Santa Chiara Caffe is committed to ensuring that you have control of, and visibility to, your personal data. Below is a summary of your rights and additional commitments from Santa Chiara Caffe. You may exercise your rights by contacting us.
RIGHT OF ACCESS
You can request a copy of the personal data we hold about you.
RIGHT TO RECTIFICATION
You have the right to request that we correct any inaccuracies in the personal data we hold about you, and complete any personal data where this is incomplete.
It is your responsibility to ensure that any information you have provided to us is accurate and up to date. If any of the information you have provided to us changes, please login to our system to change user-controlled information. Otherwise send us an email entitled ‘CHANGE OF DETAILS’ to ladureeus@laduree.com.
RIGHT TO ERASURE (‘RIGHT TO BE FORGOTTEN’)
You have the right to request that your personal data be deleted in certain circumstances including:
-
The personal data are no longer needed for the purpose for which they were collected
-
You withdraw your consent (where the processing was based on consent)
-
You object to the processing and there are no overriding legitimate grounds justifying us processing the personal data (see Right to Object below)
-
The personal data has been unlawfully processed
-
To comply with a legal obligation.
However, this right does not apply where, for example, the processing is necessary:
RIGHT TO RESTRICTION OF PROCESSING
You can ask that we restrict your personal data, i.e., keep but not use, where:
-
The accuracy of the personal data is contested
-
The processing is unlawful but you do not want it erased
-
We no longer need the personal data but you require it for the establishment, exercise or defense of legal claims
-
You have objected to the processing and verification as to our overriding legitimate grounds is pending.
We can continue to use your personal data:
-
Where we have your consent to do so
-
For the establishment, exercise or defense of legal claims
-
To protect the rights of another
-
For reasons of important public interest.
RIGHT TO DATA PORTABILITY
Where you have provided personal data to us, you have a right to receive such personal data back in a structured, commonly-used and machine-readable format, and to have that data transmitted to a third-party data controller without hindrance but in each case only where:
-
The processing is carried out by automated means, and
-
The processing is based on your consent or on the performance of a contract with you.
RIGHT TO OBJECT
You have a right to object to the processing of your personal data in those cases where we are processing your personal data in reliance on our legitimate interests. In such a case we will stop processing your personal data unless we can demonstrate compelling legitimate interests which override your interests and you have a right to request information on the balancing test we have carried out. You also have the right to object where we are processing your personal data for direct marketing purposes.
If you do not want to receive newsletters, announcements, or other communications and/or services from the Ladurée USA, please do not opt-in for those communications or services at the time of registration. If you have opted-in and, at a later time, wish to opt-out, please follow the instructions in the communication to opt-out: Along with every email communication sent to you, we provide you the opportunity to discontinue receiving future communications, i.e., unsubscribe. Simply follow the unsubscribe process or directions provided at the bottom of the email.
AUTOMATED DECISION-MAKING
You have a right not to be subjected to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affects you other than where the decision is:
-
Necessary for entering into a contract, or for performing a contract with you
-
Based on your explicit consent – which you may withdraw at any time, or
-
Is authorized by European Union or Member State law.
Where we base a decision solely on automated decision-making, you will always be entitled to have a person review the decision so that you can contest it and put your point of view and circumstances forward.
RIGHT TO COMPLAIN
You have the right to lodge a complaint with the Data Protection Authority, in particular in the Member State of your residence, place of work or place of an alleged infringement, if you are unhappy with how we are processing your personal data.
We will respond to your request in writing, or orally if requested, as soon as practicable and in any event not more than one month after receipt of your request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request. We may request proof of identification to verify your request. All requests should be addressed to our Contact Us information.