Privacy policy

PRIVACY POLICY endoboutik.com

Last updated on 10/02/2022.

PREAMBLE

This privacy policy informs you about how Endo Boutik uses and protects the information you provide when you use this website, accessible at the following URL: endoboutik.com (hereinafter the ‘Website’).

Please note that this privacy policy may be modified or supplemented at any time by Endo Boutik, in particular to comply with any legal or technological developments. In such cases, the date of the update will be clearly indicated at the top of this policy. These changes are binding on users once they have been informed of the updated privacy policy being posted online and have accepted it.

ARTICLE 1. PARTIES

This privacy policy applies between the publisher of the Website, hereinafter referred to as ‘the Publisher’, and any person connecting to the Website, hereinafter referred to as ‘the User’.

ARTICLE 2. DEFINITIONS

‘Website Content’: elements of any kind published on the Website, whether or not protected by intellectual property rights, such as text, images, designs, presentations, videos, diagrams, structures, databases or software.

‘Publisher’: Endo Boutik, SAS in its capacity as publisher of the Website.

‘User’: any person connecting to the Website.

‘Website’: the website accessible at the URL endoboutik.com, as well as any sub-sites, mirror sites, portals and variations of the URL relating thereto.

ARTICLE 3. SCOPE OF APPLICATION

This privacy policy applies to all Users. By clicking on ‘I accept’ when registering on the Website, you fully and unreservedly accept this policy. Similarly, clicking on ‘I accept’ in the cookie information banner displayed on the Website constitutes your confirmation of this acceptance, while allowing you to customise the cookies that will or will not be applied to you. You thereby acknowledge that you have read and understood this policy and accept it without restriction.

The User acknowledges the evidential value of the Publisher's automatic recording systems and, unless they can provide evidence to the contrary, waives the right to contest them in the event of a dispute.

Acceptance of this privacy policy implies that Users have the legal capacity to do so or are at least 16 years of age, or, failing that, that they have the authorisation of a guardian or curator if they are incapacitated, or of their legal representative if they are under 16 years of age, or that they hold a mandate if they are acting on behalf of a legal entity.

ARTICLE 4. PERSONAL DATA

In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016 and applicable national legislation, the Publisher provides you with the following information:

4.1. Identity of the data controller

The data controller responsible for collecting and processing data on the Website is Endo Boutik, SAS, whose registered office is located at 280 Sentier des Forrières, 76230 Bois-Guillaume, FR 910 143 197.

4.2. Data collection by the Publisher

4.2.1. Data collected

4.2.1.1 Data collected when browsing the Website

When browsing the Website, you consent to the Publisher collecting information relating to: the content you view and click on; demographic data; the device used and its software environment; your location; your connection data (times, IP address, etc.).

4.2.1.2. Data collected when using the contact form or contact email address

When the User uses the contact form or contact email address, the Publisher collects the following personal data: surname, first name, email address*, telephone number.

Personal data marked with an asterisk is mandatory for the use of the contact form. Users who do not wish to provide the information required to use the contact form will not be able to send a message to the Publisher directly from the Website.

4.2.1.3. Data collected during registration on the Website

Use of the registration form by the User implies the collection by the Publisher of the following personal data: surname*, first name*, postal address*, email address*, date of birth, telephone number.

Personal data marked with an asterisk is mandatory for registration on the Website. Users who do not wish to provide the information required to use the registration form will not be able to register directly from the Website.

4.2.1.4. Data collected when using the newsletter form

When you use the newsletter form, the Publisher may collect and process your email address.

4.2.2. Purposes of personal data collection

The data collected during browsing is subject to automated processing for the following purposes:

• To verify the identity of individuals;
• To ensure and improve the security of services;
• Develop, operate, improve, provide and manage the Website;
• Contextualise and improve the User experience;
• Send information and contact individuals, including by e-mail;
• Target advertising content;
• Prevent any illicit or illegal activity;
• Enforce the terms and conditions relating to the use of the Website.

The data collected when using the contact form or contact email address is subject to automated processing for the following purposes:

• Verifying the identity of individuals;
• Ensure and improve the security of services;
• Contextualise and improve the User experience;
• Send information and contact individuals, including by email;
• Target advertising content;
• Prevent any illicit or illegal activity.

