This policy is intended to answer any questions you may have about how we use the personal data that you provide to us. It applies to processing undertaken specifically as part of the operation of our website (orparfums.com) and our e-commerce business activities.
The company Salon Privé Parfums France (hereinafter “we” or “us”), registered on the Cannes Trade and Company Register under number 484438056, having its registered office at 6, Boulevard de la République, 06400 Cannes, France, is the data controller within the meaning of Regulation (EU) 2016/679 known as the General Data Protection Regulation (or “GDPR”) for the collection and processing of personal data undertaken on this website.
We use the term “personal data” to refer to information or data that identifies you personally, such as your surname, first name, address, telephone numbers or e-mail addresses if you have them, information relating to the means of payment you use, data from monitoring our commercial relationship (purchasing history, communication with our sales department, etc.), as well as data relating to your logins to our site and/or to your user account (IP address, login date and time), and your page-view data.
The relevant legislation also refers to this as “personal data”.
2. Why do we process your personal data
We use your personal data to manage your purchases on our website and enable their delivery, and to communicate with you (including as part of our after-sales service or to respond to your requests to make contact).
Some of this data is then kept for a period of time legally permitted. This protects both you and us in the event of any dispute, for example with any of the delivery services that we use.
Some of the processing, including that using your connexion logs, serves to ensure that our website is kept secure and to measure its audience, including in order to improve its design. We are in fact always endeavoring to make our website a place where navigation is as straightforward and safe as possible.
Our company also has an Instagram account. For more information on the processing there, please see their privacy policies here
3. Legal basis for the processing of your personal data
The personal data that you choose to disclose to us will be processed only for the purposes described in point 2.
The data required to process your orders and deliveries and manage our after-sales service is processed on the legal basis of the contract between us (i.e. our Terms and Conditions). Our keeping of this information for the legal data retention period is fully justified by your and our legitimate interest in protecting our rights in the event of any dispute.
Similarly, our legitimate interest in offering you a secure, high-quality service, meeting your requirements as closely as possible, justifies managing your access to and use of the services available on the website, operating and improving our services and keeping them secure, sending you information about products or services that we believe you would appreciate, compiling statistics on sales and the use of our services, handling your opinions on our products and services, and producing statistics on the use of the service in order to develop new features.
We will conduct some processing to meet various legal and regulatory obligations (accounting requirements…) that constitute our legal basis for that processing.
On the legal basis of your consent, we may place certain cookies on your browser (including advertising cookies) or respond to your requests for contact made on our website.
4. Mandatory and optional data
Some of the processing conducted on this website is based on your consent. You are deemed to have given this consent when you choose to disclose your personal data by filling in your details on our forms or by ticking the checkboxes or radio buttons available to you. You can withdraw your consent at any time.
As part of the sales process for products offered on the website, you will be asked to provide personal information to enable us to meet our obligations (surname, first name, date of birth, business experience, etc.). Mandatory fields, required for us to perform those obligations, will be clearly indicated as such.
5. Data recipients
The personal data you are likely to provide may be viewed by employees of our company, supervisory and similar bodies (including our statutory auditors), and by our data processors strictly in respect of the purposes that we have presented to you.
In this regard, we emphasize that we have strict data security provisions in place with our data processors, in accordance with Article 28 of the GDPR, including stipulations for the security objectives that must be met.
We endeavor to limit data traffic sent outside the European Union. However, a certain number of our service providers (including Google, Shopify, and Instagram) may be the cause of data transfers outside the EU. Data transfers to such service providers are governed, in accordance with the European Parliament’s General Data Protection Regulation (GDPR), by the EU’s standard contractual clauses. In addition, most of these data processors maintain a high level of GDPR compliance having been members of the Privacy Shield before it was invalidated.
6. Retention period
Your personal data will never be kept longer than strictly necessary.
If you are a customer of our company, we keep your personal data for the time necessary to track your relationship with us, which is three (3) years from your last purchase.
However, data providing evidence of a right or a contract, which must be kept to meet legal obligations, will be kept for the period stipulated by current legislation. For example, data providing evidence of your purchases are kept for at least five (5) years from said purchase.
As regards connection data (IP address, login date and time, pages viewed), data is retained for six (6) months at most.
Once your account has been permanently closed, your data will be irreversibly anonymized. It will then be used solely for statistical purposes (to analyze how frequently various service features are used, etc.).
7. Your rights and legal compliance
You have the right to access, correct, and delete data held about you. You can request data portability. You also have the right to object to processing or restrict it. Where the processing is based on consent, you have the right to withdraw that consent at any time.
You can issue instructions on what happens to your personal data after your death (whether it is to be retained, deleted, or disclosed).
To exercise these rights, please contact:
· Postal address: O.R. Parfums Salon Privé, 6 Boulevard de la République, 06 400 Cannes, France
· Or use the email address: firstname.lastname@example.org
If you consider that your rights have not been adequately respected, you are entitled to lodge a complaint with the French Data Protection Authority (CNIL- Commission Nationale de l’Informatique et des Libertés).