Personal data according to European Data Protection Regulation No. 2016/679 (the “GDPR”) is defined as : “any information relating to an identified or identifiable natural person; is deemed to be an “identifiable natural person” a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to his physical, physiological, genetic, psychological, economic, cultural or social identity.
ARTICLE 1 • ABOUT US
Under the GDPR, the person responsible for processing your personal data is the company ECHOS Furniture s.r.l., whose registered office is 55 Roman street, 117430 Leresti, jud.Arges, Romania, registered in the Trade and Companies Register, under number J03/386/1999. ECHOS Furniture s.r.l. is active in the creation, manufacturing and marketing of small furniture items and notably holds the rights to the internet domain boutique55.com.
ARTICLE 2 • YOUR PERSONAL DATA
2.1 What information you submit to us when you place an order on the boutique55.com website and create a customer account, when you contact us, you provide us with the following data :
Your identification data and contact details: your first name, last name, title, language and country from which you interact with us, as well as your contact data such as your email address, postal address, delivery address and your telephone number; Payment data, such as your bank details.
We do not ourselves collect information relating to the payment instrument you use, e.g. credit card information. This information is processed only by our payment service provider and payment instrument providers, subject to strict assurances regarding the security of the information.
We perform these checks to protect our legitimate business interests, to prevent fraud and financial loss, or to comply with our legal obligations. Information about your purchases, orders, returns, etc. ; Information for creating your profile: if you open a customer account, you create a profile and identify yourself during your visits to our website, data will therefore be saved such as your customer identifier and your password, your recent purchases or your preferences; Your personal preferences: this includes your marketing and cookie preferences; Additional personal information: you can also provide us with other personal information such as your date of birth, your gender, your location, etc. We are the only ones to collect and store this additional information, we use it in our analyzes in order to improve our services.
When we ask you to enter your personal data to access a functionality, certain data are mandatory fields, because these are data that we absolutely need to allow you to access this functionality (for example to deliver you a parcel we need your postal address).
It is important that the personal information shared about you is correct and up to date. Please notify us of any changes to information. We do not store sensitive personal information in any way.
Furthermore, the site is not intended for children, so we do not knowingly collect data relating to children. Therefore, you must be at least sixteen years old to communicate your data to us and eighteen years old to place orders on the site. By placing an order, you warrant that you are at least eighteen years old and fully capable of making the purchase in question. If we are informed that a minor has submitted personal data to us, such data will be automatically deleted.
2.2 Data obtained via cookies
We invite you to consult your rights in relation to cookies by reading the information notice on cookies accessible here: Cookie settings Usage data may therefore be collected which includes information on the products and services you have ordered and the way in which you use the site and our applications. It may also include technical data which includes:
Your IP address, search engine and version, location, time zone, browser extension, operating system and platform, as well as other technical data about the device you use to browse our website. Information about your visit, including URLs and your clickstream, to and from our website (including date and time); the products you viewed or searched for; page response time, download errors, time spent on pages, interaction on pages (such as clicks and cursor movements), how you leave pages.
ARTICLE 3 • USE OF PERSONAL DATA
Depending on the type of data we have about you, we may process it for the following purposes: To manage your registration as a user of the site: if you wish to use the services offered on the site, we need to process your data to identify you as a user of the site and allow you to access the different features as well as personalized services . You can delete your account at any time by contacting us; To execute a purchase contract with you: your data is then used to keep you informed of the status of your order, prepare your order, accept your payment, give you access to after-sales service, have your order refunded . They also allow us to prevent possible fraud against you and against us during the purchase. If we consider the action to be fraudulent, this processing may allow us to block the transaction; To respond to customer service requests; To improve our services: by using our site, you are informed that we process your browsing and purchasing data for analysis and statistical purposes. They allow us to better understand the way you use our site in order to improve its ergonomics and the quality of services; For marketing purposes: information on the newsletter, promotional offers, events, competitions and news. If you are subscribed to our newsletter, we process your data to manage your subscription and send you targeted information via email or SMS according to the preferences you have indicated to us. We require your consent for any direct marketing. You can unsubscribe from our communications at any time, for example to unsubscribe from the newsletter, simply click on the “unsubscribe from the newsletter” button. A page then opens and all you have to do is click on the “unsubscribe” button.
Where you have given us your consent to receive direct marketing content, we may use the information you have provided to us for the following purposes:
Sharing information about our events, products, services, current offers; Recommendations on certain products or services that may interest you; Customer studies to better understand your expectations regarding our products and services offered on the site or in stores.
ARTICLE 4 • THIRD PARTIES
As part of your use of our site, you may receive information from third parties with whom we work to provide you with certain services. It could be :
Financial institutions; Fraud detection and prevention entities; Logistics, transport and delivery services; Service providers related to transport, marketing and advertising; Service providers related to customer service; Technology service providers.
We may share your information with these third parties for the following reasons, for example: Payment services in order to make payment; Delivery companies to deliver your order; Credit and fraud prevention agencies to verify your identity; Analysis software that allows us to process your information in order to optimize your purchasing journey on our site. We ask third parties to commit to respecting the security of your personal information in accordance with the Data Protection Act and the GDPR. Third parties may only use your personal information according to our instructions and not for their own use.
ARTICLE 5 • WHAT ARE YOUR RIGHTS ?
We rely on legal grounds for processing your data which depend on how you interact with us on the site.
