PRIVACY POLICY
Last updated: October 2024.
This Privacy Policy describes how UN BIJOU À PARIS uses information about you collected when:
- You use this website (hereinafter, the “Site”)
- You interact with our company on our social media pages
- You purchase from our stores or those of our partners, access our communications or interact with us (the “Services”)
The UN BIJOU À PARIS company is hereinafter referred indiscriminately to as “UN BIJOU À PARIS”, “We”, “Our” and “Us”.
This policy also contains useful information about your options and how to exercise your rights under applicable personal data protection legislation.
If you have any questions about this personal data policy or our personal data processing, you can contact us:
- By post: 48 rue Sainte-Anne, 75002 Paris, FRANCE
- By email: dpo@lesgeorgettes.com
1. CHANGES TO THE POLICY
We may occasionally edit this policy. If we do, we will inform you by changing the date at the top of the policy and, in some cases, we will issue further notifications (for example, by publishing an announcement on our Site homepages or emailing you). We encourage you to check this policy when you interact with us to learn about our approach to personal data protection and the methods you can use to find out how your personal data is used and protect your privacy.
2. WHAT ARE UN BIJOU À PARIS’ ROLES AND RESPONSIBILITIES WHEN IT COMES TO PROCESSING YOUR PERSONAL DATA?
When you use the Site and our Services, UN BIJOU À PARIS is the data controller within the meaning of applicable data protection regulations (including the General Data Protection Regulation “GDPR” of 27 April 2016).
Social media platforms may be the independent or joint data controller when you use social buttons or log into your account on our Site using SSO (Google or Facebook Single Sign-On). In these two cases, your ID data is automatically shared with these social media platforms. You can also share information or content from our Site on social media.
This is governed by the social media platforms’ terms of use, which you can check on their websites:
3. WHICH PERSONAL DATA DO WE COLLECT?
We collect three types of personal data about you for the purposes described below in the “For what purposes, on what legal basis and for what period do we use your personal data?” section.
When we ask you to provide personal data, we clearly indicate if this is compulsory or optional, and the consequences of you refusing (for example, we will not be able to handle your request).
Last updated: October 2024.
This Privacy Policy describes how UN BIJOU À PARIS uses information about you collected when:
- You use this website (hereinafter, the “Site”)
- You interact with our company on our social media pages
- You purchase from our stores or those of our partners, access our communications or interact with us (the “Services”)
The UN BIJOU À PARIS company is hereinafter referred indiscriminately to as “UN BIJOU À PARIS”, “We”, “Our” and “Us”.
This policy also contains useful information about your options and how to exercise your rights under applicable personal data protection legislation.
If you have any questions about this personal data policy or our personal data processing, you can contact us:
- By post: 48 rue Sainte-Anne, 75002 Paris, FRANCE
- By email: dpo@lesgeorgettes.com
1. CHANGES TO THE POLICY
We may occasionally edit this policy. If we do, we will inform you by changing the date at the top of the policy and, in some cases, we will issue further notifications (for example, by publishing an announcement on our Site homepages or emailing you). We encourage you to check this policy when you interact with us to learn about our approach to personal data protection and the methods you can use to find out how your personal data is used and protect your privacy.
2. WHAT ARE UN BIJOU À PARIS’ ROLES AND RESPONSIBILITIES WHEN IT COMES TO PROCESSING YOUR PERSONAL DATA?
When you use the Site and our Services, UN BIJOU À PARIS is the data controller within the meaning of applicable data protection regulations (including the General Data Protection Regulation “GDPR” of 27 April 2016).
Social media platforms may be the independent or joint data controller when you use social buttons or log into your account on our Site using SSO (Google or Facebook Single Sign-On). In these two cases, your ID data is automatically shared with these social media platforms. You can also share information or content from our Site on social media.
This is governed by the social media platforms’ terms of use, which you can check on their websites:
3. WHICH PERSONAL DATA DO WE COLLECT?
We collect three types of personal data about you for the purposes described below in the “For what purposes, on what legal basis and for what period do we use your personal data?” section.
