Preamble
As part of our business, we process the personal data that you provide to us. As a reminder, personal data is any data relating to an identified or identifiable natural person (surname, first name, telephone number, address, etc.). A person is identifiable if he or she can be identified directly or indirectly in particular by reference to an identifier, for example location data, an online identifier, an IP address, etc.
We are responsible for the personal data you entrust to us and we take this role to heart. Also, we undertake to process your data in a lawful, fair and transparent manner in accordance with the applicable regulations, in particular the “Informatique et Libertés” law of January 6, 1978 as amended by the European regulation of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data (the GDPR).
This charter establishes the principles according to which we process your personal data and specifies the mandatory information that we must communicate to you regarding the processing of your data.
For any questions relating to your personal data, simply send us an email to contact@bijootree.com.
In the event of difficulty exercising your rights or for any complaint concerning the processing of your personal data, you also have the right to contact the CNIL (Commission Nationale Informatique et Libertés).
1 – Our activity
The website www.bijootree.com (hereinafter “The Site”) is operated by the company Panko, a simplified stock company with capital of 2,000 euros registered under number 982 385 411 with the RCS Paris whose head office is located at 172 rue de Charenton 75012 Paris (hereinafter “The Seller” or “we”). The online store www.bijootree.com offers consumers (hereinafter “The Customer” or “you”) the sale of jewelry.
We are the “Data Controller”, meaning we decide on the purposes and means of processing your personal data.
The Site is reserved for individuals of legal age capable of entering into contracts under French law. Users who are minors under 15 years of age or incapable must obtain the prior consent of their legal guardian before entering their data on the website.
2 – The data we process
Depending on the purposes, we process different categories of personal data:
- Your identification data: name, first name, address, email, date of birth, telephone number;
- Data relating to your orders: product ordered, date of the order, amount of the order, possibly returned product, notice relating to the order;
- Your connection data
Regarding the banking information required for payment for products purchased on the Site, they are directly collected and processed by our payment provider Shopify, via the online payment form.
At no time do we have access to your banking information.
3 - The origin of the data collected
The data is collected directly from the person concerned using the forms provided. Some data is mandatory, meaning you will not be able to place an order if you do not provide it to us.
Browsing data is collected via cookies, namely text files, pixels, tags placed on Internet users' terminals. Cookies do not directly identify an individual. They are associated with a browser or a terminal.
Cookies are placed only if the Internet user gives their express consent whether they are connected to a customer account or not.
Cookies are placed in order to offer the Internet user targeted advertising, to produce audience statistics and to analyze their user journey in order to improve their experience.
4 - Why do we process your data?
We only process data strictly necessary to achieve the purposes pursued.
4.1 The processing of personal data that we carry out has the legal basis:
- Consent for data processed as part of prospecting actions (except in the case of prospecting concerning a similar product acquired by the Customer) and for browsing data;
- The execution of the contract for data relating to Customer orders (in particular data relating to the product ordered, the amount, the date of the order, delivery, the right of withdrawal);
- The Seller's legitimate interest in the data collected in the contact form, the data processed for the purposes of managing the commercial relationship (in particular opinions, complaint tracking, product returns, loyalty actions), customer data Customers processed as part of prospecting activities for a product similar to a product previously acquired by the Customer.
4.2 The purposes of data processing are as follows:
- Contract management (management of orders, delivery, invoices and payments, right of withdrawal);
- Management of loyalty programs;
- The establishment of statistics and studies;
- Management of complaints, after-sales service and warranties;
- Carrying out commercial prospecting and marketing actions (sending advertising messages, competitions, sponsorship, promotion, surveys).
5 - Who is your data intended for?
They are intended exclusively for the Seller. They are not transmitted to any commercial partner free of charge or for a fee.
With your consent, your browsing data may be transmitted to advertising networks and/or media agencies for the purposes of targeted advertising. The list of these recipients is available when your consent is obtained.
Personal data is transmitted to our subcontractors in particular for the following processing: hosting, evaluation of orders, sending by email, improvement of the user experience, billing management, management customer relations, delivery of orders.
In addition, we may be required, to meet our legal obligations, to transfer your data to public bodies, court officers, ministerial officers and bodies responsible for debt recovery.
6 - Social networks
You can click on the icons dedicated to social networks appearing on the Site.
When you click on these buttons, this allows you to share the Site www.bijootree.com on social networks, however no transmission of personal data is made.
7 - How long do we keep your data?
7.1 Concerning data relating to order management
Personal data relating to Customer orders are kept on an active basis during the contractual relationship and archived for 5 (five) years from the end of the contractual relationship.
7.2 Concerning data relating to the management of the commercial relationship
The personal data necessary for the management of the Customers' commercial relationship are kept during the contractual relationship and archived for 5 (five) years from the end of the contractual relationship.
7.3 Concerning prospecting data
Customer data used for commercial prospecting purposes may be kept for a period of 3 (three) years from the end of the commercial relationship.
The data collected via the contact form as well as those relating to a non-customer prospect are kept for 3 (three) years from their collection. At the end of this 3 (three) year period, we will be able to contact you again to find out if the prospect wishes to continue to receive commercial requests.
7.4 Regarding cookies
The information stored in the users' terminal is kept for 13 (thirteen) months.
Data enabling the establishment of proof of a right or a contract, which must be kept in compliance with a legal obligation, will be kept for the period provided for by the law in force.
8 - How are the security and confidentiality of your data ensured?
We have put in place the necessary technical and organizational measures, taking into account the nature of the data processed, in order to ensure their security and confidentiality.
Any employee or subcontractor who processes your personal data is subject to an obligation of confidentiality. In addition, we select our subcontractors based on their seriousness and their commitment to the protection of personal data.
9 - Are your data transferred outside the EU?
We endeavor to choose subcontractors located within the European Union or in a country with an adequate level of protection in terms of the protection of personal data as defined by the European Commission.
If, given the processing of data by one of our subcontractors, a transfer is made to a country which does not offer adequate protection, in particular the United States, we undertake to put in place standard contractual clauses of the European Commission supplemented by adequate security measures or to implement other appropriate transfer solutions to ensure a level of protection of your personal data consistent with the level of protection offered within the European Union.
10 - How to exercise your rights?
Depending on the legal basis of the processing, you have a right of access, rectification, erasure, as well as a right to portability of the data concerning you. Everyone also has the right to object and limit processing. These rights can be exercised upon simple request to contact@bijootree.com.
You can directly access your data and modify it from your personal space. However, you cannot delete any data. Any deletion must be requested by email to contact@bijootree.com.
When the collection is based on consent, namely the sending of promotional messages/Newsletter or browsing data, you can withdraw your consent at any time at the following address: contact@bijootree.com or by clicking on the link provided for this purpose in the sending email.
Furthermore, if you do not wish to be subject to telephone canvassing, you can register for free on the list opposing telephone canvassing on the website www.bloctel.gouv.fr.
Concerning the browsing data collected via cookies, you can configure your browser so that cookies are saved in your terminal or that they are rejected systematically or according to their issuer.
To find out the terms and conditions applicable to the management of cookies stored in a browser, you can consult the browser's help menu as well as the section of the CNIL site devoted to cookie management.
In accordance with law n°78-17 of January 6, 1978 as amended relating to data processing, files and freedoms, you can send us your instructions relating to the conservation, deletion and communication of your personal data. personnel in the event of death at the following address: contact@bijootree.com.
Version effective March 1, 2024.