In accordance with the Applicable Regulations, you have the rights set out below.
Right to withdraw consent
You have the right to withdraw your consent at any time and without justification where the processing of your Personal Data is based on your consent, without affecting the lawfulness of the processing carried out prior to its withdrawal.
Right of access
You have the right to obtain confirmation that we are processing your Personal Data and, where applicable, to access or receive a copy of it, as well as to obtain any relevant information about how it is processed.
Right of rectification
You have the right to ask us to rectify or complete any Personal Data concerning you that is inaccurate or incomplete.
Right to erasure
You have the right to obtain the erasure of your Personal Data under certain conditions.
This right can only be exercised in specific cases: (a) if you withdraw your consent to processing based on that legal basis; (b) if you object to the processing; (c) if your data has been processed unlawfully; (d) if your data is no longer necessary for the purposes for which it was collected; (e) if your data must be erased in order to comply with a legal obligation to which we are subject. However, we are not required to comply with such a request, in particular where the processing is necessary for compliance with a legal obligation to which we are subject, or for the establishment, exercise or defence of legal claims.
Right to restriction of processing
You have the right to request that we restrict the processing of your data, meaning that we keep retaining it but we do not use it, under certain conditions.
In practice, if you contest the accuracy of the data we are using, or if you object to your data being processed, the law allows us to carry out a verification or examination of your request. During this period, you may ask us to freeze the use of your data. Conversely, you may directly request the restriction of processing of certain data where we intend to erase it. This will enable you to retain the data, for example in order to exercise a right. We may, however, continue to use your Personal Data where you have given us your consent, or where it is necessary for the establishment, exercise or defence of our legal rights, or for the protection of the rights of another person.
Right to data portability
You have the right to require, under certain conditions, that we transmit your Personal Data to you in a structured, commonly used and machine-readable format, or that we transmit it to another data controller of your choice.
This right can only be exercised where the processing of your Personal Data is based on your consent or on a contract, and is carried out by automated means.
Right to post-mortem directives (applicable in France)
You have the right to establish general or specific directives as to how you want us to retain, delete and/or disclose your Personal Data after your death.
A person of your choice may be designated to carry out these directives. In the absence of such directives, your heirs will nonetheless be able to exercise certain rights. This right is applicable in France and in any other EU country where mandatory local provisions provide for it.
Right to object
You also have the right to object to the processing of your Personal Data on grounds relating to your particular personal situation, where such processing is based on our legitimate interest. If you object, we must cease such processing, unless we can demonstrate that there are compelling legitimate grounds for continuing to process your data that override your interests, rights and freedoms, or that it is necessary for the establishment, exercise or defence of legal claims.
How can you exercise your rights?
These rights may be exercised at any time:
• By sending an email to our Data Protection Officer at contact@berluti.com; or
• By sending a letter to:
Berluti Personal Data Protection
120 rue du Faubourg Saint Honoré
75008 Paris France
You also have the right to contact any competent supervisory authority, such as that of the Member State of your habitual residence or place of work, for any complaint the way in which Berluti collects and processes your Personal Data. In France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL). You may contact it by post at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX07, or directly on its website here.
