Privacy Policy

Manusurf’s General Policy on the Protection of Personal Data.

MANUSURF (“MANUSURF”, “our”, “we” and “us”) and our partners respect your privacy.

Please read this Privacy Policy carefully to understand how your personal data is collected, processed and retained when you use the Manusurf – Longeville-sur-Mer in Vendée (France) website.

The term “personal data” means any information relating to a natural person that makes it possible to identify that person, directly or indirectly, from a single item of data or by combining several items of data.

All personal data collected on this website is processed under the responsibility of MANUSURF (SIREN: 834229856), whose registered office is located at 135 rue des Terres Noires – 85560 LE BERNARD, in compliance with French Law No. 78-17 of 6 January 1978 relating to data processing, files and civil liberties, as currently amended, and Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data.

For the purposes of applicable personal data regulations, MANUSURF is therefore the data controller.

How MANUSURF Uses Your Personal Data

MANUSURF may use your personal data for the following purposes:

(1) Create your customer account on this website
(2) Manage orders for products and/or services
(3) Carry out the actions necessary to manage contracts, invoices and customer relationship follow-up
(4) Publish and manage reviews of products and/or services ordered on this website
(5) Send you our newsletter if you have subscribed to it
(6) Respond to contact requests submitted through our website
(7) Create a loyalty program
(8) Offer you tailored advertising and content
(9) Build a database of users, prospects and customers
(10) Compile sales and website traffic statistics
(11) Manage unpaid invoices and any disputes
(12) Comply with our legal obligations

Most of the processing activities listed above are necessary for the performance of the contract entered into with MANUSURF when you use our website to order products and/or services offered for sale on the website.

When you voluntarily provide us with personal data, its collection is based on the following legitimate interest: responding more effectively to your requests for information.

The processing of your personal data for the purpose of sending you our newsletter is, however, based solely on your consent to receive it, which you may withdraw at any time. If you do not consent to receiving the newsletter, please note that this will not prevent you from creating a customer account or placing orders on our website.

How MANUSURF Shares Your Personal Data

Within MANUSURF, and according to each processing purpose, your personal data is collected, processed and stored by authorized MANUSURF personnel solely within the scope of their respective responsibilities, particularly customer service, marketing and IT staff.

We do not share personal data with other companies, organizations or individuals unless one of the following circumstances applies:

(1) Sharing with prior consent : after obtaining your consent, MANUSURF will share the information you have authorized with the specific third parties or categories of third parties identified when your consent was collected.

(2) Sharing with our service providers : MANUSURF may also disclose your information to companies that provide services to us or on our behalf. These service providers include companies offering IT services, such as our hosting provider or email service provider, companies that deliver our products, and companies that carry out marketing activities on our behalf. These service providers may use your information only to provide services to you on behalf of MANUSURF.

(3) Sharing pursuant to a legal obligation and in accordance with laws and regulations: MANUSURF may share your information as required by laws and regulations, to resolve legal disputes, or as required by judicial or administrative authorities acting under the law.

MANUSURF will ensure that any sharing of personal data is lawful by entering into data-processing clauses with the companies with which your personal data is shared, requiring them to comply with this Privacy Policy and take appropriate security and confidentiality measures when processing personal data.

How MANUSURF Protects Your Personal Data

MANUSURF places great importance on the security of your personal data and has adopted standard industry practices to protect it and prevent unauthorized access, disclosure, use, alteration, damage or loss.

We have also taken appropriate precautions, through our hosting provider, to safeguard the security and confidentiality of data and, in particular, to prevent it from being altered, damaged or disclosed to unauthorized persons.

MANUSURF also implements the following organizational measures:

(1) We take reasonable and practicable measures to ensure that the personal data collected is limited to what is relevant and necessary for the purposes for which it is processed.

(2) We retain your personal data only for as long as strictly necessary for the purpose of the processing, unless retention is required or permitted by law. For example, data relating to the performance of your orders is retained for the period required by law for accounting records, namely a maximum of 10 years from the relevant financial year.

Data that may be required to establish, exercise or defend legal claims may be retained for a maximum of 5 years from the date of collection or the latest contact initiated by the prospect, in accordance with the standard limitation period.

(3) We implement access-control mechanisms to ensure that only authorized personnel can access your personal data.

In the event of a personal data breach, MANUSURF will comply with the applicable legal and regulatory requirements regarding notification of personal data breaches to the competent supervisory authorities and/or affected individuals.

Where MANUSURF Hosts and Transfers Your Personal Data

Your personal data will be hosted within the infrastructure of our hosting provider, located in France.