The data collected during registration is subject to automated processing for the following purposes:

• To fulfil contractual commitments;
• To verify the identity of individuals;
• To ensure and improve the security of services;
• To develop, operate, improve, provide and manage the Website;
• To contextualise and improve the User experience;
• Send information and contact individuals, including by email;
• Prevent any illicit or illegal activity;
• Enforce the terms and conditions relating to the use of the Website.

The data collected when using the newsletter form is subject to automated processing for the following purposes:

• to send newsletters to the User.

4.2.3. Legal basis for processing

The legal basis for the data collected during browsing is the Publisher's legitimate interest in analysing behaviour on the Website and improving the Website's security and functionality. Some of this data, such as that obtained from the installation of certain cookies, may have the consent of the individuals concerned as its legal basis.

The legal basis for data collected when using the contact form or contact email address is the consent of the individuals concerned.

The legal basis for data collected during registration is a contractual relationship.

The legal basis for data collected when using the newsletter form is the consent of the individuals concerned.

4.2.4. Recipients of the data

The data collected can only be viewed by members of the Publisher's management team, by staff responsible for preparing your order and by staff responsible for managing the Website, and is never made freely available to any third party.

4.2.5. Retention period for personal data

Personal data collected during browsing is retained for a reasonable period necessary for the proper administration of the Website and for a maximum of 12 months, or until the consent of the persons concerned is withdrawn.

Personal data collected when using the contact form or when sending an email to the contact email address is kept for a reasonable period of time necessary for the proper management of the User's request, and for a maximum of 12 months.

Data collected during registration is kept for the duration of the contractual relationship between the Publisher and the User.

Data collected when using the newsletter form is kept until the consent of the persons concerned is withdrawn.

At the end of each of these periods, the Publisher will archive this data and keep it for as long as its liability may be called into question.

After this retention period, the Publisher undertakes to permanently delete the data of the persons concerned.

4.2.6. Security and confidentiality of personal data

Personal data is stored securely, using the latest technology, in accordance with the provisions of the General Data Protection Regulation and applicable national legislation.

4.2.7. Minimisation of personal data

The Publisher may also collect and process any data voluntarily provided by a User, in particular via the free field on the contact form.

The Publisher will advise Users as much as possible when they provide unnecessary or superfluous personal data.

The Publisher undertakes to store and process only data that is strictly necessary for its activities, and will delete any unnecessary data received as soon as possible.

4.3. Respect for rights

You have the following rights regarding your personal data, which you can exercise by writing to us at our postal address or by sending an email to the following address: ventes@endo-boutik.com.

4.3.1. Right to information, access and communication of data

You have the right to access your personal data.

Due to the Publisher's obligation to ensure the security and confidentiality of personal data processing, your request will only be processed if you provide proof of your identity, in particular by providing a scan of your valid identity document (in the case of a request by email) or a signed photocopy of your valid identity document (in the case of a request sent by post), both accompanied by the statement ‘I certify that this copy of my identity document is a true copy of the original. Done at ... on ...’, followed by your signature.

To help you with this process, you will find here a template letter prepared by the CNIL.

4.3.2. Right to rectification, erasure and the right to be forgotten

You have the right to request the rectification, updating, blocking or erasure of your personal data that may be inaccurate, erroneous, incomplete or obsolete.

You may also define general and specific guidelines regarding the fate of your personal data after your death. Where applicable, the heirs of a deceased person may request that the death of their loved one be taken into account and/or that the necessary updates be made.

To assist you in this process, you will find here a template letter prepared by the CNIL.

4.3.3. Right to object to data processing

You have the right to object to the processing of your personal data.

To do so, please send an email to the following address: ventes@endo-boutik.com. In this email, you must specify the data you wish to have deleted and the reasons for your request, except in cases of commercial prospecting.

4.3.4. Right to data portability

You have the right to receive the personal data you have provided to us in a transferable, open and readable format.

4.3.5. Right to restriction of processing

You have the right to request that the Publisher restrict the processing of your personal data. This means that your data may only be stored and no longer used by the Publisher.

