Personal data protection policy

Sonrysa may collect and process Personal Data about you when you visit and use this site or in its business relationship with visitors to its site. Sonrysa therefore undertakes to respect the confidentiality of personal data collected in accordance with the methods described below. Internet users will find in this Data Protection Policy the data collected about them, the purposes for which this data is used, the means of collecting it, the means available to users to exercise their rights and the security measures taken to protect their personal data.

In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016, and the amended French Data Protection Act (Loi Informatique et Libertés) of 6 January 1978, Sonrysa informs Internet users of the following points

Identity of the data controller

The data controller is Sonrysa SA, whose registered office is Av. Frédéric-César-de-la-Harpe, 49, 1007 Lausanne, Suisse.

Purposes of processing

Sonrysa may process your Personal Data:

  • For the purposes of providing you with the information or services you have requested (in particular: sending you newsletters and commercial offers);
  • For the purpose of collecting information that will enable us to improve our site and our services (in particular by means of cookies);
  • For the purpose of contacting you about various Sonrysa-related events;
  • For recruitment purposes.
Recipients

Sonrysa is the sole recipient of your Personal Data. This information, whether in individual or aggregated form, is never passed on to a third party, with the exception of sub-contractors used by Sonrysa (you will find further information on these sub-contractors in point 5.5 below). Neither Sonrysa nor any of its subcontractors market the personal data of Internet users of its Site.

Shelf life

Your Personal Data is kept by Sonrysa only for the time corresponding to the purpose of the collection as indicated in 2 above, which in any event may not exceed 36 months.

Information Technology and Civil Liberties rights

You have the following rights concerning your Personal Data, which you may exercise by writing to us at the postal address mentioned in point 1 or at the following e-mail address: hello@sonrysa.com.

5.1. Right of access to data

You have the right to access your Personal Data. However, in view of Sonrysa’s obligation of security and confidentiality in the processing of personal data, you are informed that your request will be processed provided that you can prove your identity, in particular by producing a scan of your valid identity document (in the case of a request by e-mail) or a signed photocopy of your valid identity document (in the case of a request in writing). Sonrysa informs you that it will be entitled, if necessary, to oppose manifestly abusive requests (by their number, repetitive or systematic nature).

Right to rectify data

Under this right, you are entitled by law to request the rectification, updating, blocking or deletion of any data concerning you that may be inaccurate, incorrect, incomplete or obsolete.

Right to object

This right can only be exercised in one of the following two situations:

  • Where the exercise of this right is based on legitimate grounds ;
  • When the purpose of exercising this right is to prevent the data collected from being used for commercial prospecting purposes.

Response times

Sonrysa undertakes to respond to your request for access, rectification or opposition or any other additional request for information within a reasonable period of time, which may not exceed 1 month from receipt of your request.

Authorised service providers and transfer to a non-EU country

Sonrysa informs you that it has recourse to its authorised service providers to facilitate the collection and processing of the data you have communicated to us. These service providers may be located outside the European Union and may receive data collected via the various forms on the Site.

Complaint to the competent authority

If you consider that Sonrysa is not complying with its obligations with regard to your Personal Data, you may lodge a complaint or a request with the competent authority. In France, the competent authority is the CNIL, to which you can send a request electronically by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet