Legal notices

Legal information

This site is published by ST MICHEL BISCUITS.

SAS with capital of 23,534,000 Euros 

Registered office: 2 boulevard de l'Industrie - Contres - 41700 LE CONTROIS EN SOLOGNE
Registered with the BLOIS Trade and Companies - Register under number B 421 019 951

SIRET: 421 019 951 000 19
VAT ID No. FR 70 421 019 951
Phone: 02 54 54 79 79 79 79 
You may contact us by email:

Design, graphic design and production:
1 Rue Lafaurie de Monbadon
33000 Bordeaux

NOVAWAY for St Michel Biscuits SAS
15 rue Jules Vallès
69100 Villeurbanne

Intellectual Property

The entire website constitutes a work for which St Michel Holding is the owner of the copyrights as intended under articles L. 111-1 et seq. of the Intellectual Property Code. 
All elements of graphics, communication campaigns, posters, films, drawings, photographs, images, texts, animated sequences, with or without sound, logos, brands, product names, represented on this website are protected by the Intellectual Property Code. 
The general structure of the site, as well as the texts, images and all the elements that compose it are the exclusive property of St Michel Holding or third parties authorized by St Michel Holding to use them. 
Any exploitation, reproduction, representation, modification, transformation, downloading, adaptation, translation, partial or total, of the site or its components, on any medium whatsoever, without having obtained prior, express and written authorization from St Michel Holding is prohibited and constitutes an offence of infringement that may be prosecuted before the competent courts. 
The data and information present or accessible through this website may under no circumstances be reproduced or used for any purpose other than private viewing by the user directly connected to the site. 

The names "St Michel", "L'Atelier St Michel", the names of our products and, in particular, "Cocottes", "Tronches de Cake", "Doonuts", logos, and slogans, are registered trademarks or are protected by the Intellectual Property Code.

Hypertext links

St Michel cannot be held responsible for external hypertext links set up within the framework of this website and the content of third-party sites to which they refer. 
Establishment of a hypertext link to this site requires prior written authorization from St Michel. If you wish to set up a hypertext link to our site, you must contact St Michel.


St Michel strives to verify the accuracy of the information on the site and reserves the right to update, modify or delete it at any time and without notice. 
St Michel offers no guarantee, express or implied, regarding the content of the site. 
St Michel may interrupt access to the site at any time, notably for technical reasons. 
St Michel cannot be held responsible for any harm resulting directly or indirectly from the use of this website.


We pay the greatest attention to the protection of personal data. 
To view our 'Online Privacy Statement', see below. 
For more information on cookies, click here.


Personal data protection policy

Last updated on 24/09/2019

We, St Michel, are concerned about the protection of personal data and are committed to ensuring the highest level of protection for your personal data in accordance with the applicable legal and regulatory provisions and, in particular, the principles stated in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the GDPR.

This privacy policy applies only to personal data collected on the website (the Site) and does not apply to data collected from other sites or social networks. For more information on the protection of personal data on these sites or social networks, we invite you to consult the protection policies of these sites or networks.

What is personal data?
Personal data is any information that allows a person to be identified: name, postal address, e-mail address, IP address, telephone number...

Who is responsible for processing your personal data?
The party responsible for processing is the company that determines why and how your personal data are used. 
The personal data collected on the website is processed jointly by St Michel Biscuits and St Michel Services. 
These companies are hereafter referred to indiscriminately as "St Michel" or "We".

For any questions regarding the processing of your personal data, you can contact us by:
- Email at the address:
- Postal mail to the postal address: 2 boulevard de l'Industrie - Contres - 41700 LE CONTROIS EN SOLOGNE
- Telephone at the following number: 02 54 79 79 79 79

What personal data is collected and why does St Michel collect it?
In the course of our activities, we may collect your personal data if:

- you have contacted or requested to be contacted by St Michel by telephone, e-mail or by using the online form on the website
- you have visited or used the Site 
- you have consulted, subscribed to and/or used one of our pages on social networks (Facebook, Snapchat, Instagram, Twitter, YouTube channel)
- you have applied to work at St Michel and/or created a personal account at St Michel (recruitment area)
- you or your company are or have been one of our customers or prospects (page reserved for professionals).

