We are committed to protecting and respecting your privacy in line with EU regulations governing the collecting, storing and personal information that you may provide to us in the course of your dealings with us.
Everyone has important rights with regard to the way in which their personal information is handled. During the course of our business activities we will collect, store and process personal information about our customers, suppliers and other third parties, and we recognise that the correct and lawful treatment of this data will maintain confidence in our organisation. Further it will provide for successful business operations.
This policy sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us so that you fully understand and are aware of how and why we use your information in line with EU Regulations and can have confidence in us to safeguard your data.
Please read the following carefully to understand our views and practices regarding your personal information and how we will treat it.
For the purpose of data protection laws, the data controller is SAS Retail Online DV, Registered office 25 Rue de la Madelaine, Paris 75008, France.
This site collects some Personal Data from its Users. Among the Personal Information collected from this site, either independently or through third parties, there are :
There is also information what is categorized as “Special Category Data”.
This data pertains to Information relating to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, criminal convictions, sex life or sexual orientation, or certain types of genetic or biometric data.
During the course of dealing with you, we do not expect to collect any ‘special category’ data about you.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this site.
Unless otherwise specified, all the data requested by this site are mandatory.
If the User refuses to communicate them, it may be impossible for this site to provide the Service. In cases where this site indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.
Users who have doubts about which data are mandatory, are encouraged to contact the owner.
The User assumes the responsibility of the Personal Data of third parties obtained, published or shared through this site and guarantees to have the right to communicate or disseminate them, freeing the owner from any liability to third parties.
Personal data information is very important. This is why when processing your information, we must comply with the six enforceable principles of good practice. These provide that your personal information must be:
We obtain personal information by you directly interacting with us, such as:
We may obtain personal information via automated technology when you interact with our website by using cookies, server logs and other similar technologies.
We may also collect personal information about you from third parties or publicly-available sources, such as:
1. Method of treatment
The Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this site (administrative, commercial, marketing, legal, system administrators) or external subjects (as suppliers of third party technical services, postal couriers, may have access to the Data) hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.
2. Legal basis of the processing
In any case, it is always possible to ask the Owner to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.
The Data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For more information, contact the owner.
The User’s Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the processing site, the User can refer to the section concerning the processing of Personal Data.
You have the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization of public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect the Data.
If one of the transfers described above takes place, the User can refer to the respective sections of this document or request information from the Data Controller by contacting him at the opening dates.
We use your personal information for a number of different purposes. For each of these purposes, we are required to confirm the ‘legal basis’ that allows us to use your information, indicated as follows:
|Purposes for which we will use the information you give to us||Legal basis|
|To register you as a new customer||This information is required for the performance of the contract between you and us|
|To process your order and, if accepted, to deliver the products to you (including managing payments, fees, charges and accurate data)||This information is required for the performance of the buyer’s contract between you and us|
|To manage your queries or complaints||This information is required for the smooth performance of the contract between you and us|
|To collect and recover monies due to us owed by you||This information is required for our legitimate business interests, namely to ensure we receive payment for products and services that you have ordered from us|
|To enable you to participate in a prize draw, competition or complete a survey||This information is required for our legitimate business interests, namely to study how customers use our products, to develop them and help grow our business|
|To create customer profile types that are used to help identify new customers from other sources. These profiles DO NOT contain personal data.||This information is required and will be done after you give your consent for us to do.|
Your consent can be withdrawn by changing your preferences using the My Account functionality on our website.
|To provide you with relevant marketing communications that inform you of special offers, sales and new products.||This information is required for our legitimate interest to develop our offers and services in order to improve customer interaction and retain customers.|
|To prevent customers from trading with our company who have been abusive or who have abused or misused the products and/or services that we will supply.||This information is required for our legitimate business interests, namely to prevent the misuse of our products or services|
|To detect, investigate and prevent crime and where necessary to prevent customers from trading with our company who have been fraudulent and to pass on their details to the relevant legal/regulatory organisation so that they can be prevented from doing more harm||This information is required for our legitimate business interests, namely to help prevent fraudulent or dishonest behaviour, and to comply with any legal obligations placed upon us (e.g. such as by a regulator).|
|To notify you when you have products in your basket that have not been through the ordering process||This information is required for our legitimate business interests, namely to ensure we provide the quality of service you expect from us|
|Where goods and/or services are being provided to our company that are necessary to give you the service you expect from us|
To have a contractual relation with you to supply goods and/or service.
|This information is required so that our legitimate business interests, in order to fulfil our contractual obligations.|
|To contact you to undertake customer satisfaction surveys, invite you to provide product reviews or for market research.||This information is required for our legitimate business interests, namely to develop products, services, applications and designs that attract and retain customers, improving customer interaction with our sites.|
|To comply with our legal and regulatory obligations for the payment of tax||This information is required for us to comply with all legal obligations to which we are subject to which requires us to hold certain data|
We will only use your personal information strictly for the purpose(s) for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose and in line with data regulation. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We will share your personal data with trusted third parties for legitimate business purposes. For example, the delivery of your orders, to handling complaints, for fraud management and prevention, for helping us personalise our offers to you and so on.
