Confidentiality Policy
Last updated: June 2024
The website www.nadia-fakhoury.paris (hereinafter referred to as the "Site") is published by the company Nadia Fakhoury Paris (hereinafter referred to as the "Company" or "We" or "Our"), a simplified joint-stock company with a capital of €1,500, whose registered office is located at Address Available on Request, registered with the Paris Trade and Companies Register under number 841 911 381 (VAT number FR 43 84 19 11 381) and represented by Nadia Fakhoury in her capacity as manager.
In the context of its activity of publishing and managing the Site, the Company collects and uses information about you (hereinafter referred to as "Personal Data").
Protecting your Personal Data is essential to the Company. Therefore, the Personal Data you provide to the Company is processed in full compliance with applicable regulations, particularly the data protection regulations applicable within the European Union since May 25, 2018.
As part of the Company's commitment to protecting your Personal Data, it aims to inform you transparently about:
-
The reasons for and the manner in which it collects, uses, and stores your Personal Data;
-
Its role in processing your Personal Data; and
-
Your rights and its obligations concerning the processing of Personal Data.
1) REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL OF APRIL 27, 2016 ON THE PROTECTION OF NATURAL PERSONS WITH REGARD TO THE PROCESSING OF PERSONAL DATA AND ON THE FREE MOVEMENT OF SUCH DATA, AND REPEALING DIRECTIVE 95/46/EC (GENERAL DATA PROTECTION REGULATION).
1. WHAT IS THE PURPOSE OF THIS PRIVACY POLICY?
This policy applies to all uses of your Personal Data by the Company (hereinafter referred to as "Processing").
Its purpose is to inform you about how your Personal Data is processed by the Company, which is the entity responsible for the Processing of Personal Data.
2. WHAT TYPE OF PERSONAL DATA DO WE COLLECT?
The Personal Data collected by the Company about you is provided directly by you through the Site.
Providing Personal Data is a necessary condition for processing and sending your order or for sending a newsletter if you have subscribed to this service.
This includes the following information:
-
Name and surname;
-
Address;
-
Date of birth;
-
Email address;
-
Phone number;
-
Credit card details.
To ensure that your Personal Data is relevant, accurate, and up-to-date, the Company may ask you to review and confirm the accuracy of the Personal Data it holds about you. The Company also asks you to inform it of any changes to your Personal Data.
3. WHEN DO WE COLLECT YOUR PERSONAL DATA?
Your Personal Data is collected by the Company:
-
At the time of creating a customer account;
-
When placing an order for products;
-
When subscribing to the newsletter;
-
During your use of the Site (in the form of cookies).
4. ON WHAT LEGAL BASIS AND FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
4.1. PURPOSES OF PROCESSING
We always process your Personal Data for a specific purpose and only process data necessary to achieve that purpose.
In particular, we process your Personal Data for one or more of the following purposes:
-
Managing the operation and optimization of the Site;
-
Preparing and sending orders;
-
Managing newsletter subscriptions;
-
Providing after-sales service;
-
Communicating with the user by email, mail, or phone about products and services that might interest them, provided we have obtained explicit consent for this purpose when required by law;
-
Managing the customer list;
-
Measuring Site audience;
-
Preventing and detecting fraud, malware (viruses, malicious software), and managing security incidents;
-
Managing potential disputes with users;
-
Responding to official requests from public or judicial authorities.
4.2. LEGAL BASIS FOR PROCESSING
We are not authorized to process your Personal Data without a valid legal basis.
Therefore, we process your Personal Data only to fulfill our contractual obligations to you or for our legitimate interest.
We do not carry out any automated decision-making, including profiling, likely to produce legal effects concerning you or significantly affecting you.
5. WHO HAS ACCESS TO YOUR PERSONAL DATA?
5.1. WITHIN THE COMPANY
We disclose your Personal Data to employees and managers of the Company, to the extent necessary for the performance of their duties.
5.2. OUTSIDE THE COMPANY
We also transfer your Personal Data to third parties outside the Company for the purposes outlined in section 4.1, provided these third parties need the data to carry out tasks entrusted to them for the operation of the Site or the preparation of your order. We do not transfer your Personal Data to these third parties for commercial use without obtaining prior explicit consent from you.
These third parties are:
-
Delivery service providers, for the delivery of products you have purchased on the Site;
-
Any national or international authority when we are legally required to disclose such data.
6. HOW DO WE PROTECT YOUR PERSONAL DATA?
Access to your Personal Data is granted only to employees and/or managers of the Company who need it to perform their duties.
All these employees and managers are subject to strict obligations regarding Personal Data protection and confidentiality.
The Company has also implemented appropriate technical and organizational measures to protect Personal Data against destruction, loss, alteration, unauthorized disclosure, or unauthorized access, whether accidental or unlawful.
7. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will retain your Personal Data for as long as necessary for the intended Processing, in accordance with applicable legal requirements.
Data is retained for a period that does not exceed what is necessary for the following purposes:
-
Order fulfillment: data necessary for processing your request will be kept for a maximum of three years from your last order or our last contact.
-
Newsletter: your data will be kept as long as your subscription is active. You can unsubscribe at any time using the link provided.
8. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA AND HOW CAN YOU EXERCISE THEM?
8.1. YOUR RIGHTS
You have the right to access the Personal Data processed by the Company concerning you. If you believe that any information we hold about you is incorrect or incomplete, you can also request that it be corrected. The Company will promptly correct this information.
You also have the right to:
-
Request the deletion of your Personal Data. In this case, we will delete the requested data promptly, subject to compliance with legal and regulatory obligations that may require us to retain your Personal Data;
-
Request the restriction of the Processing of your Personal Data;
-
Request the portability of your Personal Data, meaning that the Company will provide your Personal Data to a third party in a structured, commonly used, and machine-readable format.
You also have the right to object to the Processing of your Personal Data.
Additionally, you have the option to disable cookies through your browser settings—see the Cookie Policy for more details.
8.2. EXERCISING YOUR RIGHTS
To exercise the aforementioned rights, you can send an email to nadiafakhouryparis@gmail.com, along with a copy of your identity card or passport, so that we can verify your identity.
The Company will respond to these requests or objections in accordance with applicable regulations.
8.3. COMPLAINT TO THE DATA PROTECTION AUTHORITY
You may also file a complaint with the data protection authority (i) in your habitual residence, (ii) at your place of work, or (iii) where the alleged violation took place.
9. CHANGES TO THIS PRIVACY POLICY
This policy may be updated. Any changes in the way your Personal Data is processed will be communicated to you through the usual communication means we use to contact you.