4.3.6. Withdrawal of consent

Your consent is essential for the Publisher to process your data. However, you may withdraw your consent at any time. This withdrawal will result in the deletion of your personal data.

However, services requiring the processing of your data by the Publisher will no longer be accessible.

4.3.7. Response times

The Publisher undertakes to respond to your request for access, rectification or opposition or any other additional request for information within a reasonable period of time, which shall not exceed one month from receipt of your request.

4.3.8. Complaint to the competent authority

If you consider that the Publisher is not complying with its obligations regarding your personal information, you may lodge a complaint or request with the competent authority. In France, the competent authority is the CNIL, to which you can send a request here.

4.4. Transfer of collected data

4.4.1. Transfer to partners

The Publisher informs you that we use authorised service providers to facilitate the collection and processing of the data you have provided to us. These service providers may be located outside the European Union and have access to the data collected on the Website.

The Publisher has ensured in advance that its service providers implement adequate safeguards and comply with strict conditions regarding confidentiality, use and data protection, for example via the US Privacy Shield.

The User consents to the data collected being transmitted by the Publisher to its partners and processed by these partners in the context of third-party services, namely:

No partners known at this time.

4.4.2. Transfer upon request or court order

The User also consents to the Publisher communicating the data collected to any person, upon request from a state authority or by court order.

4.4.3. Transfer in the context of a merger or acquisition

If the Publisher is involved in a merger, sale of assets, financing transaction, liquidation or bankruptcy, or in an acquisition of all or part of its business by another company, the User consents to the data collected being transferred by the Publisher to that company and to that company processing the personal data referred to in this privacy policy in place of the Publisher.

ARTICLE 5. POLICY ON TRACKERS/COOKIES

When you first connect to the Publisher's Website, you are notified by a banner at the bottom of your screen that information relating to your browsing may be stored in files called ‘cookies’. Our cookie policy allows you to better understand the provisions we implement in terms of browsing our Website. In particular, it informs you about all the cookies on our Website, their purpose, and gives you instructions on how to configure them.

5.1. Use of trackers/cookies

The Publisher of this Website may place a cookie or other tracker on the hard drive of your device (computer, tablet, mobile, etc.) in order to ensure smooth and optimal browsing on our Website.

Cookies are small text files that allow us to recognise your computer, tablet or mobile device in order to personalise the services we offer you.

To give you a better understanding of the information that cookies identify, you will find below a table listing the different types of cookies that may be used on the Publisher's website, their name, their purpose and their retention period.

5.2. Purpose of trackers

With the help of the information contained in the trackers and cookies used, the Publisher can analyse traffic and use of the Website and, where applicable, facilitate and improve navigation, carry out prospecting operations, compile commercial statistics or display targeted advertising.

5.3. Trackers used

Partner	Purpose of processing	Partner conditions
Shopify	Access to secure areas, management of browsing history	https://www.shopify.com/legal/cookies

 

5.4. Configuring your cookie preferences

When you first connect to the Publisher's Website, a banner briefly presenting information about the use of cookies and similar technologies appears at the bottom of your screen. This banner allows you to choose which cookies you accept or refuse on your device. You will be deemed to have given your consent to the use of cookies by clicking on the ‘I accept’ icon, either globally or individually. Conversely, you will be deemed to have refused the storage of cookies by clicking on the ‘I refuse’ icon. Once again, this choice may apply to all cookies or only to some of them. If you do not make a choice, you will be deemed to have refused the storage of cookies. Your decision will be recorded for 6 months and may be changed at any time.

5.4.1 Cookies exempt from consent

In accordance with the recommendations of the French Data Protection Authority (CNIL), certain cookies are exempt from the requirement to obtain your prior consent insofar as they are strictly necessary for the functioning of the website or have the sole purpose of enabling or facilitating electronic communication. These include session ID cookies, authentication cookies, load balancing session cookies and cookies used to personalise your interface. These cookies are fully subject to this policy insofar as they are issued and managed by the Publisher.

5.4.2 Cookies requiring your prior consent

This requirement applies to cookies issued by third parties that are described as ‘persistent’ in that they remain on your device until they are deleted or expire.

