Privacy Policy

This confidentiality policy governs the relations between any visitor / user of the site "www.duchatel.com" and the owner merchant of the said site, namely the SARL DUCHATEL, a French commercial company with the share capital of 135,000 euros, domiciled 48 avenue Édouard VII 64200 BIARRITZ, registered in the RCS Bayonne under number 480 547 314, SIRET 480 547 314,00025, NAF 4771Z code (Retail of clothing in specialized store), intra -community VAT number FR18480547314. Contact: "contact@duchatel.com". Telephone number: +33 (0) 6 74 92 28 83.

In addition, Shopify is the service provider chosen by Sarl Duchatel to design the site "www.duchatel.com», From the services and features of this cloud-based web development platform, which also takes care of its accommodation on its servers.

SARL Duchatel has taken care to choose a partnership that can guarantee a high degree of data security. Shopify has implemented security measures intended to protect the personal information that it is led to collect, process, accommodate, including physical, electronic or procedural measures. Among other things, it provides secure HTTPS access to most service zones; Each Shopify store has a 256 -bit SSL certificate. The transmission of sensitive payment information (such as a credit card number) is protected by an encryption SSL/TLS compliant with sector standards, Shopify being certified PCI DSS (Payment Card Industry Data Security Standards), Level 1.

 

1/ Cookies

Pursuant to the EPRIVACY directive, Internet users must be informed and give their consent before the deposit and reading of certain tracers, while others are exempt from the collection of this consent. Article 5 (3) of Directive 2002/58/EC modified in 2009 lays down the principle of a user's prior consent before storage of information on its terminal or access to information already stored on it, unless these actions are strictly necessary for the supply of an online communication service expressly requested by the User or have the purpose of allowing or facilitating an electronic communication. Article 82 of the Data Protection Act transposes these provisions in French law.

The consent provided for by these provisions refers to the definition and the conditions provided for in articles 4 (11) and 7 of the GDPR. It must be free, specific, enlightened, unequivocal and the user must be able to withdraw it, at any time, with the same simplicity that he has granted it. The CNIL adopted a  recommendation Aiming in particular to offer examples of practical methods of collecting consent.

SARL DUCHATEL and its Shopify service provider (web design platform based in the cloud and accommodation service) use different cookies on the site "www.duchatel.com", in particular to measure the site attendance as well as you to offer videos, sharing buttons, lifts of content of social platforms and lively and interactive content.

A cookie is a text file placed on your computer when visiting a site or consultation of an advertising. It keeps user data to facilitate navigation and allow certain features. Cookies are managed by your Internet browser. The terms "cookie" or "tracer" cover in the case of "FingerPrinting"(Calculation of a unique identifier of the terminal based on elements of its configuration for tracing purposes), invisible or" web bugs "; Any other identifier generated by software or an operating system (serial number, Mac address, unique terminal identifier (IDFV), or any data set that is used to calculate a unique fingerprint of the terminal (for example via a "FingerPrinting" method).

 

3 types of cookies are deposited on our website:

  • Internal cookies necessary for the site to operate

They allow the site to operate optimally. You can oppose it and delete them using your browser settings, as indicated infra, but you should keep in mind that your user experience may be highly degraded.

  • Audience measurement cookies

In order to improve your experience on our site, we measure its audience thanks to a solution using cookie technology (Google Analytics: AdWords comparative analysis). The data collected makes it possible to provide only anonymous statistical data of attendance.


During your visit to our site, you are automatically informed of the presence of these cookies. We invite you to indicate your choices. Cookies are only deposited if you accept them beforehand.  In addition, you can at any time inform yourself and configure your cookies to accept or refuse them by going to the page "Privacy policy & cookies", on the active link « Cookie management " Present at the bottom left in the foot of the site of each page of the site.  You will indicate your preference either for the site or service by service.

  • Third -party cookies

They are intended to improve the interactivity of our website, which is based on certain services offered by third parties. This is: Facebook Group & Instagram.

 

These features use third -party cookies deposited by these services. During your first visit to "www.duchatel.com", a headband informs you of the presence of these cookies and invites you to indicate your choice. They are only deposited if you accept them or continue to browse the site by visiting a second page. You can set up your cookies at any time to accept or refuse them by going to the page "Cookie management", which is present at the bottom left in the footsteps of each page of the site.

