Legals

a. Collected data

The term "Personal Data" refers to any information that allows you to be identified directly (e.g. your surname, first name, e-mail address) or indirectly (e.g. customer number, IP address). The personal data we collect depends on the interactions you have with us on the Site and the purposes of those interactions. The Company collects your personal data:

- when you create a customer account ;

- when you subscribe to our newsletter;

- when you use our Site (in particular through the cookies you accept); - when you make a purchase on the Site;

- when you contact the Company via the contact form, by e-mail or by telephone. and in particular to execute the sales contract, provide services or comply with legal obligations.

The personal data we collect is limited to that which is relevant and appropriate to your interaction with us on the Site. In general, you provide us with the following data:

• Your identification and contact data such as your first name, last name, language and country from which you interact with us, as well as your contact data such as your e-mail address, postal address, delivery address and telephone number.

• Your economic and payment information such as your bank details (please note that all payment transactions are encrypted by the receiving bank, we do not store any card numbers), information about your purchases, your orders, your returns, etc., and your credit card details.

• Your connection data (e.g. IP address), geolocation and browsing data (e.g. if you were to use the "find a store" service) by means of cookies or similar technologies. This data includes your IP address, your search engine and version, your location and time zone, your browser extension, operating system and platform, as well as other technical data about the device you are using to browse our Site. For example, information about your visit, including URLs and clickstreams, to and from our Site (including date and time), the products you viewed or searched for, page response times, download errors, time spent on pages, interaction on pages (such as clicks and cursor movements), how you leave pages. Some cookies are necessary for the proper functioning of the Site and others are used for analysis purposes that help us provide you with more personalized services and a better experience. We invite you to read our Cookies policy for more information on this subject.

• Your profile - if you open a customer account, you create a profile and identify yourself when you visit our website - data such as your customer ID and password, your recent purchases and your preferences will be saved.

• Your personal preferences: this includes your marketing and cookie preferences.

• Additional personal information such as, your date of birth or your gender. Only we collect and store this additional information, and we use it in our analyses to improve our services. When we ask you to enter your personal data to access a feature, certain data are mandatory fields, since we need this data to enable you to access the feature (for example, to deliver your order, we need your postal address). It is important that the personal data shared about you is correct and up to date. We invite you to update your data should any changes occur. We do not save sensitive personal data of any kind. Sensitive personal data includes any data relating to race, ethnic origin, political opinions, religious or philosophical beliefs, and data concerning health, sex life or sexual orientation. As our Site is not intended for minors, we do not store any personal data on minors.

b. Reasons for collecting your personal data

The Company collects and uses your personal data on the following legal bases: - consent: the Company has obtained your prior consent (for example, when you tick the box "I subscribe to the newsletter"). You are informed that you can revoke your consent at any time without having to justify yourself. - the collection and processing of your personal data is necessary for the performance of the sales contract between you and the Company; - legitimate interest: this legitimate interest cannot overshadow your interests, fundamental rights or freedoms;

- compliance with applicable laws and regulations.

The disclosure of your personal data is limited:

- members of our staff who are interested in and called upon to take cognizance of and use them, it being understood that our staff undertake to respect confidentiality. These staff members may be in charge of customer relations, e-commerce, communications/marketing, legal affairs, finance or IT.

- authorized third parties acting on our behalf: As part of your use of the Site, you may receive information from third parties with whom we work to provide you with certain services.

These may include financial institutions, fraud detection and prevention entities, logistics/transport/delivery services, marketing and advertising services. Disclosure to these third parties may take place for delivery and payment of your orders, credit and identity checks, analysis software enabling us to process your data in order to optimize your shopping experience on the Site.

The processing of your personal data by these third parties is based on our prior instructions and not for their own use. These third parties have undertaken to respect the confidentiality of your personal data, not to use it for any other purpose and to take all necessary security measures to protect your personal data.

- to the competent authorities and courts.

The Site has appropriate security measures in place to prevent the loss, unauthorized use or access, alteration or disclosure of your personal information. All data you provide is stored on secure servers. We also have procedures in place to manage any breach of personal data. If you have created an account, you have chosen a password. You are responsible for keeping this password confidential. We therefore recommend that you choose a strong password and do not share it with anyone. We recommend that you only connect to secure networks, preferably private ones. Be aware of the risks involved on public wifi networks. If you receive an e-mail claiming to be the brand we work for and asking you to provide personal information, please do not reply and forward the e-mail to us so that we can take the necessary action. All our service providers work within the European Economic Area (EEA) and are subject to the same legislation. In the event that some are located outside this area, precautions have been put in place to ensure the security of your data in accordance with the General Data Protection Regulation.

Your personal data is kept for the time necessary for the purposes for which it was collected, to comply with legal and regulatory obligations and for the duration of any period necessary for the establishment, exercise or defense of legal claims. We may also retain your data for research or statistical analysis. More specifically, if you subscribe to our newsletter, we will not contact you again if you have not opened our newsletter for more than three years.

In accordance with the provisions of the General Data Protection Regulation, your consent must be given in a clear and unambiguous manner, in particular for subscription to our newsletter or cookies.

This is why, when you accept our cookies and/or to receive our communications (via newsletters in particular):

we explain the use we will make of your data and the type of communication you will receive;

- you must check one or more boxes to validate your consent to be subscribed;

- Children under the age of 13 cannot give their consent; You may withdraw your consent at any time.

If you wish to unsubscribe from our direct marketing via our newsletter, you may at any time click on the link at the bottom of each e-mail "To unsubscribe, go to this page". A page will then open and all you have to do is click on the "Unsubscribe" button. If you have a customer account on the Site, you can also unsubscribe or modify your preferences by logging into your profile. Cookies (including those in advertising banners) require specific unsubscription. Please read our Cookie Policy for more information. In accordance with the legal provisions in force, you have a right of access, rectification, deletion, portability, restriction of processing or opposition:

- Right of access to data: the right to receive a copy of the personal data we hold about you;

- Right to rectification: the right to request the correction and/or completion of your personal data. If you have a customer account, you can also modify your personal details from your customer area by logging in with your e-mail address and password;

- Right to erasure (or forgetting): the right to ask us to delete your data;

- Right to limit the processing of your data: the right to limit the processing of your personal data;

- Right to portability: the right to receive your personal data in a structured, commonly used and machine-readable format and/or to transmit this data to a third party.

- Right to object to processing: this right may be exercised :

a. at any time during the processing of your personal data for direct marketing purposes; b. in certain other situations, for the continuation of our processing of your personal data (when the processing is based on our legitimate interests, for example).

The Site is registered with the Commission Nationale de l'Informatique et des Libertés (CNIL) under no. 1351361. You also have the right to lodge a complaint with your local data protection authority in the event of an alleged breach of the data protection rules applicable to you. To exercise any of these rights, you may contact us at any time, free of charge, at the address given in Article 7 of this Privacy Policy.

If you have any questions about this Privacy Policy, or if you have any complaints or wish to exercise your rights, please contact us at :

• by e-mail: rgpd@gerarddarel.com 

• by post to the following address

ON LINE SAS 

GERARD DAREL - Data Protection Department

130 rue Réaumur

75002 Paris

France