Privacy Policy
Who are we ?
Our website address is: https://www.novaeprovence.fr
Comments
When visitors leave comments on our site we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
By editing or publishing a post, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the post you just edited. It expires after 1 day.
Embedded content from other sites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Use and transmission of your personal data
Suggested text: If you request a password reset, your IP address will be included in the reset email.
Storage durations of your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For accounts that register on our website (if any), we also store the personal information they provide in their user profile. All accounts can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
The rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Transmission of your personal data
Suggested text: Visitor comments may be checked through an automated spam detection service.
PRIVACY POLICY
ARTICLE 1. OBJECT
The purpose of this privacy policy is to inform Internet users of the collection and processing of data by THE COMPANY as well as the data collected during your browsing on the site.
ARTICLE 2. DEFINITION
Personal data Any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an "identifiable natural person" is deemed to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
Treatment Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
File Any structured set of personal data accessible according to specific criteria, whether this set is centralized, decentralized or distributed functionally or geographically.
Data controller The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing.
Subcontractor The natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Recipient (partner) The natural or legal person, public authority, service or other body to which personal data is disclosed, whether a third party or not.
Intermediate archiving This involves isolating the data in an intermediate archiving database, separate from the active database with restricted access to the extent that:
- There is a legal obligation to retain data for a fixed period;
- In the absence of a retention obligation, these data nevertheless present an administrative interest.
Cookies Connection witness which is the equivalent of a text file stored on the user's terminal when consulting the site. The cookie file can only be read by the issuer of the cookie.
ARTICLE 3. ACCEPTANCE OF THE PRIVACY POLICY
The Internet user must read the confidentiality policy and accept it, in particular when placing an order on the LA SOCIETE website.
ARTICLE 4. IDENTITY OF THE DATA CONTROLLER
06 14 27 28 05
let's discuss@novaeprovence.fr
27 Rue Lamartine 83270 Saint-Cyr-sur-Mer
SIRET: 85207689200011 represented by Stéphanie PENELON, President
Intra-community VAT number: FR 67852076892
ARTICLE 5. DATA COLLECTED AND PURPOSES
THE COMPANY collects the following personal data for the following purposes:
- To allow you to create your personal account online on the COMPANY website, we collect your name, first name, email address and password.
- To allow you to subsequently access your account (management of your access) , we collect your email address and password.
- To allow you to place your order, whether it is a one-off order or a subscription , we collect your first name, last name, postal address, email address and telephone number.
- For payment of your order and/or your subscription, Our payment service provider collects your bank details. Your bank card numbers are encrypted and THE COMPANY does not have access to them.
- To ensure delivery of the product(s) ordered, We process the same personal data that is collected to place an order, with the exception of banking data.
- To ensure customer relationship management when you contact THE COMPANY via the online contact form (we collect your name, email address and any personal data you enter in the message), via our contact email address discutons@novaeprovence.fr (we collect your email address and any personal data that you enter in your message), via our official social media pages.
- To process your withdrawal request, we collect your name, first name, postal address, email address, telephone number, order number.
- To process your requests to exercise rights relating to your personal data, we collect your name, first name, postal address, telephone number, identity card or passport.
- To prevent online fraud, ensure and manage online transactions on our site, payment incidents and recovery management, We collect personal data relating to your identity, address and means of payment.
- To ensure the management of any product withdrawals and/or recalls, We collect your first name, last name, postal address, email address, telephone number and order number.
- With your consent:
- If you do not wish to create an online account to place your order, we collect your contact details (identity, postal address, email address, and telephone number) for possible future orders.
- In order to send you newsletters concerning the news and offers of THE COMPANY, We collect your email address.
- In order to send you a gift on your birthday, we collect your day and month of birth.
- For the processing of customer reviews , we collect your photograph, your first name and your last name. THE COMPANY only publishes your photograph, your first name and the first letter of your last name on its site .
- To carry out statistical analyses of our site , audience measurements, product preferences in order to improve and adapt our activities from a marketing and commercial point of view.
ARTICLE 6. THE LEGAL BASES OF THE PROCESSING
The legal bases on which the processing of personal data by THE COMPANY is based are as follows:
6.1. Legal obligations
As part of its activity, THE COMPANY is required to process certain data in order to comply with the law, as is the case for the accounting processing of your orders placed on the site.
This also includes data regarding the withdrawal or recall of products.
6.2. Execution of the contract
When you place an order on the COMPANY website, you accept the general terms and conditions of sale which represent the contract binding you to THE COMPANY. In order to be able to execute the contract and therefore the order, THE COMPANY must process certain data, in particular for the payment of the order, the delivery and tracking of the order, and the after-sales service.
6.3. Consent
Some processing is based on your consent. This is the case for subscribing to the newsletter, sending a gift on your birthday or linking your credit card details to your account for subsequent orders. This is also the case for your testimonials posted online on the site.
This is also the case for certain cookies, particularly from third parties.