We may collect your data from different sources. 
It can be communicated to us:

- by you:
. to create a personal account at St Michel and/or to be contacted by St Michel or by requesting information
. during your exchanges with St Michel (including by letters, fax, telephone calls, SMS, e-mail,...)
. via the forms on the Site
. during your use of the Facebook page or the St Michel YouTube channel

- in the case of professional access to our site (page reserved for professionals), your data may be communicated to us both by you and by another person belonging to your company within the framework of the various forms of contact listed above

- through cookies and other Internet tracking devices used on the Site; we invite you to consult our cookie policy:

Your personal data may also be collected on professional websites and/or publicly accessible applications such as LinkedIn or your website or that of your organization. This includes identification data (last name, first name, business e-mail address, business telephone number, etc.) and data concerning your current employment situation.

We draw your attention to the fact that the collection of certain personal data is mandatory in the following cases:
- For management and processing of contact requests, information (allergens, nutritional information...), complaints, commercial relationship: last name, first name, e-mail address, telephone number, postal address and, when applicable, capacity and/or professional sector. In the event of failure to provide this mandatory information, we will not be able to respond to your request.

- For management and processing of your candidature: last name, first name, e-mail address or postal address or telephone number, diplomas obtained, professional experience, information related to the position for which you are applying. 
If you do not provide this mandatory information, we will not be able to process your candidature.

- For creation of a professional account at St Michel: title, last name, first name, company name, postal address, telephone number (fixed and/or mobile), e-mail address, intra-community VAT number and, if applicable, identifiers and password (for creation of an account on the Site). If you do not provide this mandatory information, we will not be able to create an account for you.

- For management of newsletters and commercial prospecting messages, collection of your e-mail address, and/or your postal address is mandatory. 
If this information is not provided, St Michel will not be able to send you newsletters and/or commercial prospecting messages.

In order to exercise your rights, as mentioned below, we may ask you to provide information or documents to prove your identity or additional information on the nature of your requests. Failure to provide this information may prevent us from responding to your requests. This requirement to provide personal data is regulatory in nature.

The collection of other personal data may be mandatory: all personal data for which collection is mandatory, the contractual or regulatory nature of the obligation to provide it, as well as the consequences of not providing the personal data concerned, will then be brought to your attention directly at the time of collection.

You may also provide personal data when using our pages on social networks (Facebook, Twitter, Instagram) and free text areas available in online forms on We inform you that you should only provide us with adequate and relevant information. You must not write excessive or insulting comments or communicate data considered sensitive under the GDPR (racial or ethnic origin, political, philosophical or religious opinions, trade union membership, data relating to health or sex life, offences, convictions, security measures).

Purposes and legal basis of the processing of personal data
The processing may be based on different legal bases:
- The contract: the processing of personal data is necessary for performance of the contract to which you have consented;
- Consent: you agree to processing of your personal data by express consent (click on acceptance, box to be checked...) and may withdraw your consent at any time;
- Legitimate interest: St Michel has a legitimate commercial interest in processing your data, justified, balanced and which does not violate your privacy. Unless in an exceptional case, you may object to processing at any time based on a legitimate interest by notifying us;
- The law: the processing of your personal data is required by law or regulations.

The table below shows the different purposes that may be pursued when processing your personal data and the legal grounds on which they are based.

Purposes pursued

Legal basis

Management and processing of information and contact requests; 
Management of professional accounts;
Management of exchanges with customers and prospects;
Management of commercial relations;
Management and processing of candidature;

Execution by St Michel, as the case may be:
- of a contract to which the data subject is a party or
- of pre-contractual measures taken at the request of the data subject

- or of St Michel's legitimate interests (exercise of his activities).

Management of subscription to newsletters, commercial prospecting messages
Sending information messages on the life and activities of St Michel (such as greetings and invitations to events)
Management of events organized by St Michel (registration for events)

Legitimate interests of St Michel (promotion of its activities) or consent when newsletters do not concern products or services similar to those already provided by St Michel or when you have never had a contract with St Michel

Complaint management

Legitimate interests of St Michel (defending its rights and interests)

Management of the exercise of your rights (and, in particular, for maintenance of a list for refusal to receive of various mailings)

Compliance with St Michel's legal obligations

Proper functioning and continuous improvement of the Site, its services and functionalities 
Conducting audience measurements on the Site

Consent, collected through the information banner on cookies appearing on the Site

Who are the recipients of my data?
The personal data we collect is intended for the staff of the departments concerned by your request (marketing, recruitment, quality, sales, etc.). 
If your request so requires, your data may also be sent to other subsidiaries of the St Michel group in order to best respond to your request.

In addition, we may disclose data to:
- Our subcontractors (IT service providers, third parties who may store cookies on your device if you consent...), who are bound by an obligation of confidentiality and security as well as other obligations listed in the GDPR;
- Any administrative, judicial or public body or regulatory authority to which we may be required to disclose certain data, upon request and within the limits of what is specified by regulations.