So when you purchase products on the site, we need your personal data to execute the contract that binds us to you. For example, we need to know your contact details to deliver your order.
We also rely on other legal grounds such as your legitimate interests. For example, we consider that it is in your interest that your identity cannot be used for fraudulent purposes, that our customer service people have access to your order information to better serve you or so that we can better understand your use of our site, to improve its ergonomics and the services we offer you.
The purposes can therefore be summarized as follows :
Purposes Legal bases Order processing and tracking. Customer service management. (Legitimate interest (see execution of a contract to which the data subject is a party or of pre-contractual measures, taken at the request of the data subject)).
Subscription to the newsletter. (Consent of the data subject for this specific purpose).
Creation and management of the customer account. Sending promotional offers, events, competitions and news. Management of registrations and unsubscriptions to commercial offers. Development of statistics, marketing analyzes and customer relationship monitoring. Cookie management. Processing a request made via the online contact form.
5.2 Your consent
Your consent must be given clearly and unequivocally. This is why, when you agree to receive our communications (via newsletters in particular):
We explain to you the use we will make of your data and the type of communication you will receive; You must check a box validating your consent to subscribe; As the site is not intended for children, we do not knowingly collect data relating to children. Therefore, you must be at least sixteen years old to communicate your data to us and eighteen years old to place orders on the site; You can withdraw your consent at any time. If you wish to unsubscribe from our direct marketing via newsletter, you can unsubscribe at any time by clicking on the link located at the bottom of each email “unsubscribe from the newsletter.” A page then opens and you just have to click on the “unsubscribe” button. If you have a customer account on our website, you can also unsubscribe or modify your preferences by connecting to your profile.
Cookies (including those in advertising banners) require a specific opt-out.
5.3 Other rights
In accordance with legal provisions, you have the right to access, rectify, modify, limit deletion and portability of data concerning you:
Right of access to data: offer you the possibility of receiving a copy of the personal data that we hold about you; Right to rectification: give you the possibility of requesting the correction of inaccurate data concerning you; Right of limitation: offer you the possibility of requesting that the processing of your personal data be limited in certain circumstances, in particular if there is a disagreement over the accuracy of your data or the legitimacy of the processing; Right to delete your personal data: give you the means to ask us to delete your data; Right to data portability: allow you to transmit your data to another data controller. In addition, you also have the right to submit a complaint to a data protection authority.
Regardless of the purpose or legal basis under which we process your personal data, you can therefore at any time and without any cost send us an email to the following address: email@example.com, to assert your rights.
Please note, however, that we are not always able to respond to this request, for legal reasons which we will explain to you, if necessary, after receiving your request.
If you have a customer account, you can also modify your personal contact details from your customer area, by identifying yourself using your email address and password.
ARTICLE 6 • SECURITY
Our website has appropriate security measures in place to protect against loss, use or unauthorized access, modification or disclosure of your personal information. All data you provide to us is saved on secure servers. We have also put in place procedures to manage any personal data breach.
In the case of creating a customer account, you have chosen a password. You are responsible for maintaining the confidentiality of this password. This is why we recommend that you choose an effective password and not share it.
We recommend that you only connect to secure networks, preferably private networks. Stay aware of the risks involved on public Wi-Fi networks. If you receive an email claiming to be the brand we work for and asking you to provide personal information, please do not respond and forward the email to us so that we can take necessary action.
All of our service providers work within the European Economic Area (EEA) and must therefore comply with the same legislation as us. In the event that some are located outside this space, we would like to assure you that the transfer of your data will be carried out with appropriate care. We have signed contractual clauses with each of them within the framework of the GDPR.
ARTICLE 7 • STORAGE PERIOD
The retention period of your data depends on the purposes for which it is processed (see article 5 above) and as indicated in the table below.
We keep your data as long as you remain a customer or user of the site and throughout your active relationship on the boutique55.com site or with ECHOS Furniture s.r.l. Your relationship with us ceases to be considered active if, for a period of three (3) consecutive years, you have not purchased a product on the boutique55.com site or from ECHOS Furniture s.r.l. or have not consulted the site. After this three (3) year period, we will only retain specific personal data which must be retained (i) in light of the purposes for which it was obtained, (ii) if it is required to comply with a legal obligation or (iii) if necessary, to protect our rights and legal position.
Purposes: Order processing and tracking. (Conservation for the duration of the commercial relationship and 3 years after the end of said relationship.)
Purposes: Customer service management. Processing requests via online contact form.(Retention for the time necessary to respond to your query or request and for 3 years after the last contact.)
Purposes: Customer account management.
Purposes: Marketing: management of promotional offers and marketing events.(Conservation until you unsubscribe according to the process(es) set up on the site. In the event of participation in promotional actions or events, the data is kept for 3 years, from the end of the action or event.)
Purposes: Marketing: subscription to the Newsletter, news on the site, competitions.(Conservation until you unsubscribe according to the process(es) set up on the site. In the absence of unsubscription, retention for 3 years after your last consultation of the newsletter or news or participation in the competition.)
Purposes: Development of statistics, marketing analyzes and customer relationship monitoring.(We will keep your data as long as you remain a customer but also afterwards, in order to respond to any questions, complaints, or to maintain all the necessary data, in order to meet legal, accounting or analysis requirements. As part of a subscription to our newsletter, we will no longer contact you if you have not opened our newsletters for more than three years.)