Ecojolie privacy policy

Update: January 26, 2023

Article 1: Purpose of processing

Ecojolie, a sole proprietorship based in Loiron-Ruillé (53320), 05 Rte de la Chapelle du Chêne, has an online sales website. This site enables us to receive orders from our customers, and the data collected on this occasion is recorded and processed in a customer file.

This file allows you to :

Manage orders, payment and shipping.
Carry out marketing operations (loyalty, promotions) and send advertising by e-mail to our customers who have not objected or who have agreed to this:
- On products similar to those they have ordered.
- On other products offered by the company. For example, if a customer buys a pattern, a commercial license may be offered.
Customer data is not passed on to third parties, with the exception of our service provider (website host).

The processing of information communicated via the www.ecojolie-store.com website has been declared to the CNIL.

Article 2: Legal basis for processing

Order management: the legal basis for processing is the performance of a contract (Cf. article 6.1.b) of the European Data Protection Regulation).
Sending commercial solicitations by e-mail on products similar to those ordered by customers: the legal basis for processing is the company's legitimate interest (Cf. article 6.1.f) of the European Data Protection Regulation), namely to promote our products to our customers.
Sending commercial e-mail solicitations about other products offered by Ecojolie: the legal basis for processing is consent (Cf. article 6.1.a) of the European Data Protection Regulation), as required by article L. 34-5 of the French Post and Electronic Communications Code.
Bookkeeping involving data retention for a period of 10 years: the legal basis for processing is the legal obligation (Cf. article 6.1.c of the European Data Protection Regulation).

Article 3: Categories of data

Identity: title, surname, first name, address, delivery address, telephone number, e-mail address, date of birth, internal processing code enabling customer identification, data relating to registration on opposition lists.
Order data: transaction number, purchase details, purchase amounts, invoice payment data (payments, outstanding invoices).
Payment details: credit card number, expiry date, visual cryptogram (which is immediately deleted).
Data required for loyalty and prospecting campaigns: purchase history.

Article 4: Use of data

The personal data collected from users is used to provide and improve the Platform's services and to maintain a secure environment. More specifically, the uses are as follows:

Access and use of the platform by the user.
Management of platform operations and optimization.
Organization of the conditions of use of payment services.
Verification, identification and authentication of data transmitted by the user.
Personalize services by displaying ads based on the user's browsing history and preferences.
Fraud prevention and detection, malicious software and security incident management.
Manage any disputes with users.
Sending commercial and advertising information, according to the user's preferences.

Article 5: Data recipients

Personal data may be shared with third-party companies in the following cases:

When the user uses payment services, the platform works with third-party banking and financial companies with which it has signed contracts.
When the user publishes publicly accessible information in the platform's open comment areas.
When the user authorizes a third-party website to access his/her data
When the platform uses the services of service providers to provide user support, advertising and payment services. These service providers have limited access to user data for the purposes of providing these services, and are contractually obliged to use it in accordance with the provisions of the applicable regulations on the protection of personal data.
If required by law, the Platform may transmit data in order to pursue claims against the Platform and to comply with administrative and legal proceedings.
If the platform is involved in a merger, acquisition, sale of assets or receivership, it may be required to sell or share all or part of its assets, including personal data. In this case, users will be informed before any personal data is transferred to a third party.
Ecojolie's customer service and billing departments are the recipients of all categories of data.

Article 6: Transfer of personal data

Due to the organization of the company responsible for the platform, within an international group, the user authorizes the platform to transfer, store and process his/her information in the United States. The laws in force in this country may differ from the laws applicable in the user's place of residence within the European Union. By using the platform, the user consents to the transfer of his/her personal data to the United States.

The platform remains responsible for personal data that is shared with third parties under the Privacy Sheild.

The Platform complies with the rules of the Privacy Sheild, a data protection shield between the European Union and the United States, as formulated by the U.S. Department of Commerce relating to the collection, use and retention of personal data transferred to the United States from the European Union. The Platform has declared to the US Department of Commerce that it adheres to the Privacy Sheild principles. In the event of any conflict between the terms of the clause and the Privacy Sheild principles, the latter shall prevail.

Article 7: Security and confidentiality

The Platform implements organizational, technical, software and physical digital security measures to protect personal data against alteration, destruction and unauthorized access. However, it should be noted that the Internet is not a completely secure environment, and the Platform cannot guarantee the security of the transmission or storage of information over the Internet.

Article 8: Data retention period

Data required for order management and invoicing: for the duration of the commercial relationship and ten (10) years for accounting purposes.
Data required for loyalty campaigns and canvassing: for the duration of the commercial relationship and three (3) years from the last purchase.
Payment information: Ecojolie does not keep this information; it is collected during the transaction and immediately deleted once the purchase has been settled.
Data concerning opt-out lists: three (3) years.

Article 9: Changes to this clause

The Platform reserves the right to modify the present personal data protection clause at any time. If a modification is made to the present personal data protection clause, the Platform undertakes to publish the new version on its website. The Platform will also inform users of the change by e-mail, at least 15 days before the effective date. If the user does not agree with the terms of the new wording of the personal data protection clause, he/she may delete his/her account.

Article 10: Implementation of user rights

If the user no longer wishes to receive advertising from Ecojolie (exercise of the right of opposition or withdrawal of consent already given), he may contact us at the following address: contact@ecojolie-store.com

The user may also contact us using the following form: Link to the form for exercising data protection rights.

Users may access, rectify or delete their personal data. They also have the right to portability and the right to limit the processing of their data (see cnil.fr for more information on these rights).

The purchaser has a permanent right of access, modification, rectification and opposition with regard to information concerning him or her. This right may be exercised under the terms and conditions defined on the www.ecojolie-store.com website.

Please note that information shared with other users, such as forum postings, may remain publicly visible on the Platform, even after their account has been deleted.

To exercise these rights or if you have any questions about data processing under this system, please contact Pauline Huet at the following address: contact@ecojolie-store.com

Or by post:

Pauline Huet

05 route de la Chapelle du Chêne

53320 Loiron-Ruillé

If, after contacting Ecojolie, the user believes that his or her "Data Protection" rights have not been respected, he or she may submit a complaint online to the CNIL.