Privacy Policy

Introduction

We attach particular importance to respecting the privacy of the users of our site and to complying with the legal provisions in force.

This privacy policy allows you to better understand the principles of collection, processing and protection of personal data that we apply, as required by the data protection laws in force and in particular the European General Data Protection Regulation (Regulation 2016/679, known as "RGPD").

Épicerie fine cosmétique whose registered office is located at 102 avenue des Champs-Élysées 75008 Paris, France is responsible for processing personal data for the Blancrème merchant site, accessible at the following url: blancreme.com

This privacy policy may be updated at any time by us. We encourage you to review this policy before submitting your personal information to us. By using the blancreme.com website, you consent to our collection, storage, organization, retention, use and/or transfer of your personal information in accordance with this Privacy Policy.

What personal information do we collect?
We consider all information that directly or indirectly identifies you to be "personal data".

We may collect the following personal data:

- registration data: title, surname, first name, postal address, e-mail address, telephone number
- connection data: login and password
- data relating to purchases made: products purchased, promotional codes used, choice of gift packaging, purchase history
- data relating to orders: date of order, order destination address, choice of carrier, payment method
- data relating to products: reviews submitted on our site
- data relating to the follow-up of our commercial relationship, in particular communication preferences (newsletter), complaints, history of declared purchases, your requests or your correspondence with our Customer Service
subscription to our newsletter
- navigation data: IP address, browser, terminal

When do we collect your personal data?

We collect personal data from you when:
- you visit our site
- you create an account on our site
- you make a purchase on our site
- you give your opinion on a product
- you subscribe to our newsletters
- you contact us, in particular when you call or make a request or complaint to our Customer Service, when you give your opinion on our products and/or services.

What is the legal basis for our processing of personal data?

The processing of personal data that we carry out within the framework of our activity may have several legal bases:
- Legitimate interest: we need to collect your personal data to get to know you better in order to provide you with personalised offers and services, ensure the security of our site, improve our content, etc.
- The execution of a contract: the collection of your data is necessary when you subscribe to one of our online services (creation of an account on our merchant site, participation in a promotional offer, purchase, etc.)
- Your consent: in some cases, the law requires your consent to collect or use your data. This is the case, for example, when we wish to send you commercial solicitations (news, promotional offers, contests, etc.) by e-mail
- Legal obligations when the legislation in force requires the processing of data

Why is your personal data collected?

We collect your personal data for the legal purposes mentioned above.
The main purposes are as follows:
- To create, register and manage your account
- To process your purchases and orders
- Communicating with you: handling your requests, complaints, shipping of packages
- Administering your participation in promotional events
- Administration of the site, statistical analysis and improvement of the quality of service
- Managing your orders (orders, deliveries, after-sales service, etc.)
- Customer relationship management (CRM), in particular to get to know you better and to communicate personalised information about our products and services to you (in particular by e-mail, on social networks or any other medium)
- To manage the sending of newsletters and to let you benefit from your accumulated advantages
- To manage the publication of product reviews
- Administer our website, its security and fight against fraud
- To analyse and anticipate the market in order to adapt our products and services to best meet your needs
- If necessary, prevent and detect fraud
- Management of your requests (samples, advice, promotional operations, complaints, right of access, rectification, opposition, etc.)

With whom do we share your personal data?

We never sell, rent or give your personal data to other companies for commercial prospecting purposes. Your data is confidential.

It may be passed on to service providers and subcontractors chosen for their expertise and reliability who act on our behalf and according to our instructions, in particular to provide you with services such as: processing and dispatching orders, carrying out technical maintenance and development operations, processing purchase declarations etc.

Each service provider or subcontractor:
- only receives personal data that is necessary for the purposes for which it is responsible
- Is obliged not to use this data for any reason whatsoever

If we sell a business or assets, we may disclose your personal data to the prospective purchaser of that business or assets. If Épicerie Fine Cosmetics or any part of its assets are acquired by a third party, the personal data held about its customers and related to those assets is one of the transferred assets. In the latter case, the acquirer who will act as the new data controller will process your data and its data protection policy will govern the processing of your personal data.

