INFORMATION ON PROCESSING AND PROTECTING PERSONAL DATA IN THE WEB SITE AND E-SHOP ENVIRONMENT
In accordance with the relevant provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, related standards and in accordance with the principle of transparency and legality, we publish the following information:
WHO IS THE PERSONAL DATA ADMINISTRATOR:
AMORTISSEUR DONERRE SAS
21, rue de l’Usine
SIREN: 398 966 069
SIRET: 398 966 069 00039
(hereinafter referred to as the “Administrator”)
EXTENT OF PERSONAL DATA PROCESSING:
The Administrator processes the personal data to the extent necessary for the fulfilment of the particular purpose of the processing, which is, in the given case, the operation of the company’s website and e-shop. In doing so, it always proceeds in accordance with the applicable legal regulations and in accordance with the duties of the Administrator.
OBJECTIVES AND LEGAL BASIS OF PERSONAL DATA PROCESSING:
The Administrator processes the personal data for a clear and comprehensible purpose and keeps the records for each processing. Processing purposes include, among others, the following:
- personal data processing in connection with the purchase of goods in the e-shop
In the case of the purchase of goods, the company processes your personal data to the following extent: the name, surname, residence address or delivery address, email address, data on purchased goods and price, e-mail and telephone contact. Additionally, in the case of the company’s customers, data used for company identification are processed as well. Data on means of payment or accounts are also processed in connection with the payment.
We process these personal data to process the order and deliver the goods. Contact details are also passed on to the corresponding carrier for delivery.
Processing such personal data is necessary for the realization of the concluded purchase agreement and as such does not require your consent.
- personal data processing in connection with the handling of complaints
In order to handle a complaint about the goods, we process your personal data within the extent mentioned above. Because it represents fulfilling contractual and statutory obligations, your consent to such processing is not required. The extent of the processing corresponds to the given purpose.
- personal data processing in connection with a user account on the e-shop site
If you set up a user account in the e-shop, personal data will be processed to the following extent: the name, surname, residence address or delivery address, e-mail, telephone contact, account identification data, and in the case of the company’s customer, also company identification data. The purpose of the processing is, in the given case, the realization of the rights and obligations of the purchase contract and the creation and administration of the user account. Within the user account, data on the purchase history are also processed. This processing does not require your consent. Personal data are processed for as long as your user account is active. Personal data are processed by the webmaster.
Personal data processing within orders without registration is described in the above paragraph.
- personal data processing in connection with sending the newsletter and advertising
The website and e-shop contain an optional field where you can voluntarily enter your e-mail address for receiving the newsletter and advertising messages. By filling in and submitting the field, you agree to this processing purpose. Advertisements relate only to our own services, or possibly services of a parent company. If you do not wish to continue to receive the newsletter or advertising messages, unsubscribe or contact us at the above-mentioned contacts, we will cancel the sending without delay.
- Google Analytics
Google Analytics and/or other Google services are used to analyse the websites and e-shop. The data thus processed are in an anonymous form, so they cannot be assigned to a particular person. You can prevent data collection and analysis by Google Analytics by changing browser settings or by installing a special browser extension.
CATEGORY OF PERSONAL DATA
The Administrator processes personal data that can be categorized into the following categories:
- Identity, identification data, (e.g. last name, first name, address, etc.)
- Economic and financial information (banking data)
- Contact data (e.g. Ip addresses, logs, terminal identifiers, login information, time stamp information, etc.)
- Internet (e.g. cookies, plotters, navigation data, audience measurement, …)
RECIPIENTS OF PERSONAL DATA
The recipient means natural or legal entities, public authorities, an agency or any other entity to which the data are communicated.
The Administrator maintains information about the recipients of personal data, always respecting the purpose of processing, as well as any legal obligations and responsibilities.
METHOD OF PERSONAL DATA PROCESSING
The Administrator performs personal data processing in its premises or branches through employees or processors. Processing is done in both paper and electronic form, both in an automated and manual manner.
When processing personal data, the Administrator always endeavours to comply with legal requirements as well as general principles of personal data protection.
PERSONAL DATA PROTECTION
The Administrator ensures the organizational and technical protection of personal data in such a way to prevent unauthorized or accidental access to personal data, their alteration, destruction, loss, unauthorized transmission or unauthorized processing or misuse.
Personal data protection is also an integral part of the Company’s security policy.
TIME OF PERSONAL DATA PROCESSING
The Administrator processes the personal data only for the time necessary for the purpose of processing and in accordance with all the obligations under the legal standards.
DATA SUBJECTS’ RIGHTS
Everyone’s rights are an important element of personal data protection for the Administrator.
Everyone has the right to be informed about the processing of his or her personal data, in particular with respect to the following information:
- purpose of processing,
- the category of personal data concerned,
- recipients or categories of recipients,
- processing time, or possibly the storage of personal data,
- available information on the personal data source,
- whether automated decision making, including profiling, occurs.
Furthermore, the subject has the right:
- of access to personal data,
- of correction, addition,
- of deletion,
- to limit processing,
- of data transferability,
- to object,
- not to be subject to automated individual decision-making, including profiling.
Details of the rights are available at https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles. If you need explanations concerning the rights, do not hesitate to contact us.
If anyone thinks that the Administrator is processing personal data in violation of his or her rights or law, s/he may:
- ask the Administrator for an explanation,
- demand the removal of the unlawful situation,
- contact the relevant supervisory authority
EU citizens’ personal data are not transferred outside the EU.
Information, all communications and actions under the GDPR are provided and made free of charge.
Questions or requests for exercising the rights of the data subject may be addressed in writing to the Company’s registered office or electronically to the e-mail address firstname.lastname@example.org.