG & PACK may collect the following personal data from you:

  • Identity data: First name, last name, professional contact details (postal address, email, phone)
  • Economic and financial information: Bank account details (RIB).

C. Prospecting Management

Audience: Prospects (100% professionals)

The personal data collected is used and retained for:

  • Promoting the company’s products
  • Attracting/finding new clients
    • Carrying out prospecting operations via phone calls (human intervention)
    • Carrying out prospecting operations via emails (human intervention)
    • Carrying out prospecting operations via field visits (human intervention)

The legal basis for this processing is the legitimate interest of the organization (Article 6(f) of the GDPR), justified by the need to acquire new clients.

In this context, BAG & PACK may collect the following personal data from you:

  • Identity data: First name, last name, professional contact details (postal address, email, phone).

D. Client Management

Audience: Clients (100% professionals)

The personal data collected is used and retained for:

  • Managing contracts (orders, delivery, service execution or supply of goods, invoices, and payments)
  • Managing complaints
  • Managing client communication

The legal bases for this processing are the performance of a contract (Article 6(b) of the GDPR) and the legitimate interest of the organization (Article 6(f) of the GDPR), justified by the need to communicate with clients.

In this context, BAG & PACK may collect the following personal data from you:

  • Identity data: First name, last name, professional contact details (postal address, email, phone).

E. Website Management

Preamble

BAG & PACK is committed to ensuring that personal data processing carried out on https://bagandpack.fr/ complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

This personal data protection policy applies to data processing carried out via the BAG & PACK website. It informs you about the purpose(s) of the data processing, the legal basis for the processing, the data recipients, retention periods, security measures (general description), the possible transfer of data outside the European Union or automated decision-making, the use and management of cookies, your rights regarding data privacy, and how to exercise them.

Does this site collect personal data?

According to Article 4.1 of the GDPR, personal data is any information that can identify you, either directly or indirectly. The data collected is adequate, relevant, necessary, and limited to the minimum required.

What are the purposes and legal grounds for data collection?

  • For personal data collected via the contact form: the data is freely communicated to BAG & PACK by the individuals concerned, consenting to the processing. The legal basis for this processing is the consent of the concerned person (Article 6(a) of the GDPR). The personal data collected includes first name, last name, phone number, and email address.


Who are the recipients of the data processed by this site?

Your personal data is primarily intended for BAG & PACK, the publisher of the site and the data controller. It is processed by the personnel of the relevant services (e.g., human resources, web services, data protection services) strictly for the purposes stated above. Your personal data may occasionally be processed by BAG & PACK’s subcontractors (as defined in Article 4.8 of the GDPR) under strictly controlled conditions. Your data is never shared with third parties for commercial purposes.

Are personal data transferred outside the European Union?

The personal data collected by this website is not transferred to entities located outside the European Union. In the case of contractual transfers of personal data, BAG & PACK ensures that recipients are based within the European Union. BAG & PACK also ensures the GDPR compliance of all data recipients.

Does this site use cookies?

Visitors have the freedom of choice.

All registrations comply with the active Opt-In principle, requiring voluntary action from you. If you choose to register, the information you provide will be accessible to our entity’s staff and will be used for the business relationship.

1. What is a cookie?

A cookie is a small text file placed on your device (computer, tablet, smartphone, etc.) when you visit a website. It allows the issuer to identify your device during the validity period of the cookie. Only the issuer of the cookie can read or modify the information contained within it.

2. Which cookies are used on this site?

We collect anonymous information to better serve our visitors. The cookies used on our site are for the purposes described below, depending on the choices you have made regarding cookies.

3. Cookies used by BAG & PACK's site:

We use three categories of cookies, as described below:

a. Essential cookies for site functionality:

These cookies are necessary for navigation on our site (e.g., session identifiers) and enable the core features of the site and secure your connection. These cookies allow you to send us a message via the secure contact form.

b. Functional cookies:

These cookies are not essential but improve the site’s functionality and your browsing experience.

