On the terms and conditions defined hereafter, we collect and process the following personal data: 

- your domain name (automatically detected by our IT server), including the dynamic IP address, 

- your email address, if you have previously uncovered it, e.g., by sending messages or questions on the website, by communicating with us by email participating in chat forums, by accessing to the restricted part of the website requiring identification, etc.,

- all the information relating to the web pages you have viewed and navigated, 

- all the information you have voluntarily shared, e.g., in the case of information surveys and/or when registrating on the website or accessing to the restricted part of the website requiring identification. 

We may also need to collect non-personal data. Such data are referred to as non-personal since they do not allow the identification of a particular person, either directly or indirectly. They shall therefore be used for any purpose whatsoever, e.g., for improving the website, our products or services or online ads. 

Should non-personal data be mixed with personal data so that it is possible to identify the persons concerned, such data will be treated as personal data until their reconciliation with a specific person becomes not possible.

DATA COLLECTION METHODS 

We collect personal data through forms (registration form, contact form, etc.), or indirectly when you interact with us (contact by email, newsletter).

We collect and process personal data solely for the following purposes:

- management and control of the performance of the services we provide,

- sending and tracking orders, and invoices follow-up,

- sending promotional information on our products and services,

- sending promotional material,

- answering your questions,

- statistics production,

- improvement of the quality of the website and the products and services we offer;

- sharing information on our new products and/or services;

- marketing activities,

- consumer analysis.

If we are led to process data for purposes not yet identified in this Privacy Policy, we will then contact you before we use your personal data again to share the changes with you, and give you the opportunity to refuse such new use.

LEGITIMATE INTERESTS

Our legitimate interests can sometimes be the legal basis for processing your personal data. Such legitimate interests are proportionate having regard to the respect of your rights and freedoms. Details of the purposes based on our legal legitimate interests are available upon request by contacting us (see CONTACT INFORMATION section below).

At the end of the storage duration, we shall take all necessary measures to ensure that your personal data are not available and accessible anymore.

ENFORCEMENT OF RIGHTS

We reserve the right to check your identity for the enforcement of rights.

Such an additional request for information shall be made within one (1) month as from your request.

DATA ACCESS AND COPY

A written communication or a copy of your personal data is available to you at no charge upon request. We can charge at a reasonable cost based on administrative fees any requested additional copy.

When such request is made by electronic means, the information is provided in an electronically regular form, unless you request differently. 

Copy of your personal data will be send to you within one (1) month after we have received your request, unless provided differently by the GDPR.

RIGHT OF RECTIFICATION

You have a right to request from us rectification of any personal data that is not exact, inaccurate or incomplete. Such right shall be at no cost for you and we will ensure to meet your request as soon as possible and at the latest within one (1) month.

Unless differently provided for by the GDPR, your request for rectification shall be dealt with within one (1) month after it has been filled.

RIGHT TO OBJECT TO DATA PROCESSING

At any time, and at no cost for you, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data even when processing is necessary 

• For the performance of a task carried out for public interest or in the exercise of official authority vested in us, or

• For the purposes of our legitimate interests or those pursued by a third party, except where such interests are overridden by your interests or rights and freedoms which require protection of your personal data (i.e. when a child is concerned).

We are entitled to refuse the implementation of your right to object, should we prove that imperative and legitimate reasons justify the processing of your personal data, overriding your interests or rights and freedoms, or should your personal data be necessary for the establishment, exercise, or defense of a legal claim. In case of disagreement, you can file a complaint according to CLAIMS section of this Privacy Policy.

You have also the right, at any time, without any justification and free of charge, to object to the processing of your personal data when such data are collected for marketing purposes (including profiling).

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to the GDPR, you have the right to object, on grounds relating to your situation, to the processing of your personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Except when provided for by the GDPR, we shall deal with your request as soon as possible, and at the latest within a month, and we shall share with you the grounds for our decision not to proceed with your request, if this is the case.

.

RIGHT TO RESTRICTION OF PROCESSING

You shall have the right to obtain from us restriction of processing of your personal data in the following situations:

• when you contest the accuracy of a personal data, only for a period enabling us to verify the accuracy of such personal data,

• when the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead, 

• when you require your personal data for the establishment, exercise, or defense of a legal claim, although we no longer need them for the purposes of the processing, 

• while the grounds for your objection to process your personal data is examined, i.e., pending verification whether our legitimate grounds override yours.

We shall inform you when the restriction of processing you have obtained is lifted.

.

