PERSONAL DATA AND COOKIES
Edward Achour collects and processes personal data relating to its customers in connection with the use of the www.edwardachour.com website and the management of orders placed on the website.
When do we process your personal data?
The processing of personal data collected in connection with the use of the Website is as follows:
- Account creation and order data
- Sending newsletters
- Data relating to website browsing
What data is involved in creating an account and placing an order?
Account and order data is the data you provide via the forms when creating an account and placing an order, as well as the data you are asked to provide during order processing (requests for information, exercising your rights). Data collection forms specify whether the provision of data is optional or not.
Data relating to payment by credit card (credit card number, expiry date, authorization number, security code) is collected directly by our payment service providers.
This information is necessary for the creation and management of the customer's account, for the processing and follow-up of customer requests or orders, payments and deliveries, for exchanges with the customer and, if necessary, for the processing of complaints and requests to exercise rights, as well as for the prevention of any fraudulent use of the customer's means of payment or identity.
Information identified as required is compulsory. Their collection is a prerequisite for opening an account and/or purchasing a Product.
The legal basis for the processing is the performance of a contract to which you are a party or of pre-contractual measures taken at your request, as well as compliance with Edward Achour's legal obligations. Failure to provide the required information will result in the customer's request not being processed.
What data is used to send product information or promotional offers?
Purposes and legal basis : The data communicated at the time of the order or on the website is also used to send the customer information on the Edward Achour brand, on the Website, or to enable the customer to benefit from commercial offers, if the customer accepts this when validating his order in the order tunnel, or by subscribing to the Edward Achour newsletter from the footer of the website.
This processing is based on consent, which may be withdrawn at any time. In particular, customers may unsubscribe at any time by e-mail by clicking on the unsubscribe link included in each mailing.
If you fail to provide the personal data identified as mandatory, you will not be able to receive information.
How are personal data processed?
The company responsible for processing personal data is LA VILLA D'OR (hereinafter "Edward Achour"), a limited liability company with share capital of 10,000.00 euros, registered in the Paris Trade and Companies Register under number 898 629 134, with VAT number FR73898629134 and registered office at 70 rue René Boulanger, 75010 PARIS, represented by EDWARD ACHOUR in his capacity as manager.
The data collected on the Website is exclusively intended for Edward Achour's own use. It may also be transmitted to persons acting under the authority of and on the instructions of Edward Achour, whom Edward Achour calls upon, in particular in connection with the execution of services and orders (in particular dispatch of orders, sending of advertising partnernewsletters and payment).
The Customer's personal information is sent to and stored at the Website host located in Canada. According to the European Commission, Canada is one of the countries offering a sufficient level of protection for personal data.
Data may be transmitted to certain service providers (in charge of sending newsletters) who transfer data outside the European Union to countries not subject to an adequacy decision by the European Commission. Edward Achour takes all measures to require such recipients and processors to comply with applicable regulations and, where applicable, that transfers outside the European Union are based on an adequate level of protection or sufficient guarantees, a copy of which may be obtained by data subjects on request from Edward Achour.
Following any injunction from the legal authorities or in order to defend its rights or those of its employees, customers or any other person, Edward Achour may communicate this data to legally authorized bodies and authorities. Edward Achour undertakes to take all necessary precautions to ensure the security of its files and the protection of its computer system, and in particular to prevent the Customer's personal information from being distorted, damaged or accessed by unauthorized third parties.
None of the personal data collected from the Website is communicated or transferred to third parties for commercial purposes.
How long is personal data kept?
The personal data collected is kept for no longer than is necessary for the purposes for which it was collected.
It is thus kept in an active database for a period of 3 years from the last purchase from Edward Achour; from the last newsletter subscription or from the last click on a hypertext link contained in an e-mail sent by Edward Achour; or from the last contact on your part, in particular through the following actions:
- creation of an account without purchase ;
- subscribing to the newsletter or clicking on a hypertext link contained in an e-mail sent by Edward Achour;
- the last connection to your account;
Data relating to orders and invoices will be kept for a period of 10 years in an intermediate archive with restricted access for the purposes of establishing, exercising or defending a legal claim or to enable Edward Achour to comply strictly and solely with its legal obligations (obligation to archive contracts involving an amount greater than 120 euros, accounting obligations).
Customer bank details are not stored by Edward Achour and are processed solely by our payment service providers.
What rights do you have to the personal data you provide?
You have the following rights with regard to the personal data you have communicated to Edward Achour, under the conditions provided for by the regulations in force:
In accordance with the French Data Protection Act of January 6, 1978 and the European Data Protection Regulation of April 27, 2016, you have the following rights over the personal data you have communicated to Edward Achour, under the conditions provided for by the regulations in force:
- A right of access and query (the right to obtain confirmation that personal data concerning him or her is or is not being processed and, where it is, access to said personal data as well as information relating to the processing carried out)
- the right to rectify inaccurate data
- A right to erasure of data where one of the grounds provided for in the RGPD applies (for example, the data is no longer necessary, in the event of withdrawal of consent or opposition, unlawful processing, to comply with a legal obligation). In particular, this right does not apply if data processing is necessary to comply with a legal obligation or for the establishment, exercise or defense of legal claims.
- A right to limit processing in the cases provided for by the RGPD (for example, if you dispute the accuracy of the data used or object to your data being processed, for the time it takes to verify or examine your request).
You can also modify your personal details in your customer area by logging in with your e-mail address and password.
You also have the right to object to the processing of your personal data for legitimate reasons, where such processing is based on the legitimate interests of the data controller.
You also have the right to withdraw your consent for processing based exclusively on consent, in this case the receipt of newsletters, in particular by formulating a request to unsubscribe in the emails received.
You also have the right to inform the data controller of your instructions regarding the handling of your personal data.
Lastly, you have the right to request that your personal data be exported to a third party when you have consented to the collection of your personal data, or when your personal data has been collected as part of the performance of a contract.
Customers may exercise these rights by providing the necessary identification details to our customer service department: firstname.lastname@example.org or by post to the following address: 70 rue René Boulanger, 75010 Paris.
You may also lodge a complaint with the CNIL, the competent supervisory authority.