Informations légales
Dernière mise à jour : 06/11/2026
PRIVACY POLICY
PRIVACY POLICY
Last updated: 06/11/2026
ARTICLE 1. IDENTIFICATION OF THE DATA CONTROLLER
The controller of your personal data is:
Company: ON LINE SAS
Legal form: Société par Actions Simplifiée incorporated under French law
Share capital: €1,000
Registered office: 130 Rue Réaumur, 75002 Paris, France
Registered with the Paris Trade and Companies Register under number: 820 435 238
VAT number: FR 81820435238
Hereinafter referred to as the “Company” or “We”.
The Company designs, manages and operates the Website.
For any questions relating to this Privacy Policy, the use of your personal data on the Website or GERARD DAREL online applications, or for the exercise of your rights, you may contact the Company by email at the following address: eshop@gerarddarel.com.
The Company has appointed a Data Protection Officer (“DPO”), who may be contacted at the same email address, specifying “DPO” in the subject line.
ARTICLE 2. GENERAL PROVISIONS
The purpose of this Privacy Policy is to inform users of the website www.gerarddarel.com (hereinafter the “Website”) about the manner in which the Company collects and processes their personal data.
In particular, it describes:
- the personal data collected or otherwise processed,
- the manner in which personal data is collected, used, shared and protected when using the Website, purchasing GERARD DAREL products, contacting our services and subscribing to GERARD DAREL newsletters,
- the choices and rights available to users, as well as the procedures for exercising such rights.
The Company reserves the right to update and amend this Privacy Policy at any time. In the event of any change, the “Last updated” date indicated above shall be modified accordingly to reflect the date on which such changes became effective.
In the event of a material modification to this Privacy Policy, the Company shall inform you by email.
Use of the Website implies that you have read this Privacy Policy.
You are informed that:
- for any contract relating to the purchase and sale of Products where delivery takes place outside France, the merchant of record on the Website is GLOBAL-E France SAS, a simplified joint-stock company (société par actions simplifiée) with a share capital of €10,000, having its registered office at 320 rue Saint-Honoré, 75001 Paris, France, registered with the Paris Trade and Companies Register under number 818 358 459 and under intra-community VAT number FR54818358459 (hereinafter “Global-e”).
Global-e is the Company’s international e-commerce partner responsible for facilitating international sales (outside France, with the list of relevant countries available on the Website).
In this context, certain personal data may be collected and processed by Global-e. Any processing carried out by Global-e is governed by its own privacy policy, available at the following address: https://www.global-e.com/consumer-privacy-policy
- the management of the second-hand platform www.secondemain.gerarddarel.com, as well as the purchase and resale operations relating to second-hand items, are carried out by FAUME, a simplified joint-stock company (société par actions simplifiée) with a share capital of €1,660.30, having its registered office at 55 rue du Général Louvin – 61340 Perche-en-Nocé, France, registered with the Alençon Trade and Companies Register under number 848 562 112 and under intra-community VAT number FR15848562112.
In this context, your personal data is collected and processed by FAUME on behalf of the Company, in accordance with the privacy policy available at the following address: https://secondemain.gerarddarel.com/pages/politique-de-confidentialite
ARTICLE 3. YOUR PERSONAL DATA
a. Data Collected
The term “Personal Data” means any information that may directly identify you (for example: your surname, first name, email address) or indirectly identify you (for example: customer number or IP address).
The personal data we collect depends on the interactions you have with us through the Website and the purposes of such interactions.
The Company collects your personal data:
- when you create a customer account;
- when you subscribe to our newsletter;
- when you use our Website (in particular through the cookies you accept);
- when you make a purchase on the Website;
- when you contact the Company by email, telephone or through any other contact method available on the Website,
and in particular for the purposes of performing the sales contract, providing services or complying with legal obligations.
You are informed that the personal data we collect is limited to data that is relevant and appropriate in light of the interaction you have with us through the Website.
You generally provide us with the following data:
- Identification and contact details, such as your first name, surname, language and country from which you interact with us, as well as your contact information, including your email address, postal address, delivery address and telephone number.
- Financial and payment information, such as your banking details (please note that all payment transactions are encrypted by the receiving bank and that we do not retain your bank card details), together with information relating to your purchases, orders, returns, etc.
- Connection, geolocation and browsing data (for example, where you use the “find a store” service), collected notably through cookies or similar technologies. Such data includes your IP address, browser type and version, location and time zone, browser extensions, operating system and platform, as well as other technical information relating to the device you use to access our Website. This may also include information regarding your visit, such as URLs and clickstream data to, through and from our Website (including date and time), the products you viewed or searched for, page response times, download errors, the duration of visits to certain pages, page interaction data (such as scrolling, clicks and cursor movements), and methods used to browse away from the page.
Certain cookies are strictly necessary for the proper functioning of the Website, while others are used for analytical purposes in order to provide you with more personalised services and an enhanced browsing experience. We invite you to consult our Cookies Policy for further information in this regard.
- Your profile information – where you create a customer account and log in when visiting our Website, certain data will be stored, such as your customer ID, password, recent purchases and preferences.
- Your personal preferences, including your marketing preferences and cookie preferences.
- Additional personal information, including, in particular, your date of birth and gender. We are the sole recipient and holder of such additional information, which we use for analytical purposes in order to improve our services.
Where we ask you to provide personal data in order to access a feature or service, certain fields are mandatory because the relevant data is necessary to enable access to such functionality (for example, your postal address is required in order to deliver your order).
It is important that the personal data you share with us is accurate and kept up to date. We therefore invite you to update your data should any changes occur.
