Data protection policy

Norohy, brand of Valrhona SAS company, headquartered at 14 Avenue du Président Roosevelt 26600 in Tain L’Hermitage, France specializes in the food industry.

Norohy, brand of Valrhona SAS company respects your privacy and is committed to processing your personal data fairly and transparently in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).

Please read the following carefully to understand our policy and practices regarding your personal data and how we process it.

Norohy, société Valrhona SAS, acts as data controller for the processing of personal data referred to in this document, hereinafter referred to as “the Data Controller” or “we”.
The Data Controller has appointed a person to be responsible for data protection policy, who can be contacted at the following address

– At the following e-mail address: scvalrhona@valrhona.fr ;
– Using the contact form: contact us;
– By post to the following address:
VALRHONA – Customer Service – 315 allée du Bergeron
26600 MERCUROL VEAUNES, FRANCE
Proving your identity by any means. In addition, you must clearly indicate your surname(s) and first name(s) and the address to which you would like the reply to be sent.

The Data Protection Officer can be contacted at the following address: dpo@savencia.com

We collect and process the following categories of personal data in connection with the processing of personal data, the purposes of which are presented to you:

Data marked with an asterisk in our forms must be provided. Otherwise, the associated service cannot be provided.

Norohy, a Valrhona SAS company, is committed to processing your personal data in a fair and transparent manner. To this end, we take care to inform you of each processing operation we carry out by means of information notices at the bottom of each collection form. Your personal data is collected fairly, without any processing taking place without your knowledge or prior information. We undertake to process your personal data for specific purposes: each data processing carried out pursues a legitimate, determined and explicit purpose. We ensure that your data is kept up to date, and implement procedures to enable the deletion or rectification of inaccurate data.

The purposes, legal bases and retention periods implemented by the Data Controller are set out below. We will retain your personal data in accordance with a retention policy set so that data is retained for a period proportionate to the purpose for which it was collected, except where laws and regulations impose a different retention period. Accordingly, we organize our policy as follows:

Data in interim storage may only be consulted
on a one-off, reasoned basis by persons specifically authorized to do so.

The personal data we collect, as well as those collected subsequently, are intended for us in our capacity as Data Controller. We ensure that only authorized persons have access to this data. Our subcontractors / service providers may receive this data in order to carry out the services we entrust to them. When we have recourse to a service provider, we only communicate personal data to them after having obtained a commitment and guarantees from them regarding their ability to meet these security and confidentiality requirements. Norohy, a Valrhona SAS company, concludes contracts with its subcontractors, in compliance with its legal and regulatory obligations, which precisely define the terms and conditions of data processing by the latter, in accordance with regulations on the protection of personal data. Your personal data may be combined, pooled or shared between all the parent, sister and subsidiary entities of the Data Controller. It may be communicated to these entities for the purposes set out in this data protection policy. These operations are carried out on the basis of instruments that comply with the applicable regulations and are capable of ensuring the protection and respect of your rights.

As part of the services we offer, we transfer personal data to recipients located in the following countries:

– United States (Google Analytics cookies);

Each of these transfers is governed by legal instruments that comply with the applicable legal framework.

We attach particular importance to the security of personal data.
Valrhona has put in place technical and organizational measures adapted to the degree of sensitivity of personal data, with a view to ensuring their integrity and confidentiality and protecting them against any malicious intrusion, loss, alteration or disclosure to unauthorized third parties. However, despite our best efforts, no security measure can protect against all risks of misappropriation or piracy, for which we cannot be held responsible as data controller. In the event of a personal data breach, we undertake to notify the CNIL in accordance with current regulations on the protection of personal data. In the event of a data breach presenting a high risk to your rights and freedoms, we will inform you as soon as possible, in accordance with the conditions laid down in current regulations on the protection of personal data.

