Personal data protection policy

Protecting the privacy of visitors to our website, www.isigny-lait-infantile.fr (hereinafter referred to as the “Website”), is of utmost importance to Isigny Sainte-Mère Cooperative. For this reason, we have implemented the necessary measures to comply with the requirements relating to the protection of your personal data.

Committed to an ongoing process of personal data protection, Isigny Sainte-Mère Cooperative complies with all applicable French and European laws and regulations regarding such data. Accordingly, we comply with the requirements of the French Data Protection Act of 6 January 1978, as amended (the “Act”), and Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “Regulation”).

For all processing activities, Isigny Sainte-Mère is the entity that determines the purposes and means of processing and therefore acts as the Data Controller within the meaning of the applicable personal data protection regulations, in particular Regulation (EU) 2016/679 (“GDPR”).

Isigny Sainte-Mère, Agricultural Cooperative Society, 2 rue du Docteur Boutrois, CS 10099, 14230 ISIGNY-SUR-MER, France, registered with the Caen Trade and Companies Register under number 317 750 818, represented by its President, Arnaud Fossey.

Your personal data as a user of the website www.isigny-lait-infantile.fr (the “Website”) is processed as follows:

1. Who is the data controller?

This Policy explains, in the interest of transparency regarding the processing activities carried out, how Isigny Sainte-Mère Cooperative, acting as Data Controller, undertakes to collect, use and protect your personal data with due care and solely for the legitimate purposes for which it was collected.

Isigny Sainte-Mère Cooperative is an agricultural cooperative registered with the Caen Trade and Companies Register under number 317 750 818, with its registered office located at 2 rue du Docteur Boutrois, 14230 Isigny-sur-Mer, France.

2. How and why does Isigny Sainte-Mère collect your data?

Isigny Sainte-Mère Cooperative generally collects personal data that you voluntarily provide through the forms available under the “Contact Us” section of the Website, as well as through the newsletter subscription form.

By submitting a request via the contact form or subscribing to the newsletter, you consent to the processing of your personal data for the purpose of responding to your request.

With regard to processing activities related to the management of the Website, you are informed of the purposes of such processing when browsing the Website (cookies, “Contact Us” form), namely:

• Responding to your contact requests using the communication details you have provided (email, telephone number, or postal address);
• Ensuring the proper functioning of the Website through the use of cookies;
• Compiling statistics relating to Website traffic through audience measurement cookies, enabling us to improve the Website and provide you with an optimal browsing experience.

The services available on our Website do not require registration, allowing you to browse without identifying yourself.

For the processing activities described above, Isigny Sainte-Mère undertakes to process your personal data strictly for these purposes only. Such purposes have been recorded in our processing activities register.

3. What legal bases does Isigny Sainte-Mère rely on to process personal data?

We collect, use, and share the data we hold on the basis of:

• Your consent;
• Our legitimate interests, provided these interests are not overridden by your interests or fundamental rights and freedoms under the Act and the Regulation.

4. What categories of data are collected?

When using our Website, you provide us with certain information about yourself, some of which may identify you directly or indirectly (“Personal Data”). This occurs when you browse our Website or fill in online forms.

The personal data collected by Isigny Sainte-Mère is limited to what is necessary to fulfil the purposes of the processing activities carried out and may include:

• Identification Data : First name; Last name; Postal address; Email address; Telephone number.
• Connection Data : IP address; URL; User identifier.
• Location Data : GPS coordinates; Geolocation information.

Each form available on the Website limits the collection of personal data to what is strictly necessary and indicates:

• The purpose(s) for which the data is collected;
• The recipient(s) of the data.

Data required to process your request is identified by an asterisk (*). If you do not complete these mandatory fields, Isigny Sainte-Mère may be unable to respond to your request and/or provide the requested services. Other information is optional and helps us manage your request more effectively and improve our services and communications.

Failure to provide required information may prevent you from accessing certain services. Mandatory or optional fields and the consequences of failing to provide information will be clearly indicated at the time of collection.

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, regarding the manner in which the Cooperative collects and processes your data.

