Privacy Policy

Last Updated 31/01/2024

Your privacy is important to us. This privacy policy explains the personal data we process, how we process it and for what purposes.

In accordance with the European Regulation 2016/679 and the French “Loi informatique et libertés” we protect your privacy by ensuring the protection, confidentiality, non-alteration availability, and security of your personal data.

 We take all necessary measures to (i) provide you with clear and transparent information on how your personal data will be processed, (ii) put in place all necessary technical and organizational measures to protect your personal data from disclosure, loss, alteration or unauthorized access, (iii) retain your personal data only for the time necessary for the purposes of the specified processing and (iv) offer you the opportunity to access and modify your personal data that we process.

 To this end, we implement the appropriate technical and organizational measures to ensure that processing complies with applicable data protection law.

PRIVACY PROTECTION

Glossary

For the proper understanding of this privacy policy, here are some key concepts.

Advertiser: means a Casino Group brand or a third-party brand on behalf of which advertising operations are realized by relevanC, using (or not) one or more Editor Database(s).

Editor Database: means a database composed of data provided by the Casino Group’s brands.

Cookie: refers to a small text files placed on your device which web servers utilize in the domain that placed the cookie can retrieve later.

Personal Data: means any information relating to an identified or identifiable natural person (for example your name, email address, billing information, telephone number, date of birth).

Right to access: You have the right to obtain the confirmation as to whether or not your Personal Data are being processed, and, where that is the case, access to your Personal Data and the following information:

• why we hold your Personal Data and how do we use it (purpose of the processing);
• the categories of Personal Data we hold;
• our use of your Personal Data
• the recipients or categories of recipient to whom your Personal Data have been or will be disclosed
• where your Personal Data may be transferred;
• how long we store your Personal Data;
• if you did not provide us with your Personal Data directly, any available information about their source;
• your rights under applicable laws and the ability to restriction of processing;
• your right to lodge a complaint with a supervisory authority;

Right to erasure: You have the right to request the erasure of your Personal Data if:

• Your Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; or
• You withdraw your consent for processing subject to previous consent (e.g. commercial prospecting); or
• You validly object to the processing of your Personal Data; or
• Your Personal Data have been unlawfully processed; or
• Your Personal Data have to be erased for compliance with a legal obligation.

Right to restriction of processing: You have the right to obtain from the controller restriction of processing of your Personal Data, in particular during the examination of your request to exercise another right. 

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your Personal Data by highlighting reasons related to your particular situation.

Right to portability: You have the right to receive the Personal Data that you have provided to us, in a structured, commonly used and machine-readable format, and also the right to transmit those Personal Data to any third-party of your choice.

Right to rectification: You can request rectification of inaccurate or incomplete information that concerns you (for example, an incorrect address).

Purpose: The purpose refers to the main objective pursued when processing your Personal Data. Your Personal Data is used for specific, explicit, and legitimate purposes.

Lawfulness of Processing: relevanC process your Personal Data relying on one of the following legal bases:

• Your consent: you expressly consent to the processing of your Personal Data for a specific purpose.
• Compliance with a legal obligation: the processing of your Personal Data may be necessary for compliance with a legal obligation to which relevanC is subject.
• Our legitimate interests: the processing of your Personal Data may be necessary to pursue our legitimate interests, including ensuring the improvement of the customer experience and allowing our business to thrive.
• The performance of a contract or execution of pre-contractual measures: the processing of your Personal Data may be necessary to perform a contract to which we are party, or in order to take steps at your request prior to entering into a contract.

Data subject: This Privacy Policy applies to you if you are:

• A customer of the Casino Group brands, meaning a person who bought in a physical store or online;
• A prospect of the Casino Group brands, meaning a person who has created a customer account but has not yet ordered products or services;
• An Internet user who has browsed the websites of the Casino Group’s brands or the website of a third-party partner;
• An Internet user who has browsed the relevanC website (relevanc.com);
• A client or prospect of relevanC.

Data controller: means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Sub-purposes: refers to all operations that contribute to the same purpose.

Processing: means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of data provision, alignment or combination, restriction, erasure or destruction.

Transfer of Personal Data: means any communication, copy or movement of Personal Data intended to be processed in a country outside the European Union.

PART 1 - THE DATA CONTROLLER AND HIS DPO

relevanC is a société par actions simplifiée (a simplified joint stock company under French law) registered with the Trade Register of Saint-Etienne under the number 824 155 824, represented by Mr Hervé DAUDIN as President, whose registered office is located at 1, Cours Antoine Guichard in Saint-Etienne (42000).

relevanC is the advertising agency of the Casino Group and a provider of digital marketing solutions on behalf of Advertisers and brands. As such, it carries out various processing of your Personal Data as a Data controller.

relevanC appointed a Data Protection Officer which ensures compliance with the processing of Personal Data carried out by relevanC. You can contact him:

• either by email sent to mes-droits@relevanc.com
• either by post addressed to the attention of the Data Protection Officer of relevanC, 35 Bd de Sébastopol, 75001 Paris

PART 2 – RELEVANC IS SOLELY RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA

2.1. WHAT CATERGORIES OF PERSONAL DATA ABOUT YOU ARE COLLECTED?

The Personal Data collected by relevanC includes:

• Identity Information – this is the information we use to identify you. This includes for example: first name, last name, email address, postal address, internal processing code.
• Contact information – this is the information we use to contact you to provide you with advertisements. This includes for example: telephone number, postal address, e-mail address.
• Device information – this is the information we use to secure our network and improve our services and performance. This includes for example: the IP address, the pages you visited, the type of browser you are using.