RIGHT TO ERASURE (“RIGHT TO BE FORGOTTEN”)

You have the right to obtain the erasure of your personal data in the following cases:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, 

• you withdraw consent on the processing and there is no other legal ground for the processing, 

• you object to the processing and there are no overriding legitimate grounds for the processing and/or you exercise your specific right to object to the processing for direct marketing purposes (including profiling),

• the personal data have been unlawfully processed,

• the personal data have to be erased for compliance with a EU or French legal obligation to which we are subject,

• the personal data have been collected in relation to the offer of information society services targeting children,

However, the erasure of personal data is not applicable in the following cases where processing is necessary:

• for exercising the right of freedom of expression and information, 

• for compliance with a legal obligation which requires processing by EU or French law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us,

• for reasons of public interest in the public health area,

• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing, 

• for the establishment, exercise, or defense of legal claims.

Except when provided for by the RGDP, we shall deal with your request as soon as possible, and at the latest within a month, and we shall share with you the grounds for our decision not to proceed with your request if this is the case.

.

RIGHT TO DATA PORTABILITY

You shall have the right at any time to receive at no charge upon request your personal data which you have provided to us in a structured, commonly used and machine-readable format, and have the right to transmit those data to another data controller where:

• the processing is carried out by automated means, and 

• the processing is based on your consent or on a contract between you and us.

In the same terms and conditions, you have the right to obtain from us that your personal data be transmitted directly to another data controller, if it is technically possible.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

.

DATA RECIPIENTS AND DISCLOSURE TO THIRD PARTIES

We are to be considered as the recipients of the personal data collected and processed, as well as our agents or other processors, our carefully selected business partners, whether or not located in the European Union, who are working with us in connection with the sale of products and provision of services.

Should data be disclosed to third parties for direct marketing purposes, you shall previously be informed so that you can decide whether or not you accept the transfer of such data to third parties.

As long as the transfer is based on your consent, you have the right, at any time, to withdraw such consent for this specific purpose.

We shall comply with all applicable legal provisions and guarantee that our agents, processors, business partners or other third parties with access to those personal data comply with this Privacy Policy.

We shall disclose your personal data when it is made necessary by law, according to a legal action or by public authority order.

We shall not proceed to any transfer of personal data outside the European Union.

.

SECURITY

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity for your rights and freedoms, we shall implement appropriate technical and organisational measures to ensure a risk-based level of security for the processing and collected data 

We shall always use proven encryption technology, i.e., technology recognized as being the normal standard within the IT sector, when transferring or receiving data on the website.

We have taken the appropriate security measures to protect and avoid the loss, the abusive use or the alteration of the information received on the website.

Should the personal data we have control over be interfered with, we shall react promptly to identify the reason for such interference and take all appropriate remediation measures.

We shall inform you of such interference if requested by law.

.

CLAIMS

You should contact us directly should you want to react to any of the practices described in this Privacy Policy.

You can also file a claim with the Commission Nationale de l’Informatique et des Libertés (CNIL) at the following address: CNIL- Service des plaintes- 3, place de Fontenoy -TS 80175 - 75334 Paris Cedex 07 or with the competent national courts.

Data Protection Officer

Contact Information

For any question and/or claim relating to this Privacy Policy, please contact us by email at:

DPO@notredamedeparis.fr

.

MODIFICATION

We reserve the right to change at any time the terms and conditions of this Privacy Policy. Any change to this Privacy Policy will be posted directly on our website.

.

APPLICABLE LAW AND JURISDICTION

This Privacy policy shall be governed by and construed with the laws of France.

French courts shall have jurisdiction over any conflict arising out of this Privacy Policy.

WHAT IS A COOKIE?

When accessing a website, information about your browsing may be saved in some “cookies” (small text files) installed on your computer or other mobile device. 

A cookie has a unique code which allows web servers they are issued to authenticate the/your connected computer or device each time you browse the website concerned.

A cookie identifies your device browser, but it never identifies you personally. Furthermore, a website server can only read the cookies it has issued, without having access to any other information on your computer or mobile device.

Cookies can be not only be issued by the server of the website you are browsing (“first-party cookies”), but also by our providers/partners (“third-party cookies”).

PERIOD OF VALIDITY OF A COOKIE

Some cookies are temporary, i.e., they expire when you leave the website or close your browser window (« session cookies »). Other cookies remain even after you have closed your browser, sometimes even until you delete them manually (“persistent cookies”).

Cookies usually have an expiration date. Their average lifetime is about 30 days, but cookies can also be set to last for over a year (up to 13 months).

.

GENERAL PURPOSES OF COOKIES

The main purpose of cookies is to facilitate navigation on the website. Thanks to cookies, websites can remember your past visits, and your preferences: chosen language, identity, items in a shopping cart, for example. You can therefore have a faster and easier experience on the website. 