Finally, we may transfer your personal data to local authorities, if required by law or in the context of an investigation and in accordance with applicable regulations.

How do we protect your personal data?

Épicerie fine cosmétique implements appropriate technical and organisational measures, in light of the nature of the data and the risks involved in processing it, to preserve the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged or accessed by unauthorised third parties.

These measures may include, but are not limited to, practices such as limited access to data by personnel in departments with the appropriate access rights, contractual guarantees when using an external service provider, privacy impact assessments, regular reviews of our privacy practices and policies, and/or physical and/or logical security measures (e.g., secure access, authentication procedures, back-ups, anti-virus software, firewalls).

In the unlikely event that we believe that the security of your personal data in our possession or control has been or may have been compromised, we will notify you in accordance with legal requirements and in the manner prescribed by law.

What is our policy on minors?

Our website is designed and intended for the general public. It is intended for people who are at least 18 years old. We do not ask for or voluntarily collect personal data from persons under the age of 18.
If we become aware of or suspect that we have collected personal data from a minor, we will take appropriate steps to contact the individual and, if necessary, delete the personal data from our servers and/or those of our service providers. We may use your personal data to conduct age checks and enforce our age rules.

If you are not 18 years of age or older, please do not create a user account or make a purchase or order on our Site. Have an adult, your guardian or legal representative take the necessary steps.

What is our cookie policy?

To learn more about our cookie policy, please see our Cookies & Third Party Services Policy.

How long will your personal data be kept?

We will keep your personal data for no longer than is necessary for the purposes set out in this Privacy Policy or as required by applicable law.

As a general rule :
- Unless you object or request deletion, prospective customers/clients' data is kept for a period of three years from the date of collection or the last contact or the end of the business relationship. At the end of this three-year period, we may contact you again to find out whether you wish to continue receiving commercial solicitations. In the absence of a positive and explicit response from you, your data will be deleted or archived in accordance with the provisions in force
- Data relating to identity documents are kept for one year if you exercise your right of access, rectification, limitation, deletion or portability and for three years if you exercise your right of opposition
- Data enabling proof of a right or a contract to be established, or kept in order to comply with a legal obligation, are archived in accordance with the provisions in force
- Product reviews are published on the site and are therefore kept for the duration of the publication of the latter

Our database, where our website and customer account information is stored, is located on the servers of Gandi.net in the Paris area in France.

We never have access to your passwords, which are encrypted and therefore secure. We do not have access to your payment information either. These are transferred directly to PAYZEN, which guarantees the security of your payments and the anonymity of your bank details.

In the case of the newsletter, the emails as well as the first and last names, if given, are stored on the site of a third party company: Mailchimp, a company that meets the requirements for data security. The data stored in Mailchimp can only be used and consulted by the employees of Épicerie Fine Cosmétique.

What are your rights regarding your personal data and how can you exercise them?

You can unsubscribe from our mailing lists at any time by contacting us at the address below or by following the "Unsubscribe" link in any of our emails.

You can also change your preferences in your account at any time.

You can also request the deletion of your account on our site: you will receive the history of your data by e-mail and the latter will be anonymised on our servers during the legal retention period imposed by the applicable regulations.

In accordance with the applicable regulations, you have the right to access, rectify, delete and port your data, as well as the right to object to and limit the processing. You may withdraw your consent at any time. You may also formulate directives concerning the conservation, deletion and communication of your personal data after your death. To exercise these rights, you must send us a request accompanied by a copy of your identity card bearing your signature:

Épicerie fine cosmétique - Blancrème
Customer Service
39 Route d'Herqueville
27430 Andé
France

We will inform you of the measures taken in response to your request as soon as possible.

In accordance with the applicable regulations, you may also lodge a complaint with the competent supervisory authority responsible for data protection or seek legal redress if your data is misused.

If you have any questions about this privacy policy, please contact our Data Protection Officer (DPO):

Épicerie fine cosétique
Legal Department / Data Protection Officer
39 Route d'Herqueville
27430 Andé
France