PRIVACY POLICY
1 - Introduction
The SAS MAISON DE LA SOIE company attaches much importance to our users’ privacy and data protection. We make sure to strictly adopt and respect a privacy policy in compliance with current regulations, especially the General Data Protection Regulation (GDPR) applicable from May, 25th 2018.
Here, the SAS MAISON DE LA SOIE company details which data are likely to be collected on Maison de la Soie, what they are used for and what are your rights on these data.
The SAS MAISON DE LA SOIE reserves the right to modify this Policy at any time. You’ll be notified without delay of any material changes by posting the amended Policy Privacy on our website.
2 - Data protection officer
Data are collected by the SAS MAISON DE LA SOIE company, located at 183 rue d'Ayous - 64121 SERRES-CASTET and Pau RCS (Trade and companies register) under number 788 988 772.
The Data Protection Officer is Guillaume Arbel whose contact details can be found on the legal notices.
Our Data Protection Representative is Wei Arbel. Your request regarding the process of personal data shall be sent to [email protected].
In compliance with current regulations, information automatically collected had been declared to French Data Protection Authority (French DPA).
3 - Data collect and processing
When you visit Maison de la Soie website, your data might be collected. In this case, only voluntarily entered data are collected.
The website user acknowleges to have reached the legal age of majority. If not, the user’s parents or guardians must agree to the personal data collect and processing.
A - Data that may be collected
Personal data
« Personal data » are information that may directly or indirectly identify you.
Such information may be collected on our website. These data can be name, first name, email address, date of birth ou detail contact (address, city, postcode, country).
These data are only collected if you have previously agreed to it.
If you don’t enter some information, you won’t be able to have access to some functionalities that need those information, such as order placement ou login to your account Maison de la Soie.
Transactions come with the collection of bank data never saved by the SAS MAISON DE LA SOIE company but on third-party service providers secured payment processors such as Monetico, a subsidiary of Crédit Mutuel group or Paypal. This collection depends on your agreement, otherwise no transaction can be made.
Non-personal data
« Non-personal data » are information that cannot be used to identify you personally. The SAS MAISON DE LA SOIE company uses tools or programs that may collect non-personal data.
These non-personal data are general, aggregated, demographic information that may be collected by the SAS MAISON DE LA SOIE company.
These anonymous data are not related to none of user’s personal data. For instance, they may include information given by the user during survey or studies (feedback collection) in order to help the SAS MAISON DE LA SOIE company improves their services, or aggregated anonymous information regarding the website use, the browser type, your operating system, IP address, session duration, visited pages for statistics and security purposes.
These information are usually optional and related to the user’s personal data only if they gave their consent.
Non-personal data can be automatically collected through cookies (or other technologies).
These information are related to, for example, browser type, operating system, user’s IP address, session duration, visited pages and the mouse cursor tracking, for statistics and security. These information may be related to user’s personal data only if they gave their consent.
B - Purposes of personal data processing
Your data are collected to enable you to have full access to our services (access to more content) and to help us improve the quality of our customer relationship.
Collected data may be processed for statistics purposes, needs analysis or for the search for new customers.
We send you advertising by email based on the legal grounds of you consent given when you signed up to our newsletter or when you ticked the box « receive the newsletter » on the recap of your order. If you no longer want to receive any advertising by email, you can let us know at any moment as following:
• click on the unsubscribe link you can find in every newsletter
• send us en email using the contact form.
• in « My account » or in your customer area, in the newsletter section, untick the box related
After your unsubscription, we delete your email address, unless you have expressly agreed to a use of your data later or if we reserve the right to a more extend use of the data, legally allowed, and which we inform you in this declaration.
C - Personal data recipient
Collected data are used by the SAS MAISON DE LA SOIE company only.
Some of your data may be communicated to every legal and administrative authority that would request them, as well as to technical or service providers. Naturally, the third-party provider has no right to use the provided data for anything other than the tasks given and/or for the only need of the service accomplishment.
D - Personal data conservation
In order to respect your private life, your personal data are kept during the time needed for the purpose process.
Your personal data are archived after:
-10 years after your last use of Maison de la soie website, if you haven’t close your account,
-1 year after the you have closed your account, unless you give an negative feedback, in that case, your data are stored during 2 years after this last feedback.
The conservation duration may vary in accordance to the following personal data categories:
-Financial data (for example, payments, refunds, etc…) are kept according to the legal duration applicable for fiscal and accounting purposes.
-If your account has been suspended or blocked by the SAS MAISON DE LA SOIE company (fraud, embezzlement), we keep your data during 3 to 10 years since the suspension in order to avoid any bypassing from you.
E - Personal data security
The Customer have access to a secured page where they have to communicate their bank details for online payment by debit card. The transaction is done through to the secured system set up by the SAS MAISON DE LA SOIE company and the Monetico company, subsidiary of Crédit Mutuel or Paypal. Transaction security is guaranteed thanks to the SSL (Secure Socket Layer) encrypted protocol. This technology encrypted every data exchanged between 2 device connected to the Internet. During a payment process, SSL encrypted the bank card number and its expiration date typed on the device keypad before sending it to the electronic payment system. Bank data are not stored. It means that information related to the order and the bank card are not clearly available on the Internet.
In order to guarantee the optimal respect or your private life, the SAS MAISON DE LA SOIE company does its best, taking appropriate measures, to guarantee the security and the confidentiality of your personal data protecting them from any lost, accidental destruction, degradation and non-authorized access.
However, the SAS MAISON DE LA SOIE company does not control any risk of hacking intrusion or inherent in the Internet use, and for which the SAS MAISON DE LA SOIE won’t be held responsible.
F - Your rights
You have the right to get free information regarding your personal data we store, and to ask us, if necessary, the correcting, the process limitation, the transfer or the removal of your data. As the person concerned with the personal data process, you have the following rights:
-According to GDPR article 15, you have a right to have access to your personal data.
-According to GDPR article 16, you have a right to correct inaccurate personal data as soon as possible. you have the right to ask for these data to be completed.
-According to GDPR article 17, you have a right to ask for the delete of personal data if the process is not necessary for:
- exercising the right of freedom of expression and information
- the compliance with a legal obligation
- a reason of public interest
- the establishment, exercice or defense of legal claims.
-According to GDPR article 18, you have the right to restrict processing if:
- you dispute the accuracy of the data
- the processing of the data is illicit but you are opposed to their erasure
- we no longer need your data but they are still necessary for you to establish, exercise or defend your legal rights.
-According to GDPR article 21, you have a right to be opposed to data processing.
-According to GDPR article 20, you have a right to receive your data in a structured, commonly used and machine-readable format (right to data portability).
-According to GDPR article 77, you have a right to file a complaint with a supervisory authority. For any question related to your personal data collection, processing or use, for any request for information, data correction, blocking or removal as well as for any withdrawal of the agreement given or any opposition to a particular use of data, please fill in the following form:
4 - Data transfer outside the European Union
The SAS MAISON DE LA SOIE company uses services that transfer some of your personal data to countries outside the European Union and the European Economic Area.
Here is the list:
-Mailchimp for newsletters
-Google Analytics for website visitors analysis