Privacy policy

PRIVACY AND DATA PROTECTION POLICY

This Privacy Policy applies to AZTELUSSO customers, including current, former and potential customers, visitors to its E-commerce "www.maisonskorpios.com" or its stores.

The purpose of this policy is to inform you about how we process your personal data in compliance with Regulation (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR").

WHO COLLECTS YOUR PERSONAL DATA?

The data controller is the company AZTELUSSO, SASU, registered under number 882 736 929 at the R.C.S. of Paris, whose registered office is located at 62 RUE DE RENNES - 75006 PARIS, represented by Mrs. Adriana ABASCAL, referred to as "AZTELUSSO" or the "E-commerce" or "we".

WHAT DATA DO WE COLLECT, WHY DO WE COLLECT IT, AND HOW LONG DO WE KEEP IT?

Personal data is data that can be used to identify an individual, either directly or by cross-referencing with other data.

Mandatory personal data are marked with an asterisk and are required to provide our services.

We collect data in the following categories:

Buy online

Purpose of processing	Type of personal data collected	Legal basis
- Process and manage the tracking of your order - Manage payments and invoices - Manage deliveries, complaints, queries, returns and refunds - Provide and monitor additional services, such as loyalty programs, discount codes, etc.	- Identification data (including title, surname, first names, e-mail and postal addresses for delivery and/or billing, telephone number) - Payment data - Account ID - Any information you wish to send us as part of your contact request or in the course of our contractual relationship.	Contractual performance and legitimate interest
Data retention
In principle, your personal data is kept for the duration of the contractual relationship, and then for a period of 5 years for evidentiary purposes. Exception : - Your personal data will be deleted before you ask us to do so; - Your invoices are archived for 10 years for accounting purposes; - Your credit card details are stored by the payment service provider partner of our subcontractors WEJUST and Shopify Payments. Data relating to the visual cryptogram on your credit card is not stored.

In-store shopping

Purpose of processing	Type of personal data collected	Legal basis
- Processing and tracking your order - Manage payments and invoices - Manage deliveries, complaints, queries, returns and refunds - Provide and monitor complementary services, such as loyalty programs, discount codes, etc.	- Identification data (including title, surname, first names, e-mail and postal addresses for delivery and/or billing, telephone number) - Payment data - Any information you wish to send us as part of your contact request or in the course of our contractual relationship.	Contractual performance and legitimate interest
Data retention
In principle, your personal data is kept for the duration of the contractual relationship, and then for a period of 5 years for evidential purposes. Exception : - Your personal data will be deleted before you ask us to do so; - Your invoices are archived for 10 years for accounting purposes; - Your payment details are not stored.

Create an account

Purpose of processing	Type of personal data collected	Legal basis
- Create and manage your account - Provide you with details and history of your orders - Locate and authenticate your account	- Identification data (including title, surname, first names, e-mail and postal addresses for delivery and/or billing, telephone number, date of birth) - Technical data relating to E-commerce use (IP address, clicks and navigation) if consent to third-party cookies. - User data (including purchase history)	Our legitimate interest as a company to provide you with the best possible service
Data retention
In principle, your data is kept for the duration of your account, and then for a period of 5 years for evidentiary purposes. As an exception, if your account is inactive for two years, your personal data will be deleted if you do not reply to our reactivation e-mail.

Customer service

Purpose of processing	Type of personal data collected	Legal basis
- Answer your questions, handle your complaints and requests for returns, provide technical assistance and improve the customer experience - Contact you by e-mail, telephone, social networks or any other means to answer your questions about orders, deliveries or returns, or to ask you to participate in a customer survey	- Identification data (including title, surname, first names, e-mail address, telephone number) - Account ID - User data (including e-mail and chat exchanges) - Transaction data (including order, payment and delivery information)	Your consent when you create your account
Data retention
In principle, your personal data is kept for the duration of the contractual relationship, and then for a period of 5 years for evidential purposes. By way of exception, your personal data will be deleted prior to your request.

Loyalty program

Purpose of processing	Type of personal data collected	Legal basis
- To provide you with our loyalty program, including personalized offers, promotions and recommendations, services, events, etc. - Create, manage and keep your membership up to date and active - Provide you with your purchase history, order details and membership status - Send you invitations to upcoming events, competitions and customer surveys	- Identification data (including title, surname, first names, e-mail address, telephone number, date of birth) - Account ID - Transaction data (including order, payment and delivery information)	Your consent when you create a loyalty account
Data retention
In principle, your personal data is kept for the duration of the contractual relationship, and then for a period of 5 years for evidential purposes. By way of exception, your personal data will be deleted prior to your request.

Newsletter and promotion

Purpose of processing	Type of personal data collected	Legal basis
- Send newsletters, solicitations and promotional messages to our customers and visitors - Build a file of customers and prospects	- Identification data (in particular title, surname, first names, e-mail and postal address for delivery and/or billing, telephone number, date of birth) - Technical data relating to e-commerce usage (IP address, clicks and navigation) - Account ID - User data (including purchase history)	Your consent when you subscribe to our newsletter and personalized SMS messages
Data retention
In principle, your personal data will be kept for 3 years from the date of our last contact. By way of exception, your personal data will be deleted prior to your request.

