Privacy Policy
PRIVACY POLICY OF THE WEBSITE: Maison Damas
ARTICLE 1: PREAMBLE
This privacy policy applies to the website: Maison Damas.
The purpose of this privacy policy is to inform users of the website: maison-damas.com
How their personal data is collected and processed. Personal data is any data that can identify a user. This includes, in particular, first and last name, age, postal address, email address, the user's location, or even their IP address;
- What rights users have regarding this data;
- Who is responsible for processing the personal data collected and processed;
- To whom this data is transmitted;
- Where applicable, the site's policy regarding "cookies" files.
This privacy policy supplements the legal notice and the General Terms of Use that users can consult at the following address: maison-damas.com
ARTICLE 2: GENERAL PRINCIPLES REGARDING DATA COLLECTION AND PROCESSING
In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of users' data on the site comply with the following principles:
- Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data are collected, the user will be informed that their data is being collected, and for what reasons it is being collected;
- Specified purposes: data collection and processing are carried out to meet one or more objectives determined in these general terms of use;
- Data minimization: only data necessary for the proper execution of the purposes pursued by the site are collected;
- Limited data retention: data are kept for a limited period, of which the user is informed. When this information cannot be provided, the user is informed of the criteria used to determine the retention period;
- Integrity and confidentiality of collected and processed data: the data controller undertakes to ensure the integrity and confidentiality of the collected data.
In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they meet at least one of the conditions listed below:
- The user has expressly consented to the processing;
- The processing is necessary for the proper performance of a contract;
- The processing is required by a legal obligation;
- The processing is justified by a necessity linked to the safeguarding of the vital interests of the data subject or of another natural person;
- The processing may be justified by a necessity linked to the performance of a task carried out in the public interest or in the exercise of official authority;
- The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE COURSE OF BROWSING THE SITE DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION
The personal data collected on the Maison Damas site are as follows: first names, postal addresses, email addresses, bank card details. These data are collected when the user carries out one of the following operations on the site: placing an order, creating a customer account. The controller will store all collected data in the site’s IT systems and under reasonable security conditions for a period of: 3 years for cookie data and 5 years for customer accounts. The collection and processing of data serve the following purposes: order processing, parcel shipping, and customer satisfaction surveys after purchase. The data processing carried out is based on the following legal basis: user consent
TRANSFER OF DATA TO THIRD PARTIES
Data may be transferred to the third party or parties listed below: Stripe to ensure payment security, PayPal to ensure payment security, and carriers to ensure delivery. In order to offer you Klarna payment options, we may be required to transfer your personal data, including your contact details and order details, to Klarna so that Klarna can assess whether you meet the required conditions to benefit from them and tailor these options to your needs. Your transferred personal data will be processed in accordance with Klarna’s privacy policy
1 - DATA HOSTING
The Maison Damas site is hosted by: 1&1IONOS, whose headquarters is located at the following address: 7 Pl. de la Gare, 57200 Sarreguemines. The host can be contacted at the following phone number: +33 970 808 911. The data collected and processed by the site are hosted and processed exclusively in France.
ARTICLE 4: DATA CONTROLLER
1 - THE DATA CONTROLLER
The controller of personal data is: Romain Laval. He can be contacted as follows: The controller can be contacted by phone Monday to Friday from 9:30 a.m. to 12:30 p.m. or from 2:00 p.m. to 7:00 p.m. at the following number: +33 5 36 09 52 38. The data controller is responsible for determining the purposes and means used for the processing of personal data.
2 - OBLIGATIONS OF THE DATA CONTROLLER
The controller undertakes to protect the personal data collected, not to disclose it to third parties without the user having been informed, and to respect the purposes for which such data was collected. The site has an SSL certificate to ensure that the information and data transfers passing through the site are secure. An SSL ("Secure Socket Layer") certificate is intended to secure the data exchanged between the user and the site. In addition, the data controller undertakes to notify the user in the event of rectification or deletion of the data, unless this involves disproportionate formalities, costs, and steps for them. In the event that the integrity, confidentiality, or security of the user's personal data is compromised, the controller undertakes to inform the user by any means.