2.2. WHY DO WE PROCESS YOUR PERSONAL DATA?

Your Personal Data is processed for the following purposes:

Under certain circumstances, relevanC may process your Personal Datal for recruitments purposes.

To learn more about the Processing carried out in this context, see our Data Protection Policy applicable to recruitment.

PART 3 – RELEVANC IS JOINTLY RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA

3.1. WHAT CATEGORIES OF PERSONAL DATA ABOUT YOU ARE COLLECTED?

Your Personal Data is processed for the following purposes:

• Identity information – this is the information we use to identify you. This includes for example: first name, last name, email address, postal address, internal processing code, etc.
• Contact information – this is the information we use to contact you to provide you with advertisements. This includes for example: telephone number, postal address, e-mail address.
• Transactional information – this is the information relating to purchases you have made in stores, or on the websites of Groupe Casino brands. This includes for example: the dates and times of transactions (collections), the point of sale concerned by the transaction, the quantities and type of product concerned by the transaction, the amount of any discounts granted.
• Exposure to campaign advertising – this is the information we use to measure the audience and key performance indicators of the advertising campaigns we run.
• Profile/preferences information – this is the information we use to ensure that we only share information that is relevant to you. This includes for example: your purchase history, purchase preferences, in-store interactions.

3.2. WHY DO WE PROCESS YOUR PERSONAL DATA?

Your Personal Data is used for the following purposes:

As part of the processing of statistical studies and online advertising campaigns (display), relevanC may process your Personal Data in order to carry out profiling.

Profiling is the establishment of an individualized profile from an individual’s Personal Data in order to ensure that we only share information that is relevant to the person.

This profiling is based on the analysis of different variables such as your purchase history or your purchase preferences.

3.3. WHO ARE THE JOINT DATA CONTROLLERS?

The entities of the Casino Group, Joint Controllers of the aforementioned Treatments, are the following:

• The company DISTRIBUTION CASINO FRANCE, Société par Actions Simplifiée

of 106 801 329 euros, whose registered office is located at 1 Cours Antoine Guichard – 42008 SAINT-ETIENNE, registered at the RCS of Saint-Etienne under number 428 268 023. You may consult DISTRIBUTION CASINO FRANCE's privacy policy here.

• The company DISTRIBUTION FRANPRIX, Société par Actions Simplifiée with capital of

800 000 euros, whose registered office is located 2 route du Plessis – 94434 Chennevières sur Marne, registered at the RCS of Créteil under number 414 265 165. You may consult DISTRIBUTION FRANPRIX's privacy policy here.

• The company MONOPRIX Holding, Société par Actions Simplifiée with capital of 75 288 300 euros, with registered office at 14/16 rue Marc Bloch – 92210 Clichy, registered at the RCS of Nanterre under number 775 705 601. You may consult MONOPRIX Holding's privacy policy here.

PART 4 - WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

PART 5 - TRANSFERS OUTSIDE THE EUROPEAN UNION

Some of our service providers are located in countries outside the European Union. We transfer some of your Personal Data to the United States.

In the context of these transfers, we make every effort to ensure that these transfers comply with the applicable regulations. We ensure an adequate level of protection of your privacy and your fundamental rights, in particular by using standard contractual clauses of the European Commission or the Data Privacy Framework.

Upon request to our Data Protection Officer, we can provide you with more information about these transfers.

PART 6 - HOW LONG DO WE KEEP YOUR PERSONAL DATA?

The relevanC company retains the Personal Data it processes for the duration necessary for the purposes of the processing and in accordance with the applicable legislation.

The main categories of Personal Data collected by relevanC are kept for the following periods:

PART 7 - HOW TO EXERCISE YOUR RIGHTS?

In general, to exercise your rights, please send your request (indicating your email address, first name, postal address) to the Data Protection Officer of relevanC whose contact details are referred to at the beginning of the policy.

We will send you a response within one (1) month of receipt of your request. This period may be extended by two (2) additional months given the complexity and number of requests.

For the sake of transparency, you will find below a table summarizing your rights according to the different treatments.

For the proper understanding of this table, we put at your disposal a glossary at the beginning of the policy.

PART 8 - COOKIES

The section dedicated to our cookie management policy is available here.

It allows you to learn more about the origin and use of the browsing information processed during your visit to our website and those of our partners, as well as your rights.

PART 9 - SAFETY MEASURES

We undertake to implement the appropriate technical and organizational measures to ensure a level of security adapted to the risk incurred for the rights and freedoms of the individuals involved in the aforementioned processing.

These measures are defined taking into account the state of knowledge, implementation costs and the nature, scope, context and purposes of the treatment as well as the risks identified.

PART 10 - REVIEW AND UPDATE OF THE POLICY

This policy will be updated as necessary to meet the requirements of the applicable data protection regulations. It will be revised at least every three (3) years.