Privacy Policy

The data controller is GDC, a simplified joint-stock company with a capital of €659,340.00, registered with the Béziers Trade and Companies Register under number 791 519 572, whose registered office is located at 230 avenue Robert Schuman in Béziers (34500).
GDC SAS has appointed a Data Protection Officer ( DPO ), who can be contacted at the following address: dpd-rgpd [@] gdc.fr

The customer and prospect data collected by GDC SAS may include the following: last name, first name, title, email address, date of birth, postal address and delivery address, landline and/or mobile phone number. GDC SAS also collects browsing data through the use of cookies, in accordance with applicable legislation.

SAS GDC undertakes not to create a customer account for a person under the age of 16, either in its stores or on its websites: gdcboutique.com (and .fr) or its former websites chauss34.fr , galeriedechausseurs.com and chaussgalerie.com.

This data may be collected during a purchase in store, when creating a customer account on our website, placing an online order, subscribing to the newsletter, participating in a competition or using our website.

Information marked with an asterisk is mandatory and must be provided. This information is necessary for providing a service or concluding a contract. For example, your postal address is required to deliver an order.

SAS GDC may process personal data if the processing is justified either by the consent of the person, the performance of a contract, compliance with one or more legal obligations, the legitimate interest of the data controller, or the protection of the vital interests of persons.

The collection of your personal data is necessary for SAS GDC in order to:

• To facilitate the business relationship: process and ensure the follow-up of orders, deliveries, invoicing, after-sales service and the completion of satisfaction surveys,
• to allow you to create and access a personal space on our site,
• to answer your questions,

Subject to your consent, this data also allows us to:

• to send you targeted or non-targeted commercial communications,
• to be able to compile commercial statistics or perform performance measurements,
• manage the contests & surveys on the site.

The recipients of the data are the customer, commerce & e-commerce departments of SAS GDC,
as well as several external providers: for secure payment systems; Apple Pay, Payplug, PayPal and PayZen from Lyra Network, the company providing system maintenance; Practics, the website host; Okitup and OVH, our transport providers; DPD and Colissimo to ensure the delivery of customer orders; the customer service support tool; Zendesk, the marketing and advertising services and tools for newsletters, and the collection of customer reviews.

Data transfers with our service providers are governed by contract and in accordance with applicable law, and are subject to an adequate level of data security.

The data may also be transmitted to the competent authorities, at their request, or in order to comply with other legal obligations.

Your personal data is kept for a period of time depending on the purposes of the collection, namely:

• 3 years for commercial prospecting purposes, starting from the last contact or the last purchase.
• 10 years under our legal and contractual obligations. Combating in-store fraud within the legal statute of limitations.
• Contract duration plus the statute of limitations for data relating to customer purchases or orders.

Your personal data is stored in Spain by our system maintenance partner, Practics, via our website hosting provider, Okitup, but may be transferred to service providers or subcontractors located in a country outside the European Union. In such cases, we ensure that the processing carried out complies with a level of personal data protection corresponding to that required by regulations.

SAS GDC undertakes not to sell your personal data to partner or non-partner brands for commercial purposes.

Your personal data may be shared with some of our subcontractors to enable, in particular, the execution of advertising campaigns (sending campaigns, optimizing sending, improving campaign targeting, etc.).

SAS GDC ensures the technical and physical security of the data collected to combat the accidental or unlawful destruction, loss, alteration or unauthorized disclosure of personal data.

SAS GDC is taking the following measures in particular:

• Access management: use of rights limited to the strict needs of the account,
• Authentication process with password strength check,
• Testing and Auditing.

SAS GDC wishes to draw your attention to the creation of an online customer account.

Creating a customer account requires entering a username and password that are personal to you. However, you must protect your account password and not share it with anyone. It is best not to reuse the same password for multiple websites. As a reminder, GDC SAS will never ask you for your username, password, or bank details via email. If you receive such a request from us, do not reply; forward the email to us and then delete it immediately.

SAS GDC undertakes to notify the CNIL of any personal data breach under the conditions prescribed by the relevant regulations.

The customer/prospect will be informed of any data breach that could have a significant impact on them, for example, infringe on their rights or pose a risk to them or those around them.

This policy is available on our website and accessible to everyone.

It may be modified or supplemented by us at any time, depending on changes in the legal framework, case law decisions, or recommendations from the CNIL.

You have rights in accordance with applicable regulations:

• You have the right to request access to and rectification of your personal data if it is inaccurate, incomplete or outdated.
• You have the right to request the restriction of the processing of your personal data, (i) if you contest the accuracy of your data for the period enabling us to verify its accuracy, (ii) if you consider that we are processing your data unlawfully and you require a restriction of its use rather than its erasure, (iii) if we no longer need your data for the purposes referred to above but it is still required for the establishment, exercise or defense of legal claims, (iv) in the event of exercising your right to object for the period of verification as to whether the legitimate grounds which we pursue override yours.
• You have the right to request the deletion of your personal data. This is not an absolute right, as we may be required to retain your personal data for legal, legitimate, or contractual reasons.
• You have the right to request, at any time, to exercise your right to object to the processing carried out for reasons relating to your particular situation.
• You also have the right to object to commercial prospecting, without having to provide a reason.
• You have the right to exercise the right to data portability, which gives you the right to obtain a copy of the personal data concerning you or to transfer it to a third party in a structured, commonly used and machine-readable format.
• You also have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or significantly affects you.
• You have the right to withdraw your consent at any time.
• You also have the right to provide instructions regarding the storage, deletion and communication of your personal data after your death.

These rights can be exercised at any time:

• by contacting us via the online form ,
• by sending an email to: dpd-rgpd [@] gdc.fr
• or, by sending a letter to the attention of the company GDC, specifying "Personal Data" and to the following address:
  “Personal Data” SAS GDC - 230 avenue Robert Schuman - 34500 BÉZIERS.

Every customer or prospective customer has the right to lodge a complaint with the competent authority.

If, after contacting our company, you find that your "Data Protection" rights are not being respected, you can file a complaint with the National Commission for Information Technology and Freedoms or CNIL, 3 Places de Fontenoy, 75007 Paris.
Further information is available on its website cnil.fr.

Browsing data (cookies) are computer files stored on the hard drive of a customer's or prospect's digital device (computer, smartphone, etc.). Their purpose is to indicate a previous visit by the customer or prospect to a website. They are used to make your experience easier (for example: remembering your shopping cart).

At any time, you can also configure your browser to accept (systematically save all cookies issued by the website visited) or reject (systematically reject all cookies issued by the website visited) cookies. Depending on your preference and the browser you are using, you must visit the relevant page to configure your computer, namely:

- For Microsoft Internet Explorer or Edge: deleting and managing cookies - Microsoft Support

- For Google Chrome: how to delete, allow, and manage cookies in Chrome - Computer - Google Chrome Help

- For Mozilla Firefox: Enhanced tracking protection in Firefox for desktop | Firefox Support (mozilla.org)

- For Safari: Clearing cookies in Safari on Mac - Apple Support (FR)

- For Opera: http://help.opera.com/Windows/12.10/fr/cookies.html