Privacy policy
General on Data Protection of April 27, 2016 (hereinafter “GDPR”).
In any case, we undertake to respect the following two (2) essential principles:
- You remain in control of your Personal Data;
- Your Personal Data is Processed in a transparent, confidential and secure manner.
What is personal data?
“Personal Data” is any information concerning You which allows You to be identified directly or indirectly. Your first and last name or a photo can, for example, allow you to be directly identified. Your email address allows you to be identified indirectly.
What is Treatment?The word “Processing” means any operation, or set of operations, relating to Personal Data, whatever the process used (collection, recording, organization, conservation, adaptation, modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, reconciliation or interconnection, locking, erasure or destruction, etc.) WHO IS RESPONSIBLE FOR THE PROTECTION OF YOUR PERSONAL DATA?Your Personal Data is collected and processed by Charlie dans les étoiles, SAS, with capital of €10,000, whose head office is 12 rue Turgot, Paris 75009 – RCS Paris n° 909971475 (hereinafter referred to as “the Seller”) . Legal reminder:The “Data Controller” is, within the meaning of the Data Protection Act and the GDPR, the person who determines the means and purposes of the Processing. The “Subcontractor” is a person Processing Personal Data on behalf of the Data Controller, he acts under the authority of the Data Controller and on the instructions of the latter. For any questions relating to the management and use of Your Personal Data, You can contact us at: contact@charliedanslesetoiles.com
SOME DEFINITIONS ?The terms used below have, in this Privacy Policy, the following meaning: · “Customer”: designates the Seller’s co-contractor who guarantees to have the status of professional as defined by French law and jurisprudence. As such, it is expressly provided that the Client acts for purposes falling within the scope of his commercial, industrial, artisanal, liberal or agricultural activity. · “Order”: designates the purchase of Products by a Customer from the Seller on the Site. · “Personal data” or “Personal data”: means any data allowing a natural person to be directly or indirectly identified in the context of this Privacy Policy and as defined in Article 4 (1) of the GDPR; · “Concerned Persons” or “You”: refers to the persons concerned by the Processing operations carried out by the Seller as Data Controller. For the purposes of this Privacy Policy, the Data Subjects are Users. · “Products”: refers to all the products available on the Site. · “Processing” or “Process”: means any of the operations referred to in Article 4 (2) of the GDPR, carried out on the Personal Data on behalf and according to the instructions of the Seller in accordance with Article 4 (8) of the GDPR.
· “Site”: designates the Seller’s website accessible at the following address: www.charliedanslesetoiles.com. · “Users”: refers to any person who accesses and browses the Site, whether a Customer or a simple Internet user. WHAT ARE THE PURPOSES AND LEGAL BASES OF THE PROCESSING WE IMPLEMENT?When the legal basis used for the Processing operations that We carry out is based on the pursuit of a legitimate interest, You have the possibility as a Data Subject, upon simple request, to obtain additional information relating to the balancing of interests. In all cases, the Seller only collects the Personal Data necessary for the explicit purposes determined below: PURPOSEDETAILS OF THE PURPOSE PURSUEDLEGAL BASISManagement of requests for informationProcessing of requests for information, responses to requests for information, follow-up of requests, informative follow-up.Contractual, the Processing is necessary for the execution of a contract or pre-contractual measures.Management and monitoring of accounts and contractsCustomer registration, customer account creation, contract management.
Contractual, the Processing is necessary for the execution of a contract or pre-contractual measures.User consent when requiredOrder managementOrder management and commercial monitoringContractual, the Processing is necessary for the execution of a contract or pre-contractual measures;Consent of the User when this is required. Payment managementPayment for Products ordered, monitoring of invoicing, maintaining accounting records and legal supporting documents.Legal obligation arising from articles L102 B et seq. of the Book of Tax ProceduresSending news and commercial offersManagement of newsletter subscriptions, sending of commercial offersConsent of the User when this is required;Legitimate interest (promotion of Products)The proper functioning and permanent improvement of the SiteEnsure the proper functioning and permanent improvement of the Site and its functionalities.Our legitimate interest in guaranteeing the best level of operation and quality of the Site, in particular through visit statistics;User Consent when required.Management of requests for rights arising from the GDPR and the amended Data Protection ActThis Processing covers all operations necessary for monitoring rights requests sent to the Seller (qualification of the request, investigations, carrying out specific technical operations, etc.). It only concerns cases where the Seller acts as Data Controller.Legal obligation arising from the GDPR and the Law.
