The General Data Protection Regulation (GDPR) has been the European framework for the processing and circulation of personal data since May 2018. The protection of personal data is also governed by the amended French Data Protection Act No. 78-17 of January 6, 1978. This personal data protection policy informs you about how your personal data is processed in compliance with the GDPR and the French Data Protection Act.
TO WHOM IS YOUR PERSONAL DATA DISCLOSED?
Your personal data is processed by ,
Your personal data is transmitted to the employees of responsible for site administration and order management, as well as to subcontractors contractually linked to the data controller, who are AttrapTemps, to whom calls upon for the provision of its services within the framework of the purposes mentioned below, for example for the management, execution, processing, payment, and logistics of orders as well as for marketing operations. Your data is not transmitted to our commercial partners without you having been informed beforehand and without having obtained your prior consent.
WHY DO WE NEED TO PROCESS YOUR PERSONAL DATA?
Your personal data is processed by for the following purposes:
- Manage orders, payment, and delivery of products offered on the site.
- You create your customer account on our site.
- Allow you access and use of our site, with the best possible experience and quality online navigation.
- Process your requests for information, complaints, or inquiries, and contact you to respond to them.
- Process your requests for discount vouchers, valid on our products, which we make available for our site.
- Manage the relationship between you and : by handling the management of your orders, your participation in our contests, raffles, promotional activities, and any other requests.
- Provide you with personalized content and services, based on your browsing history, preferences, and interests.
- To gather your feedback on our products, and better understand and measure your points of interest and consumer desires in order to improve our digital platforms (website, social networks), our communication methods, and/or develop new products and services.
- Develop and improve our products, services, communication methods, and the functionality of our websites and services.
Ensures that only data strictly necessary for the purpose for which they are processed is collected and processed.
This processing is based on your consent. You can withdraw your consent in accordance with your right of withdrawal as described below.
WHAT PERSONAL DATA IS COLLECTED?
We collect and process in particular your first name, last name, address, email address, password, phone number, IP address, connection data, browsing data, order history, preferences and interests, products viewed, delivery incidents, and complaints. Mandatory fields are indicated by an asterisk during collection.
HOW LONG IS YOUR DATA RETAINED?
Data necessary for order management and billing are retained for the entire duration of the business relationship and for ten (10) years in accordance with accounting obligations.
Data used for identification and targeting surveys (email, profile) are retained until unsubscribe, after which they will be permanently deleted. However, if your account is inactive for a period of two (2) years, you will be informed by and if you do not respond within the communicated timeframe , your data will be deleted.
Responses to surveys conducted by are retained for a period of 3 years, after which these data are deleted. However, these retention periods may be extended or shortened if:
- You exercise, under the conditions provided below, one of the rights recognized to you;
- A longer retention period is authorized or required under a legal or regulatory provision or to safeguard our rights.
Data relating to payment methods are not retained by . They are collected during the transaction and are immediately deleted once the purchase is settled.
WHAT ARE YOUR RIGHTS?
You have the following rights:
- Of a right of access, which allows you to obtain:
- Confirmation that data concerning you is or is not being processed;
- Communication of a copy of all personal data held by the data controller.
This right applies to all data, whether or not it is being processed by the data controllers.
- Of a right to request the portability of certain data: this allows you to retrieve your personal data in a structured, commonly used, and machine-readable format. This applies only to data actively provided, for example, by filling out a form or responding to a survey, and which are processed automatically.
- Of a right to withdraw consent: Withdrawing your consent to the processing of your personal data, given during your registration on the platform, results in your immediate unsubscribe from the platform. You will therefore no longer have access to the platform, and all your personal data will be immediately deleted.
- Of a right to rectification: This allows you to correct information about you when it is outdated or incorrect. It also allows you to complete incomplete information about you.
- Of a right to erasure: This allows you to obtain the deletion of your personal data, subject to legal retention periods. It may apply particularly in cases where your data is no longer necessary for processing.
- Of a right to restriction: This allows you to limit the processing of your data in the following cases:
- In case of unlawful use of your data;
- If you contest the accuracy of your data;
- If it is necessary for you to have the data to verify, exercise, or defend your rights.
You can set general guidelines with a trusted third party, or specific ones with the data controller, regarding the retention, deletion, and disclosure of your personal data after your death. These guidelines can be modified or revoked at any time. We advise you to contact the Data Protection Officer for this purpose, whose contact details are provided below.
If after contacting us, you believe that your rights regarding the protection of personal data are not being respected, you have the option to refer the matter to the Commission Nationale de l’Informatique et des Libertés (CNIL). The contact details of the CNIL are available at the following address: https://cnil.fr/
HOW TO CONTACT THE DATA PROTECTION OFFICER?
For any additional information, you can contact the Data Protection Officer at the following address:
- –
In support of your request, you will be asked to provide proof of your identity.
They will no longer be subject to active processing and cannot be modified during the exercise of this right. For more details on your rights, you can contact the Data Protection Officer whose contact details are provided below.
SECURITY OF YOUR DATA
Implements appropriate technical and organizational measures to ensure the security of your data in accordance with applicable regulations. In this context, it takes the necessary precautions and measures against any unauthorized access and use of data, accidental loss or theft of data, destruction or alteration of data, and in general, any damage that may affect this data.