The Customer is informed that the collection of their personal data is necessary for the sale of the Products by the Seller and for their transmission to third parties for the purpose of delivering the Products. This personal data is collected solely for the purpose of executing the sales contract. Personal data is any information that can be used to identify you, either directly or indirectly. This may include identification information such as your last name, first name, email address, date of birth, postal address, IP address, or your purchasing habits or preferences. We use your personal data for the purposes of browsing our Site, to remember your preferences, to provide you with a better customer experience, and to optimize our website by providing content tailored to your needs through emails, advertisements, and targeted promotional offers.
Collection of personal data
Personal data may be collected on the website www.sandrarity.com at any time while browsing our website (creating an account, ordering products, subscribing to the newsletter) and, more generally, whenever you interact with us.
Payment
In connection with payment for products offered on the website www.sandrarity.com, it records financial data relating to the Customer's/user's bank account or credit card.
Collection of personal data
Personal data is reserved for the sole use of the Seller, its employees, and any entity related to Sandy Society SARL.
Data controller
The data controller is the Seller, within the meaning of the French Data Protection Act and, as of May 25, 2018, Regulation 2016/679 on the protection of personal data. The processing of personal data is represented by the data protection officer Sandy Boget, who can be contacted at the following address customerservice@sandrarity.com.
Limitations of treatment
Unless the Customer expressly agrees, their personal data will not be used for advertising or marketing purposes. The Customer may be asked to tick a box indicating that they agree to receive informational and advertising emails from the Seller. They will always have the option to withdraw their consent at any time by contacting the Seller (contact details above) or by following the unsubscribe link.
Data retention period
The Seller shall retain the data thus collected for a period of 5 years, covering the period of limitation of the applicable contractual civil liability.
Security and privacy
The Seller implements organizational, technical, software, and physical measures in terms of digital security to protect personal data against alteration, destruction, and unauthorized access. However, it should be noted that the Internet is not a completely secure environment and the Seller cannot guarantee the security of the transmission or storage of information on the Internet.
Implementation of customer and user rights
In accordance with the regulations applicable to personal data, Customers and users of the website http://www.sandrarity.com have the following rights:
- They may update or delete data concerning them by sending an email to customerservice@sandrarity.com or by post to the address given in Article 1, for the attention of the data protection officer.
- They may delete their account by writing to the email address indicated in Article 9.3 “Data Controller.”
- They may exercise their right of access to personal data concerning them by writing to the address indicated in Article 9.3 “Data Controller.”
- If the personal data held by the Seller is inaccurate, they may request that the information be updated by writing to the address indicated in Article 9.3 “Data Controller.”
- They may request the deletion of their personal data, in accordance with applicable data protection laws, by writing to the address indicated in Article 9.3 “Data Controller.”
- They may also request the portability of data held by the Seller to another service provider.
- Finally, they may object to the processing of their data by the Seller.
These rights, provided they do not conflict with the purpose of the processing, may be exercised by sending a request by mail or email to the Data Controller whose contact details are indicated above.
The data controller must respond within a maximum period of one month.
If the Customer's request is refused, the reasons must be provided.
The Customer is informed that in the event of refusal, they may lodge a complaint with the CNIL (3 place de Fontenoy, 75007 PARIS) or refer the matter to a judicial authority.