Business development and analysis

Purpose of processing	Type of personal data collected	Legal basis
- Evaluate, develop and improve our products, services, customer experience, supply chain and stores - Perform analyses and segmentations to offer you a personalized shopping experience - Collect statistics, using anonymization techniques, transform personal data into anonymized data (non-personal data), to improve our services and stores - Share personal data with various social networks, search engines and advertising networks ("Advertising Partners") in order to optimize advertising targeting. Our advertising partners are Facebook, Instagram, Snapchat, Pinterest, TikTok and YouTube for advertising on social networks and Google for online advertising networks such as Google Ads and Google Marketing Platform.	- Identification data (including title, postal delivery address, date of birth) - Technical data relating to the use of E-commerce (IP address, clicks and navigation) - Account ID - User data (including purchase history) - Transaction data (order history)	Our legitimate interest as a company
Data retention
Your personal data will be stored for as long as is necessary to achieve the purpose for which it is to be used. Once the purpose has been achieved, the data will be deleted immediately. As an exception, your personal data will be deleted prior to your request.

Compliance with the law

Purpose of processing	Type of personal data collected	Legal basis
- Comply with local legislation. These obligations may vary from country to country, and include rules on taxation, accounting, bookkeeping, penalties and consumer affairs - Protect our customers, users, visitors, resources and activities from violence, fraud, theft, abuse and other malicious activities - Managing requests to exercise rights	The types of personal data we process are defined by applicable law	We process your data because of a legal obligation of the country in which you are located
Data retention
The data retention period varies according to the purpose, context and specific local legal requirements.

WHO WILL RECEIVE YOUR DATA?

We will have access to your personal data:

Our staff ;
Our subcontractors: hosting service providers, e-mailing service providers, our CMS service provider, stock and returns management service providers, payment service providers;
Our delivery and transport service providers;
Where applicable: public and private bodies, exclusively to meet our legal obligations.

You can consult the list of our subcontractors here.

MAY YOUR DATA BE TRANSFERRED OUTSIDE THE EUROPEAN UNION?

As part of the tools we use, your data may be transferred outside the European Union. The transfer of your data in this context is secured using the following tools:

Either the data is transferred to a country that has been the subject of an adequacy decision by the European Commission, in accordance with Article 45 of the GDPR: in this case, this country ensures a level of protection deemed sufficient and adequate to the provisions of the GDPR ;
Or the data is transferred to a country whose level of data protection has not been recognized as adequate to the GDPR. In this case these transfers are based on appropriate guarantees in accordance with Article 46 of the GDPR. These guarantees, tailored to each service provider, include, but are not limited to, the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules or the use of an approved certification mechanism.
Or the data is transferred on the basis of one of the appropriate guarantees described in Chapter V of the GDPR.

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

You have the following rights with regard to your personal data:

Right to information: This is precisely why we have drawn up this policy. This right is provided for in articles 13 and 14 of the GDPR.
Right of access: You have the right to access all your personal data at any time, pursuant to article 15 of the GDPR.
Right of rectification: You have the right to rectify inaccurate, incomplete or obsolete personal data at any time in accordance with article 16 of the GDPR.
Right to limitation: You have the right to obtain the limitation of the processing of your personal data in certain cases defined in Article 18 of the GDPR, i.e.:
- If you object to processing based on our legitimate interest, we are obliged to pause any processing of such data pending verification of the legitimate interest;
- If you have declared that your personal data is incorrect, we must restrict any processing of that data pending verification of its accuracy;
- If the processing is unlawful, you may object to the erasure of your personal data and request instead that the use of your personal data be restricted;
- If we no longer need your personal data, but it is necessary to assert your rights.
Right to erasure: You have the right to demand that your personal data be erased, and to prohibit any future collection of it for the reasons set out in article 17 of the GDPR, except in the following cases:
- You have an ongoing dispute with customer service;
- You have an open order;
- You have a debit balance with us;
- If you have made a purchase, we will retain your personal data relating to your transaction for accounting purposes.
Right to lodge a complaint with a competent supervisory authority in your country of residence: If you consider that the processing of your personal data constitutes a breach of the applicable texts, pursuant to Article 77 of the GDPR.

In France, the competent authority is the Commission Nationale de l'Informatique et des Libertés (CNIL) - 3 Place de Fontenoy - TSA 80715 - 75334 Paris CEDEX 07.

The right to set up instructions for the storage, deletion and communication of your personal data after your death.
Right to withdraw your consent at any time: For purposes based on consent, pursuant to Article 7 of the GDPR. Such withdrawal will not call into question the legality of the processing carried out prior to the withdrawal.

You can revoke your consent or refuse to receive any further marketing communications in the following ways:

By following the instructions in each marketing message;
By modifying your account settings;
By configuring the privacy settings of your social network account or browser;
Contact customer service ;
By deactivating your account.

Right to portability: Under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to demand its transfer to the recipient of your choice. Whenever we process your personal data, by automated means based on your consent or on the basis of a contract.
Right to object: Pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data on the basis of our legitimate interest. We will stop processing your personal data unless we can demonstrate legitimate grounds that outweigh your interests and rights or due to legal claims.

You can exercise these rights by writing to us using the contact details below. We may ask you to provide additional information or documents to prove your identity.

PERSONAL DATA CONTACT POINT

Contact e-mail : rgpd@maisonskorpios.com

Contact address: AZTELUSSO, SASU, 62 RUE DE RENNES - 75006 PARIS

MODIFICATIONS

We may modify this policy at any time, in particular in order to comply with any regulatory, legal, editorial or technical developments. These modifications will apply as of the effective date of the modified version. You are therefore invited to consult the latest version of this policy on a regular basis. Nevertheless, we will keep you informed of any significant changes to this privacy policy.

Effective : August 12 2024