POLICY PRIVACY
The individual entrepreneur, Mrs. Marie Victoire MENDOUGA NDZIE, registered in the Rennes trade and companies register under the number A 904 130 002, whose intra-community VAT number is FR67904130002 and whose head office is located at 25, la Beunelais 35360 Montauban-de-Bretagne (“Maison Afro”) publishes the website www.maisonafro.com (and offers the online sale of cosmetic products.
It undertakes, as data controller, that the processing of personal data carried out in the context of its activity complies with European Regulation No. 2016/679, known as the General Data Protection Regulation (the "GDPR ") of a personal nature as well as the Data Protection Act.
In this privacy policy (the "Policy"), we explain how and why we use your data, what your rights are and how to exercise them.
What is personal data?
Personal data (“Personal Data” or “Data”) means any information relating to an identified or identifiable natural person:
directly (surname, first name, email address) or
indirectly (IP address, geolocation).
Who is this Privacy Policy for?
This Policy applies to anyone who visits the Site (the "User") and/or purchases products on the Site (the "Customer").
Who collects your Data?
The data controller, within the meaning of the European Data Protection Regulation, is Maison Afro.
As part of its activity, Maison Afro may use subcontractors.
How do we collect your Data?
The Personal Data that the User or Client agrees to communicate to us is collected online, by email or by telephone and is subject to the provisions of this Policy.
Why do we collect your Data?
Some of your Personal Data is necessary for the processing and provision of our services, namely access to the Site and the purchase of products on the Site. The lack of information may, in some cases, prevent the proper functioning of these services. This mandatory information will be marked with an asterisk in our collection forms available on the Site.
For information purposes, you will find below a non-exhaustive list of categories of data collected corresponding to the purposes pursued by our collection.
To enable you to purchase products:
Categories of Data collected: identity data (surname, first name), contact data (email address, postal address), customer data (shopping cart, billing and delivery address),
Category of data subjects: Customers.
Legal basis: contractual measures taken at your request.
When creating a customer account (“Customer Account”):
Categories of Data collected: identity data (surname, first name) and contact data (e-mail address, delivery and billing postal address).
Category of data subjects: Customers.
Legal basis: contractual measures taken at your request.
To respond to your request made via our contact form:
Categories of Data collected: identity data (surname, first name), contact data (e-mail address), subject of the request.
Category of data subjects: Users.
Legal basis: legitimate interest in order to offer you our services.
To offer you a subscription to our newsletter:
You can subscribe to our newsletter by email.
Categories of Data collected: identity data (surname, first name) and contact data (email address).
Category of data subjects: Users.
Legal basis: your consent obtained through your subscription to the newsletter.
You can, at any time, decide to unsubscribe from this newsletter, by clicking on the link provided for this purpose, present in each of the newsletters.
When publishing content on our Site, in particular an opinion on the products offered for sale or with regard to their description on the dedicated pages:
Categories of Data collected: surname, first name, nickname, contact address, content of the comment.
Category of data subjects: Users.
Legal basis: your consent when you publish your content.
To carry out statistical operations of attendance:
Categories of Data collected: browsing data (IP address, type of browser).
Category of data subjects: Users.
Legal basis: the legitimate interest of Maison Afro for the operation of the Site and/or your consent when you accept the deposit of statistical cookies.
Are you obliged to provide your Personal Data?
When you wish to order on the Site, the processing of your Data related to your order and the delivery of products is mandatory. Indeed, we cannot proceed with your order without processing your Data (email address in particular).
Please note that when you give your consent to the processing of your Personal Data, you have the option of withdrawing this consent at any time via the dedicated address: contact@maisonafro.com
How long do we keep your Data?
We keep your Data only for the time necessary to carry out the operations for which they were collected, except when the law provides for a different retention period.
By way of example and without this list being exhaustive:
To manage contractual relations, Personal Data is kept for a maximum of 5 years following the end of the contract.
To carry out statistical and attendance operations, Personal Data is kept for a maximum of 13 months, it will then be destroyed.
You acknowledge that the Data that you communicate to us and which are stored in our information systems are accurate and serve as proof of your identity.
With whom do we share your Data?
The Data collected is shared, according to their respective needs and in accordance with the purposes mentioned above, with:
- the staff of Maison Afro;
- the personnel of the external delivery services;
- the staff of the external hosting services of our Site;
- the staff of external Site maintenance services;
- the staff of external services sending confirmation emails following orders for products on the Site;
- the staff of external services in the context of the management of newsletters;
- the personnel of external services within the framework of commercial prospecting.
Are your Data sent outside the European Union?
We may share some of your Data outside the European Union with service providers located outside the European Union. Nevertheless, each transfer is governed by a mechanism providing protection equivalent to that guaranteed by European Union law.
As the Site is accessible on the Internet, its content and therefore your publications are likely to be accessible outside the European Union.
What security measures have we taken to protect you?
We undertake to implement all the technical and organizational measures necessary to respect the protection of your Personal Data.
In particular, we carry out audits of our service providers in order to ensure the proper implementation of security measures to guarantee the integrity, confidentiality and availability of your Data.
Our contracts with our service providers include a section dedicated to Data protection, in accordance with applicable laws.
What are your rights ?
In accordance with the Data Protection Act and the GDPR and, subject to compliance with the legal obligations imposed on Maison Afro in the context of its activity, you can exercise the following rights:
Request a copy of User Account Content Data – Right of Access
Correct inaccurate Data concerning you – Right of rectification
Request the erasure of certain Data concerning you; however, this request is incompatible with the processing of an order – Right to erasure
Oppose that we process your Data; this request is incompatible with the processing of your product order – Right of opposition
Decide at any time to withdraw your consent – Right of withdrawal
Limit the use of your Data while your request is being processed – Right to restriction of processing
Oppose the profiling of your Data – Right to oppose profiling [OL&CO5]
Exercise your right to data portability – if applicable
When a Data breach likely to create a high risk for your rights and freedoms is detected, you will be informed of this breach as soon as possible.
You can formulate instructions relating to the storage, deletion and communication of your Personal Data after death, in accordance with article 85 of law 78-17 of January 6, 1978.
How to exercise your rights?
These rights as well as these directives can be exercised and addressed by writing to us:
by post to the following address: la Beunelais 35360 Montauban-de-Bretagne
electronically: contact@maisonafro.com
In order to allow us to identify you quickly and to respond to you, you will attach to your request all elements allowing your identity to be established (in particular customer number or request made directly via your account). A response will then be sent to you within 1 month of receipt of the request. In certain cases, related to the complexity of the request or the number of requests, this period may be extended by 2 months.
You can also contact the Commission Nationale de l'Informatique et des Libertés (CNIL), the regulatory authority responsible for enforcing the regulations on the protection of personal data in France, by internet https://www.cnil. fr/fr/agir or by post to the following address: Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX.
Modification of this Policy
We may update this Policy by posting a new version on our Site. We undertake not to lower the level of confidentiality of your Data substantially without informing you and obtaining your consent.
Contact
A question regarding the Privacy Policy, contact us:
Electronically: contact@maisonafro.com
By post: la Beunelais 35360 Montauban-de-Bretagne