When you submit a request via the Website’s “Contact Us” form, Isigny Sainte-Mère may also collect information relating to your company name and your professional position. Please note that it is strictly prohibited to enter health data or any other special category of personal data within the meaning of Regulation (EU) 2016/679 in the free-text section of this form.

Isigny Sainte-Mère undertakes not to collect more personal data than is necessary.

5. Who are the recipients of your data?

Under no circumstances will Isigny Sainte-Mère Cooperative disclose your personal data to third parties for commercial and/or promotional purposes without your consent.

Isigny Sainte-Mère grants limited access to your personal data to the following authorised recipients within the organisation:

• Personal data collected through the contact form in the context of a complaint or information request: authorised personnel responsible for handling complaints and providing consumer information;
• Personal data collected through the contact form in the context of a commercial enquiry: authorised personnel responsible for sales and business development activities;
• Personal data collected through audience measurement cookies on the Website: authorised personnel responsible for optimising and improving the Website.

These recipients are bound to maintain the strict confidentiality of your personal data.

Furthermore, Isigny Sainte-Mère reserves the right to disclose personal data to the following processor (service provider), in full compliance with applicable laws and regulations and solely for the purposes described above:

• Google Analytics, for the measurement and analysis of Website traffic and audience statistics.

6. How does Isigny Sainte-Mère manage transfers of data outside the European Union?

Isigny Sainte-Mère strives to store personal data in France or, at a minimum, within the European Economic Area (EEA).

However, personal data collected through our Website or services may, in certain circumstances, be transferred to other countries, particularly where some of our service providers are located outside the EEA.

In the event of such a transfer, we ensure that it is carried out:

• To a country recognised as providing an adequate level of protection, equivalent to that required under European data protection regulations;
• Under the European Commission’s Standard Contractual Clauses (SCCs);
• Under approved Binding Corporate Rules (BCRs), where applicable.

7. How long is your data retained?

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, to meet your needs, or to comply with our legal obligations.

Retention periods may vary depending on several factors, including:

• Isigny Sainte-Mère’s operational requirements;
• Contractual obligations;
• Legal and regulatory requirements;
• Recommendations issued by supervisory authorities.

Personal data collected through the Website contact form in connection with an enquiry or complaint is retained for the period necessary to respond to your request.

Following this period, the data may be archived for a maximum of five (5) years from the date of the last contact for evidential purposes, compliance requirements, or the establishment, exercise or defence of legal claims. Thereafter, the data may be anonymised and retained for statistical and analytical purposes.

Personal data collected through audience measurement cookies is retained for twenty-five (25) months from the date of collection. Such cookies are automatically deleted from your device after thirteen (13) months, or earlier if you manually remove them.

Upon expiry of the applicable retention period, personal data will be deleted or archived in accordance with legal requirements.

8. How is your data secured?

Isigny Sainte-Mère takes all appropriate technical and organisational measures to ensure the security of personal data processing activities and the confidentiality of personal data.

Appropriate safeguards are implemented taking into account the nature of the data and the risks associated with processing in order to prevent unauthorised access, alteration, damage, disclosure, or destruction.

These measures include, in particular:

• Secure servers;
• Data backup within a redundant system architecture;
• Firewalls;
• SSL encryption;
• Secure authentication through user IDs and passwords;
• Internal password management policies requiring strong passwords (minimum eight characters including numbers, letters, at least one uppercase letter and one special character);
• Secure remote access via VPN.

However, please note that you remain responsible for the personal data you transmit to Isigny Sainte-Mère and should take appropriate precautions to protect your data when using information technology systems and services.

9. What rights do you have regarding your data?

Under the RGPD and applicable data protection legislation, you have the following rights:

• The right to access your personal data;
• The right to update, rectify and complete your personal data;
• The right to erasure (“right to be forgotten”);
• The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• The right to restriction of processing;
• The right to object to the processing of your personal data;
• The right to data portability;
• The right to determine how your personal data is handled after your death and to designate a third party to whom such data may be disclosed.

