Purpose of This Policy
QUINCAILLERIE is committed to ensuring the security, confidentiality, and ongoing protection of personal data (the “Data”) of users of its services, in accordance with applicable French and European regulations, including the amended French Data Protection Act of January 6, 1978 (LIL) and the General Data Protection Regulation of April 27, 2016 (GDPR).
The purpose of this policy is to inform you of the rules we follow regarding data protection. In particular, it describes how we collect and process your personal data and how you can exercise your rights regarding that data.
QUINCAILLERIE is the data controller for the personal data collected through the Website. This means that we determine the purposes and means of processing the personal data collected.
We have a strict policy in place to ensure the protection of your data.
Scope of the Policy
This policy covers the use of our Site and the services available through this Site.
The data we collect
LA QUINCAILLERIE may collect your Data in the following cases:
- We collect your Data through the form you fill out on our Website to subscribe to our services.
- We also collect your Data when you communicate with us—including with our customer service department—via email or phone. In such cases, we may retain a copy of that correspondence.
- We may also collect your Data when you interact with us on social media.
The categories of data we process are as follows:
- Personal identification data (last name, first name, date of birth, email address, mailing address, phone number)
- Data related to operations and transactions carried out in connection with orders placed on the Site (receipt and issuance of payments)
- Contact information and interactions with us: messages, emails, calls, and interactions on our Site.
- Browsing data: cookies and IP addresses. We use cookies to allow you to access your reserved and personal areas. To learn more about our cookie policy, please see our “Cookie Policy” available HERE.
We do not process any Personal Data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, nor do we process biometric or genetic data, pursuant to Article 9 of the European General Data Protection Regulation 2016/679 of April 27, 2016.
- Use of Collected Data
We collect and process your Personal Data for specific, explicit, and legitimate purposes. As such, we use your Data in connection with the performance of the service agreement you enter into with us. The purposes and legal bases are as follows:
| OBJECTIVES | LEGAL BASIS |
| Perform customer management tasks related to orders, deliveries, invoices, loyalty programs, and customer relationship management. | This processing is necessary for the performance of our respective contractual obligations and/or is carried out with your consent. |
| Create a database of users, customers, and prospects. | This processing is based on your consent and/or our legitimate interest (providing you with relevant information). |
| Send newsletters, solicitations, and promotional messages. | This processing is based on your consent and/or our legitimate interest (providing you with relevant information). |
| Manage the process of handling customer reviews of products, services, or content; | This processing is based on our legitimate interest. |
| Handle any disputes that may arise regarding the use of our products and services; | This processing is (i) necessary for the performance of our respective contractual obligations, and/or (ii) necessary for the establishment, exercise, or defense of a legal claim. |
| Comply with our legal and regulatory obligations. | This processing is (i) necessary for the performance of our respective contractual obligations, (ii) carried out with your consent, and/or (iii) necessary for the establishment, exercise, or defense of legal claims. |
| To manage our Site and perform internal technical operations for troubleshooting, testing, and research purposes. | This processing is based on our legitimate interest (ensuring the security of our Tool and improving its features). |
When we collect your personal data, we will inform you whether certain fields are required or optional. Required fields are necessary for the services to function. As for optional fields, you are entirely free to choose whether or not to provide the information. We will also inform you of the possible consequences of not providing the information.
Sales Prospecting
In accordance with applicable law and with your consent where required, we may use the information you provide to us for marketing purposes (for example, to (i) send you our newsletters, (ii) send you invitations to our events, or any other communications that may be of interest to you).
You may withdraw your consent at any time by (i) clicking the unsubscribe link provided in each of our communications or (ii) contacting us at ecommerce@laquincaillerie.com.
Recipients of the collected data
Only the authorized and designated individuals listed below will have access to certain of your Data:
- Authorized staff at the HARDWARE STORE;
- The HARDWARE STORE’s subcontractors who act in the name and on behalf of the HARDWARE STORE;
- Authorized third parties, such as the relevant courts, mediators, certified public accountants, auditors, attorneys, bailiffs, debt collection agencies,
- Third parties that may place cookies on your devices when you give your consent (For more details, see our “Cookie Policy” available HERE)
Your Data is not disclosed, shared, sold, or rented to anyone other than those mentioned above.
Data Storage and Data Transfer Outside the EU
All of our servers on which your data is stored, as well as those of the service providers used to exchange and store this data, are located in Europe.
As such, the Data we collect is stored on the servers of our service provider, as indicated in the legal notice, which guarantees a high level of security.
In the event that we use processors located outside the European Union, we are committed to ensuring that our processors have safeguards in place that are recognized as adequate under the GDPR. These may include, in particular, processors located in any other country recognized by the European Union as providing an adequate level of protection for personal data (“Adequacy Decision”), subject to a data transfer agreement compliant with the standard contractual clauses adopted by the European Commission, or any other protective measures recognized as sufficient by the European Commission.
Security
We hereby inform you that we will take all necessary precautions and appropriate organizational and technical measures to safeguard the security, integrity, and confidentiality of your Personal Data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorized third parties. We will also use secure payment systems that comply with state-of-the-art standards and applicable regulations.
Data Retention Period
We retain your Data only for as long as necessary to fulfill the purposes for which it was collected.
LA QUINCAILLERIE retains your Data as long as your account remains active, unless you request that it be deleted or that your account be deleted.
The following categories of personal data may also be retained for varying periods of time:
- Financial data related to the billing of your orders (such as payments) is retained for the period required by applicable tax and accounting laws;
- Data used for marketing purposes may be retained for a period of three years from the date your account is deleted, unless you have decided to exercise your right to object under the conditions set forth below.
- Data used to establish proof of a right or a contract, or retained to comply with a legal obligation, may be subject to an interim archiving policy in order to meet our legal, accounting, and tax obligations. This includes, in particular, the five-year general statute of limitations provided for in Article 2224 of the Civil Code.
User Rights
In accordance with applicable regulations, you have certain rights when your Data is being processed:
Right of access (Article 15 of the GDPR): You have the right to obtain confirmation from us as to whether or not Data concerning you is being processed, as well as to receive a copy of all the Data we hold about you;
Right to rectification (Article 16 of the GDPR): You have the right to request that we correct the Data we hold about you if it is incomplete or inaccurate. In such cases, we may ask you to verify the new Data you provide;
Right to be Forgotten (Article 17 of the GDPR): You may request that we erase your Data when we no longer have a legitimate interest in retaining it;
Right to restriction of processing (Article 18 of the GDPR): In certain cases, you may request that we restrict the processing of your Data;
Right to Data Portability (Article 20 of the GDPR): You may receive from us the Data concerning you in a structured, commonly used, and machine-readable format, in particular for the purpose of transmitting it to a third party. Where technically feasible, you also have the right to have the Data concerning you transmitted directly to that third party;
Right to Object (Articles 21 and 22 of the GDPR): You may object at any time to the processing of your Data for reasons related to your particular situation or when your Data is processed for marketing purposes;
Right to Withdraw Consent(Article 13(2)(c) of the GDPR): You have the right to withdraw your consent to the processing of your Data at any time; this will not render any prior processing based on that consent unlawful.
The right to determine what happens to your Data after your death and to choose whether or not we disclose your data to a third party you have previously designated. In the event of your death and in the absence of instructions from you, we undertake to destroy your data, unless its retention is necessary for evidentiary purposes or to comply with a legal obligation.
Exercising Your Rights
You may exercise your rights by submitting a request to our customer support team at the addresses listed below. Any request to exercise a right must be accompanied by a copy of your identification document. We will respond to you within one month of receiving your request. To this end, we may ask you for additional information or documents.
Please note that you do not have to pay a fee to access your personal data or exercise your rights. However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive, or excessive.
If you have any questions regarding the processing of your personal data, or any comments, requests, or complaints regarding its confidentiality, please contact us:
- By email: ecommerce@laquincaillerie.com
- By mail: STYLES BRONZES / LA QUINCAILLERIE – 4 Boulevard Saint Germain, 75005 PARIS
Complaint with the National Commission for Information Technology and Civil Liberties (CNIL)
If the data subject’s rights have not been respected, and after contacting the Data Controller, the data subject may file a complaint with the CNIL:
National Commission for Information Technology and Civil Liberties, 3 Place de Fontenoy, 75334 PARIS
Useful link:https://www.cnil.fr/fr/webform/adresser-une-plainte
Changes to the Privacy Policy
We reserve the right to modify this privacy policy at any time. The most current version of this privacy policy governs our use of your information and will always be available in your account or upon request from JEAN CHARDIN.