Privacy Policy

Last updated: September 2024.

First of all, we are pleased that you are interested in the products and services of Le Pain Quotidien.

This privacy policy describes how we use the personal data you provide to us through, for example, our App and Website.

We may ask you to provide certain personal data, including your first name, last name, and email address (identification data). For specific obligations, you may be required to provide additional data, such as billing or payment data.

We only collect the personal data necessary to inform you about our products (and services), to conclude an agreement with you, and to contact you.

To this end, we rely on the contract that binds us, a legal obligation, our legitimate interest, and, in some cases, your consent (see also Article 2).

The processing of your personal data is subject to this privacy statement. For any questions and/or comments, please contact: feedback@lepainquotidien.lu.

By providing your personal data, you acknowledge that you have read and agree to the use of your personal data in accordance with this privacy statement.

Article 1 – Definitions

“App” refers to the “Le Pain Quotidien” loyalty application developed for mobile devices running iOS and Android, customized and operated by Como AI Malta Limited, headquartered at Suite 10, 189 Marina Suites, Marina Street, Pieta PTA 9041 (Malta), acting as a Processor.

“Affiliate” means any company affiliated with Le Pain Quotidien that meets the conditions of an “affiliated company” as defined in Article 1:20 of the Belgian Code of Companies and Associations.

“Controller” has the meaning given to it under the General Data Protection Regulation (GDPR) 2016/679. “Le Pain Quotidien Luxembourg” refers to LPQ Luxembourg SA, a public limited company under Luxembourg law, headquartered at 140, Route d’Esch, L-1471 Luxembourg, which will be designated as the Controller, determining the purposes and means of the processing of Personal Data.

“Personal Data” has the meaning given to it under the GDPR 2016/679, meaning any information relating to an identified or identifiable natural person (also referred to as a “Data Subject”).

“Processor” has the meaning given to it under the GDPR 2016/679, meaning the party that processes Personal Data on behalf of and under the instruction of the Controller. Le Pain Quotidien Luxembourg will be designated as the Processor.

“Website” refers to the website of Le Pain Quotidien: www.lepainquotidien.lu.

Article 2 – Purposes and Legal Grounds

Customer DataAs part of our services and activities, we collect and process identification and contact data of our customers. The data may be processed to execute the contract with our customers, manage customer relationships, handle accounting, and conduct direct marketing activities such as sending promotional or commercial information. The legal grounds for these processes are the execution of the contract, compliance with a legal obligation (including Luxembourg accounting laws), our legitimate interest, and, in certain cases, your consent.

Supplier and Subcontractor DataWe collect and process identification and contact data of our suppliers and subcontractors. The data may be processed for the execution of contracts, supplier/subcontractor management, and accounting purposes. The legal grounds for this processing are the execution of the contract, compliance with a legal obligation, and/or our legitimate interest.

Employee DataThe data of our employees may be processed for personnel management and payroll administration purposes. The legal grounds for this processing are the execution of the employment contract and compliance with legal obligations.

Candidate DataWe process identification and contact data, as well as work history and other data generally found on a resume, when provided by candidates. Personal Data is processed to assess whether you meet the requirements for a position with us, based on our legitimate interest.

If we wish to retain your Personal Data for a longer period after the position is filled, we will inform you and request your permission.

Other DataIn addition to customer, supplier/subcontractor, employee, and candidate data, we also process Personal Data from other individuals, such as potential new clients/prospects, industry contacts, and network contacts. This is done through our App, Website, or other channels. The purposes of this processing are related to our business activities, direct marketing, and public relations. The legal grounds for this processing are our legitimate interest, the execution of an agreement, and, in certain cases, your explicit consent.

Specifically, we may use the Personal Data we collect for the following purposes:

To provide you with our newsletter if you subscribe via the Website;

To help you find stores near you if you share your location via the Website;

To provide location-based offers or promotions if you consent to share your location via the App;

To inform you about our products and services (e.g., through push notifications, SMS, emails, and/or other channels) if you subscribe;

To provide our products and services (including features and services of the App) and execute any agreement;

To make automated decisions for pre-personalized offers if you subscribe;

To handle complaints or requests;

To help evaluate, correct, and improve the App, Website, and related products or services;

For direct marketing purposes;

For internal purposes, including business management and filing.

Article 3 – Confidentiality of Your Personal Data

Whenever you provide us with Personal Data, we will process this information in accordance with this privacy policy and legal obligations under the GDPR 2016/679.

We implement reasonable measures and procedures to secure and protect the Personal Data we collect through the App, Website, or electronically. We commit to preventing the unlawful processing of your Personal Data as well as the unintentional loss or deletion of your data.

Access to your Personal Data is limited to individuals who need to know it (e.g., employees, Affiliates, or subcontractors requiring access for the purposes described in Article 2).