To exercise any of these rights, please contact the Data Protection Officer (DPO) of Isigny Sainte-Mère using the following details:

ISIGNY SAINTE-MÈRE
Attention: Data Protection Officer (DPO)
2 Rue du Dr Boutrois
CS 10099
14230 ISIGNY-SUR-MER
France

Email: legal@isysme.com

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL):

• Postal Address: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
• Website: https://www.cnil.fr/fr/plaintes

10. What are cookies and how can you manage them?

When visiting the Website, cookies may be placed on your computer or any device used to access the Website.

These cookies help us analyse traffic and improve the Website.

You may accept or reject cookies through the cookie consent mechanism displayed when you first visit the Website.

10.1. What is a cookie?

A cookie is a small text file identified by a unique name and stored on your device when you browse a website.

Cookies allow information relating to your browsing activity to be stored and retrieved for a defined period.

There are several categories of cookies, including:

(i) First-party cookies and third-party cookies

A cookie is considered either “first-party” or “third-party” depending on its origin.

• Third-party cookies are set by domains other than the Website, such as advertising or analytics providers.
• First-party cookies are set directly by the Website.

(ii) Session cookies

Session cookies enable Isigny Sainte-Mère to track your actions during a browsing session. They are deleted automatically when the browser is closed.

(iii) Persistent cookies

Persistent cookies remain on your device after the browser session has ended, for a period specific to each cookie. They are activated whenever you revisit the Website.

Strictly necessary technical cookies

These cookies are essential for the proper operation of the Website and allow you to navigate and use its features.

Without them, the Website may not function correctly.

Such cookies do not require your consent and do not permit behavioural tracking.

Examples include:

Cookie name	Purpose	Lifetime
PHPSESSID	Stores a unique session identifier to manage user sessions	Session
tarteaucitron	Stores cookie consent preferences	1 year

Audience measurement cookies
These cookies enable us to analyse Website traffic and usage in order to improve performance and user experience.

These cookies are only placed on your device with your explicit consent.

Examples include:

Cookie name	Purpose	Lifetime
_gat_gtag_UA_2547397_9	Limits Google Analytics request rate	1 minute
_gid	Generates statistical data on Website usage	1 day
_ga	Generates statistical data on Website usage	13 months
consent-ism	Stores consent status for RGPD compliance	13 months

Marketing cookies
Marketing cookies are used to determine which advertisements are displayed based on browsing activity.

Isigny Sainte-Mère does not use advertising cookies on this Website.

Social media cookies
The Website includes:

• Links to Isigny Sainte-Mère’s pages on Facebook, Instagram, X (formerly Twitter), LinkedIn and YouTube;
• Social sharing buttons;
• Embedded YouTube videos.

When you use these features, third-party cookies may be installed by the relevant social media platform.

If you are logged into the social network at the time, your browsing activity may be associated with your social media account.

We encourage you to consult the privacy policies of the relevant social media providers to understand how they process your information.

Managing Cookie Preferences

Upon your first visit, a cookie banner informs you that cookies may be placed by Isigny Sainte-Mère and/or identified third parties.

You can:

• Accept all cookies;
• Reject all optional cookies;
• Customise your preferences by cookie category.

Strictly necessary cookies remain active because they are essential for the operation of the Website.

You may change your cookie preferences at any time using the “Cookie Settings” link available on each page of the Website.

11. Links to other websites

Our Website may contain links to third-party websites that are not owned or controlled by Isigny Sainte-Mère.

We are not responsible for the content, privacy practices, or policies of such websites.

We encourage you to review the privacy notices of any website that may collect personal information.

12. Updates to this privacy policy

We reserve the right to amend this Privacy Policy, in whole or in part, at any time to reflect changes in our practices, internal procedures, legal obligations, or regulatory requirements.

Any amendments will remain compliant with applicable French and European data protection laws and regulations.

We encourage you to review this Policy regularly to stay informed about how your personal data is collected and used.

We may occasionally request that you confirm you have read and understood this Policy.

Last updated: 10 August 2026