Privacy Notice – Protection of personal data
RUBECK SARL
Limited liability company (single shareholder company) with share capital of €100
Registered under number 899 526 040 with the Paris Trade and Companies Register
Having its registered office at 229 Rue Saint-Honoré, 75001 Paris 1
( hereinafter referred to as “the Professional ”)
As part of visits to its Website and Orders placed, the Professional is required to collect personal and confidential information from Customers of its website.
The processing of personal data is justified by different legal bases depending on the use that is made of the personal data.
Among the applicable legal bases:
- The contract: the processing of personal data is necessary for the performance of the contract agreed to.
- Consent: acceptance of the processing of personal data by means of express consent (check box, click, etc.).
- Legitimate interest: the Professional has a commercial interest in processing the data which is justified, balanced and does not infringe on privacy.
- The law: the processing of personal data is made mandatory by a legal text.
This collection is carried out with the informed consent of the Users expressed by reading this notice, by voluntarily checking the box relating to confirmation of reading of said notice and by the voluntary and unilateral step of ordering products on the Website.
The processing of data thus carried out by the Professional aims to: Order and customer relationship management, payment of orders, personalization of services and messages sent to the Customer, personalization of online advertising, Site security, customer knowledge and Site statistics and performance.
In this context, the Professional ensures that the collection and processing of customer data respects the following principles:
- Legality, loyalty and transparency: data may only be collected and processed with either the consent of the customer who owns the data, or within the strict framework of the execution of the service requested by the customer who owns the data.
- Limited purposes: the collection and processing of data is carried out to meet one or more objectives determined in this privacy notice;
- Minimization of data collection and processing: only data necessary for the proper execution of the objectives pursued by the Professional are collected;
- Integrity and confidentiality of data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
Data Processing Manager:
RUBECK SARL
Limited liability company (single shareholder company) with share capital of €100
Registered under number 899 526 040 with the Paris Trade and Companies Register
Having its registered office at 229 Rue Saint-Honoré, 75001 Paris 1
contact@innovboutique.fr
Information collected
In general, the Professional collects the following information directly from Clients:
name, first name, address, email address, password, telephone number, IP address, connection data and browsing data, order history, preferences and interests, products viewed, delivery incidents, complaints.
In certain cases, the Professional may collect location data.
The mandatory nature of the data is indicated during collection by an asterisk. Some data is collected automatically due to the customer's actions on the site, other information may be transmitted by partners.
Carrying out the collection
The Professional collects the information provided by the Client on the occasion of:
- From the creation of a customer account
- From placing an order
- Browsing the Site
- Exchanges with customer service
- From consulting advertisements
Collection support
The information collected by the Professional is stored on a computer system and in a dematerialized manner.
Duration of storage of personal data
The company only keeps data for the duration necessary for the operations for which they were collected and in compliance with the regulations in force.
According to the table below:
|
Purpose of processing
|
Legal basis
|
Active shelf life
|
Archiving
|
|
Order management
|
CONTRACT
|
5 years from last activity
|
5 years
|
|
Use of customer account
|
CONTRACT
|
5 years from last activity
|
5 years
|
|
Statistical analysis
|
CONTRACT
|
5 years from last activity
|
5 years
|
|
Commercial prospecting (text message or email)
|
Customer Consent
|
3 from last activity
|
No archiving
|
|
Retention of bank card data following a one-off payment
|
Law/contract
|
15 months
|
article L133-24 of the Monetary and Financial Code.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Right of access
Under the conditions defined by the Data Protection Act and the European Data Protection Regulation (articles 14 to 22 of regulation 2016/679 of April 27, 2016), individuals have the right to access, oppose, rectify, query, limit, port and delete data concerning them.
The persons concerned by the processing implemented also have the right to object at any time, for reasons relating to their particular situation, to the processing of personal data, as well as the right to object to commercial prospecting.
The persons concerned should contact, by any written means, the data controller in order to exercise their rights relating to access to their personal information, at the following contact details:
RUBECK
229 Rue Saint-Honoré
75001 Paris 1
contact@innovboutique.fr
Furthermore, the persons concerned have the right to lodge a complaint with the CNIL.
Information Security
The Company follows generally accepted standards to protect the information it collects and receives, both during transmission and once it is received.
The Company maintains appropriate administrative, technical and physical safeguards to protect Customers' personal information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of processing.
This includes, for example, firewalls, anti-virus, password protection and other access and authentication controls.
However, no method of transmission or storage is completely secure.
If the Customer believes that the security of his personal information has been compromised, he must contact the Professional to inform him.
If the Professional for his part believes that the information transmitted has been compromised, he will inform the client in accordance with applicable law.
Transmission of information to third parties:
The data collected may be transmitted to service providers (subcontractors) used by the Professional to carry out its services for the purposes mentioned above, for example for the management, execution, processing, payment of orders, as well as for marketing operations.
For advertising targeting, the professional may communicate some of the non-identifying data in order to contact the customer and send personalized advertisements on social networks.
For commercial prospecting by third parties:
- Prospecting by email and SMS
Email and SMS data may be transmitted to partners for electronic commercial prospecting campaigns only if the customer agrees. Consent may be withdrawn at any time and/or request communication of the list of commercial partners at any time by writing to the professional at the following email address: contact@innovboutique.fr
- Prospecting by telephone and mail
Postal and telephone data may be transmitted to third-party advertisers through partners as part of postal and telephone prospecting campaigns. Consent may be withdrawn at any time and/or request communication of the list of commercial partners at any time by writing to the professional at the following email address contact@innovboutique.fr and/or by registering on the Bloctel list on the site http://www.bloctel.gouv.fr/
Data transferred outside the EU
The customer is informed that data concerning him may be transmitted for the purposes mentioned above to companies located in countries outside the European Union which have a lower level of data protection than in the European Union.
Prior to the transfer outside the European Union, the Professional will take all necessary measures and guarantees to secure such transfers.
Personal data of minors
The professional's services are not intended for minors and therefore he does not process data specifically concerning minors.
It is up to parents and any person exercising parental authority to decide whether their minor child is authorized to use the professional's services.
Use of data on social networks
The customer is informed that information related to browsing is captured by social networks for advertising targeting purposes on their own behalf via cookies which are placed when browsing the site.
The legal basis for this processing is the consent given when accepting cookies. It is possible to withdraw consent by setting in the browser.
The Customer is invited to consult the Site's cookie management policy as well as to consult the personal data protection policies of the Site's various partners in terms of social networks in order to be precisely aware of the information that is collected by these third parties.