When we ask you to provide personal data, we clearly indicate if this is compulsory or optional, and the consequences of you refusing (for example, we will not be able to handle your request).
The data you provide us with directly
The data you provide us with directly
- ID data: your first name, surname, title, date of birth, billing and delivery addresses, delivery information, email and phone number.
- Data about your purchasing habits (order history), preferences and interests.
- Data strictly required for payment: your card number and its expiry date.
- Personal data you volunteer in messages you send us.
- ID data: your first name, surname, title, date of birth, billing and delivery addresses, delivery information, email and phone number.
- Data about your purchasing habits (order history), preferences and interests.
- Data strictly required for payment: your card number and its expiry date.
- Personal data you volunteer in messages you send us.
The data we collect automatically
The data we collect automatically
- Login data, particularly information about the device (computer, tablet or smartphone) with which you log in, and about your Site use (such as your device’s operating system, the browser type you use, if you use a proxy, where your device is located (given your IP address), which pages you visit, when, and the link that takes you to our Site).
- Login data, particularly information about the device (computer, tablet or smartphone) with which you log in, and about your Site use (such as your device’s operating system, the browser type you use, if you use a proxy, where your device is located (given your IP address), which pages you visit, when, and the link that takes you to our Site).
The data we collect from third parties
The data we collect from third parties
- ID data provided by your contacts:
: in this context, you undertake to inform these third parties of this Privacy Policy’s content. - You decide to buy or send products to someone: we use this information only to send the purchases to the third party and will not send any marketing communications to your contacts unless they choose to receive communications from us.
- Data shared by social media: this is information shared with us by social media platforms, including the fact that you use them and your associated advertising identifiers, which you use via our Site. When you share your experience of our products and services with other clients, you use social media and share information about yourself with this social media platform and with us. These communications are governed by the personal data protection policies of the social media platforms to which we send you.
- Data shared by partners: this is information shared with us by third-party partners with whom you have an existing relationship and whom you have authorised to share your personal data with us for the purposes of commercial prospecting or advertising targeting, or to create an online account or to log in (single authentication service using your Google or Facebook accounts).
- You enter a competition on our Site or social media pages and want to invite friends to take part too
- ID data provided by your contacts:
: in this context, you undertake to inform these third parties of this Privacy Policy’s content. - You decide to buy or send products to someone: we use this information only to send the purchases to the third party and will not send any marketing communications to your contacts unless they choose to receive communications from us.
- Data shared by social media: this is information shared with us by social media platforms, including the fact that you use them and your associated advertising identifiers, which you use via our Site. When you share your experience of our products and services with other clients, you use social media and share information about yourself with this social media platform and with us. These communications are governed by the personal data protection policies of the social media platforms to which we send you.
- Data shared by partners: this is information shared with us by third-party partners with whom you have an existing relationship and whom you have authorised to share your personal data with us for the purposes of commercial prospecting or advertising targeting, or to create an online account or to log in (single authentication service using your Google or Facebook accounts).
- You enter a competition on our Site or social media pages and want to invite friends to take part too
4. FOR WHAT PURPOSES, ON WHAT LEGAL BASIS AND FOR WHAT PERIOD DO WE USE YOUR PERSONAL DATA?
We collect and process your personal data subject to the conditions in the table below.
When processing is based on our legitimate interest, we make sure to consider the potential impact on you of your data being used. If we believe that your interest or basic rights and freedoms override our legitimate interest, we will not use your personal data on this basis and we will ask you for specific consent.
4. FOR WHAT PURPOSES, ON WHAT LEGAL BASIS AND FOR WHAT PERIOD DO WE USE YOUR PERSONAL DATA?
We collect and process your personal data subject to the conditions in the table below.
When processing is based on our legitimate interest, we make sure to consider the potential impact on you of your data being used. If we believe that your interest or basic rights and freedoms override our legitimate interest, we will not use your personal data on this basis and we will ask you for specific consent.
Reason why we process your data
(Purposes of processing)
Reason why we process your data
(Purposes of processing)
Creation and management of your online account
Your data is processed to manage your online account.
Creation and management of your online account
Your data is processed to manage your online account.
