GDPR Compliance

Last updated: August 4, 2026

General Data Protection Regulation

Maison Chêne is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Legal basis for processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for us to process your data for specific purposes
• Contract performance: When processing is necessary to fulfill a contract with you or take steps at your request before entering into a contract
• Legitimate interests: When we have a legitimate interest in processing your data, such as improving our services
• Legal obligation: When we must process your data to comply with legal requirements

Your GDPR rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access

You have the right to obtain confirmation as to whether we are processing your personal data and, if so, to access that data along with certain information about how it is being processed.

Right to rectification

You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.

Right to erasure

In certain circumstances, you have the right to request deletion of your personal data without undue delay.

Right to restriction of processing

You have the right to request restriction of processing of your personal data in certain circumstances.

Right to data portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to withdraw consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

Data retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

When we no longer need your personal data, we will securely delete or anonymize it.

Data transfers

Your personal data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your information.

Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Data protection officer

For questions about our GDPR compliance or to exercise your rights, please contact us at:

Email: [email protected]
Address: 27 Rue de la Forge, 69003 Lyon, France

Supervisory authority

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

In France, the supervisory authority is:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, 75007 Paris, France

Updates to this information

We may update this GDPR compliance information from time to time. Please check this page periodically for changes.