Privacy policy

GT COMPANY (whose registered office in France is located at 5 rue de la Galmy - Immeuble le Vega - 77700 Chessy and in the United Kingdom at 11 Old Jewry - EC2R 8DU London) in its capacity as data controller, attaches great importance to the protection and respect of your privacy.

The purpose of this policy is to inform you of our practices regarding the collection, use and sharing of information that you may provide to us through our website accessible at the URL https://print.agfaphoto-gtc.com (hereinafter referred to as the "Site"), in accordance with Regulation No. 2016-679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation").

The purpose of this policy is to inform you about the categories of personal data we may collect or hold about you, how we use it, with whom we share it, how we protect it, and the rights you have over your personal data.

1. The data we collect

When you use the Site, you are asked to provide us with information, some of which identifies you and therefore constitutes personal data (hereinafter referred to as the "Data"). This is particularly the case when you create a customer account, when you place an order on the Site or when you consent to receiving a newsletter.

This information includes the following data:

Account data: refers to the data you fill in when creating an account by completing the registration form.
Invoicing data: refers to all the information you provide in order to continue with the purchase of one of our products on the site.
Transaction data: where applicable, means the data you enter when you make purchases through the Site such as, in particular, information relating to your payment method. The banking data collected is passed on to third parties who help to process and satisfy your requests.
Browsing data: refers to the data we collect when you browse the Site such as, in particular, the date, time of connection and/or browsing, browser type, browser language and your IP address.
Data contained in the photographs: refers to data that may appear in photographs when individuals are depicted in the photographs. The collection and processing of the data contained in the photographs is necessary for the execution of the contract.

2. How do we use the data we collect?

Objectives	Legal basis
Creation of an online customer account	Legitimate interest
Site user logs to ensure Site security	Legitimate interest
Customer invoicing data	Execution of the contract
Sending information to prospective customers by SMS	Consent
Sending a newsletter to Site users	Consent
Personal contact with Site users with a view to prospecting	Legitimate interest
Logs confirming that customers have accepted the GTC	Execution of the contract
Bank details to ensure the security of transactions	Execution of the contract
Follow-up of Customer complaints to GT COMPANY	Execution of the contract
Personalised cookies of Site users	Consent when the tracker is personalised
Printing of photographs	Execution of the contract

Where the photographs you send us contain the personal data of third parties, particularly minors, you declare that you have obtained the consent of the person concerned or their legal representative to the processing of the data in question.

3. Who are the recipients of the data we collect and why do we pass it to them?

3.1 Data processed by GT COMPANY

The Data collected is intended for use by those responsible for the Site managed by GT COMPANY in its capacity as data controller.

3.2 Data transferred to public authorities and/or bodies

In accordance with the regulations in force, the Data may be passed to the competent authorities at their request, and in particular to public bodies, law officers, judicial officers and bodies responsible for debt recovery, exclusively to meet legal obligations, as well as in the case of the search for the perpetrators of offences committed on the Internet.

3.3 Data transferred to third parties

We work closely with third party companies who may have access to your Data, and in particular with:

Our subcontractors and service providers in order to ensure the maintenance of the Site, the Hosting, the printing of photographs and to carry out digital marketing operations (newsletter, emailing).

We only provide these third parties with the Data they need to carry out their services, and we require that they do not use your Data for any other purpose. These third parties will only act in accordance with our instructions and will be contractually bound to ensure the same level of security and confidentiality of your Data as we do and to comply with the applicable regulations on the protection of personal data.

4. How long do we keep your data?

Your Data will not be kept longer than is strictly necessary for the purposes set out in the Policy, in accordance with the Regulations and applicable laws.