E-commerce transactions
Your data is processed to:
- (i) Complete your orders (provide you with the products ordered, process transactions and billing, deal with payment issues, and make deliveries).
- (ii) Facilitate your later purchases.
- (iii) Produce sales statistics to drive UN BIJOU À PARIS’performance and activity and to carry out segmentation for prospecting.
E-commerce transactions
Your data is processed to:
- (i) Complete your orders (provide you with the products ordered, process transactions and billing, deal with payment issues, and make deliveries).
- (ii) Facilitate your later purchases.
- (iii) Produce sales statistics to drive UN BIJOU À PARIS’performance and activity and to carry out segmentation for prospecting.
Services in stores and our shops within third-party stores (ordering, delivery, sales)
Your data is processed to carry out the sale at our stores and our shops within third-party stores.
Services in stores and our shops within third-party stores (ordering, delivery, sales)
Your data is processed to carry out the sale at our stores and our shops within third-party stores.
Loyalty programme management
Your data is processed to:
- (i) Determine your eligibility for the loyalty programme and ensure it runs smoothly.
- (ii) Send you offers, news or adverts tailored to your purchase history or interests.
- (iii) Fine-tune your profile.
Loyalty programme management
Your data is processed to:
- (i) Determine your eligibility for the loyalty programme and ensure it runs smoothly.
- (ii) Send you offers, news or adverts tailored to your purchase history or interests.
- (iii) Fine-tune your profile.
Sending our newsletter
Your personal data is processed to send you our newsletter.
Sending our newsletter
Your personal data is processed to send you our newsletter.
Managing client and prospect relations via social media
Your data is processed for the purposes of:
- (i) Managing and moderating our social media pages.
- (ii) Managing client relations via social media, including our company image and product portfolio.
- (iii) Showing you targeted advertising and finding other people like you on social media.
Personalisation of the Site and advertising based on your preferences
We track and analyse your Site habits, use and activity (including by combining your data collected in the Site context with your data collected when you buy from our Site) to personalise our Site, including using technologies that place cookies on your device or in emails we send you.
Competition organisation
We process your data:
- (i) For competition purposes, particularly to organise the contest, register your entry and send out prizes if applicable.
- (ii) To send you electronic communications and/or share certain information with our commercial partners for sales prospecting purposes
Keeping the Site secure
In general, you can navigate the Site without having to share identifying data with us. However, information about your browsing is collected automatically (see the “The data we collect automatically” section) to keep the Site secure.
Combatting e-commerce fraud
To combat fraud relating to orders on the Site:
- UN BIJOU À PARIS has a fraud detection solution which can lead to automatic decision-making based exclusively on automated processing, including profiling. This could affect you during your buying process by not allowing you to buy products on the Site. The decision is taken by an algorithm that applies rules set by UN BIJOU À PARIS based on data about you (such as the information you have given us and information associated with your order). In some cases, UN BIJOU À PARIS then manually reviews transactions.
Answering your questions posed via the automated chat tool on our website
Communicating with you about products, services, offers, promotions, benefits and events, and giving you information that may interest you
We collect and process your personal data to dynamically manage our commercial relationship, enhance our brand image and inform you about our products and services.
Responding to your requests via our Site forms
Responding to your questions posed via the forms on our website.
Publishing your reviews online of our company, products and Services.
The store locator to help you find your nearest store
Management of claims and litigation
Compliance with applicable laws, court orders, other legal proceedings or the requirements of an authority
Managing client and prospect relations via social media
Your data is processed for the purposes of:
- (i) Managing and moderating our social media pages.
- (ii) Managing client relations via social media, including our company image and product portfolio.
- (iii) Showing you targeted advertising and finding other people like you on social media.
Personalisation of the Site and advertising based on your preferences
We track and analyse your Site habits, use and activity (including by combining your data collected in the Site context with your data collected when you buy from our Site) to personalise our Site, including using technologies that place cookies on your device or in emails we send you.
Competition organisation
We process your data:
- (i) For competition purposes, particularly to organise the contest, register your entry and send out prizes if applicable.