What are your rights?
In accordance with regulations on the protection of personal data, you have, unless there are exceptions:

- the right of access which allows you to view the personal data in our possession that concerns you;
- right of rectification which allows you to request rectification of your personal data when it is inaccurate;
- the right “to be forgotten” which allows you to obtain, on our part, the elimination of your personal data in certain cases;
- the right to limitation of processing which allows you to obtain the limitation of processing in certain cases; 

- right of portability of the data: the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, and/or to ask us to forward such data to another party responsible for processing, controller, when the processing is based on consent or contract and the processing is carried out by automated means;
- the right not to be the subject of an automated individual decision: the right not to be the subject of a decision based exclusively on automatic processing which produces legal effects concerning you or which significantly affects you in a similar way;
- the right of opposition which allows you to obtain, for reasons relating to your particular situation, that St Michel no longer processes your personal data in certain cases;
- the right to object to the processing of your personal data for the purpose of prospecting;
- the right to withdraw your consent to the processing of your personal data at any time when it is based on your consent, without this affecting the lawfulness of the processing carried out before such withdrawal. 
Whether or not these different rights exist depends, in particular, on the legal basis of the processing operation concerned by the request.

These rights are also not without limits and, in some cases, St Michel may refuse your request (for example, for legitimate reasons that are imperative with regard to the right of opposition).

Thus, in some cases, we may reply that we are unable to comply with your request and explain why.

You also have the right, at any time, to define, modify and revoke instructions related to storage, elimination and communication of your personal data after your death in accordance with Article 40-1 of the Data Protection Act. These guidelines may be general or specific. St Michel can only be the custodian of specific instructions concerning your personal data that it processes. The general guidelines may be collected and stored by a trusted third party certified by the Commission Nationale de l'Informatique et des Libertés (hereinafter the "CNIL"). You also have the right to designate a third party to whom your personal data may be disclosed after your death. You agree to inform this third party of your action and of the fact that unambiguous information to identify him will be provided to St Michel, and to provide him with this Privacy Policy.

In compliance with the conditions set by regulations, you can exercise your rights by writing to us at the following e-mail address: or at the following postal address: 2 boulevard de l'Industrie - Contres - 41700 LE CONTROIS EN SOLOGNE.

If we have a reasonable doubt about your identity, we may ask you for additional information or documents to verify your identity (for example, in some cases, a black and white copy of the front of your identification card).

We make every effort to respond to your requests within a reasonable time and, in any event, within the time limits set by regulations in effect.

You also have the right to file a complaint with the CNIL and to bring action against St Michel before the competent courts if you consider that we have violated your rights with regard to personal data.

What are your rights?
We keep the personal data collected only for the time strictly necessary for the purposes described above.

Personal data concerned

Total period of retention 

Data used in connection with contracts established with ST MICHEL, claims management and processing

During the period for which ST MICHEL may be held liable

Data related to your personal account with ST MICHEL

3 years after your last activity on your account

Data collected through cookies

13 months from the date of collection

Data related to guidelines for the disposition of your data after your death

As long as the data covered by the directives are kept

Data related to exercising the right of access, rectification or elimination

5 years from the end of the procedure related to your request

Data related to exercising the right of opposition

6 years from the end of the procedure related to your request

Data related to exercising the right of limited processing

5 years from the end of the processing limitation

Data related to processing candidatures

2 years after the last contact with the candidate if his application has not been selected and he has not requested the destruction of his application

Data used for commercial prospecting
Other data used outside the above-mentioned scenarios: data used to respond to various contact and information requests, in particular via the use of the form on the Site, the Facebook page and the St Michel YouTube channel

3 years following collection by ST MICHEL or the last contact from you

At the end of the periods listed previously, your data will be deleted or made anonymous. 
As an exception, in the event of pre-litigation or litigation, all or some of your data may be kept for a longer period if it is useful for handling the pre-litigation or litigation.

Security of personal data
We have put in place all appropriate measures to ensure the security and confidentiality of your personal data, to prevent it from being damaged or distorted or accessed and misused by unauthorised third parties. 
We implement technical and organisational measures to ensure appropriate security of your personal data, including:
- Management and controlled access to personal data;
- Installation of software to monitor our computer network;
- Installation of antivirus software and firewalls;
- Backup and encryption of sensitive personal data;
- Restricted access to the server by means of an identifier and password;
- Regular evaluation of the integrity of the means of protection;
- Encryption of our computer communications to our partners;
- Protection of current physical documents;
- Storage of old physical files in a secure archive warehouse.

