In the context of visits to its Website and Orders placed, the Professional is required to collect personal and confidential information from the Customers of its website.
The processing of personal data is justified by different legal bases depending on the use made of the personal data.
Among the applicable legal bases:
- The contract: the processing of personal data is necessary for the performance of the contract agreed upon.
- Consent: acceptance of the processing of personal data through express consent (checkbox, click, etc.).
- Legitimate interest: The Professional has a commercial interest in processing the data which is justified, balanced and does not infringe on privacy.
- The law: the processing of personal data is made mandatory by a legal text.
This collection is carried out with the informed consent of the Users manifested by reading this notice, by voluntarily ticking the box relating to the confirmation of reading said notice and by the voluntary and unilateral action of ordering products on the Website.
The processing of data thus carried out by the Professional aims to: manage orders and customer relations, process orders, personalize services and messages sent to the Customer, conduct commercial prospecting by third parties, personalize online advertising, ensure Site security, understand customer needs, and analyze Site statistics and performance.
In this context, the Professional ensures that the collection and processing of customer data comply with the following principles:
- Lawfulness, fairness and transparency: data may only be collected and processed with either the consent of the client who owns the data, or within the strict framework of the execution of the service requested by the client who owns the data.
- Limited purposes: the collection and processing of data is carried out to fulfill one or more specific purposes as stated in this privacy notice;
- Minimizing data collection and processing: only the data necessary for the proper execution of the objectives pursued by the Professional are collected;
- Integrity and confidentiality of collected and processed data: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
Data Processing Manager:
- EcomSphere Labs LLC
- 704 Wallace St, Suite 341, Clovis, NM 88101
- contact@plafonnier-prestige.fr
The information collected
In general, the Professional collects the following information directly from the Clients:
name, surname, address, email address, password, telephone number, IP address, connection and browsing data, order history, preferences and interests, products viewed, delivery incidents, complaints.
In some cases, the Professional may collect location data.
Mandatory data fields are indicated by an asterisk during collection. Some data is collected automatically based on customer actions on the site, while other information may be provided by partners.
The completion of the collection
The Professional collects the information provided by the Client on the following occasions:
- From creating a customer account
- From placing an order
- Site navigation
- Exchanges with customer service
- From viewing advertisements
Collection support
The information collected by the Professional is stored on a computer system and in a dematerialized manner.
Retention period for personal data
The company only retains data for the period necessary for the operations for which it was collected and in compliance with applicable regulations.
According to the table below:
|
Purpose of the processing |
Legal basis |
Active shelf life |
Archiving |
|
Order management |
CONTRACT |
5 years from the date of the last activity |
5 years |
|
Use of the customer account |
CONTRACT |
5 years from the date of the last activity |
5 years |
|
Statistical analysis |
CONTRACT |
5 years from the date of the last activity |
5 years |
|
Sales prospecting (text message or email) |
Customer consent |
3 from the date of the last activity |
No archiving |
|
Bank card data is retained following a one-time payment. |
Law/contract |
15 months |
Article L133-24 of the Monetary and Financial Code. |
Right of access
Under the conditions defined by the French Data Protection Act and the European General Data Protection Regulation (articles 14 to 22 of Regulation 2016/679 of 27 April 2016), natural persons have the right to access, oppose, rectify, query, limit, port, and erase their personal data.
Individuals whose data is being processed also have the right to object at any time, for reasons relating to their particular situation, to the processing of personal data, as well as the right to object to commercial prospecting.
The individuals concerned should contact the data controller in writing, by any means, to exercise their rights regarding access to their personal information, using the following contact details:
EcomSphere Labs LLC
704 Wallace St, Suite 341, Clovis, NM 88101
contact@plafonnier-prestige.fr
Furthermore, the persons concerned have the right to lodge a complaint with the CNIL.
Information security
The company adheres to generally accepted standards to protect the information it collects and receives, both during transmission and after receipt.
The company maintains appropriate administrative, technical and physical safeguards to protect customers' personal information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of processing.
This includes, for example, firewalls, antivirus software, password protection, and other access and authentication controls.
However, no method of transmission or storage is completely secure.
If the client believes that the security of their personal information has been compromised, they should contact the Professional to inform them.
If the Professional believes that the transmitted information has been compromised, they will inform the client in accordance with applicable law.
Transmission of information to third parties:
The data collected may be transmitted to service providers (subcontractors) that the Professional uses to carry out its services within the framework of the purposes mentioned above, for example for the management, execution, processing, payment of orders, as well as for marketing operations.
For advertising targeting, the professional may communicate certain non-identifying data in order to contact the customer and send personalized advertisements on social networks.
For commercial prospecting by third parties:
- Prospecting via email and SMS
Email and SMS data may be shared with partners for electronic marketing campaigns only if the customer consents. Consent can be withdrawn at any time, and/or a list of business partners can be requested at any time by writing to the professional at the following email address: contact@plafonnier-prestige.fr
By subscribing to Prestige Ceiling SMS notifications, you agree to receive automated marketing SMS messages from us regarding our products and services at the phone number you provided during registration. Messages may be sent via an automated dialing system or other technology. Message frequency is recurring. Consent is not a condition of purchase. Message and data rates may apply. Reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to unsubscribe and HELP for customer support. You may receive an additional text message confirming your decision to unsubscribe. You understand and agree that attempting to unsubscribe by any means other than sending the above SMS unsubscribe commands is not the correct way to unsubscribe.
- Prospecting by telephone and mail
Postal and telephone data may be transmitted to third-party advertisers through partners for the purpose of postal and telephone marketing campaigns. Consent may be withdrawn at any time and/or the list of commercial partners may be requested at any time by writing to the professional at the following email address: contact@plafonnier-prestige.fr and/or by registering on the Bloctel list at http://www.bloctel.gouv.fr/
Data transferred outside the EU
The customer is informed that data concerning him may be transmitted for the purposes mentioned above to companies located in countries outside the European Union which have a lower level of data protection than in the European Union.
Prior to any transfer outside the European Union, the Professional will take all necessary measures and guarantees to secure such transfers.
Personal data of minors
The professional's services are not intended for minors; consequently, he does not process data specifically concerning minors.
It is up to the parents and any person exercising parental authority to decide whether their minor child is allowed to use the professional's services.
Use of data on social networks
The customer is informed that information related to browsing is captured by social networks for advertising targeting purposes on their own behalf via cookies that are placed during browsing on the site.
The legal basis for this processing is the consent given when accepting cookies. It is possible to withdraw consent by adjusting your browser settings.
The Client is invited to consult the Site's cookie management policy as well as the personal data protection policies of the Site's various social network partners in order to be fully aware of the information that is collected by these third parties.