- (ii) To send you electronic communications and/or share certain information with our commercial partners for sales prospecting purposes
Keeping the Site secure
In general, you can navigate the Site without having to share identifying data with us. However, information about your browsing is collected automatically (see the “The data we collect automatically” section) to keep the Site secure.
Combatting e-commerce fraud
To combat fraud relating to orders on the Site:
- UN BIJOU À PARIS has a fraud detection solution which can lead to automatic decision-making based exclusively on automated processing, including profiling. This could affect you during your buying process by not allowing you to buy products on the Site. The decision is taken by an algorithm that applies rules set by UN BIJOU À PARIS based on data about you (such as the information you have given us and information associated with your order). In some cases, UN BIJOU À PARIS then manually reviews transactions.
Answering your questions posed via the automated chat tool on our website
Communicating with you about products, services, offers, promotions, benefits and events, and giving you information that may interest you
We collect and process your personal data to dynamically manage our commercial relationship, enhance our brand image and inform you about our products and services.
Responding to your requests via our Site forms
Responding to your questions posed via the forms on our website.
Publishing your reviews online of our company, products and Services.
The store locator to help you find your nearest store
Management of claims and litigation
Compliance with applicable laws, court orders, other legal proceedings or the requirements of an authority
Why it is necessary for us to process your data (legal basis)
Why it is necessary for us to process your data (legal basis)
- Fulfilment of a contract (General Terms of Sale) with you.
- Fulfilment of a contract (General Terms of Sale) with you.
• (i) Fulfilment of a contract (General Terms of Sale) between UN BIJOU À PARIS and you.
• (ii) Legal obligation to retain accounting records for a transaction.
• (iii) Legitimate interest for UN BIJOU À PARIS to improve the Services.
• (i) Fulfilment of a contract (General Terms of Sale) between UN BIJOU À PARIS and you.
• (ii) Legal obligation to retain accounting records for a transaction.
• (iii) Legitimate interest for UN BIJOU À PARIS to improve the Services.
- Fulfilment of a contract of sale between you and UN BIJOU À PARIS.
- Fulfilment of a contract of sale between you and UN BIJOU À PARIS.
- (i) Fulfilment of a contract with you formed by the programme General Terms (available here).
- (ii) Your consent to receive commercial offers via electronic methods of communication.
- (iii) UN BIJOU À PARIS’ legitimate interest (client relations management, marketing).
- (i) Fulfilment of a contract with you formed by the programme General Terms (available here).
- (ii) Your consent to receive commercial offers via electronic methods of communication.
- (iii) UN BIJOU À PARIS’ legitimate interest (client relations management, marketing).
- Your consent:
When you provide your email address to receive our newsletter in the box for this purpose on our website, or when you sign a form in store.
- Your consent:
When you provide your email address to receive our newsletter in the box for this purpose on our website, or when you sign a form in store.
- (i) and (ii) UN BIJOU À PARIS' legitimate interest in managing the client and prospect relationship and its brand image.
- (iii) Your consent: via the methods used by the social media platforms in question to obtain consent.
- Your consent:
(You can change your cookie settings on our Site at any time.)
- (i) Fulfilment of a contract (competition rules) to manage the competition.
- (ii) Your consent to receive our sales prospecting content.
- UN BIJOU À PARIS' legitimate interest in the Site running smoothly, being optimised and staying secure.
- (i) Necessary when a contract is concluded between UN BIJOU À PARIS and you (General Terms of Sale). At any time, you have the right to obtain a human intervention, to be informed of the relevant observations and to contest the decision by contacting the company DPO by email: dpo@lesgeorgettes.com or by post: 6 Rue des Bucardes 34750 Villeneuve-lès-Maguelone, France.
- UN BIJOU À PARIS' legitimate interest in improving its products and Services.
- UN BIJOU À PARIS' legitimate interest in managing the client and prospect relationship.
- Your consent:
Opt-in on our website or in store for communication by email and text message.
UN BIJOU À PARIS' legitimate interest in responding to questions asked of it.
- Your consent:
Opt-in via the review submission form.
- Your consent:
Via the geolocation option on your device.
