GDPR

Since May 2018, the General Data Protection Regulation (GDPR) has been the European framework governing the processing and circulation of personal data. The protection of personal data is also governed by the amended French Data Protection Act No. 78-17 of January 6, 1978.
This personal data protection policy informs you how Onoré processes your personal data in compliance with the GDPR and the French Data Protection Act.

1. WHO RECEIVES YOUR PERSONAL DATA?

Your personal data is processed by Onoré, a French simplified joint-stock company (SAS) with a share capital of €55,288,876.50, registered with the Toulouse Trade and Companies Register under number B 915 401 608, with headquarters located at 183 AVENUE DES ETATS UNIS, 31200 TOULOUSE.

Your personal data is accessible only to authorized individuals, depending on their responsibilities. It is transmitted to Onoré employees in charge of administering the platform and conducting surveys (Onoré’s marketing departments).
Your data is not shared with commercial partners without your prior knowledge and without obtaining your prior consent.

2. WHY DO WE NEED TO PROCESS YOUR PERSONAL DATA?

Your personal data is processed by Onoré for the following purposes:

To allow access to and use of our platform, ensuring the best possible user experience and quality online navigation.
To process your inquiries, complaints, or requests, and to contact you with responses.
To process your requests for discount coupons related to our products, shared as part of your reading experience.
To manage the relationship between you and Onoré: including your participation in contests, prize draws, promotional activities, and any other request.
To provide you with personalized content and services based on your browsing history, preferences, and interests.
To gather feedback on our products and better understand consumer needs and interests, in order to improve our digital platforms (website, app, social media), communication methods, and/or develop new products and services.

To develop and improve our products, services, communication methods, and the functionality of our websites, apps, and services.

Onoré ensures that it only collects and processes data strictly necessary for the stated purposes.
This processing is based on your consent. You may withdraw your consent at any time, as outlined below.

3. HOW LONG IS YOUR PERSONAL DATA STORED?

Data used for identifying and targeting surveys (such as email and profile information) is retained on the platform until you unsubscribe, after which it will be permanently deleted. If your account remains inactive for two years, you will be notified by Onoré. If you do not respond within the timeframe provided, your data will be deleted.

Survey responses collected by Onoré are stored for a maximum of three years, after which they are deleted.

However, retention periods may be extended or shortened if:

You exercise one of your rights as described below;
A longer retention period is required or allowed by law or necessary to protect our legal rights.

4. WHAT ARE YOUR RIGHTS?

You have the following rights:

Right of access – You can obtain:

Confirmation of whether or not your data is being processed;
A copy of all personal data held by the data controller.

Right to data portability – You can recover your personal data in a structured, commonly used, and machine-readable format. This applies only to data you actively provided (e.g., via form submission or survey responses) and which is processed automatically.

Right to withdraw consent – Withdrawing your consent (given at registration) will result in your immediate unsubscription from the platform. All your personal data will be deleted immediately.

Right to rectification – You can correct outdated or incorrect information and complete any incomplete data about you.

Right to erasure – You can request the deletion of your personal data, subject to legal retention requirements. This applies, for example, when your data is no longer necessary for processing.

Right to restriction of processing – You can request that the processing of your data be limited in the following cases:

If your data is used unlawfully;
If you dispute the accuracy of your data;
If you need the data to establish, exercise, or defend your legal rights.

While exercising this right, your data will no longer be actively processed or modified.

For more details on your rights, you may contact the Data Protection Officer listed below.

You can exercise your rights by contacting:

Onoré – 183 AVENUE DES ETATS UNIS, 31200 TOULOUSE
You will be asked to provide proof of identity along with your request.

You may also define general directives with a trusted third party or specific instructions with the data controller regarding the storage, deletion, and sharing of your personal data after your death. These directives can be changed or revoked at any time. We recommend that you contact the Data Protection Officer listed below.

If, after contacting us, you believe your data protection rights are not being respected, you may lodge a complaint with the French Data Protection Authority (CNIL). CNIL’s contact information is available at: [https://cnil.fr/](https://cnil.fr/)

5. HOW TO CONTACT THE DATA PROTECTION OFFICER?

For any additional information, you can contact the Data Protection Officer:

Eva IZQUIERDO
By mail: Onoré SAS – 183 avenue des Etats-Unis, 31200 TOULOUSE
By email: [conformite@boncolac.com](mailto:conformite@boncolac.com)

6. DATA SECURITY

Onoré implements appropriate technical and organizational measures to ensure the security of your data in accordance with applicable regulations.
This includes taking the necessary precautions to prevent unauthorized access and use, accidental loss or theft, destruction, or alteration of data, and more generally, any harm that may affect this data.