Transfer outside the European Union
We may rely on partners or service providers to whom we need to transfer all or part of the data we collect and process. The servers of some of these actors are located outside the European Union and, thus, your data is then transferred outside the European Union. 
We ensure that these transfers of personal data outside the European Union are done in accordance with our Privacy Policy. When the State of destination of personal data that is not a member of the European Union has not been officially recognised as offering an adequate level of protection by the European Commission, we agree to provide appropriate guarantees to protect your personal data, notably by using standard contractual clauses approved by the European Commission. 
We also ensure that you always have enforceable rights and effective remedies. 
The transfers that may occur and the precautions taken are described below.

Entity: Google Analytics

Data destination countries: United States

Protection implemented: Privacy Shield (

Entity: Partners operating outside the European Economic Area (if necessary and with your approval)
Country of data destination: The country of destination varies depending on the case

Protection implemented: The protection measure depends on the country concerned and it is checked whether such a transfer is foreseen in the context of the case.

Modification of the Privacy Policy
We reserve the right to make any changes to our cookie policy at any time. 
We kindly ask that you visit this page from time to time to review any information that may be modified or added.


Cookie policy

We have implemented this Cookie Policy for visitors to our websites, including and, in accordance with applicable laws and regulations, including the principles set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the so-called GDPR.

What are cookies?
These are small text files that are placed on your computer by the websites you visit. 
With your agreement, they necessarily record information related to the browsing done with your terminal (computer, PC, tablet, smartphone, etc.) on the website visited. The maximum period of validity of your consent is 13 months. 
Only the issuer of the cookie may read or modify the information contained therein.

Why do we use cookies on our website?
When you visit our website, we may place various cookies on your device to recognize your browser during the validity period of the cookie in question. 
Under no circumstances will these cookies be able to identify you.

By obtaining information about the use of our website (number of visitors, use of the different areas of the website and any other useful links, useful functionality) or about your computer (IP address, operating system, browser type), these cookies may also allow us to:

establish statistics and volumes of visits and use of the various elements composing our site, allowing us to improve the interest of our sections and the ergonomics of our site;

adapt the presentation of our site to the display preferences of your device (language used, display resolution, operating system used, etc.);

implement security measures, for example when you are asked to log back into your account after a certain period of time;

When you visit a page on the site or a site of the St Michel group that requires identification such as the site or the "Join us" section of this site, cookies also allow us to:

store information relating to a form you have completed on our site (registration or access to your account) or to products, services or information you have chosen on our site (content of your shopping cart, personalization service, etc.);

facilitate your access to reserved and personal areas of our site, such as your Client Account, using identifiers or data that you may have previously entrusted to us;

customize the website based on your interests and ensure that the content of the site is presented to you in the most relevant way possible;

When you have provided us with personal data about youself, including your electronic contact details, when you register on our site, enter a contact form or access your account on, we may combine browser information about your device, processed by the cookies we issue, with your personal data to send you, for example, electronic surveys or display personalized ads on your device that are specifically intended for you and which may be of personal interest to you.

What types of cookies are used on our website?
Analytical audience measurement cookies (or statistics) that allow us to analyze what is happening on our site in order to improve its performance and the way we present our content to you. In particular, they measure your navigation (the most visited pages, the exit pages of our site, the duration of your visit...). 
We use Google Analytics to collect this information. 
It is only processed in a way that does not personally identify Internet users. 
We invite you to view the management of Google Analytics cookie on the Google page devoted to this subject: 
You can choose to decline these statistical cookies.

Targeting / advertising cookies

These cookies, which may be set up by third parties, collect information about how you browse. 
Their purpose is to provide you with advertising content that may be of interest to you, which may correspond to the interests deduced from the previous browsing sessions on the device concerned by these cookies.

You can choose to decline these advertising cookies. 
Refusal of these cookies does not result in termination of advertising on our site or on the Internet. 
This only has the effect of submitting advertisements to you that are unrelated to your interests.

Social network cookies
Our website has a link to our pages on social networks, including Instagram, Twitter, Facebook, Snapchat and uses plug-ins provided by these networks generated by the sharing buttons of these networks (buttons "share", “like”...).

Social networks may identify you through these buttons, even if you did not use them when you visited our site. 
When you visit a page on our website that contains plugins, your browser establishes a direct connection to social network servers.