We apply our policy strictly in line with EU regulations to those organisations to keep your data safe and protect your privacy:
Third parties we work with are:
|Courier Services||Delivery of your orders, including proof of delivery and tracking information. .|
|Data Insight||Behavioural analysis that allows us to personalise your experience and the information we provide to you. We use Google Analytics,.|
|Email Services||How we manage our electronic communication with you. This is done through either Google or|
|Fraud Services and|
|We may use a combination of Financial Credit Authorities , Citizens Advice Bureaus and the Police Authorities when fulfilling our ‘public interest’ and legal responsibilities to prevent fraud and dishonest behaviour. We may share information about fraudulent or potentially fraudulent activity in our premises or systems. This may include sharing data about individuals with law enforcement bodies.|
|IT Services||We use a number of partners to support our website and other business systems but only share your information with Google|
|Legal Services||When necessary we will enlist solicitors for resolution of legal matters.|
|Mailing Services||Addressing of printed material will be provided by French Mail Providers La Poste|
|Payment Services||During the payment process you will be directed to options to Swift and PayPal depending on your preference.|
|Market Research Services||Should you wish to comment on our products or service you will be able to do so via our chosen review service provider, Trustpilot.|
|Social Media||So we can show you products that might interest you while you are browsing the internet, we use the services of Google, Facebook, Twitter and Instagram.|
|Law enforcement||We may be required to disclose your personal data to the police or other enforcement, regulatory or Government body, in your country of origin or elsewhere, upon a valid request to do so. These requests are assessed on a case-by-case basis and take the privacy of our customers into consideration.|
|Regulatory bodies||When appropriate your personal information may be shared with DIRECTION GÉNÉRALE DES FINANCES PUBLIQUES (PUBLIC FINANCES DIRECTORATE GENERAL), Other regulators and other authorities who require reporting of processing activities in certain circumstances.|
We may also disclose your information to third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If such a change happens to our business, then the new third party may use your personal information in the same way as set out in this policy and we will notify you of any change like this in advance.
The Data are processed and stored for the time required by the purposes for which they were collected. Therefore,
Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of the contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is met. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Data Controller.
When the processing is based on the consent of the User, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or an order of an authority.
At the end of the retention period the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
Users may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, the User has the right to:
withdraw consent at any time. The User can withdraw consent to the processing of their Personal Data previously expressed.
oppose the processing of your data. You may object to the processing of your data when it occurs on a legal basis other than consent. Further details on the right of opposition are indicated in the section below.
access your data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
verify and request rectification. The User can verify the correctness of his Data and request its updating or correction.
obtain treatment limitation. When certain conditions are met, the User may request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose other than their conservation.
obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.
Receive your data or have it transferred to another holder. You have the right to receive your data in a structured format, commonly used and readable by automatic device and, where technically feasible, to obtain the transfer without hindrance to another holder. This provision is applicable when the Data are processed with automated tools and the processing is based on the User’s consent, on a contract of which the User is a party or on contractual measures connected to it.
propose a complaint. The User can lodge a complaint with the competent personal data protection authority or act in court.
When Personal Data is processed in the public interest, in the exercise of public authority to which the Holder is invested or to pursue a legitimate interest of the Owner, Users have the right to oppose the processing for reasons related to their particular situation. Users are reminded that, if their data is processed for direct marketing purposes, they can oppose the processing without providing any reasons. To find out if the Owner deals with data for direct marketing purposes, Users can refer to the respective sections of this document.
To exercise your rights of the User, Users can direct a request to the contact details of the Owner indicated in this document. The requests are sent free of charge and processed by the Owner as soon as possible, in any case within a month.
Defense in court
The User’s Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this site or related Services by the User. The User declares to be aware that the Data Controller may be obliged to disclose the Data by order of the public authorities.
System logs and maintenance
For needs related to operation and maintenance, this site and any third party services used by it may collect system logs, that is, files that record the interactions and that may also contain Personal Data, such as the User IP address.
Further information in relation to the processing of Personal Data may be requested at any time to the Data Controller using the contact details.
Response to “Do Not Track” requests
this site does not support “Do Not Track” requests.
To find out if any third-party services used support them, the User is invited to consult their respective privacy policies.
If the modifications concern treatments whose legal basis is consent, the Controller will collect the User’s consent again, if necessary.
Definitions and legal references
Personal Data (or Data)
It constitutes personal data any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a physical person identified or identifiable.
This information is collected automatically through this site (also from third-party applications integrated into this site), including: IP addresses or domain names of the computers used by the User that connects to this site, addresses in URI notation ( Uniform Resource Identifier), the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (good order, error, etc.) the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of the pages consulted, to the parameters related to the operating system and the IT environment of the User.
The individual who uses this site that, unless otherwise specified, coincides with the interested party.
The natural person to whom the Personal Data refers.
Data Processor (or Manager)
Data Controller (or Holder)
The natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures related to the operation and use of this site. The Data Controller, unless otherwise specified, is the owner of this site.
The hardware or software tool through which the Personal Data of Users are collected and processed.
This privacy statement is drawn up on the basis of multiple legislative systems, including articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy statement only concerns this site.