1. Introduction
This privacy policy applies to the website brindhysope.fr.
The purpose of this privacy policy is to inform site users about:
- how their personal data is collected and processed. Personal data includes any information that can identify a user.
- users' rights regarding this data,
- who is responsible for the processing of collected personal data,
- to whom this data may be transmitted,
the site’s policy regarding "cookies".
This privacy policy complements the legal notices and the Terms and Conditions of Use, available at:
https://brindhysope.fr/content/7-politique-de-confidentialite
https://brindhysope.fr/content/2-mentions-legales
https://brindhysope.fr/content/3-conditions-generales-de-vente
2. General Principles for Data Collection and Processing
In accordance with Article 5 of the European Regulation 2016/679 (GDPR), the collection and processing of user data on the site comply with the following principles:
- lawfulness, fairness, and transparency: data can only be collected and processed with the user's consent. Whenever personal data is collected, the user will be informed of what data is collected and for what purpose,
- purpose limitation: data collection and processing are carried out for specific purposes defined in these Terms of Use,
- data minimization: only data necessary for achieving the intended purposes is collected,
- limited data retention: data is stored only for a limited period, and users are informed. If the duration cannot be precisely stated, users are informed of the criteria used to determine it,
- integrity and confidentiality: the data controller commits to ensuring the integrity and confidentiality of the collected data.
To ensure lawfulness, in accordance with Article 6 of the European Regulation 2016/679, the collection and processing of personal data may only occur if one of the following conditions is met:
- the user has explicitly consented to the processing,
- the processing is necessary for the performance of a contract,
- the processing fulfills a legal obligation,
- the processing is necessary to protect vital interests of the data subject or another individual,
- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority,
- the processing is necessary for the legitimate interests pursued by the data controller or a third party.
3. Personal Data Collected and Processed During Site Navigation
A. Collected Data and Method of Collection
Personal data collected on brindhysope.fr is used for creating a customer account, processing an order, or responding to inquiries via the contact form.
This includes name, email address, postal address if applicable, and IP address.
Data is intended for BRIN D'HYSOPE for contract execution and customer service.
Data is collected when users perform the following actions on the site:
- creating a customer account,
- purchasing products,
- using the contact form.
The data controller will store all collected data in the site's IT systems under reasonable security conditions indefinitely.
Data collection and processing purposes include:
- account management,
- shopping cart management,
- payment processing,
- shipping,
- order processing.
The legal basis for processing is the user's consent.
B. Data Transmission to Third Parties
Data may be transmitted to the following third parties:
Online payment and shipping service provider, Prestashop (open-source platform for this online store).
C. Data Hosting
The site brindhysope.fr is hosted by OVH, located at:
2 rue Kellermann - 59100 ROUBAIX – France
Data collected and processed by the site is exclusively hosted and processed in France.
4. Data Controller
A. Data Controller
The team of www.brindhysope.fr is responsible for processing personal data and can be contacted at: contact@brindhysope.fr
They determine the purposes and methods used for processing personal data.
B. Obligations of the Data Controller
The data controller commits to protecting personal data, not sharing it with third parties without informing the user, and respecting the purposes for which data was collected.
The site has an SSL certificate to ensure secure data transfer.
In addition, the data controller will notify users in case of data correction or deletion unless this requires disproportionate effort or costs.
If data integrity, confidentiality, or security is compromised, the user will be informed by all available means.
5. User Rights
Users have the following rights under personal data regulations.
To exercise these rights, users must provide their first and last name, email address, and, if relevant, account or subscriber number.
The data controller must respond within 30 (thirty) days.
A. Presentation of User Rights
a. Right of access, correction, and deletion
Users can access, update, or request deletion of their data via contact@brindhysope.fr. Users may request deletion of their account if applicable.
b. Right to data portability
Users can request their data to be transferred to another site via contact@brindhysope.fr.
c. Right to restrict or object to processing
Users can request restriction or object to processing unless legitimate overriding interests exist. Requests should be sent to contact@brindhysope.fr.
d. Right not to be subject to automated decision-making
Users have the right not to be subject to automated decisions producing legal effects or significant impacts under GDPR 2016/679.
e. Right to determine the fate of data after death
Users may specify how their data should be handled after death in accordance with Law n°2016-1321 of October 7, 2016.
f. Right to appeal to supervisory authority
If the data controller does not respond or rights are violated, users may contact CNIL (https://www.cnil.fr) or competent judicial authorities.
B. Personal data of minors
Under Article 8 GDPR, only minors aged 15 or older can consent to data processing. Users under 15 require parental consent.
The site may verify user age or parental consent before allowing site use.
6. Use of "Cookies"
The site uses "cookies".
A cookie is a small file stored on the user's hard drive containing information about browsing habits.
Cookies help track statistics, facilitate navigation, and improve user experience.
User consent is required for cookies involving personal data. Consent is valid for six (6) months and renewed thereafter.
a. User opposition to cookies
Users may disable cookies via browser settings. Instructions can be found at:
Chrome: https://support.google.com/accounts/answer/61416?hl=fr
Firefox: https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences
Safari: http://www.apple.com/legal/privacy/fr-ww/
Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
Opera: http://www.opera.com/help/tutorials/security/cookies/
Disabling cookies may affect site functionality, for which the publisher is not responsible.
b. Cookies used by the site
Cookies are used to store preferences, manage shopping cart, order, and shipping.
Third-party cookies may also be used via Prestashop or Google Analytics. Third-party services for payment and shipping use cookies.
7. Modifications to the Privacy Policy
This privacy policy is accessible at:
https://brindhysope.fr/content/7-politique-de-confidentialite
The site owner reserves the right to modify it to ensure legal compliance. Users are encouraged to review this policy regularly.
The last update of this privacy policy was on December 20, 2021.