- UN BIJOU À PARIS' legitimate interest in legally defending its interests and arranging for defence in a litigation process.
- UN BIJOU À PARIS' legal obligation
- (i) and (ii) UN BIJOU À PARIS' legitimate interest in managing the client and prospect relationship and its brand image.
- (iii) Your consent: via the methods used by the social media platforms in question to obtain consent.
- Your consent:
(You can change your cookie settings on our Site at any time.)
- (i) Fulfilment of a contract (competition rules) to manage the competition.
- (ii) Your consent to receive our sales prospecting content.
- UN BIJOU À PARIS' legitimate interest in the Site running smoothly, being optimised and staying secure.
- (i) Necessary when a contract is concluded between UN BIJOU À PARIS and you (General Terms of Sale). At any time, you have the right to obtain a human intervention, to be informed of the relevant observations and to contest the decision by contacting the company DPO by email: dpo@lesgeorgettes.com or by post: 6 Rue des Bucardes 34750 Villeneuve-lès-Maguelone, France.
- UN BIJOU À PARIS' legitimate interest in improving its products and Services.
- UN BIJOU À PARIS' legitimate interest in managing the client and prospect relationship.
- Your consent:
Opt-in on our website or in store for communication by email and text message.
UN BIJOU À PARIS' legitimate interest in responding to questions asked of it.
- Your consent:
Opt-in via the review submission form.
- Your consent:
Via the geolocation option on your device.
- UN BIJOU À PARIS' legitimate interest in legally defending its interests and arranging for defence in a litigation process.
- UN BIJOU À PARIS' legal obligation
Retention period for your personal data
Retention period for your personal data
- When you use your account or order products or services via your online account.
- Or 3 years after your last login to your online account using your login detail, if you have not had any other interactions with us.
- When you use your account or order products or services via your online account.
- Or 3 years after your last login to your online account using your login detail, if you have not had any other interactions with us.
- To complete your orders, all data until the end of the transaction.
- For billing data: 10 years after the end of the financial year.
- To complete your orders, all data until the end of the transaction.
- For billing data: 10 years after the end of the financial year.
- For the period necessary to provide the Service and/or 3 years after your last interaction with us.
- For the period necessary to provide the Service and/or 3 years after your last interaction with us.
- While you are a programme member.
- And/or 3 years after your last interaction with us.
- While you are a programme member.
- And/or 3 years after your last interaction with us.
- Until you unsubscribe in your account on our website.
- Or use the unsubscribe links for this purpose in the newsletters.
- Or 3 years after your last interaction with us.
- Until you unsubscribe in your account on our website.
- Or use the unsubscribe links for this purpose in the newsletters.
- Or 3 years after your last interaction with us.
- (i) and (ii) 3 years after your last contact with us.
- (iii) On the date you delete your account on these social media platforms.
- See our Cookie Policy
- (i) During the competition and, if applicable, for the period necessary to supply prizes.
- (ii) Until you unsubscribe in your account on our website, or by using the unsubscribe links for this purpose in the newsletters, or 3 years after your last interaction with us.
- Data is stored for the duration of security and integrity operations, which may vary depending on the operations carried out (up to 6 months).
- 3 years from the detection.
- Throughout the satisfaction survey and for 3 years afterwards, if you have not have any other interaction with us.
- Up to 3 years after the question is posed.
- Up to 3 years after our most recent contact.
- Or by you using your right to object to data processing at any time.
- However long it takes to process your request, then, based on what you ask, the data is archived for up to 3 years after the issue is solved.
- Until you delete your review.
- 30 minutes per session.
- The duration of the claim or litigation, then data is stored in line with the rules about limitation after the issue is resolved.
- And/or in the event of legal action: data is stored throughout the proceedings until the complete legal judgment or settlement agreement is fully executed.
- For the duration provided for by applicable law or the court or administrative decision concerned.
- (i) and (ii) 3 years after your last contact with us.
- (iii) On the date you delete your account on these social media platforms.
- See our Cookie Policy
- (i) During the competition and, if applicable, for the period necessary to supply prizes.
