Privacy Policy

The DUPESSEY&CO group takes your privacy very seriously and is committed to protecting it.

This privacy policy (the “Privacy Policy”) aims to:

• provide you with information regarding the personal data processed by our services;
• inform you of your rights and how you can exercise them.

This Policy has been drafted in accordance with the provisions of the General Data Protection Regulation (“GDPR”) and the amended French Data Protection Act of 1978. It may evolve based on regulations, case law, and the doctrine of supervisory authorities.

This Privacy Policy is designed so that you can easily access the section that interests you.

Do not hesitate to contact us if you have any questions or comments regarding this Privacy Policy (see the “How to Contact Us” section below).

1. Who are we?

The terms “DUPESSEY&CO”, “Dupessey”, “we”, “our” and “us” refer to the company DUPESSEY&CO as the data controller of your personal data, unless otherwise stated in this Privacy Policy.

DUPESSEY&CO is a simplified joint-stock company, registered under SIREN 410271654, with its headquarters at 124 Route d’Aix-les-Bains, 74150 Rumilly.

DUPESSEY&CO is the parent company of the DUPESSEY&CO group. For more details on the DUPESSEY&CO group, please visit the “Our Group” section on www.dupessey.com.

You will find our contact details in the “How to Contact Us?” section below.

2. What personal data do we collect and how is it collected?

Personal data refers to information related to an identified or identifiable natural person. This includes, for example, a person’s name, address, and phone number.

We may collect personal data directly from you or indirectly.

2.1. Data you provide directly

You may provide us with data:

• when you subscribe to our newsletter;
• when you use our digital platforms;
• when you participate in one of our events.

Depending on what you provide, such information may include:

• your identity (including first name, last name, gender, image, nationality);
• your contact details (including postal address, email, phone numbers);
• your personal status (including title of courtesy);
• your orders (including history and order details);
• certain payment data (including billing data, payment type, or method);
• other information you may provide by filling out our contact forms or contacting us (including your comments or other communications addressed to us).
  We strive to ensure that the personal data we hold is accurate at all times. Therefore, we encourage you to update your data in case of changes. We may also ask you to update your data from time to time.

We recommend that you only provide the requested or necessary data related to your request, excluding sensitive data concerning race, ethnic origin, political opinions, religious or philosophical beliefs, and data related to health, sexual life, or sexual orientation.

2.2. Data collected indirectly

We may collect data when you use our digital platforms, including our website, such as your IP address or other browsing data (including browser, operating system, device model), through cookies or similar technologies placed on your device. Some cookies are necessary for the proper functioning of our digital platforms, while others are used for analysis purposes, helping us provide you with more personalized services and a better digital experience.

If you provide us with personal data concerning a third party, you must ensure that you have the right to disclose this data to us and that, without us taking any other measures required by data protection legislation, we may collect, use, and disclose such data for the purposes described in this Privacy Policy. For example, you must ensure that the individual concerned is aware of the various matters set out in this Privacy Policy. The person must also give the consents set out in this Privacy Policy regarding how we process their personal data.

3. Purposes: Why do we collect your personal data and how do we use it?

We collect and use your personal data based on one or more of the following legal bases:

• we have obtained your prior consent (for example, via our contact form). Please note that with this specific legal basis, you have the right to withdraw your consent at any time (see below “What are your rights regarding your personal data?”);
• processing is necessary within the framework of a contract between DUPESSEY&CO and you;
• we have a legitimate interest in performing the processing, and this legitimate interest is not overridden by your interests, fundamental rights, or freedoms (e.g., payment fraud prevention);
• we must process your personal data to comply with applicable laws and regulations.

Depending on the context, we may use your personal data to:

• provide you with the services you have requested;
• verify your identity and credentials;
• process applications you have provided (CV and cover letter) and manage interviews;
• send you marketing communications, with your prior consent (see the “Marketing Communications” section);
• provide after-sales service;
• respond to your questions, suggestions, and requests, including rights exercise requests; manage claims and disputes;
• manage the events you have registered for and/or attended;
• detect, prevent, and combat fraudulent or illegal activity, including protecting your transactions from payment fraud;
• protect yourself, employees, and others in our premises;
• monitor and improve our digital platforms;
• conduct statistical analyses, including to tailor our product and service offerings (including the use of nationality in an anonymous manner);
• improve our services;
• comply with our legal obligations, including providing information to regulatory bodies when required, particularly to meet our legal obligations in terms of fraud prevention, money laundering, and terrorist financing.

10. Updates to this Privacy Policy

This Privacy Policy reflects our current practices and may be modified and updated from time to time. If we make substantial changes to this Privacy Policy, we will inform you through a modification notice at the beginning of this Privacy Policy and on the homepage of the website “dupessey.com”.