ARTICLE 5: USER RIGHTS
In accordance with the regulations concerning the processing of personal data, the user has the rights listed below. In order for the data controller to comply with their request, the user is required to provide: their first and last name and email address, and, if applicable, their account number or personal area or subscriber number. The data controller is required to respond to the user within a maximum of 30 (thirty) days.
- OVERVIEW OF THE USER'S RIGHTS REGARDING DATA COLLECTION AND PROCESSING
1 - Right of access, rectification, and erasure
The user may view, update, modify, or request the deletion of data concerning them, by following the procedure set out below: The user must send an email to customer service and request the deletion of their data. The processing time is generally 7 business days. If they have one, the user has the right to request the deletion of their personal area by following the procedure below: The user must send an email to customer service specifying their request. The processing time is generally 7 business days.
2 - Right to data portability
The user has the right to request the portability of their personal data held by the site to another site, in accordance with the procedure below: the user must specify their request to customer service.
3 - Right to restriction of and objection to data processing
The user has the right to request the restriction of, or to object to, the processing of their data by the site, and the site may not refuse, unless it demonstrates the existence of legitimate and compelling grounds that may override the interests and rights and freedoms of the user. To request the restriction of the processing of their data or to object to the processing of their data, the user must follow the procedure below: the user must specify their request to customer service.
4 - Right not to be subject to a decision based exclusively on automated processing
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on automated processing if the decision produces legal effects concerning them, or affects them in a similarly significant way.
5 - Right to determine the fate of data after death
The user is reminded that they may arrange what should become of their collected and processed data if they die, in accordance with Law No. 2016-1321 of October 7, 2016.
6- Right to refer the matter to the competent supervisory authority
If the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if they believe that one of the rights listed above has been violated, they are entitled to refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.
ARTICLE 6: USE OF "COOKIES" FILES
The site may use "cookies" technology. A "cookie" is a small file (less than 4 KB) stored by the site on the user's hard drive, containing information relating to the user's browsing habits. These files allow it to process traffic statistics and information, facilitate navigation, and improve the service for the user's comfort. For the use of "cookies" involving the storage and analysis of personal data, the user's consent is necessarily requested. This user's consent is considered valid for a maximum period of 6 (six) months. At the end of this period, the site will again ask the user's permission to store "cookies" files on their hard drive.
1- User opposition to the use of "cookies" files by the site
Non-essential cookies necessary for the operation of the site are only placed on the user’s device after obtaining their consent. The user may withdraw consent at any time, as follows: the user may choose the option: continue without accepting. More generally, the user is informed that they may object to the storage of these "cookies" by configuring their browser software. For information, the user can find the steps to follow in order to configure their browser software to object to the storage of "cookies" files at the following addresses:
- Chrome: https://support.google.com/accounts/answer/61416?hl=fr
- Firefox: https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences
- Safari: http://www.apple.com/legal/privacy/fr-ww/
- Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
- Opera: http://www.opera.com/help/tutorials/security/cookies/
If the user decides to disable "cookies" files, they will still be able to continue browsing the site. However, any malfunction of the site caused by this action cannot be considered the responsibility of the site publisher.
2 - Description of the "cookies" files used by the site
The site publisher draws the user's attention to the fact that the following cookies are used during their browsing: cookie bot, google analytics
By browsing the site, the user is informed that third-party "cookies" files may be stored. These include in particular the following third parties: Paypal, mondial relay, klarna, Facebook, instagram. In addition, the site includes social media buttons, allowing the user to share their activity on the site. "Cookies" files from these social networks may therefore be stored on the user's computer when they use these features. The user is informed that these sites have their own privacy policies and terms of use that may differ from those of the site. The site publisher invites users to consult the privacy policies and terms of use of these sites.
ARTICLE 7: CONDITIONS FOR CHANGING THE PRIVACY POLICY
This privacy policy may be consulted at any time at the following address: https://maison-damas.com/politique-confidentialite
The site publisher reserves the right to modify it in order to ensure compliance with applicable law. Therefore, the user is invited to regularly consult this privacy policy to stay informed of the latest changes made to it.
The user is informed that the latest update to this privacy policy was made on: 01/11/2021.
ARTICLE 8: USER ACCEPTANCE OF THE PRIVACY POLICY
By browsing the site, the user acknowledges having read and understood this privacy policy and accepts its terms, particularly with regard to the collection and processing of their personal data, as well as the use of "cookies" files.