- (ii) Until you unsubscribe in your account on our website, or by using the unsubscribe links for this purpose in the newsletters, or 3 years after your last interaction with us.
- Data is stored for the duration of security and integrity operations, which may vary depending on the operations carried out (up to 6 months).
- 3 years from the detection.
- Throughout the satisfaction survey and for 3 years afterwards, if you have not have any other interaction with us.
- Up to 3 years after the question is posed.
- Up to 3 years after our most recent contact.
- Or by you using your right to object to data processing at any time.
- However long it takes to process your request, then, based on what you ask, the data is archived for up to 3 years after the issue is solved.
- Until you delete your review.
- 30 minutes per session.
- The duration of the claim or litigation, then data is stored in line with the rules about limitation after the issue is resolved.
- And/or in the event of legal action: data is stored throughout the proceedings until the complete legal judgment or settlement agreement is fully executed.
- For the duration provided for by applicable law or the court or administrative decision concerned.
5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
5.1. We share data when necessary to manage the Site and provide you with the requested Services.
When you use the Services and Site, some of your information is transferred to our providers and subcontractors to manage the Site and provide you with the associated Services as required within the limits of their work.
For example:
• Your login data is stored by the Site host.
• Your payment data is shared with our payment partner and account holder banking institutions to carry out the transactions when you buy. Information is also sent to your bank to secure payments made with a bank card on our Site in line with the PSD2 (European Payment Services Directive).
• When you use PayPal as a payment method on the Site, your transaction data is processed by PayPal as per its privacy policy available here.
• The data provided for order delivery is shared with logistics providers.
5.2. Your data may be shared with our debt recovery firms, our legal advisors, or legally permitted third parties to allow us to recover debts, manage litigation and prevent outstanding debts and disputes.
We must also share your data with our external advisors in the event of litigation, with third parties like debt recovery firms asked to recover outstanding debts, or to combat fraud online with third parties who are legally authorised or appointed by UN BIJOU À PARIS for the sole purposes of checking the buyer’s identity, the order validity, the payment method used and the delivery envisaged.
5.3. The data posted on our social media pages and comments you add are accessible to the public.
The data and comments posted on UN BIJOU À PARIS' social media pages are publicly accessible by any third party with access to the social media platform in question.
5.4. Data is shared with social media platforms when you use their “social buttons” on our website.
When you use social buttons, your ID data is automatically shared with these social media platforms. You can also share information or content from our Site on social media. This is governed by the social media platforms’ terms of use, which you can check on their websites.
5.5. Data may be shared with anyone who acquires our company assets.
Data may also be shared with the definite or potential acquirer or recipient of some or all our business or assets if our company is sold or reorganised (in any form).
5.6. Data may be shared with judicial and administrative authorities.
Data may also be shared with any authority, jurisdiction, administrative body or any other authorised third party when personal data must be provided by law, or due to a regulatory provision or a legal decision, or if it must be shared to protect and defend UN BIJOU À PARIS' rights.
6. HOW DO WE MANAGE DATA TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA?
We may transfer personal data to countries outside the European Economic Area (EEA), including to countries with data protection standards that differ from those in the EEA.
In line with Art. 46.2(c) of the GDPR, any personal data transfer outside the EEA is done under appropriate guarantees compliant with applicable personal data protection regulations. A copy of the applicable guarantees can be obtained on request by contacting us.
For any questions about data transfers outside the EEA, or an extract of the standard contractual clauses we use, please contact us at: dpo@lesgeorgettes.com.
7. WHAT ARE YOUR RIGHTS AND CAN YOU EXERCISE THEM?
7.1. Access and copies
You have the right to access and share your personal data. Before we respond to your request, we are legally required to check your identity.
If you have an account on our Site, you can access the data in your online account. This also allows you to correct, edit or delete certain ID data and your contact details.
Within the limits set out by the law, you can exercise your right to portability, giving you, in an interoperable format, the personal data you have shared with us.
If you cannot access your account or to access other data, please email us at: dpo@lesgeorgettes.com.
7.2. Correcting incorrect personal data
You have the right to ask for your personal data to be corrected if it is incorrect, and for its processing to be limited while it remains incorrect. You also have the right, depending on the nature of processing, to ask for the personal data we hold to be added to.