They allow us to adapt the site’s layout to your display preferences (e.g., language, screen resolution, operating system) and remember information about a form you filled out on our site.

BAG & PACK uses cookies to measure real-time navigation, identify the user via the contact form, and track their visits to the site.

The data generated by the cookies regarding website usage (including your IP address) will be transmitted and stored by BAG & PACK on the servers provided by its host. BAG & PACK will use this information to evaluate site usage and compile reports on the service’s activity.

You can disable cookies by selecting the appropriate settings in your browser.

c. Analytical cookies:

These cookies help us measure the number of visitors to different sections of our sites and make them more useful to visitors. This involves periodically analyzing activity reports where this information is logged, including server traffic, page visits, and the interest generated by various topics.

Specific practices outlined in this privacy policy apply solely to the mentioned website. We collect individual data you provide via the contact form or emails sent to us. All staff and operators who have access to this individual data and process it are required to maintain its confidentiality.

4. Retention Period

Unless you intervene to delete them earlier, the cookies we place on your devices, as well as those placed by third parties, are stored for the following durations:

  • 6 months for storing your cookie preferences. After this period, when visiting our website, you will be prompted to express your consent again or adjust your preferences.
  • 13 months for trackers exempt from consent.
  • 25 months for data collected via trackers.

You can withdraw your consent or delete cookies before the legal retention period expires by following the procedures outlined below. Please note that removing your consent or deleting cookies on one device does not apply to all your devices. You must perform this action on each device where cookies are stored.

5. How to Manage Your Cookie Preferences?

You have multiple options to manage and modify the use of cookies at any time. Please note that your settings may affect your browsing experience and your access to certain services on our website that require cookies.

You can manage cookie storage through your internet browser settings. These settings can be modified at any time. Depending on your browser, you can: Accept or reject cookies from all sources or from a specific source. Configure your browser to prompt you for consent each time a cookie is placed on your device.To adjust your settings, refer to your browser’s help menu or dedicated section:

For example:

Internet Explorer™ :https://bit.ly/3is1xf2
Safari™ :https://apple.co/3gL5sDd
Chrome™ :https://bit.ly/3iqnMSj
Firefox™:https://mzl.la/3iq71GV
Opera™ :https://bit.ly/3aiU2Eb

Important Notice:
Cookies enhance your browsing experience and are essential for accessing certain secure areas of our site. If you choose to block all cookies via your browser, you will only be able to access the public sections of our website and will not be able to log in to your secure client account.
Additionally, if you use multiple devices to access our website (smartphone, tablet, computer, etc.), you must configure your preferences on each device separately.
What Are the Rights of Individuals Affected by Data Processing on This Website?
You can browse our website without revealing your identity or providing personal information. We collect personal data only when you fill out our contact form or send us emails.

III) Retention Period

Your data is retained only for the duration necessary to fulfill the purpose for which it was collected, plus any applicable legal retention periods.

If processing is based on your prior consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

IV) Data Recipients

BAG & PACK may share your data with its subcontractors, partners, and legal authorities as part of its operations.

If a third party processes data on behalf of BAG & PACK, the company ensures that its subcontractors comply with GDPR obligations.

For statistical studies, any shared data will be anonymized beforehand.

No data is transferred outside the European Union.

No automated decision-making is performed.

V) Data Security

BAG & PACK is committed to protecting the personal data it processes. To ensure security, the company follows the recommendations of the CNIL (French Data Protection Authority) and ANSSI (National Cybersecurity Agency of France).

VI) Rights and Remedies

We are strongly committed to regulatory compliance. You may exercise your rights at any time in accordance with Articles 15 to 21 of the GDPR (right of access, rectification, erasure, restriction, objection, and portability).

To make a request, you may contact: BAG & PACK at v.allezy@bagandpack.fr, or the Data Protection Officer at pa.baude@baudedataprotection.com, or the French Data Protection Authority (CNIL) via https://www.cnil.fr/ or by phone at +33 1 49 89 33 00. Your request will be processed within the timeframes required by the CNIL and the GDPR.