Privacy policy

Confiserie Rohan > Privacy policy

Within the European Union, your personal data is protected by Regulation (EU) 2016/679 of 27 April 2016, the General Data Protection Regulation (GDPR).

Data collected

When using the website, the following data may be collected:

  • the URL of links that users used to access the website; the user’s internet service provider
  • the user’s internet protocol (IP) address
  • information entered in our forms (contact)

Purposes of the data collected

As such, and in accordance with article 5 of Regulation (EU) 2016/679 of 27 April 2016, the personal data collected in the forms is subject to computerised processing for the sole purpose of enabling Confiserie Rohan, the sole recipient of said data, to respond to users in the most appropriate manner. This personal data is never used for purposes other than those listed here and is never sent to partners.

The user knowingly provides this information, particularly when the user enters the data themselves, and when validating fields which refer to these legal notices. The user of the website is therefore informed about whether providing said information is obligatory or not. No personal data other than that requested in this context is collected without the user’s knowledge.

In order to respond to your questions or requests, Confiserie Rohan may request, on a mandatory or optional basis, personal data such as your name, email address or telephone number. This data shall be obtained and processed in a fair and lawful manner. This personal data is for internal use only and in no case shall it be given to third parties.

Data retention period

Data shall be recorded for specific and legitimate purposes and shall be used in accordance with said purposes for a period of 26 months. If the user does not provide the necessary information, the form will not be validated and their data will not be stored.

Personal data protection

None of the user’s personal data shall be published without their knowledge, or exchanged, sent, given or sold to third parties in any form whatsoever. Said information may only be passed on to the purchaser in the eventuality that the Confiserie Rohan company is purchased. Said purchaser would in turn be obliged to retain and modify the website user’s data.

Confiserie Rohan shall not process, host or send the collected data to any countries outside of the European Union or which are deemed “inadequate” by the European Commission without informing the user in advance. Confiserie Rohan is free to choose its technical and commercial subcontractors, provided that they offer sufficient guarantees in accordance with the requirements of Regulation (EU) 2016/679 of 27 April 2016.

Confiserie Rohan shall take all the necessary precautions to protect the data, including ensuring that it is not communicated to unauthorised persons. However, should Confiserie Rohan be made aware of an incident that affects the integrity or confidentiality of the user’s data, Confiserie Rohan must inform users thereof as soon as possible and indicate the corrective measures taken.

The user’s personal data may be processed by subcontractors (service providers) for the sole purpose of achieving the purposes given in this policy.

Personal data is stored and protected on OVH servers which are located in France.

Your personal data rights

In accordance with the provisions of the articles of chapter 3 – “Rights of the data subject” of Regulation (EU) 2016/679 of 27 April 2016, the user has a right of access, rectification, erasure and a right to restrict processing of their personal data. To do so, the user should email