These application buttons may allow the relevant social network to track your browsing on our site: 
if your social network account is enabled on your device (you are connected) while you are browsing our site, the application buttons are able to identify you, even if you do not use them when you visit our website.

In order for the social network not to identify you or link the information collected through our website to your account, you must log out of the social network before visiting our website.

We have no control over the process used by social networks to collect information about your browsing on our site and associated with the personal data they hold. 
You may view the privacy policies of these networks to learn about the purposes, mainly advertising, for which they may use the information they may collect through these buttons.

How to manage your choices regarding cookies?
Cookies that are strictly necessary for the providing a service expressly requested by the user, such as, for example, those necessary for proper functioning of our website, do not require explicit consent from the Internet user. 
You can block them but use of the website will be affected.

You must give your consent to place a statistical, targeting or social network cookie on your device. 
You can choose to accept or reject these cookies and have the possibility, at any time, to change this setting. 
Please note that refusing to accept cookies may cause problems with use of the website or deprive you of certain features, such as changing language and display settings or the country from which your device appears to be connected to the Internet and which no longer matches your preferences.

You can manage / set your cookies using the following tools:

Do not track
If you do not want us to collect information from you, you can use the "do not track" ("DNT")
header of your browser to let us know that you do not want to be tracked when you visit our website.

To enable this navigation option, the procedure is as follows:
- In Google Chrome: 

In the 
menu, click on Settings. 
Scroll down and click Show Advanced Settings

In the Privacy section, check the Send a request option "Prohibit tracking" while browsing. 
Click on OK in the window that opens to confirm your choice.

- In Internet Explorer: In the
menu, click on Internet Options; In the
window that opens, click on the Advanced tab and scroll down to check the option Send Do Not Track
requests to the sites you visit in Internet Explorer. 
Confirm your choice by clicking on Ok.

- In Firefox: In the 
menu, click on Options;
Go to the Privacy section under Tracking and tick Indicate to sites that I do not want to be tracked.

- On Opera: 
Open the Customize and Control Opera
menu and click Settings;
Open the Privacy and Security section and check Send a "Prohibit Tracking" request with your browser traffic. 
Click on Ok to confirm your choice.

The choices offered by your browser
You can configure your browser so that cookies are either stored on your device or rejected, either systematically or according to their origin.

Your browser can also be configured so that acceptance or rejection of cookies is offered on an ad hoc basis, i.e. before a cookie is likely to be stored on your device.

You can, at any time, change the settings applicable to cookies. 
Since the configuration of each browser is different, the links below show you the procedure to follow for:
- Internet Explorer: 

Mozilla Firefox: 


By default, most Internet browsers are set to automatically accept cookies.

This site, proposed by digital advertising professionals grouped within the European association EDAA (European Digital Advertising Alliance), is managed in France by the Interactive Advertising Bureau France.

It allows you to find out which companies, working in the advertising field, are registered on this platform and which offer the possibility of refusing or accepting the cookies they use to personalise ads that may be displayed on the Internet user's terminal:

This European platform is a centralised interface that allows you to express your refusal or acceptance of cookies.

Please note: this procedure will not prevent advertisements from being displayed on the websites you visit. It will only block technologies that allow ads to be adapted to your interests.

The "Flash"© cookies of the "Adobe Flash Player"™
"Adobe Flash Player" ™ is a computer application that allows the rapid development of dynamic content using the "Flash" computer language. 
Flash (and similar applications) stores the settings, preferences and use of this content using a technology similar to cookies.

"Adobe Flash Player ™ manages this information and your choices via an interface different from that provided by your browser. 
Since your device may be able to view content developed using Flash, we invite you to access your Flash cookie management tools directly from

In case of shared use of the terminal
If you use different computers or devices, if your device has multiple browsers, or if your device is used by multiple people, make sure that each of your browsers is configured according to your cookie preferences.

In such cases, we cannot be certain that the services and advertisements intended for your terminal correspond to your own use of that terminal and not that of another user of that terminal.

What is the purpose of cookies accompanying our advertising content distributed by third parties?
When you access a site that contains advertising space that displays one of our advertisements, it may contain a cookie. 
This cookie may, if you accept it, be stored on your device and, thus, allow us to recognize your browser during the validity period of the cookie concerned, calculate the amounts due to actors in the advertising distribution chain (communication agency, advertising agency, distribution site/support) and compile statistics.

Updating the Cookie Policy
We reserve the right to make any changes to our cookie policy at any time. 
We kindly ask that you visit this page from time to time to review any information that may be modified or added.