As these cookies are issued by third parties, their use and storage are subject to their own privacy policies. This family of cookies includes audience measurement cookies, advertising cookies and social media sharing cookies (such as Facebook, Twitter, YouTube and Instagram).

Audience measurement cookies compile statistics on the frequency and use of various elements of the Website (such as the content/pages you have visited). This data contributes to improving the ergonomics of the Publisher's Website.

5.5. Maximum retention period for trackers

Trackers are intended to be stored on the User's computer for up to 12 months. This data is stored under secure conditions, in accordance with current technical standards, in compliance with the provisions of the General Data Protection Regulation and applicable national legislation.

5.6. Objection to the use of trackers

5.6.1. Right to object to the use of trackers

You can accept or refuse cookies at any time.

The User may delete or disable the use of trackers whenever they wish by changing their browser settings. It is possible to view the Website without trackers. However, some additional features of the Website may not work if the User has disabled the use of trackers, such as form autocompletion or navigation indicators.

5.6.2. Settings

For more information about cookie control tools, you can consult the dedicated page on the CNIL website here.

5.6.2.1. Browser settings

Each web browser has its own cookie management settings. Users can configure their browser software to reject cookies, either systematically or depending on their issuer. Users can also configure their browser software so that they are asked to accept or reject cookies on a case-by-case basis before a cookie is likely to be stored on their device.

Each browser has different settings for managing cookies and User choices. These are described in the browser's help menu, which will tell you how to change your cookie preferences:

• For Internet Explorer;
• For Safari;
• For Chrome;
• For Firefox;
• For Opera.

5.6.2.2. Settings using add-ons

Users can also delete or block cookies on their device by installing an extension on their browser, such as Ghostery, which can be downloaded here.

ARTICLE 6. INTELLECTUAL PROPERTY

6.1. Legal protection of Website Content

Website Content may be protected by copyright and database rights. Any representation, reproduction, translation, adaptation or transformation, in whole or in part, carried out illegally and without the consent of the Publisher or its beneficiaries or successors constitutes a violation of Books I and III of the Intellectual Property Code and may give rise to legal proceedings for infringement.

6.2. Contractual protection of the Site Content

The User contractually undertakes to the Publisher not to use, reproduce or represent, in any way whatsoever, the Site Content, whether or not it is protected by intellectual property rights, for any purpose other than reading it by a robot or browser. This prohibition does not apply to indexing robots whose sole purpose is to scan the content of the Website for indexing purposes.

ARTICLE 7. FINAL PROVISIONS

7.1. Amendments

This Privacy Policy may be amended at any time by the Publisher. The conditions applicable to the User are those in force at the time of their connection to the Website. Any substantial amendment to this privacy policy will be communicated to the User when they first connect to the Website after the amendments come into force. The new privacy policy will then have to be accepted again.

7.2. Entirety

The invalidity of any clause in this contract shall not invalidate the other clauses of the contract or the contract as a whole, which shall remain in full force and effect. In such a case, the parties shall, as far as possible, replace the invalid clause with a valid clause that corresponds to the spirit and purpose of this contract.

7.3. Non-waiver

The Publisher's failure to exercise the rights granted to it herein shall in no way be construed as a waiver of such rights.

7.4. Languages

These terms and conditions are provided in English.

7.5. Unfair terms

The provisions of these terms and conditions apply subject to compliance with the mandatory provisions of the Consumer Code concerning unfair terms in contracts concluded between a professional and a consumer.

ARTICLE 8. DISPUTES

8.1. Applicable law

This Privacy Policy is subject to French law and European regulations, in particular the European Data Protection Regulation.

8.2. Disputes

Pursuant to Order No. 2015-1033 of 20 August 2015, any disputes that may arise in connection with the performance of these terms and conditions and for which no amicable solution can be found between the parties must be submitted to mediation.

Since 1 January 2016, mediation has been mandatory for all. Thus, any professional selling to private individuals is required to provide the contact details of a competent mediator in the event of a dispute, regardless of whether they sell remotely or in a physical store (Source: FEVAD).

Legalstart / contact@legalstart.com