If you cannot access your account or the data you want to correct cannot be corrected via your account, please email us at: dpo@lesgeorgettes.com.
7.3. Withdrawing your consent to the processing of your personal data
When the processing of your personal data is subject to your consent (such as subscribing to the newsletter, and using cookies and similar technologies on this Site), you have the right to withdraw your consent at any time.
You can exercise this right by editing your marketing and newsletter subscription options, and by withdrawing your consent to cookies.
If you cannot withdraw your consent, please email us at: dpo@lesgeorgettes.com.
7.4. Having your personal data deleted
You can also ask for your personal data to be deleted in the following situations:
• You believe that processing your personal data is no longer necessary for the Services taken out or your Site use, or you think that the purposes in this policy or the data’s retention are unlawful.
• You have withdrawn your consent to the processing of your data.
• You object to the processing of your personal data for reasons linked to your personal circumstances.
• You object to your data being used for sales prospecting.
• Your data was collected online when you were a minor.
Alternatively, you can ask for the processing of your personal data to be limited, within the limits set out by the law.
Please note that even if you exercise your right to delete or limit the processing of your data, we may retain some of your personal data if legally required or permitted to do so, if we have a legitimate reason to do so (for example, to allow us to justify the execution of a contract), to exercise or defend rights legally, or if exercising the right infringes on freedom of expression and information.
7.5.Your rights regarding automated decisions based exclusively on automated processing
At any time, you have the right to obtain a human intervention, to be informed of the relevant observations and to contest the decision by emailing: dpo@lesgeorgettes.com.
7.6. Issuing general or specific instructions regarding the retention, deletion and sharing of your personal data when you die
You have the right to issue general or specific instructions regarding the retention, deletion and sharing of your personal data when you die.
You can email us these instructions at: dpo@lesgeorgettes.com.
7.7. Right to seek help from the CNIL
Finally, you have the right to contact the French Data Protection Authority (the CNIL) 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, FRANCE, with complaints about how we collect and process your personal data.
8. HOW TO CONTACT US
You have the right to obtain clear, transparent and understandable information about how we use your personal data and your rights.
If you have any questions, you can contact us by letter or email.
• By post: Service Juridique, 48 rue Sainte-Anne, 75002 Paris, FRANCE
• By email: dpo@lesgeorgettes.com. Please note that to respond, we may need you to provide proof of identity. We may also ask you to give us further information or proof
5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
5.1. We share data when necessary to manage the Site and provide you with the requested Services.
When you use the Services and Site, some of your information is transferred to our providers and subcontractors to manage the Site and provide you with the associated Services as required within the limits of their work.
For example:
• Your login data is stored by the Site host.
• Your payment data is shared with our payment partner and account holder banking institutions to carry out the transactions when you buy. Information is also sent to your bank to secure payments made with a bank card on our Site in line with the PSD2 (European Payment Services Directive).
• When you use PayPal as a payment method on the Site, your transaction data is processed by PayPal as per its privacy policy available here.
• The data provided for order delivery is shared with logistics providers.
5.2. Your data may be shared with our debt recovery firms, our legal advisors, or legally permitted third parties to allow us to recover debts, manage litigation and prevent outstanding debts and disputes.
We must also share your data with our external advisors in the event of litigation, with third parties like debt recovery firms asked to recover outstanding debts, or to combat fraud online with third parties who are legally authorised or appointed by UN BIJOU À PARIS for the sole purposes of checking the buyer’s identity, the order validity, the payment method used and the delivery envisaged.
5.3. The data posted on our social media pages and comments you add are accessible to the public.
The data and comments posted on UN BIJOU À PARIS' social media pages are publicly accessible by any third party with access to the social media platform in question.
5.4. Data is shared with social media platforms when you use their “social buttons” on our website.
When you use social buttons, your ID data is automatically shared with these social media platforms. You can also share information or content from our Site on social media. This is governed by the social media platforms’ terms of use, which you can check on their websites.