6.4. Legitimate interest
Some of the personal data processing carried out by THE COMPANY is based on its legitimate interest. This is the case for the prevention and fight against fraud on the site, the recovery of unpaid orders, where applicable.
ARTICLE 7. DURATION OF STORAGE OF YOUR DATA
Data concerning the sending of newsletters is kept for a period of three (3) years from your last activity on the site, including the sending of an email.
The retention period of the consent given for the installation of Cookies is a maximum of 13 months.
The information collected through tracers/Cookies is kept for a maximum period of 25 months.
Bank card data is kept for a maximum period of 15 months following payment of the order by the Internet user.
Personal data relating to order accounting is kept for a period of 10 years in accordance with legal obligations.
ARTICLE 8. RECIPIENTS OF PERSONAL DATA
Personal data is collected and processed by THE COMPANY. However, some of the personal data of the Internet user and/or customers may also be intended for third parties working with or on behalf of THE COMPANY.
These include THE COMPANY’s subcontractors such as:
- The site host
- Transport providers
- Logistics providers
- Payment providers whether it is a one-off order or a subscription;
- Fraud prevention and anti-fraud service providers;
- Publisher of newsletter and promotional offer sending software.
It is also about the Google analytics®, Facebook®, Instagram® and Snapchat®, TikTok® for audience analysis.
Finally, there is the accounting firm and the lawyers of THE COMPANY.
ARTICLE 9. PLACE OF HOSTING OF YOUR DATA AND TRANSFER OUTSIDE THE EUROPEAN UNION
Some of the recipients of personal data are located outside the European Union.
In order to carry out transfers of personal data outside the European Union with the service providers concerned, THE COMPANY takes contractual, organizational and technical guarantees in accordance with the provisions of the GDPR and the LIL (Data Protection Act of January 6, 1978).
ARTICLE 10. YOUR RIGHTS
10.1. Right of access (Article 15 of the GDPR)
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed. In the event that data is being processed, you have the right to access this data and the following information:
- The purposes of the processing;
- The categories of personal data concerned;
- The recipients or categories of recipients to whom the data have been communicated or will be communicated;
- If possible, the envisaged retention period of the data or, if not possible, the criteria used to determine that period;
- The existence of the right to request rectification or erasure of data, or restriction of processing or the right to object to processing;
- The right to lodge a complaint with the CNIL;
- Where personal data is not collected from you directly, any information available at the source;
- The existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.
A copy of the data being processed will be provided to you.
You may be required to pay a reasonable fee based on administrative costs for any additional copies you request.
If you request a copy of the data digitally, it will be provided to you in a commonly used digital form unless you request otherwise.
Finally, the right to obtain a copy of personal data must not infringe the rights and freedoms of others.
10.2. Right of rectification (Article 16 of the GDPR)
You have the right to request the rectification of your data that is inaccurate, as soon as possible. You also have the right to obtain that incomplete personal data concerning you be completed, including by providing an additional declaration.
10.3. Right to erasure (Article 17 of the GDPR)
You have the right to have your personal data erased without undue delay when one of the following reasons applies:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- You withdraw your consent on which the processing is based and there is no other legal ground for the processing concerned. The withdrawal of consent is valid for the future;
- You exercise your right to object and there are no overriding legitimate grounds for the processing;
- The personal data has been unlawfully processed;
- Personal data must be erased to comply with a legal obligation.
You are informed that the right to erasure may not apply if the processing is necessary to comply with a legal obligation or for the establishment, exercise or defense of legal claims.
10.4. Right to restriction of processing (Article 18 GDPR)
You have the right to request the limitation of the processing of your personal data when one of the following applies:
- Verification of your data after you have challenged the accuracy of your personal data;
- The processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use;
- THE COMPANY no longer needs your personal data for processing but the data is necessary for you to establish, exercise or defend legal rights;
- You have objected to the processing and THE COMPANY is verifying whether the legitimate grounds pursued by THE COMPANY prevail over your legitimate grounds.
10.5. Right to portability of personal data (Article 20 of the GDPR)
At your request, you have the option to receive your personal data in a structured, commonly used and machine-readable format when:
- The processing is based on consent or on a contract;
- And the processing is carried out using automated processes.
In exercising this right, you have the right to obtain that your personal data be transmitted directly to another data controller when this is technically possible.
The right to portability must not infringe the rights and freedoms of third parties.
10.6. Right to object (Article 21 GDPR)
In application of the right to object, you have the right to object at any time to the processing of your personal data based on legitimate interests.
Personal data will no longer be processed unless it is demonstrated that compelling legitimate grounds for the processing exist and override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
10.7. Fate of personal data post-mortem
In accordance with the law, you have the right to define your directives relating to the retention, deletion and communication of your personal data in the event of death.
You can communicate your specific instructions to us or register them with a certified digital trustee.
You can therefore designate the person of your choice who will be responsible for carrying out your instructions. Failing this, it will be your heirs.