The Seller will also be authorized to use this Personal Data for the purpose of fulfilling a legal or regulatory obligation. In any case, and for each defined purpose, the Seller will use all means in its possession to ensure the security and confidentiality of the Personal Data entrusted to it, in compliance with the laws and regulations in force. WHAT PERSONAL DATA IS COLLECTED?The mandatory or optional nature of the Personal Data collected and the possible consequences of a failure to respond are indicated during the various contacts with the Data Subjects. You can consult the details of the Personal Data that we may have about you below: (The details of the information provided below are not intended to be exhaustive and aim above all to inform you about the categories of Personal Data that the Seller is likely to Process).
TREATMENTSPERSONAL DATA COLLECTEDManagement of requests for information· E-mail address ;· Order number ;Management and monitoring of accounts and contracts· Last name First Name ;· E-mail address ;· Telephone number;· Date of birth ;· Order number.Order management· Last name First Name ;· E-mail address ;· Telephone number.Payment management· Bank card number, expiration date, security code;· Personal data necessary for issuing invoices.Sending news and commercial offers· E-mail addressThe proper functioning and permanent improvement of the SitePersonal Data collected via cookies and other trackers present on our Site.For more details, consult our cookies charter www.charliedanslesetoiles.comManagement of requests for rights arising from the GDPR and the amended Data Protection Act· Last name First Name ;· E-mail address ;· If applicable, copy of proof of identity.
In any case, the Seller undertakes to Process all Personal Data collected in accordance with the GDPR and the amended Data Protection Act. WHO DOES YOUR PERSONAL DATA SEND TO?Within the limits of their respective responsibilities and for the purposes mentioned above, the main people who will be likely to have access to your Personal Data are the following: · Authorized personnel of the Seller;· The service providers responsible for the management, hosting of the Site and the Seller’s IT system;· Service providers responsible for payment management;· Where applicable, the authorized personnel of our subcontractors;· Where applicable, the courts concerned, mediators, accountants, auditors, lawyers, bailiffs, debt collection companies, police or gendarmerie authorities in the event of theft or judicial requisition;· Third parties who may place cookies on your devices when you consent. Your Personal Data is not communicated, exchanged, sold or rented to any person other than those mentioned above without your express, prior consent and in accordance with the applicable legal and regulatory provisions. HOW LONG DO WE KEEP YOUR PERSONAL DATA?We keep Your Personal Data only as long as necessary for the purposes pursued, as described above, and summarized below.
WHO DOES YOUR PERSONAL DATA SEND TO?Within the limits of their respective responsibilities and for the purposes mentioned above, the main people who will be likely to have access to your Personal Data are the following: · Authorized personnel of the Seller;· The service providers responsible for the management, hosting of the Site and the Seller’s IT system;· Service providers responsible for payment management;· Where applicable, the authorized personnel of our subcontractors;· Where applicable, the courts concerned, mediators, accountants, auditors, lawyers, bailiffs, debt collection companies, police or gendarmerie authorities in the event of theft or judicial requisition;· Third parties who may place cookies on your devices when you consent. Your Personal Data is not communicated, exchanged, sold or rented to any person other than those mentioned above without your express, prior consent and in accordance with the applicable legal and regulatory provisions. HOW LONG DO WE KEEP YOUR PERSONAL DATA?We keep Your Personal Data only as long as necessary for the purposes pursued, as described above, and summarized below.