Cookies also give an understanding of how you browse our website and help us to make personalized content or advertising recommendations. The website will therefore be more adapted to your preferences and needs.

COOKIE MANAGEMENT

Before cookies can be installed on your device, we need to obtain your specific and unambiguous consent. This is why there is a cookie consent banner on the homepage of our website, giving you the option to consent, deny or set your cookies preferences. 

It should be noted that most browsers use cookies. You can also delete or decline cookies at any time for free by changing your own software browser. Each browser has a different setup, and the related action can be found in the help menu of your browser. Please follow these links:

Firefox: https://support.mozilla.org/fr/kb/effacer-les-cookies-pour-supprimer-les-information

Chrome: https://support.google.com/chrome/answer/95647?hl=fr

Safari: https://support.apple.com/kb/PH21411?locale=nl_NL&viewlocale=fr_FR

Internet Explorer: https://support.microsoft.com/fr-be/help/17442/windows-internet-explorer-delete-manage-cookies

If you decline cookies, you can still access our website, however you will not take advantage of the most relevant content: some website functionalities will be limited, if not impossible.

.

TYPES OF COOKIES

a. Technical cookies 

Technical cookies only contain your IP address. Because they are necessary to access and browse our website, they do not require your consent.

They are used:

• to navigate on the different pages of the website and use its functionalities,

• to fill forms,

• to check your ID when you access your personal data,

• to secure the website access.

.

b. Functional cookies 

Functional cookies are used to enhance and analyze the performance of our website. They enable us to offer you a more pleasant and personalized browsing experience.

Thanks to functional cookies, we can:

• personalize our services (language, money, location, browsing data, etc.),

• keep your choices and preferences from a previous connection,

• collect information needed for online forms,

• establish statistics,

• analyze our website use.

Like technical cookies, functional cookies are used to make browsing easier and do not require your consent.

c. Advertising cookies

Advertising cookies catalogs your user’s browsing behavior, thus helping us to adapt the advertising content of our website accordingly.

Based on your preferences, we can analyze the performance of the advertising campaigns, in particular by identifying your browsing actions subsequent to these advertising banners. 

Your location data enable us to tailor the ads you receive to inform you of available opportunities around you.

We also use functional cookies to display better-targeted ads, relying on technologies mixing data depending on the websites you have browsed.

The data we collect and share only enable to identify your device. 

For these advertising cookies, your consent is necessary and is asked for when accessing our website. 

.

d. Analytics or performance cookies

Analytics or performance cookies are used to collect information about how you browse our website. These cookies enable us to measure traffic on the sections of our website and improve them accordingly.

Thanks to analytics or performance cookies, we can detect browsing issues and improve our website usability. 

These data are gathered and completely anonymous.

For these cookies, we need your consent.

e. Social media cookies 

Social media cookies are used to connect a website to a third-party social media platform. The buttons which are clicked on to share the website content belong to the social media platforms. When you click on them, a third-party cookie is installed on your device, and if you are connected to the social media, the information will be added to your profile.

As far as these cookies are concerned, we recommend checking what is each social media platform policy relating to data collection and use.

Social media cookies also need your consent.

- Facebook: https://fr-fr.facebook.com/policies/cookies/
- Twitter: https://help.twitter.com/fr/safety-and-security/twitter-do-not-track
- Google: https://support.google.com/accounts/answer/61416?hl=fr
- Instagram: https://help.instagram.com/1896641480634370

.ACCEPTANCE OR REJECTION OF THE COOKIES NEEDING YOUR EXPRESS CONSENT 

Advertising, social media and analytics/performance cookies need your consent. You can freely choose to accept or decline them when first browsing on the website. 

At any time, you can withdraw your consent or change your preferences on our website boutique.notredamedeparis.fr by clicking on the hand icon present on each page of the site at the bottom left.

.

YOUR RIGHTS ON YOUR PERSONAL DATA

Cookies processing personal data are subject to the rules and regulations applying to personal data protection, meaning you have certain rights such as access, rectification, rejection, consent withdrawal, etc.

Please check our Private Policy for details of your rights and the conditions for their application.

.

CONTACT

By email : DPO@notredamedeparis.fr

.

MODIFICATION

We reserve the right to change at any time the terms and conditions of this cookies policy. Any change to this cookies policy will be posted directly on our website.

.

APPLICABLE LAW AND JURISDICTION

This cookies policy shall be governed by and construed with the laws of France.

French courts shall have jurisdiction over any conflict arising out of this cookies policy.