The purpose of this personal data protection policy is to specify the methods of collection, use and processing of data communicated by users of the alyscamps.co site operated by SOCIETE ARLESIENNE DE COSMETIQUES (the "Users").
For the purposes of interpretation, terms with a capital letter have the meaning given to them in article 1 of the General Conditions of Sale.
It is possible to visit the Site without providing personal data.
Nevertheless, it will not be possible to buy the Products on the Site and therefore to place an Order without providing personal data.
1. Collection of personal data
Users provide personal data to the Seller as follows:
- the creation of a customer account which involves completing the registration form,
- Orders placed,
2. Purpose of processing
When creating customer accounts and Orders, the Seller, site publisher and data controller, records and processes the data collected in a customer file.
This file allows you to:
- manage orders: payment, invoicing, processing, delivery, choice of trial doses offered;
- manage the customer account;
- carry out marketing operations (loyalty, promotions) and send advertisements by e-mail to Users who have not opposed it or who have accepted it:
on Products similar to those they ordered,
on other Products offered by the Seller.
- transmit the data of Users who have accepted it to the Seller's business partners, to enable them to send them advertising.
The legal basis for the purpose of the processing of personal data is the execution of the contract for the management of Orders and the customer account, in accordance with article 6.1 (b) of the European Regulation on the protection of personal data (“ GDPR”).
Regarding the commercial solicitation by email on products similar to those ordered by Users, the legal basis is the legitimate interest of the company in the promotion of its Products by the Seller to its Customers, in accordance with the provisions of article 6.1 .f GDPR.
Finally, on the legal basis of consent provided for in Article 6.1.a of the GDPR, the personal data collected may be used to send commercial solicitations by email on other products offered by the Seller, and the email addresses -mail collected may be transmitted to business partners.
3. Use of data for commercial prospecting purposes
Any prospecting by e-mail, call or SMS, from the Seller or its business partners, will only be carried out after obtaining the User's consent.
Consent is obtained by checking an acceptance box when creating the customer area.
Even after having ticked this box, the User can modify his choice at any time, by writing to the contacts mentioned in the paragraph “Exercise of the rights of the User”.
Each e-mail and each SMS will provide the possibility for the User to oppose the sending of new prospecting e-mails or SMS.
4. Category of data collected
As part of the sale of its Products on the Site and for the purposes mentioned in the paragraph “Purpose of processing” above, the Seller may collect the following personal data:
- Identity: title, surname, first name, address, delivery address, telephone number, e-mail address, date of birth, internal processing code allowing the identification of the Customer, data relating to registration on opposition lists,
- Data relating to orders: transaction number, details of purchases, amount of purchases, data relating to the payment of invoices (payments, unpaid bills, discounts), return of Products,
- Data relating to the means of payment: bank card number, expiry date of the bank card, visual cryptogram (which is immediately erased),
- Data necessary for carrying out loyalty and prospecting actions: purchase history.
5. Characteristics on the use and collection of personal data
The User is not obliged to fill in all the fields of the customer area registration form or the Order form.
The mandatory nature of the communication of information is indicated by the presence of an asterisk. Failure to communicate this data will result in the impossibility for the Seller to process the User's registration or Order request.
6. Recipients of personal data collected
The Seller's customer and billing services are the recipients of all categories of personal data.
Its subcontractors, responsible for the Delivery of Orders, are recipients of the identity, address and telephone number of Customers.
The email addresses of Users who have accepted it are made available to the Seller's business partners, the regularly updated list of which is as follows:
- La Poste – Colissimo
7. Duration of data retention
The User's personal data is kept and processed for the duration necessary to achieve the purpose pursued and at most for the durations mentioned in this data protection policy:
- for the data necessary for the management of Orders: for the entire duration of the commercial relationship and ten (10) years for accounting obligations;
- for the data necessary to carry out loyalty and prospecting actions: for the entire duration of the commercial relationship and three (3) years from the last purchase;
- for data concerning the lists of opposition to receiving commercial prospecting: three (3) years.
The data relating to the means of payment are not kept by the Seller, they are immediately deleted upon payment of the purchase.
8. User rights in the context of data collection
Each User has rights over the personal data concerning him collected by the Seller in the context of the sale of his Products on the Site as detailed below.
To. Right of access and communication of data
Every User has the right of access to the personal data collected concerning him.
The User may ask the Seller at any time for the communication of data concerning him, subject to being able to prove his identity, in order to preserve the confidentiality of said personal data.
b. Right to rectification and erasure of data
The User may obtain from the Seller the rectification of personal data concerning him which is inaccurate, erroneous, incomplete or obsolete.
The User is also entitled to obtain the erasure of personal data concerning him.
