Privacy Policy | La Reposée

La Reposée (whose corporate headquarters are located at 4 Rue Des Vaux Pares, 35510 Cesson-Sévigné), in its capacity as data controller, places great importance on protecting and respecting your privacy. This policy is intended to inform you, in accordance with Regulation No. 2016-679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”), about our practices regarding the collection, use, and sharing of the information you provide to us through our forms.

The purpose of this policy is to inform you about the categories of personal data we may collect or hold about you, how we use it, who receives it and with whom we share it, how long we retain it, and how we protect it, as well as the rights you have regarding your personal data.

1. The data we collect

By using the Site, you provide us with information, some of which can be used to identify you and therefore constitutes personal data (hereinafter referred to as the “Data”). This is particularly the case when you use the forms.

This information includes, in particular, the following data:

2. How do we use the data we collect?

We use the Data we collect to respond to your requests.

When Data is collected, you will be informed whether certain Data fields are required or optional. Data fields marked with an asterisk on the data collection form are required. If you do not provide this information, the processing of your request may be limited.

3. Who are the recipients of the data we collect, and why do we share this data with them?

3.1. Data Processed by La Reposée

The data collected is intended for us in our capacity as the data controller.

3.2. Data Transferred to Public Authorities and/or Agencies

In accordance with applicable regulations, Data may be disclosed to the competent authorities upon request, including public agencies, court officers, ministerial officers, and debt collection agencies, solely to comply with legal obligations, as well as in cases involving the investigation of perpetrators of crimes committed online.

3.3. Data Transferred to Third Parties

We work closely with third-party companies that may have access to your Data, including:

Our subcontractors and service providers: We only share with them the Data they need to perform the services we entrust to them, and we require that they not use your Data for any other purpose. These third parties will act solely in accordance with our instructions and will be contractually obligated to ensure the same level of security and confidentiality for your Data as we do, and to comply with applicable regulations on the protection of personal data. Furthermore, all of these third parties have provided us with a GDPR compliance certificate detailing their compliance.
Our business partners: We only share Data with them if you consent to such sharing.

4. How long do we retain your data?

Your Data will not be retained beyond the period strictly necessary for the purposes set forth in this policy, in accordance with the Regulation and applicable laws.

In this regard, the Data used is retained for the entire duration of the contractual relationship and then archived in accordance with the applicable statute of limitations.

When the retention periods expire, your Data is deleted or anonymized so that it can be used without infringing on your rights. However, your Data may be archived beyond the specified retention periods for the purposes of investigating, detecting, and prosecuting criminal offenses, solely to enable your Data to be made available to judicial authorities as needed.

Archiving means that your Data will no longer be accessible online but will be extracted and stored on a standalone, secure medium.

5. Is your data transferred, and if so, how and where?

Your Data may be transferred from a country within the European Union to a country outside the European Union.

When we transfer your Data outside the European Union, we always do so securely and in accordance with applicable regulations, particularly those regarding the protection of personal data:

Either by transferring the Data to a recipient located in a country that has been the subject of an adequacy decision by the European Commission certifying that it provides an adequate level of protection;
Either by implementing or having implemented the European Standard Contractual Clauses that have been approved by the European Commission as ensuring an adequate level of protection for your Data;
Either through the use of Binding Corporate Rules approved by the competent data protection authorities;
Either by providing all appropriate safeguards referred to in Article 46 of the Regulation.

6. How is your data protected?

We take appropriate technical and organizational measures to prevent unauthorized access to, or alteration, disclosure, loss, or destruction of your Data. It is important that you keep your login credentials confidential to prevent unauthorized use of your account.

7. What are your rights regarding your data?

In accordance with applicable laws and regulations regarding the protection of personal data, you have a number of rights regarding your Data, namely:

Right of Access and Information: You have the right to be informed in a concise, transparent, intelligible, and easily accessible manner about how your Data is processed. You also have the right to obtain (i) confirmation that Data concerning you is being processed and, if so, (ii) access to that Data and a copy of it.
Right to Rectification: You have the right to have inaccurate Data about you corrected. You also have the right to supplement incomplete Data about you by providing additional information. If you exercise this right, we undertake to notify all recipients of your Data of any corrections.
Right to erasure: In certain cases, you have the right to have your Data erased. However, this is not an absolute right, and we may retain this Data for legal or legitimate reasons.
Right to Restriction of Processing: In certain cases, you have the right to obtain a restriction on the processing of your Data.
Right to Data Portability: You have the right to receive the Data you have provided to us in a structured, commonly used, and machine-readable format, for your personal use or to transmit it to a third party of your choice. This right applies only when the processing of your Data is based on your consent or a contract, and such processing is carried out by automated means.
Right to Object to Processing: You have the right to object at any time to the processing of your Data in cases where such processing is based on our legitimate interest, a public interest mission, or for marketing purposes. This is not an absolute right, and we may refuse your request to object for legal or legitimate reasons.
The right to withdraw your consent at any time: You may withdraw your consent to the processing of your Data when the processing is based on your consent. Withdrawing your consent does not affect the lawfulness of processing based on consent that took place before the withdrawal.
The right to file a complaint with a supervisory authority: You have the right to contact your data protection authority to file a complaint regarding our personal data protection practices.
The right to provide instructions regarding the handling of your data after your death: You have the right to provide us with instructions regarding the use of your Data after your death.

To exercise these rights, you can contact us at the following address: contact@lareposee.fr.

Please note that we may require proof of your identity in order for you to exercise these rights.

8. Changes to Our Privacy Policy

We may occasionally need to modify this policy, in particular to comply with any regulatory, legal, editorial, or technical changes. If so, we will update the “Last Updated” date and indicate the date on which the changes were made. When necessary—including, but not limited to, in the event of a substantial change or a specific occurrence requiring an amendment to this policy—we will notify you and/or seek your consent. We recommend that you check this page regularly to review any changes or updates made to our policy.

9. Contact

If you have any questions about this policy or any requests regarding your Data, you can contact us by:

Version updated on March 30, 2026.