5.5. Data may be shared with anyone who acquires our company assets.
Data may also be shared with the definite or potential acquirer or recipient of some or all our business or assets if our company is sold or reorganised (in any form).
5.6. Data may be shared with judicial and administrative authorities.
Data may also be shared with any authority, jurisdiction, administrative body or any other authorised third party when personal data must be provided by law, or due to a regulatory provision or a legal decision, or if it must be shared to protect and defend UN BIJOU À PARIS' rights.
6. HOW DO WE MANAGE DATA TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA?
We may transfer personal data to countries outside the European Economic Area (EEA), including to countries with data protection standards that differ from those in the EEA.
In line with Art. 46.2(c) of the GDPR, any personal data transfer outside the EEA is done under appropriate guarantees compliant with applicable personal data protection regulations. A copy of the applicable guarantees can be obtained on request by contacting us.
For any questions about data transfers outside the EEA, or an extract of the standard contractual clauses we use, please contact us at: dpo@lesgeorgettes.com.
7. WHAT ARE YOUR RIGHTS AND CAN YOU EXERCISE THEM?
7.1. Access and copies
You have the right to access and share your personal data. Before we respond to your request, we are legally required to check your identity.
If you have an account on our Site, you can access the data in your online account. This also allows you to correct, edit or delete certain ID data and your contact details.
Within the limits set out by the law, you can exercise your right to portability, giving you, in an interoperable format, the personal data you have shared with us.
If you cannot access your account or to access other data, please email us at: dpo@lesgeorgettes.com.
7.2. Correcting incorrect personal data
You have the right to ask for your personal data to be corrected if it is incorrect, and for its processing to be limited while it remains incorrect. You also have the right, depending on the nature of processing, to ask for the personal data we hold to be added to.
If you cannot access your account or the data you want to correct cannot be corrected via your account, please email us at: dpo@lesgeorgettes.com.
7.3. Withdrawing your consent to the processing of your personal data
When the processing of your personal data is subject to your consent (such as subscribing to the newsletter, and using cookies and similar technologies on this Site), you have the right to withdraw your consent at any time.
You can exercise this right by editing your marketing and newsletter subscription options, and by withdrawing your consent to cookies.
If you cannot withdraw your consent, please email us at: dpo@lesgeorgettes.com.
7.4. Having your personal data deleted
You can also ask for your personal data to be deleted in the following situations:
• You believe that processing your personal data is no longer necessary for the Services taken out or your Site use, or you think that the purposes in this policy or the data’s retention are unlawful.
• You have withdrawn your consent to the processing of your data.
• You object to the processing of your personal data for reasons linked to your personal circumstances.
• You object to your data being used for sales prospecting.
• Your data was collected online when you were a minor.
Alternatively, you can ask for the processing of your personal data to be limited, within the limits set out by the law.
Please note that even if you exercise your right to delete or limit the processing of your data, we may retain some of your personal data if legally required or permitted to do so, if we have a legitimate reason to do so (for example, to allow us to justify the execution of a contract), to exercise or defend rights legally, or if exercising the right infringes on freedom of expression and information.
7.5.Your rights regarding automated decisions based exclusively on automated processing
At any time, you have the right to obtain a human intervention, to be informed of the relevant observations and to contest the decision by emailing: dpo@lesgeorgettes.com.
7.6. Issuing general or specific instructions regarding the retention, deletion and sharing of your personal data when you die
You have the right to issue general or specific instructions regarding the retention, deletion and sharing of your personal data when you die.
You can email us these instructions at: dpo@lesgeorgettes.com.
7.7. Right to seek help from the CNIL
Finally, you have the right to contact the French Data Protection Authority (the CNIL) 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, FRANCE, with complaints about how we collect and process your personal data.
8. HOW TO CONTACT US
You have the right to obtain clear, transparent and understandable information about how we use your personal data and your rights.
If you have any questions, you can contact us by letter or email.
• By post: Service Juridique, 48 rue Sainte-Anne, 75002 Paris, FRANCE
• By email: dpo@lesgeorgettes.com. Please note that to respond, we may need you to provide proof of identity. We may also ask you to give us further information or proof