The Seller will rectify or erase the data as soon as possible.
vs. Right of objection
The User may oppose the processing of his personal data either for legitimate reasons, or to obstruct the processing of personal data concerning him for the purposes of commercial prospecting.
d. Right to withdraw consent
The User may withdraw the consent he has given for the processing of his personal data at any time, and in particular when he had consented to his e-mail address being transmitted to the Seller's business partners.
e. Right to restriction of processing
In accordance with article 18 of the GDPR, the User has a right to limit the processing of personal data concerning him under the conditions provided for by the same article.
f. Right to data portability
Under the conditions provided for in Article 20 of the GDPR, the User may receive personal data concerning him from the Seller, in a structured, commonly used and machine-readable format in order to communicate them to another data controller.
9. Exercise of User rights
To exercise the aforementioned rights or for any question on the processing of personal data in the context of the use of the Site, the User may contact the Seller by post at the following address:
ARLESIAN COSMETICS COMPANY
16 Republic Square
or by email at firstname.lastname@example.org
If, after having contacted the Seller, the User considers that his rights have not been respected, he may submit a complaint online to the CNIL.
To. General information and operation
During his first connection to the alyscamps.co site, the User is warned by a banner at the bottom of the screen that information relating to his navigation is likely to be recorded in files called “cookies”.
Cookies are text, image or software files, of limited size, saved on a person's computer, tablet or mobile phone when consulting a website through their computer, tablet or his telephone. Cookies allow the publisher of a website to recognize the person visiting their site.
However, the information collected through cookies is in no way personal data. These include the pages visited by the User, the advertisements on which the latter clicked, the type of browser used and the IP address.
The cookies used by the Seller are intended to allow the User a smooth and optimal navigation.
Cookies are also essential to access certain secure areas.
The different types of cookies that may be used by the Seller are detailed below.
1. Technical cookies
Technical cookies are strictly necessary for the provision of the Seller's service as requested by the User.
These are session ID, authentication, interface customization, and "shopping cart" cookies.
In accordance with the recommendations of the CNIL, these cookies are exempt from the prior collection of the User's consent.
2. Audience measurement cookies
The Seller uses the Google Analytics tool, which deposits audience measurement cookies on the User's terminal.
These cookies make it possible to obtain information on the navigation of Users (number of visits to the Site, pages visited).
They are collected using the IP address of Users.
Audience measurement cookies make it possible to establish traffic analysis statistics and to know, for example, the most visited pages of the Site.
They thus allow the Seller to improve its content by identifying the most popular pages.
By continuing to browse the Site, the User accepts the deposit of audience measurement cookies on his terminal.
3. Sharing cookies
The Site uses sharing buttons on social networks, which allow the User to share elements of the Site with other users of the social networks concerned.
The User must be logged into his account on the social network to be able to share the desired elements by clicking on the share button.
In this case, a third-party cookie will be placed on the User's terminal after obtaining their consent.
Furthermore, when the User is connected to the social network, the sharing buttons will link the pages and content of the Site visited by the User with his account on the social network.
In this case, the protection of the User's personal data will be exclusively covered by the policy of the social network, in this case, Facebook.
4. Targeted or advertising cookies
These cookies collect information on the User's browsing in order to offer him targeted advertising adapted to his centers of interest.
The Seller is also likely to associate the information collected by cookies with the personal data provided by the User when creating his customer account, subject to his choices, in order to directly address targeted advertisements or to display advertisements on the Site that are specifically intended for it.
This type of cookie requires the prior consent of the User.
b. Managing cookie preferences
The User has the option of accepting or refusing the deposit of cookies on his terminal.
Indeed, when the User first connects to the Site, a banner appears, informing him that cookies are likely to be saved on his terminal, as well as the purposes of these cookies and the possibility of oppose these cookies.
It is expressly specified that the continuation of the navigation on the Site implies acceptance by the User of the deposit of cookies on his terminal.
In addition, the refusal to deposit cookies, and in particular technical cookies, on the User's terminal will be likely to alter the operation of the Site and the User's access to his customer account.
Consequently, the Seller cannot under any circumstances be held responsible for any deterioration in navigation on the Site in the event of refusal to deposit the cookies necessary for the operation of the Site by the User.
The User can modify his choice relating to cookies at any time, by configuring his internet browser.
The procedure to follow is different for each internet browser. The User can inquire by clicking on the links below.
For Google Chrome: https://support.google.com/chrome/answer/95647?hl=fr
For Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11
For Mozilla Firefox: https://support.mozilla.org/fr/kb/cookies-informations-sites-annoncent?redirectlocale=fr&redirectslug=G%C3%A9rer+les+cookies
For Opera: https://help.opera.com/en/latest/web-preferences/#cookies
For Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac
For any question or request for additional information concerning the Seller's policy relating to cookies, the User may contact the Seller by e-mail at email@example.com