Last updated: [10th January 2025]

PRIVACY POLICY

As Data Controller, Hachette Partworks is committed to protecting your personal data.

With this policy, we would like to inform you and answer any questions you may have about the collection and processing of your personal data in accordance with the regulations in force in the UK and the European Union.

Personal data refers to any information relating to a natural person who can be identified directly or indirectly (e.g. surname, first name, identifier, e-mail address, location data, etc.), hereinafter referred to as ‘Personal Data’ or ‘Data’.

This policy applies to your Data collected by Hachette Partworks regardless of the channel and in particular when you visit our website https://hachettepartworks.com/en-en/ and its extensions (collectively the ‘Site’), when you subscribe to our offers by post or when you contact our customer service department by telephone.

Quick links

We recommend that you read this privacy notice in full to ensure you are fully informed. However, if you only want to access a particular section of this privacy notice, then you can click on the relevant link below to jump to that section.

1/ Data Controller
2/ What Data are collected and why?
3/ Data recipients
4/ Legal basis for processing your Data
5/ Data retention period
6/ Security and protection of your Data
7/ Your rights
8/ Data transfer outside the UK
9/ Governing law
10/ Update of the Policy

1/ Data Controller

Your Personal Data is collected by:
Hachette Partworks Limited.
A company registered in England no. 03642341.
With registered office at: 4th Floor, Jordan House, 47 Brunswick Place, London, N1 6E, UK.

Hereinafter “Hachette Partworks” or “Hachette

To ensure compliance with the applicable provisions and in accordance with its legal obligations, Hachette Partworks has appointed a Data Protection Officer (DPO). To contact the DPO, please write to the following email address : dpo@hachettepartworks.co.uk

2/ What Data are collected and why?

2.1 How and why we collect your Personal Data

2.1.1 What Data are collected and how?

In accordance with this policy, we collect your Personal Data directly from you when:
- you register on the Site;
- you fill in a subscription form or make on order in our shop online;
- send us your comments and complaints through any channel (e-mail, post, telephone, text message, WhatsApp message)
- you are in contact with our customer service department;
- you take part in a prize competition;
- you take part in a survey.

Data collected may include:
- identification data such as your title, surname, first name, address, email address, telephone number, confirmation that you are over 18 years of age and your password;
- data linked to payment methods when you place an order.
- data for managing your account: purchase history, payment status, contract number, etc.
- browsing data collected automatically when you visit our Site, such as your IP address, browsing history, browser type and pages visited;

Your Data will only be collected and processed for the purposes you were informed of at the time of collection.

2.1.2 Why we collect and process your data:

- To carry out pre-contractual measures at your request.
- For the management of your orders, and in particular the management of shipments, returns, access to after-sales service, the monitoring of your payments and the recovery of unpaid amounts.
- To enable you to benefit from the services offered on the Site and in particular to manage your account and profile.
- To be able to contact you:
* to send you news, newsletters and recommendations from Hachette Partworks by email, if you have given your consent, in compliance with the rules applicable to each prospecting channel;

- For managing the reminder of abandoned shopping baskets, by e-mail
- To enable you to take part in prize competitions and/or surveys and forums.

- To prevent abuse and fraud associated with each order and, if necessary, to help modulate the conditions under which it is carried out. You have the right to contest this decision by sending a complaint by email or post to Hachette Partworks, which will have 30 days from receipt of your complaint to provide you with a response.
- To carry out statistical analyses and improve the quality of our Site and our products and services.
- To comply with legal and regulatory obligations.
You may at any time change the choices you made when collecting your Data. To find out more, see the ‘Your rights’ section below.

2.2 Cookies

We use cookies on this Site. A cookie is a small text file that is placed on your computer's hard drive, allowing your computer to be recognised by our Site when you visit. This may enable us to collect information about you, but this information will be used in accordance with this charter. This information may relate to you, your preferences or your device, and is mainly used to ensure that the Site functions correctly. If you do not wish to authorise our cookies, you can configure your choices directly on our Site by clicking on the ‘Manage Preferences’ link, but also by configuring your browser. If you do so, certain features of the site may be unavailable or less easy to use. Further information on how we use cookies is available on the cookie management module.
For more information, we invite you to consult the website of the ICO (Information Commissioner’s Office) at the following URL address: https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/cookies-and-similar-technologies/

3/ Data recipients

Your Personal Data may be transferred to the following categories of recipients and only when necessary for the purpose for which it is intended:

• To certain employees and collaborators of Hachette Partworks within the limits of the rights granted to them for the management of the commercial relationship with you;
• To companies in the Hachette Livre group and to technical service providers who supply us with services for processing your data and providing services on the Site, in particular for:
- Secure payment on the Site,
- Delivery of your orders,
- Managing your customer account,
- Managing customer relations,
- Hosting, maintenance and technical development of the Site

• To any judicial or administrative authority upon request where we believe that disclosure is necessary (i) in accordance with applicable law or regulation, (ii) to exercise, establish or defend our legal rights, (iii) to protect your vital interests or those of any other person.