 

You also have control and/or blocking means to deposit cookies thanks to the features provided by your browser, which allows you in particular to deactivate all cookies. However, such a choice will degrade the operation of our site. This is the reason why you might prefer to deactivate only cookies not necessary for the proper functioning of our site, via our management tool.


We communicate to you the links below of the main browsers (note that they can possibly vary).


You can control how our partners use your information with the links below:

  • Google
Manage Google announcement settings

  • Facebook
Manage Facebook ad parameters


  • Instagram
https://help.instagram.com/1896641480634370?ref=ig
 

In order not to keep the login newspapers that are collected using cookies and other tracers used as part of our web services, we do not keep them beyond a period of 18 months.

Given that the SARL Duchatel's online store is a Shopify store, we invite you to carefully consult Shopify's policy in terms of cookies, which is accessible to the following address:

 

In terms of cookies, Shopify indicates in particular:

"Why does Shopify use similar monitoring cookies and technologies?"

“We use cookies to recognize your device and provide you with a personalized experience on our websites or through our services. We also use cookies in the context of services, for example to operate the basket of our merchants' shops. To find out more about how we use cookies on our sites and those of our merchants, consult ourCookie policy.

"We also use cookies to broadcast targeted announcements ofGoogleFacebookBingSourceknowledge, and other third -party distributors. We also use cookies and other information from your browser and/or your device to provide you with personalized advertisements, advertising broadcasting and reports on several sessions and devices.

“Our third -party advertising partners use cookies to follow your previous visits to our websites and elsewhere on the Internet in order to offer you targeted advertisements. For more information about targeted or behavioral advertisements, please visithttps://www.networkadvertising.org/understanding-online-advertising.

"Deactivation: you can deactivate the targeted advertisements offered by specific third -party distributors by visiting thedeactivation pageof the alliance for digital advertising ordeactivation pageof the network advertising initiative.

“We are also likely to use tags, software development kits and other automatic monitoring methods on our websites, in our communications with you and in our products and services in order to measure performance and commitment.

"Please note that since there is no common opinion on how to" do not follow ", we do not change the collection of our information and our user practices when we detect such a signal from your browser. »»

Persons consulting / using the merchant site of SARL Duchatel are informed of the need to consult the Shopify policy in terms of cookies. They are also invited to consult the cookies policy of the company Pyplug, partner of Shopify and SARL Duchatel in terms of online payments (see infra):

https://www.payplug.com/fr/politique-relative-aux-cookies

 

2/ Personal data


The protection of your personal data is supported by our company.

Navigation on our website "www.duchatel.com" and the use of its features for any purchase must intervene after having read this Privacy Policy concerning the use and protection of your personal data, made up of any information allowing your identification directly or indirectly, such as your name, first name, email, telephone number, postal address, preferences concerning the subscription to our newsletter or information on our newsletter or information on our newsletter or

Personal data can therefore be collected during the creation of your account and/or because it is necessary for the management and monitoring of your orders, our exchanges; In addition, information (non -personal) can be collected during your navigation, such as the history of your navigation, the type of terminal and browser, your location ...

This is the reason why this privacy policy is permanently accessible, using a tab present, especially from the home page of our website, but also at the bottom left in the foot of each page of the site; That it can be downloaded from a durable and printable medium, if you wish.

Navigation on our website and the use of its features for possible purchases by a major individual enjoying their full legal capacity is also the framework of the provisions provided for in the contract of general conditions of sale, also downloadable on sustainable support on the home page of our site, in the foot of the page of each page of the site.

 

SARL DUCHATEL has appointed a internal data protection delegate.

This is Madame Anne Bonrepos. You can contact her for any questions relating to your personal data by email at the following address: "contact@duchatel.com".

or by mail:

  • Madame Anne BONREPOS / Data delegate
  • SARL DUCHATEL
  • 48 avenue Édouard VII 64200 Biarritz, France

Pursuant to legislation, each form set up by our services limits the collection of your personal data to the sole information necessary and indicates in particular what objectives of the collection of this data (purposes), if these data is compulsory or optional for the management of your request. You will always be able to read it and you benefit from a right of rectification or withdrawal by sending your request, by email or mail, to the attention of our data protection officer.