TREATMENTSManagement of requests for informationFor the entire duration necessary for the processing of the request then storage in intermediate archiving for three (3) years at the end of the contractual relationship, or for three (3) years after the last contact with the SellerManagement and monitoring of accounts and contractsFor the entire duration of the contractual relationship then storage in intermediate archiving for the limitation period in force (five (5) years for proof purposes).Accounting documents are also kept for 10 years.Order managementFor the entire duration of the contractual relationship then storage in intermediate archiving for the limitation period in force (five (5) years for proof purposes).Accounting documents are also kept for 10 years.Payment managementFor payments by bank card, in accordance with article L.133-24 of the Monetary and Financial Code, this data may be kept for the purpose of proof in the event of a possible dispute of the transaction or complaint, in intermediate archives, during a period of thirteen (13) months following the debit date (duration extended to 15 months for deferred debit payment cards).The Data relating to the PAN and visual cryptogram is not stored and the Data relating to the expiration date is deleted when its expiration date is reached.The invoices and accounting data issued are kept for ten (10) years from their issue.Sending news and commercial offersPersonal Data is kept until consent is withdrawn (unsubscribe via the link provided for this purpose) or, where applicable, for the entire duration of the contractual relationship, then stored in intermediate archiving for three (3) years at resulting from the contractual relationship, or for three (3) years after the last contact with the Seller.The proper functioning and permanent improvement of the SiteThe retention period of the various cookies installed by the Seller is detailed in the cookie charter accessible at the address: www.charliedanslesetoiles.com.Management of requests for rights arising from the GDPR and the amended Data Protection ActPersonal data relating to the management of legal requests are kept for the entire period necessary to process the request then stored in intermediate archiving for the applicable criminal limitation period, namely six years, in intermediate archiving (Art. 8 of the code of criminal procedure). WHAT ARE YOUR RIGHTS ?In accordance with the Data Protection Act and the GDPR, you have the following rights:
Right of access (article 15 GDPR), rectification (article 16 GDPR), updating, completeness of Your Personal Data (learn more)· Right to block or erase Your Personal Data (article 17 GDPR), when it is inaccurate, incomplete, equivocal, out of date, or whose collection, use, communication or conservation is prohibited (learn more )· Right to withdraw your consent at any time (article 13-2c GDPR)· Right to limit the Processing of Your Personal Data (article 18 GDPR)· Right to object to the Processing of Your Personal Data (article 21 GDPR) (learn more)· Right to portability of the Personal Data that You have provided to us, when Your Personal Data is subject to automated Processing based on Your consent or on a contract (article 20 GDPR)· Right to define the fate of Your Personal Data after Your death and to choose whether we communicate (or not) Your Personal Data to a third party that You have previously designated (article 85 LIL) (find out more). These rights can be exercised by: · Simple request by email to contact@charliedanslesetoiles.com; Or· Mail to the address: Charlie in the stars, 12 rue Turgot, Paris 75009. Finally, you can also lodge a complaint with the supervisory authorities and in particular the CNIL (https://www.cnil.fr/fr/plaintes).
WHAT ABOUT CONNECTION DATA AND COOKIES?The Seller uses connection data on its Site (date, time, Internet address, protocol of the visitor's computer or telephone, page viewed) and cookies (small files saved on your computer, tablet or telephone) allowing you to identify yourself, memorize your consultations, and benefit from measurements and statistics of the Site's audience, particularly relating to the pages consulted. Depending on the purposes, Users can consent, refuse or choose the deposit of certain types of cookies on their terminals. The terms of deposit of cookies and the rights available to Users are provided for by the Site's Cookies Charter. To find out more about cookies (how to manage them, delete them, identify them), you can consult:· The CNIL website· Our Cookies Charter accessible at: www.charliedanslesetoiles.com ARE YOUR PERSONAL DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?As a matter of principle, we process your Personal Data within the European Union. However, given the nature of our activity, and subject to informing you in advance, we may be required to transfer your Personal Data outside the European Union.
In this case, the Seller will inform you of the measures taken to control this transfer and ensure compliance. WHAT SECURITY MEASURES ARE IMPLEMENTED TO PROTECT YOUR PERSONAL DATA?The Seller and its possible Subcontractors undertake to implement all necessary technical and organizational measures to ensure the security of the Processing of Personal Data and the confidentiality of your Personal Data, in application of the Data Protection Act. of the GDPR. As such, we take all necessary precautions, taking into account the nature of your Personal Data and the risks presented by the processing to preserve its security and, in particular, prevent Personal Data from being distorted, damaged, or from third parties unauthorized persons have access to it. As such, the Seller takes the necessary precautions, taking into account the nature of Your Personal Data and the risks presented by our Processing, to preserve the security of the Personal Data and, in particular, to prevent them from being distorted, damaged, or unauthorized third parties have access to it (authentication process for our customers with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain Personal Data, etc.). UPDATE TO OUR PRIVACY POLICY:This Privacy Policy may be modified in particular following various legislative and regulatory developments. To this end, the User will be able to consult the update directly on the Site.