• To a potential or actual purchaser (and its agents and advisors) in connection with a proposed or actual purchase, merger or acquisition of part of our business, provided that we inform the purchaser that it may use your Data only for the purposes disclosed in this Policy.

4/ Legal basis for processing your Data

Our legal basis for collecting and using your Data as described above will depend on the Data concerned and the specific context in which we collect it. However, we will normally only collect your Data where we need the personal information to enter into a contract with you, where the processing is in our legitimate interest and is not overridden by your rights, or where we have your consent.

In some cases, we may also have a legal obligation to collect Data from you. If we ask you to provide Data in order to comply with a legal obligation or to establish contact with you, we will specify this at the appropriate time and tell you whether providing your Data is compulsory or not (as well as the possible consequences if you do not provide your personal information).
Below is a summary of the legal bases and retention periods that we apply to our main data treatments.

5/ Data retention period

Hachette Partworks retains Personal Data no longer than is necessary for the purposes described in article 2 hereof and in compliance with applicable legal and regulatory provisions. At the end of the retention periods determined by Hachette Partworks, the Personal Data will be deleted and anonymised.
Below is a table showing the legal bases and retention periods that we apply to our main data treatments.

INTENDED PURPOSE LEGAL BASIS RETENTION PERIOD IN OPERATING BASE ARCHIVE
Managing customer relations Contract Duration of commercial relationship + 3 years 5 years
Commercial prospecting:
- Sending messages by e-mail from Hachette Partworks
Consent

Legitimate interest
2 years after the last contact / from the last activity of the customer or prospect N/A
Management of abandoned cart reminders by e-mail Contract

Consent
3 years from last connection N/A
Fraud prevention Legitimate interest Maximum of 3 years from registration on an alert list. Reduce to one month in case of debt adjustment. N/A
Request/Response to various requests (contact form, e-mails, etc.) Contract

Legitimate interest
1 year from receipt of request N/A
Request/Response to various requests (contact form, e-mails, etc.) Contract

Legitimate interest
1 year from receipt of request N/A
Request/Response to requests concerning the protection of personal data Contract

Legitimate interest
1 year from receipt of request N/A
Retention of bank account details (IBAN) for subscriptions Contract Data retained for the duration of the contract or until consent is withdrawn N/A
Retention of bank card data for one-off payments Contract Your bank details are not kept by Hachette; we use a secure payment service provider. N/A
Customer survey Contract

Consent
6 months N/A

6/ Security and protection of your Data

The Data collected by Hachette Partworks is kept in a secure environment.
Hachette Partworks takes all appropriate physical, technical and organizational measures to ensure the security and confidentiality of Data to protect it against loss, accidental destruction, alteration and unauthorized access. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information. To process orders and payments, we utilize industry-standard Secure Sockets Layer (SSL) technology to allow for the encryption of potentially sensitive information during transmission.
However, Hachette does not control all the risks associated with the Internet. As such, you visit the Site at your own risk, and Hachette Partworks cannot be held responsible for any security breach that it is unable to remedy. It is essential to safeguard your account and computer against unauthorized access. Please remember to sign out after using a shared computer to ensure your security

7/ Your rights

Hachette Partworks guarantees users that their rights under Data Protection Act 2018 (UK GDPR) (c. 12) and Regulation (EU) no. 2016/679 of 27 April 2016 on the protection of personal data will be respected, and in particular the right for users to decide and control the uses made of their Personal Data.

You have a right of access, a right of rectification, a right to the deletion of the Data concerning you, as well as the right to request the portability of the Data provided.

You have the right to object on legitimate grounds to the processing of your Data, or to request that such processing be restricted.

You also have the right to object at any time and without giving any reason to the processing of your Data for direct marketing purposes, as well as to profiling where this is carried out for the same purpose.

You have the right to give instructions concerning the fate of your Personal Data after your death.

You can register your telephone number, free of charge, in the ‘Do Not Call’ register here : https://www.tpsonline.org.uk/register

You may exercise all your rights electronically by sending your request to: dpo@hachettepartworks.co.uk


We undertake to respect all your rights, but if you consider that they have not been fully respected, you may submit a complaint to the ICO (Information Commissioner's Office), the authority responsible for ensuring compliance with regulations on the protection of personal data : https://ico.org.uk/.

8/ Data transfer outside the UK

Hachette Partworks is headquartered in the UK, with our site servers also located within the UK.

However, Hachette may transfer your data outside the UK. In such cases, we ensure that your data is protected to a standard that complies with the requirements of the UK GDPR. This includes transferring data only to countries or organizations that:

Benefit from an adequacy decision issued by the UK, or;

Have agreed to implement appropriate safeguards as defined under the UK GDPR, such as binding corporate rules or standard contractual clauses (as updated by the European Commission in June 2021).

9/ Governing law

This Policy is governed, interpreted and applied in accordance with the laws of England and Wales.

10/ Update of the Policy

This Privacy and Cookies Policy is applicable from the date it is published online, as indicated in the header.

Hachette Partworks may regularly update this Policy in accordance with legislative and regulatory changes relating to the protection of Personal Data. You will be informed of these updates, which will be binding on you, as soon as they are posted on the Site.