Norohy, brand of Valrhona SAS company, as data controller, is particularly concerned about respecting the rights you are granted in the context of the data processing it implements.
a. Your right to information

You acknowledge that this data protection policy informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared, and of the possibility of data being transferred to a third country or to an international organization. In addition to this information, and with the aim of guaranteeing fair and transparent processing of your data, you declare that you have received further information concerning:
– the length of time your personal data will be kept;
– the existence of rights that are recognized for your benefit and how to exercise them. If we decide to process data for purposes other than those indicated, you will be provided with all the information relating to these new purposes.

b. Your right of access

By exercising this right, you have confirmation that your personal data is or is not being processed, and where it is, you have the right to request a copy of your data and information concerning: – the purposes of the processing; – the categories of personal data concerned; – the recipients or categories of recipients and, where applicable, if such communications are to be made, the international organizations to which the personal data has been or will be communicated, in particular recipients established in third countries; – where possible, the intended retention period of the personal data or, where this is not possible, the criteria used to determine this period; – the existence of the right to ask the data controller to rectify or erase your personal data, the right to request a restriction on the processing of your personal data, the right to object to such processing; – the right to lodge a complaint with a supervisory authority; – the existence of automated decision-making, including profiling, and in the latter case, useful information concerning the underlying logic, as well as the significance and anticipated consequences of such processing for the data subjects. You may request that your personal data be corrected or supplemented if it is inaccurate, incomplete, ambiguous or out of date.

c. Your right to rectify your data

You may ask us to rectify or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.

d. Your right to erasure

i. General case

You may ask us to delete your personal data in the cases provided for by legislation and regulations. Please note that the right to erasure of data is not a general right and can only be exercised if one of the grounds provided for in the applicable regulations is present.

ii. Special case of contests

Requests received during the contest period will be assessed according to the contest rules.

e. Your right to limit data processing

You may request the restriction of the processing of your personal data in the cases provided for by legislation and regulations.

f. Your right to object

You have the right to object at any time, for reasons relating to your particular situation, to the processing of your personal data for which the legal basis is the legitimate interest pursued by the data controller.

g. Your right to portability

You have the right to the portability of your personal data. Please note that this is not a general right. Not all data from all processing operations is portable, and this right only applies to automated processing operations, to the exclusion of manual or paper processing. This right is limited to processing for which the legal basis is your consent or the performance of pre-contractual measures or a contract.

h. Votre droit de retirer votre consentement

Where the data processing we carry out is based on your consent, you may withdraw it at any time. We will then cease to process your personal data without affecting any previous operations for which you have given your consent.

i. Your right to define post-mortem directives

You also have the possibility of defining specific directives relating to the conservation, deletion and communication of your personal data after your death according to the methods defined below. These special instructions concern only the processing carried out by us and will be limited to this scope. You also have the right, when this person has been designated by the executive authority, to define general directives for the same purposes.

All the rights listed above may be exercised:

– At the following e-mail address: scvalrhona@valrhona.fr ;
– Using the contact form: contact us
– By post sent to the following address:
VALRHONA – Customer Service – 315 allée du Bergeron
26600 MERCUROL VEAUNES, FRANCE
Proving your identity by any means. In addition, you must clearly indicate your surname(s) and first name(s) and the address to which you would like the reply to be sent.

In principle, you can exercise all your rights free of charge. However, with regard to the right of access, you may be asked to pay a reasonable fee based on administrative costs for any copy of the data you request.

With regard to the right to information, the Data Controller will not be obliged to respond if you already have the information you are requesting.

The Data Controller will inform you if it is unable to comply with your request within one month of receiving it. If necessary, this period may be extended by a further two months, in which case you will be informed and given the reasons.

These rights are not absolute and are subject to various conditions under :
– applicable local data protection or privacy laws; and
– laws and regulations applicable to you.

The Data Protection Officer can be contacted at the following address: dpo@savencia.com

If necessary, you have the right to lodge a complaint with the Commission nationale de l’informatique et des libertés (3 place de Fontenoy, 75007 Paris or https://www.cnil.fr/fr/plaintes) or to take legal action.

The present Data Protection Policy may be modified, particularly in the event of changes to the services offered by Valrhona on the Site. We therefore recommend that you consult this policy each time you access the site.