Article 4 – How Le Pain Quotidien Collects and Retains Personal Data

Data Collection
We collect your Personal Data in various ways, including but not limited to:

When you send an inquiry via the Website’s contact form;

When you complete the registration form for the App;

When you register for the App through your social media account;

When you provide your location through the Website;

When you make a purchase through the App;

When you use the App and agree to automated decision-making;

When you enter into an (employment) contract with us;

When you contact us via phone, email, or other means outside the App or Website.

We avoid collecting unnecessary Personal Data.

Data Retention
Personal Data will be retained and processed as long as necessary for the purposes described.

Employee and supplier/subcontractor data will be deleted 10 years after the end of the contract, unless required longer due to legal obligations or ongoing disputes.

Client data will be deleted 1 year after the end of the contract with Le Pain Quotidien.

Candidate data will be deleted after the position is filled or 2 years after permission is obtained to inform candidates about future job opportunities.

Other data will not be retained for more than 2 years after the last contact unless explicit consent is given for a longer retention period.

Deleting the App from your device does not remove or anonymize your Personal Data. Contact us if you wish to have your data deleted.

Article 5 – Transfer of Personal Data

As much as possible, the data we collect is stored and processed within the European Economic Area (EEA). However, we may share your data with partners or processors outside the EEA who ensure appropriate security measures according to the EU’s standard contractual clauses.

Article 6 – Data Subject Rights

Under European data protection legislation, you have the following rights. To exercise these rights, you must send a written request along with a copy of your identity card to feedback@lepainquotidien.lu.

We will inform you within one month of receiving the request of the actions taken. This period may be extended by another month, up to a maximum of 3 months, in which case you will be informed of the reasons for the delay within the initial month.

Right of Access
You have the right to request all the Personal Data we hold about you, provided that the access request does not adversely affect the rights of other data subjects.

Right to Rectification
We kindly ask you to help ensure that the Personal Data we hold is as accurate and up-to-date as possible. If you believe that the Personal Data we hold is incorrect or incomplete, please let us know as described above. We will correct or update your Personal Data as soon as possible.

Right to Erasure
In certain circumstances, you have the right to request the deletion of your Personal Data without undue delay. These circumstances include:

When the Personal Data is no longer necessary in relation to the purposes for which it was collected or processed;

When you withdraw your consent for processing based on consent;

When the processing is for direct marketing purposes; and

When the Personal Data has been unlawfully processed.

However, there are some general exclusions from the right to erasure, including where processing is necessary:

For exercising the right of freedom of expression and information;

For compliance with a legal obligation; or

For the establishment, exercise, or defense of legal claims.

Right to Restrict Processing
In the following situations, you have the right to request the restriction of your Personal Data processing:

To contest the accuracy of the Personal Data;

When processing is unlawful, but you oppose the deletion of the Personal Data; or

When you object to processing, pending the verification of that objection.

When processing is restricted on this basis, we may continue to store your Personal Data. However, we will only process it with your explicit consent, for legal claims, to protect the rights of another person, or for reasons of important public interest.

Right to Object
You have the right to object to the processing of your Personal Data under the following circumstances:

When we process your Personal Data for direct marketing purposes (including profiling for such purposes) based on our legitimate interest; and

For reasons related to your particular situation.

Right to Data Portability
If you wish to exercise your right to data portability, we will send your Personal Data in a structured, commonly used, and machine-readable format to a controller of your choice.

Right to Withdraw Consent
You have the right to withdraw your consent for data processing if the processing is based on consent. The withdrawal of consent does not affect the legality of the processing based on consent before its withdrawal.

Right to Lodge a Complaint
In case of any issues concerning your Personal Data, please contact us at feedback@lepainquotidien.lu first.

In the absence of a satisfactory response, you have the right to lodge a complaint with the relevant Data Protection Authority, whose contact details are available on their official website: www.autoriteprotectiondonnees.be.

Article 7 – Third-Party Links

The App and Website may contain links to other websites or applications that we do not control. While we strive to ensure that these links lead to websites or applications with equivalent security and privacy standards, we are not responsible for the protection and privacy of any Personal Data provided to other websites or applications after leaving our App or Website.

We recommend reviewing the privacy statement applicable to the website or application in question before providing your Personal Data.

Article 8 – Changes to the Privacy Policy

We reserve the right to amend this privacy statement at any time by publishing a new version on our App and Website.

We recommend regularly reviewing the App and Website to stay informed about any changes to this privacy statement.

In any case, you will be informed by email of any changes to this privacy statement.

Article 9 – Cookies

Le Pain Quotidien uses “cookies” whenever you visit the website. A “cookie” is a small text, image, or software file containing information stored on your device’s hard drive when you visit a website. Cookies enable Le Pain Quotidien to recognize your device during subsequent visits. They allow Le Pain Quotidien to provide smoother navigation and a personalized service.

For more information, please refer to our cookie policy available on the Website.