You have the right to modify or revoke your instructions at any time.
10.8. Right to contact the CNIL
You have the right to lodge a complaint with the CNIL, the supervisory authority ( www.cnil.fr ).
ARTICLE 11. HOW TO EXERCISE YOUR RIGHTS
11.1. The terms of exercising rights
For all requests concerning personal data processed by THE COMPANY you can contact it by one of the following means:
- via the Website: by referring to the contact section
- in physics: 06 14 27 28 05, discutons@novaeprovence.fr, 27 Rue Lamartine 83270 Saint-Cyr-sur-Mer, NOVAE PROVENCE SAS
- By email: let's chat @ novaeprovence.fr
THE COMPANY may ask you for a copy of your identity document if there is any doubt about the identity of the applicant.
11.2. Response time
THE COMPANY has a period of one (1) month to respond to you from receipt of your request. This period may be extended by two (2) months given the complexity and number of requests. THE COMPANY will inform the person concerned within one month of their request.
In the event that you exercise your right to deletion or your right to erasure, you are informed that THE COMPANY may be required to retain personal data concerning you in the cases provided for by law, such as, for example, exercise of rights.
ARTICLE 12. COOKIES
The cookies that may be installed on your device (PC, phone, tablet) may be placed by different partner entities of THE COMPANY and for different purposes.
Some cookies require your consent before they can be installed and others only require information.
12.1. Cookies that may be placed on your device
has. Essential cookies
These are cookies that are essential to complete an order on our site or to enable you to browse our site. Refusing (when you set your browser to refuse all cookies) or deleting these cookies may prevent you from completing your order.
This may also cause difficulties in navigating our site.
b. Functional cookies
These are cookies that allow you to authenticate yourself on our site without necessarily having to reconnect or to keep your shopping cart in memory for a certain period of time.
These cookies are not mandatory but can make it easier for you to access our services.
c. Analytical cookies
These Cookies are useful to THE COMPANY because they provide information on the use of the site by Internet users, such as knowing which pages are most visited. They allow us to measure the audience and subsequently improve the pages, navigation and activities of THE COMPANY.
d. Advertising cookies
Advertising Cookies may be installed on your device by THE COMPANY’s partners.
The purpose of these Cookies is to allow you to see advertisements displayed on third-party sites corresponding to your interests based on your different browsing habits, whether it is the COMPANY site or other sites.
In order to enable this advertising poster, it is possible that certain personal data may be cross-referenced with other personal data collected by partners.
e. Geolocation cookies
In order to allow you to find the points of sale near your position, you have the possibility of being geolocated. If you give your consent, a cookie is installed in order to be able to geolocate you. You can withdraw your consent at any time.
f. Social media cookies
From our website, you have the possibility, by clicking on the logos of the different social networks available, to consult the official pages of THE COMPANY on these different social networks.
However, whether it concerns the issue and/or deposit and/or reading of cookies from these different social networks, the latter are governed by their confidentiality policies. (Facebook®, Instagram®, Pinterest®, LinkedIn®, TikTok® and Snapchat®).
The same is true of the content sharing platform YouTube®.
To learn about them and configure your choices, simply go to the websites of each of these social networks or content sharing platforms.
12.2. Managing cookies on our site
When you visit our site, you have the option of accepting all Cookies, refusing Cookies and, above all, configuring Cookies, i.e. choosing the Cookies that you accept and the Cookies that you refuse.
Please note that you can change your choice online at any time.
12.3. Cookie management through the choices offered by your browser software
You have the option to configure your browser software to:
- To accept all cookies
- To refuse all cookies globally or after specific request
- Acceptance of all cookies
If you have accepted in your browser software of each Terminal the recording of Cookies on each Terminal, the Cookies integrated in the pages and contents that you have consulted may be stored temporarily – without being able to exceed thirteen (13) months – in a dedicated space on your Terminal. They will be readable only by their issuer.
- Refusal of all cookies
By configuring your browser, you have the choice between two possibilities:
- Accept or refuse globally the recording of Cookies on your terminal;
- Accept or refuse Cookies after specific proposals and before the Cookie(s) are saved on your device.
Before configuring your browser software, THE COMPANY draws your attention to the fact that this setting of acceptance or refusal of Cookies may have consequences on access to certain services which require the use of Cookie(s).
- Ways to make your choices according to your browser
To configure your browser software, you must refer to your browser's help menu.
- Firefox™ https://support.mozilla.org/fr/kb/disable-cookies-third-party
- Chrome™
https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
- Edge™ https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Safari™ https://support.apple.com/fr-fr/HT201265
ARTICLE XX. MODIFICATION OF THE PRIVACY POLICY
The privacy policy may be modified at any time, in particular due to legislative or regulatory changes or due to new processing implemented by THE COMPANY.
The date of modification of the privacy policy will appear on said document and the new privacy policy will apply to any connection after the modification of the latter.