Last updated on June 2023.
Within the context of the protection of your Data, the regulations define two key roles:
Your Personal Data is collected, for example, when you enter it in the dedicated forms on the Website or when you create your customer account in store, when you place an order on the Website, when you correspond with Customer Services and, more generally, when you browse our Website. The following Personal Data is involved:
We use your Personal Data for several reasons.
Our primary objective is, of course, to satisfy you as our customer. For this reason, we collect most of your Data within the context of your purchases, particularly to deliver your orders and to give you the support you may request.
On the other hand, we may collect your Data when you give us your consent for purposes that will enhance your experience with our brand.
Finally, other Data is collected because it arises from a need based on a legitimate interest (for example, to facilitate the access to our Website and its use).
You will find further examples below of the purposes for which Data is collected:
Ensure the delivery of the products you have ordered
Manage the customer relationship and any complaints you might have
Manage any requests related to the exercise of your rights in relation to personal data
Receive our newsletters and customised offers through any electronic communication service
Benefit from a browsing experience customised according to your purchasing history and your browsing on the Website
Benefit from our customised advertising promotions on third-party media
Our legitimate interest
Access to the Website and its usage
Analyse and improve the quality and the performance of services
Monitor use of the Website and improve your experience
Preserve our rights
Manage transactions and combat fraud
Generate statistics and segment information, investigations and analyses in order to improve our knowledge of our customers
Share data within the SMCP Group in order to improve our knowledge of our customers
In accordance with the relevant regulations relating to personal data, you hold and may exercise the following rights with us:
In order to exercise your right, you may send us an email at the following address firstname.lastname@example.org, or send us a letter to the following address: DPO, 49 rue Etienne marcel 75001 Paris. We may ask you to provide us with proof of identity.
We commit to replying as quickly as possible and as soon as our services have received your request.
If you no longer wish to receive our newsletters, you may click on the unsubscribe link located at the bottom of our emails, or reply "STOP" by text message or configure the newsletter settings in your account, if you have created one.
Your Data is intended principally to be used by our services. It may sometimes be sent to external recipients or our partners for the reasons described below. In any event, we select the recipients of your Data on the basis of their competence in data security and privacy. We conclude contracts with these recipients allowing us to ensure the high level of security of their systems. It is our service providers responsible for improving the functioning of our Websites, implementing your transactions and payment security, those of our service providers responsible for logistics (storage, preparation and delivery of your products), our Customer Services, our service provider tasked with performing marketing or commercial surveys or advertising agencies.
Your Data may also be transferred to third parties, (1) subject to your prior consent, for processing in accordance with the purpose(s) for which your Data has been collected or (2) in the event that we are obliged to do so by the law, as part of legal proceedings, or if an imperative request has been made by a public body or (3) if we are involved in a merger or acquisition operation, or asset sale.
In the event that the Personal Data is transferred to a country located outside the European Union, we commit ourselves to taking the technical and organisational measures required in order to guarantee an adequate level of security for your Data as if it had remained within the European Union.
Indeed, we demand to these Data recipients that they implement the measures required in order to ensure the same level of protection as demanded by the European regulations relating to personal data; for example, by using the standard contractual clauses of the European Commission or the Binding Corporate Rules (BCR).
We implement technical and organisational measures in order to ensure the security, integrity, authenticity and privacy of the Personal Data. We ensure that our partners maintain a level of protection comparable to ours in relation to your Personal Data. We also ensure that your transactions are secure by implementing adequate measures, as well as measures to combat fraud.
We store your Personal Data only for the period that is strictly required for achieving the purposes for which they were collected. Hence, we store:
Your bank details are stored by our payment partners, Ingenico. When you make purchases on-line, you are required to enter your bank details into the fields provided for that purpose. If you provide your consent, and in order to facilitate your payments, you may prefer that our payment service provider stores your bank details in a secure manner so that they can be used for your next purchases. If this is the case, you can tick the "Save your payment details" option when you pay for your order. You may, at any moment, ask us to delete the registered bank card by consulting your account, under the heading "My payment options", or by writing to us via our contact form.
Once your Data has been deleted from our database, some of your Data may be stored in an archived form with limited access, strictly limited to the objectives of satisfying our legal, accounting and fiscal obligations, but also for the purposes of managing any complaints or guarantee claims you might have within the applicable limits of any limitation periods.
Once your Personal Data is no longer required for these purposes or for archiving purposes in order to comply with our legal obligations or for the purposes of the applicable limitation, your data will be irreversibly anonymised.
You may, at any time, request that we erase all or part of your Data, object to its processing or request that it is restricted, in compliance with Article 4 above. In the event that you request for your Data to be erased, it will be erased from our database and stored in an archived form as described above.
Finally, we inform you that if you have any complaints relating to the protection of your Personal Data, you may also contact the English supervisory authority, the Information Commissioner’s office, whose website is located at the following address: https://ico.org.uk.