Some third parties to whom we disclose your personal data are located in countries outside the European Union.

When products offered for sale on the website are delivered using resources located in countries outside the European Union, we may transfer your personal data to those countries. Service providers may also access your data on our behalf in order to provide us with a specific service while being located in countries outside the European Union.

Where such transfers take place, we ensure that they are governed in accordance with applicable regulations so as to provide an adequate level of data protection, either through an adequacy decision by the European Commission or through legal instruments such as data-transfer agreements incorporating the European Commission’s Standard Contractual Clauses.

For any questions concerning the recipients of your data and the transfers we make outside the European Union, please contact us at the addresses provided in the “How to Contact Us” section below.

How You Can Exercise Your Personal Data Rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to provide instructions regarding what should happen to your data after your death, and to data portability.

You also have the right to lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés, or CNIL) in France, or with the competent supervisory authority in any other Member State according to your habitual residence, place of work or the place where the alleged infringement occurred, if you believe that the processing of your data does not comply with applicable law. This right may be exercised without prejudice to any other administrative or judicial remedy available to you.

You may contact us at any time using the details provided in the “How to Contact Us” section below to exercise your personal data rights under the conditions established by applicable regulations. You must state which right you wish to exercise and provide all information required for us to respond to your request.

These rights may be exercised subject to the conditions established by applicable regulations.

The right of access means that you may ask us at any time whether we process personal data concerning you and, if so, which personal data is involved and the characteristics of the processing operation or operations carried out.
The right to rectification means that you may ask us to correct your personal data when it is inaccurate. You may also ask for incomplete personal data to be completed where this is relevant to the purpose of the processing concerned.
The right to erasure means that you may ask us to erase your personal data, particularly where:

1. Its retention is no longer necessary for the purposes for which it was collected;
2. Your personal data is processed on the basis of your consent, you wish to withdraw that consent, and no other legal basis justifies the processing;
3. You have objected to the processing of your personal data and consequently wish it to be erased;
4. Your personal data has been processed unlawfully;
5. Your personal data must be erased to comply with a legal obligation under European Union or French law.

The right to restriction means that you may ask us to restrict the processing of your personal data:

1. While you dispute the accuracy of your personal data, for a period that allows us to verify its accuracy;
2. Where processing has been established as unlawful but you prefer restriction of processing to the complete erasure of your personal data;
3. Where we no longer need your personal data for processing purposes but you still require it to establish, exercise or defend legal claims;
4. Where you have objected to the processing of your personal data and request that processing be restricted while we verify whether the legitimate grounds you invoke are justified.

Restriction of processing means that your personal data will thereafter only be stored. We will no longer carry out any other operation on the personal data concerned.

The right to object means that you may object to the processing of your personal data where that processing is based on MANUSURF’s legitimate interests. The right to object is subject to your demonstrating legitimate grounds relating to your particular situation. We will then cease the processing concerned unless compelling legitimate grounds justify its continuation in accordance with applicable regulations.
The right to provide instructions concerning what should happen to your data after your death allows you to state your wishes regarding the retention, erasure and disclosure of your personal data after your death.
The right to data portability means that, subject to the conditions established by applicable regulations, you may ask us to provide your personal data in a structured, commonly used and machine-readable format and transmit it to you, or ask us to transmit it directly to a third party of your choice where legally and technically feasible.

Where we process your personal data on the basis of your consent, you may withdraw that consent at any time by contacting us using the details provided in the “How to Contact Us” section or by clicking the unsubscribe link in any of our communications.

However, withdrawing your consent does not affect the lawfulness of processing carried out before that withdrawal.

Updates to This Privacy Policy

MANUSURF reserves the right to amend or update this Privacy Policy, in whole or in part, at any time due to changes in applicable personal data protection regulations or in the data-processing activities carried out.

Any material change to the Privacy Policy will be notified to you by email if you have provided us with a valid email address and will be published on the website. We recommend that you review this Policy regularly so that you are fully aware of our commitments regarding the security and protection of your personal data.

How to Contact Us

If you have any questions, comments or suggestions, please contact us by visiting the Contact Us page or by emailing them to [email protected].

Alternatively, write to us at 135 rue des Terres Noires – 85560 LE BERNARD.

If you are not satisfied with MANUSURF’s response to a request to exercise your rights under Article V above, or if you wish to report an infringement of applicable data-protection regulations, you have the right to lodge a complaint with the CNIL by post (CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07), through its website (www.cnil.fr), or with the data-protection authority of the country in which you normally reside or work.