In this respect, the Data used via the Site is kept for the following periods:

Objectives	Period of conservation
Creation of an online customer account	3 years from the date of collection or last contact from the prospect
Monitoring of site user logs to ensure Site security	1 year from the end of the validity of the user's contract or the closure of their account
Customer invoicing data	10 years from the end of the financial year
Sending information to prospective customers by SMS	3 years from the date of collection or last contact from the prospect
Sending a newsletter to Site users	3 years from the date of collection or last contact from the prospect
Personal contact with Site users with a view to prospecting	3 years from the date of collection or last contact from the prospect
Logs confirming that customers have accepted the GTC	5 years from when execution of the contract ended
Bank details to ensure the security of transactions	5 years from when execution of the contract ended
Follow-up of Customer complaints Customers of GT COMPANY	5 years from when execution of the contract ended
Information contained in the photographs	Once your order has been completed and delivered, the photographs are kept for 3 months so that we can deal with any complaints or additional orders.
Personalised cookies of Site users	For audience measurement Cookies: 13 months for the life of the tracker, 25 months for the information collected via such trackers. Marketing and advertising Cookies: Consent to be renewed every 6 months, personal data collected via trackers kept for 25 months. Third-party cookies and social media cookies: Consent to be renewed every 6 months, personal data collected via trackers kept for 25 months.

When the retention periods come to an end, your Data is deleted or made anonymous so that it can be used without infringing your rights.

5. How and to where is your data transferred?

Your Data is not transferred outside the European Union.

6. How is your data protected?

We take appropriate technical and organisational measures to prevent unauthorised access, modification, disclosure, loss or destruction of your Data. It is important that you maintain the confidentiality of your login details to prevent unauthorised use of your account.

7. What rights do you have over your data?

In accordance with the applicable laws and regulations on the protection of personal data, you have a number of rights in relation to your Data, namely:

A right of access and information: you have the right to be informed in a concise, transparent, intelligible and easily accessible manner of how your Data is processed. You also have the right to obtain (i) confirmation that Data relating to you is being processed and, where appropriate (ii) access to such Data and to obtain a copy thereof.
A right of rectification: you have the right to obtain the rectification of inaccurate Data concerning you. You also have the right to complete incomplete Data concerning you, by providing a supplementary declaration. Should you exercise this right, we undertake to transmit any corrections to all recipients of your Data.
A right to deletion: in certain cases, you have the right to obtain the deletion of your Data. However, this is not an absolute right, and we may retain this Data for legal or legitimate reasons.
A right to the limitation of processing: in certain cases, you have the right to obtain the limitation of processing of your Data.
A right to Data portability: you have the right to receive your Data that you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to pass it on to a third party of your choice. This right only applies where the processing of your Data is based on your consent, on a contract, or is carried out by automated means.
A right to object to processing: you have the right to object at any time to the processing of your Data when such processing is based on our legitimate interest, a mission of public interest, or for commercial prospecting purposes. This is not an absolute right, and we may refuse your objection request for legal or legitimate reasons.
The right to withdraw your consent at any time: you may withdraw your consent to the processing of your Data where the processing is based on your consent. Withdrawal of consent does not compromise the lawfulness of processing based on consent carried out prior to such withdrawal.
The right to lodge a complaint with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices.
The right to give instructions about what happens to your Data after your death: you have the right to give us instructions about how your Data will be used after your death.

To exercise these rights, please contact our Data Protection Officer at the following address

contact@print.agfaphoto-gtc.com

and/or

GT COMPANY
Personal Data Protection Officer
5 rue de la Galmy - Immeuble le Vega
77700 Chessy
France

Please note that we may require proof of your identity in order to exercise these rights.

8. Changes to our privacy policy

We may amend this policy from time to time, in particular in order to comply with any regulatory, legal, editorial or technical developments. If necessary, we will change the "last updated" date and indicate the date on which the changes were made. Where necessary, we will inform you and/or seek your consent. We advise you to check this page regularly for any changes or updates to our policy.

9. Contact

If you have any questions about this policy or any requests regarding your Data, you can contact us by:

Sending an e-mail to our Data Protection Officer at the following address: contact@print.agfaphoto-gtc.com
Writing to the following address: