This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.iahoo.co (the “Site”).
WHO IS THE DATA CONTROLLER?
The Site is operated by Mr. Julien VACHER as an individual entrepreneur.
The data controller is Mr. Julien VACHER. He defines the purpose for which and how personal data is used.
PERSONAL INFORMATION COLLECTED
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and certain cookies are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
Additionally, when you make or attempt to make a purchase through the Site, we collect certain information from you: your first and last name, email address, billing address, shipping address, payment information (including credit card numbers). This automatically collected information is referred to as “Order Information.”
The terms “Personal Information” in this Privacy Policy cover both Device Information and Order Information.
For what purposes is personal data collected? And how long is it stored?
1 – Relationship with the customer
|
Purpose |
Legal basis for processing |
Duration of storage in operational base |
Archiving retention period |
|
The sale of products and delivery |
Execution of the contract |
Duration of the contractual relationship |
5 years (article L110-4 of the commercial code) |
|
Payment Management |
Execution of the contract |
Duration of the contractual relationship |
5 years (article L110-4 of the commercial code) |
|
Response to questions/requests made via the contact form including after-sales service |
Legitimate interest to process personal data strictly necessary to manage requests and complaints as well as to answer questions. AND/OR Legal Obligations (Product Complaints) AND/OR Execution of the contract if the request relates to the order or the product(s) purchased |
Time required to process the request |
No archiving Processing related to the question itself. If the question involves after-sales service (e.g., refund), it then switches to the “product sales and delivery” processing. |
|
Fight against fraud |
Legitimate interest |
No conservation in active database |
L 133-24 of the CMF, i.e. 13 months after the debit |
|
Accounting and legal obligations |
Legal obligation |
Until the tax return for the accounting year |
10 years from the tax return for the accounting year |
2 – Commercial prospecting and maintaining customer relations
|
Purpose |
Legal basis for processing |
Duration of storage in operational base |
Archiving retention period |
|
Sales prospecting (sending emails, SMS) for customers and prospects |
Consent (L 34-5 CPCE) OR Legitimate interest |
Until consent is withdrawn / no more than 3 years after collection or last contact. |
No archiving |
|
Managing newsletters for the blog |
|||
|
Promotional offers on products |
|||
|
Product satisfaction and quality survey or request for feedback on the products supplied |
Legitimate interest |
3 – Management of GDPR obligations
|
Purpose |
Legal basis for processing |
Duration of storage in operational base |
Archiving retention period |
|
Management of requests to exercise rights |
Legal obligation |
Demand management time |
5 years from the end of the contractual relationship (client or collection (prospect |
|
Data Breach Management |
Legal obligation |
Breach Management Time |
10 years from the closing of the file |
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties who help us use it for the purposes described above.
So, we use Shopify to host our online store – to learn more about Shopify’s use of your Personal Information, please visit: https://www.shopify.fr/legal/confidentialite.
We also use Google Analytics to better understand how our customers use the Site – to learn more about Google’s use of your Personal Information, please visit: https://www.google.com/intl/fr/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We also use subcontractors to whom we transmit some of your personal information in order to execute the contract. These include:
- technical, logistics, transport and delivery service providers,
- service providers related to customer service and marketing,
- payment service providers and fraud detection and prevention entities.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, respond to a subpoena, search warrant or other lawful request for information we receive, or to protect our rights.
YOUR RIGHTS
As a natural person using the Site, you have the right to exercise the following rights:
- A right of access, rectification and deletion of the data collected,
- A right to object to the processing of your data
- A right to restriction of processing,
- A right to the portability of collected data
- Can formulate directives relating to the conservation, deletion and communication of his personal data after his death.
If the data controller detects a personal data breach likely to create a high risk for your rights and freedoms, it undertakes to inform the users concerned as soon as possible, and in accordance with the applicable regulations.
You can exercise all of these rights by writing to the following email address: contact@iahoo.co
For your request to be processed, you must attach a copy of an identity document to your request.
It is also possible to file a claim (or complaint) with the CNIL.
You can send it by post by writing to: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.
You can also submit your complaint via the online complaints service: https://www.cnil.fr/fr/plaintes
TRANSFERS OF DATA OUTSIDE THE EU
You are informed that data concerning you is transmitted for the purposes mentioned above to subcontracting companies located in countries outside the European Union which have a lower level of data protection than in the European Union.
The main companies concerned are Shopify (store hosting) and Stripe (payment platform).
These two companies have adopted data protection systems that comply with the regulations applicable in the European Union.
COOKIES AND TRACKERS
“Cookies” are tracers placed and read when you visit a website.
These tracers represent a series of information, identified by a name, which is transmitted to the Internet user's browser which will store it and send it back to the web server each time the Internet user connects to the website in question.
Some cookies are necessary for the website to function properly. In accordance with current legislation, we do not ask for your consent for these cookies.
You can find the list on the page dedicated to cookies, under the heading necessary cookies: xxxx
Other cookies are subject to your consent.
You consent to the deposit of cookies, the information about which is communicated to you in the cookie information banner visible when you first connect to the site by clicking on the “Accept” button appearing on the banner;
The agreement thus given is valid for a maximum period of twelve (12) months from the first deposit in the terminal equipment.
You refuse the recording of cookies in your terminal or browser by:
- clicking on the “continue without accepting” button or by setting your choices in the banner
- configuring your choices in the cookie manager accessible on page xxxx
CHANGES
We may change this Privacy Policy due to changes in our practices or for other operational, legal or regulatory reasons.