Confidentiality policy

1-Introduction

This privacy policy applies to the berkey-france-millenium.fr website and aims to inform users of the site about:

• How their personal data is collected and processed. Personal data includes all data that can identify a user, such as first and last name, age, postal address, email address, user location, or IP address;

• What rights users have regarding this data;

• Who is responsible for processing the collected and processed personal data;

• To whom this data is transmitted;

• Possibly, the site's policy regarding cookies.

This privacy policy complements the legal notices that users can consult at the address

2-General Principles of Data Collection and Processing

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of site users' data comply with the following principles:

• Legality, fairness, and transparency: Data can only be collected and processed with the user's consent. Whenever personal data is collected, the user will be informed that their data is being collected and for what reasons;

• Limited purposes: Data collection and processing are carried out to meet one or more specific objectives defined in these terms of use;

• Minimization of data collection and processing: Only the data necessary for the proper execution of the objectives pursued by the site are collected;

• Data retention limited in time: Data is kept for a limited period, which the user is informed about. If the retention period cannot be communicated to the user;

• Integrity and confidentiality of collected and processed data: The data controller commits to ensuring the integrity and confidentiality of collected data.

To be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data can only occur if they meet at least one of the conditions listed below:

• The user has expressly consented to the processing;

• The processing is necessary for the proper execution of a contract;

• The processing complies with a legal obligation;

• The processing is necessary to safeguard the vital interests of the person concerned or another natural person;

• The processing can be explained by a necessity linked to the execution of a task in the public interest or the exercise of public authority;

• The processing and collection of personal data are necessary for the legitimate and private interests pursued by the data controller or a third party.

3-Personal Data Collected and Processed During Site Navigation

a. COLLECTED AND PROCESSED DATA AND METHOD OF COLLECTION

The personal data collected on the berkey-france-millenium.fr site includes first name, last name, address, mobile or landline phone, order and navigation history, cookies, and the type of browser and device used for navigation.

This data is collected when the user creates an account, places an order, or navigates through different pages of the site.

Furthermore, when a payment is made to complete the order process, the only data retained in the site's publisher's computer systems are those of the transaction, including the order form and invoice.

The data controller will retain all collected data in the site's computer systems under reasonable security conditions for 5 years.

The purpose of data collection and processing is to ensure the smooth execution and completion of the order process and to facilitate reconnection for registered users, as well as to enhance navigation comfort during future visits.

b. DATA TRANSMISSION TO THIRD PARTIES

The personal data collected by the site is not transmitted to any third party and is only processed by the site's publisher.

c. DATA HOSTING

The berkey-france-millenium.fr site is hosted by PlanetHoster, whose headquarters are located at 4416 Louis-B.-Mayer - Laval, Quebec - Canada - H7P 0G1

The host can be contacted at the following phone number: 0970 808 911, a toll-free call from France.

The data collected and processed by the site is exclusively hosted and processed in France.

4-Data Controller and Data Protection Officer

a. THE DATA CONTROLLER

The data controller for personal data is: Céline SEBAN representing Premium Water Distribution. They can be contacted at the address .

The data controller is responsible for determining the purposes and means used for processing personal data.

b. OBLIGATIONS OF THE DATA CONTROLLER

The data controller commits to protecting the collected personal data, not transmitting it to third parties without informing the user, and respecting the purposes for which this data was collected.

The site has an SSL certificate to ensure that the information and data transfer passing through the site are secure.

An SSL ("Secure Socket Layer") certificate is intended to secure the data exchanged between the user and the site.

Furthermore, the data controller commits to notifying the user in case of rectification or deletion of data unless this results in disproportionate formalities, costs, and procedures.

If the integrity, confidentiality, or security of the user's personal data is compromised, the data controller commits to informing the user by any means.

5-User Rights

In accordance with the regulations regarding the processing of personal data, the user has the following rights.

To ensure the data controller complies with their request, the user must provide: their first and last name and email address, and if applicable, their account, personal space, or subscriber number.

The data controller must respond to the user within a maximum of 30 (thirty) days.

a. PRESENTATION OF USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Right of access, rectification, and erasure: The user can view, update, modify, or request the deletion of their data by sending an email to the personal data controller, specifying the request's subject and using the email address associated with their account. If they request the deletion of their account, it will be effective within 7 working days.

Right to data portability: The user has the right to request the portability of their personal data held by the site to another site by sending an email to the personal data controller, specifying the email address associated with their account and the recipient site of their data.

Right to restriction and opposition to data processing: The user has the right to request the restriction or oppose the processing of their data by the site, without the site being able to refuse unless demonstrating legitimate and compelling reasons that may prevail over the user's interests, rights, and freedoms, by sending an email to the personal data controller, specifying the email address associated with their account and the restriction they wish to apply to their data processing.

Right not to be subject to a decision based solely on automated processing: In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision produces legal effects concerning them or significantly affects them similarly.

Right to determine the fate of data after death: The user is reminded that they can organize what should happen to their collected and processed data if they die, in accordance with Law No. 2016-1321 of October 7, 2016.

Right to contact the competent supervisory authority: If the data controller decides not to respond to the user's request and the user wishes to contest this decision, or if they believe that one of the rights listed above has been infringed, they are entitled to contact the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.

b. PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of European Regulation 2016/679 and the Data Protection Act, only minors aged 15 years or older can consent to the processing of their personal data.

If the user is a minor under 15 years old, the consent of a legal representative will be required for personal data collection and processing.

The site publisher reserves the right to verify by any means that the user is over 15 years old or has obtained the consent of a legal representative before browsing the site.

6-Use of Cookies

The site may use "cookies" techniques.

A "cookie" is a small file (less than 4 KB) stored by the site on the user's hard drive, containing information about the user's browsing habits.

These files allow processing statistics and traffic information, facilitating navigation, and improving the service for the user's comfort.

For the use of "cookies" involving the storage and analysis of personal data, the user's consent is necessarily requested.

This user consent is considered valid for a maximum of 13 (thirteen) months. At the end of this period, the site will again request the user's authorization to save "cookies" on their hard drive.

User opposition to the use of "cookies" by the site: The user is informed that they can oppose the storage of these "cookies" by configuring their browser software.

For information, the user can find the steps to follow to configure their browser software to oppose the storage of "cookies" at the following addresses:

• Chrome: https://support.google.com/accounts/answer/61416?hl=en

• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

• Safari: http://www.apple.com/legal/privacy/en-ww/

• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

• Opera: http://www.opera.com/help/tutorials/security/cookies/

If the user decides to disable the "cookies" files, they can continue browsing the site. However, any malfunction of the site caused by this manipulation cannot be considered the responsibility of the site publisher.

Description of "cookies" used by the site: The site publisher draws the user's attention to the fact that the following cookies are used during their navigation:

7-Privacy Policy Modification Conditions

The site publisher reserves the right to modify it to ensure compliance with applicable law. Therefore, the user is invited to regularly consult this privacy policy to stay informed of the latest changes.

However, in case of substantial modification of this policy, the user will be informed by an informational email.

The user is informed that the last update of this privacy policy occurred on: 31/01/2019.

8-User Acceptance of the Privacy Policy

By browsing the site, the user certifies that they have read and understood this privacy policy and accept its conditions, particularly regarding the collection and processing of their personal data, as well as the use of cookies.