We do not collect or retain any sensitive personal data. Sensitive personal data includes any information relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sex life or sexual orientation.
b. Purposes and Legal Bases for the Collection of Your Personal Data
The Company collects and uses your personal data on the basis of the following legal grounds:
- consent: where the Company has obtained your prior consent (for example, when you tick the box “I subscribe to the newsletter”). You are informed that you may withdraw your consent at any time without having to provide any justification,
- performance of a contract: where the collection and processing of your personal data is necessary for the performance of the sales contract entered into between you and the Company,
- legitimate interest: provided that such legitimate interest does not override your interests, fundamental rights or freedoms,
- compliance with applicable laws and regulations.
ARTICLE 4. DISCLOSURE OF YOUR PERSONAL DATA
The disclosure of your personal data is limited to:
- authorised members of our staff who need to access and use such data in the course of their duties, it being specified that our staff members are bound by confidentiality obligations. These individuals may include personnel in charge of customer relations, e-commerce, communication/marketing, legal, finance or IT services.
- service providers: in the course of your use of the Website, you may receive information from third parties with whom we work in order to provide certain services to you. Such third parties may include financial institutions, fraud detection and prevention entities, logistics/transport/delivery providers, and marketing and advertising service providers. Disclosure to such third parties may occur for the purposes of processing and delivering your orders, handling payments, verifying your identity, or using analytics software enabling us to process your data in order to optimise your purchasing experience on the Website.
The processing of your personal data by such third parties is carried out solely on the basis of our prior instructions and not for their own purposes.
These third parties have undertaken to preserve the confidentiality of your personal data, not to use it for any purpose other than those specified, and to implement all necessary security measures to protect your personal data.
It is also specified that, in the context of international sales, certain personal data may be transferred to Global-e under the conditions described above.
- competent authorities and courts, where required by applicable law or regulation.
ARTICLE 5. SECURITY OF YOUR PERSONAL DATA
The Website implements appropriate security measures designed to prevent the loss, misuse, unauthorised access to, alteration or disclosure of your personal data. All data you provide to us is stored on secure servers. We have also implemented procedures to deal with any personal data breach.
Where you create a customer account, you will choose a password. You are responsible for maintaining the confidentiality of this password. We therefore recommend that you choose a strong password and do not share it with anyone.
We recommend that you connect only through secure networks, preferably private networks. You should remain aware of the risks associated with the use of public Wi-Fi networks.
If you receive an email purporting to originate from the Company requesting that you provide personal information, please do not respond to it and instead forward the email to us so that we may take the necessary measures.
All of our service providers operate within the European Economic Area (EEA) and are subject to the same legal framework. Where certain service providers are located outside the EEA, appropriate safeguards have been implemented to ensure the protection of your personal data in accordance with the General Data Protection Regulation (GDPR) (for example, the execution of standard contractual clauses).
ARTICLE 6. RETENTION OF YOUR PERSONAL DATA
Your personal data is retained for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and for any period necessary for the establishment, exercise or defence of legal claims.
In this respect:
- data relating to the management of the customer relationship is retained for a period of ten (10) years from the end of the commercial relationship;
- data used for commercial prospecting purposes is retained for a period of three (3) years from the date of the last contact with you;
- data collected through cookies is retained in accordance with the retention periods specified in the Cookies Policy.
We may also retain your data for research or statistical analysis purposes, provided that such data has been anonymised.
ARTICLE 7. YOUR RIGHTS
In accordance with the provisions of the General Data Protection Regulation (GDPR), your consent must be given in a clear and unambiguous manner, in particular with regard to subscribing to our newsletter or the use of cookies.
Accordingly:
- we explain how your data will be used and the type of communications you will receive;
- you must tick one or more boxes confirming your consent in order to subscribe;
- minors under fifteen (15) years of age may not validly consent on their own to the processing of their personal data.
You may withdraw your consent at any time.
To unsubscribe from our direct marketing communications sent via our newsletter, you may at any time click on the link appearing at the bottom of each email stating: “To unsubscribe, please visit this page.” A page will then open, and you simply need to click on the “Confirm unsubscription” button. If you have a customer account on the Website, you may also unsubscribe or modify your preferences by logging into your profile.
Cookies may be configured or disabled at any time.
We invite you to consult our Cookies Policy for further information.
In accordance with the applicable legal provisions, you have the following rights:
- Right of access: the right to obtain a copy of the personal data we hold about you,
- Right to rectification: the right to request the correction and/or completion of your personal data. If you have a customer account, you may also amend your personal details directly from your customer area by logging in with your email address and password;
- Right to erasure (or “right to be forgotten”): the right to request the deletion of your personal data;
- Right to restriction of processing: the right to request that we restrict the processing of your personal data;
- Right to data portability: the right to receive your personal data in a structured, commonly used and machine-readable format and/or to transmit such data to a third party;
- Right to object to processing: this right may be exercised:
a. at any time where your personal data is processed for direct marketing purposes;
b. in certain other circumstances, to object to the continued processing of your personal data (for example, where the processing is based on our legitimate interests);
- Right to determine the fate of your personal data after your death.
You may lodge a complaint with the French data protection authority (CNIL) and may also register, free of charge, on the Bloctel telephone marketing opt-out list (www.bloctel.gouv.fr) in order not to receive commercial telephone solicitations.
To exercise your rights, you may contact us at any time using the contact details provided in Article 8.
Proof of identity may be requested in order to process your request.
ARTICLE 8. CONTACT US
For any questions relating to this Privacy Policy, any complaint, or the exercise of your rights, you may contact us:
- by email: eshop@gerarddarel.com
- by post at the following address:
ON LINE SAS
GERARD DAREL – Personal Data Protection Department
130 rue Réaumur
75002 Paris
France