 

The European Data Protection Regulation (GDPR) requires concise, transparent, understandable and easily accessible information from the persons concerned. Transparency allows the persons concerned to know the reason for the collection of the various data concerning them; understand the processing that will be made of their data; to ensure control of their data by facilitating the exercise of their rights. For handling managers, it contributes to loyal data processing and makes it possible to establish a relationship of trust with the people concerned.

 

Different processing of your personal data can intervene when you communicate to us via our website.

has/ SARL Duchatel requests your personal data for the sole purpose of honoring orders made through its website, in particular to ensure deliveries. As such, we need to collect your name, first name, phone number and email for commercial command monitoring and postal address for deliveries. In addition, with regard to your email address, we invite you to accept to receive, at a reasonable frequency, our newsletter and our promotional offers by email, after having requested authorization from such communication, authorization that you obviously remain free to withdraw at any time, by contacting by email or mail our data protection delegate. Our company will limit its telephone calls to only strictly necessary situations to honor your orders, for example in the event of a stock problem, any difficulty (or doubt about this or that element of your order), as many situations that would require our point of view a direct and fast contact in order to better serve you.

We keep your personal data internally on a dedicated computer, benefiting from all standard security tools. We are also ensuring that it limits access to this data (and to the system concerned) to the only necessary people, in business, to provide expected services, people who have been aware of the importance of the security and confidentiality of personal data.

Always to ensure our obligations, we are necessarily led to communicate this personal data to our trusted provider which provides for us all the delivery operations on all territories: DHL. We have chosen to avoid the multiplication of partners to avoid possible dispersion of personal data. We may have to change for any reason whatsoever of service providers during our commercial activities, to provide our services, without the need to justify it. However, we will take the same precautions with regard to your personal data, in particular by choosing partners always presenting a sufficient degree of security and in accordance with the market standards.

We do not make any other use of your personal data that we have collected via our website, which we process and that we store internally; In particular, we do not communicate any of your personal data to third parties (except those which remain strictly necessary for the sole realization of our services towards you); We do not sell your data.

 

We have implemented technical and organizational measures to ensure the safety, integrity, authenticity and confidentiality of your personal data. We also make sure that our partners maintain an optimal level of protection.

 

We keep your personal data in the company (our computer system) as long as your account is active on our site and/or that is necessary to provide you with our services. In addition, we keep your personal data after deactivating your account (whether the cause) or total inactivity for a long time in your personal account, for a reasonable time, insofar as this constitutes a practice to comply in particular to our legal obligations, to resolve possible disputes, prevent fraud or abuse, enforce our agreements and/or to protect our legitimate interests. This time cannot exceed 3 years after deactivating your account (be it the cause). For the protection of your data, we also reserve the right to suspend an account which would remain completely unused for a long continuous period (that is after 3 years without any activity on your part, or order), but which you can freely reactivate when you wish.

 

We have also made the choice not to collect either a fortiori processing or keeping the bank data that you have to provide information on our website, at the time of your purchase. This is one of the reasons why we have chosen our partner Shopify, which presents the guarantee of holding international certifications in this area (PCI DSS - Payment Card Industry Data Security Standards -, Level 1) and one of the Shopify partners for online payments: the French company Payplug.

 

B/ In terms of online payments, SARL Duchatel has opted for certain partnerships offered by Shopify, which guarantee users of our site a high degree of protection, which is the case with the company Pyplug, whose majority shareholder is Natixis, chosen by SARL DUCHATEL.

Payplug became in November 2016 a European payment establishment approved by the ACPR (Banque de France):

https://support.payplug.com/hc/fr/articles/360021389011-PayPlug-obtient-son-agr%C3%A9ment-d-Etablissement-de-Paiement

 

Payplug presents all the security guarantees in terms of online payments (PCI DSS Certification):

https://www.payplug.com/about#security

Consequently, sensitive data on online payments are processed and kept by Shopify and Playplug, the SARL Duchatel not being a recipient or depositary of the bank data provided by its customers during a purchase on its site.

 

Customers are therefore also invited to consult the Privacy Policy of Playplug:

 https://www.payplug.com/fr/politique-de-confidentialite

Payplug is registered in the Paris Trade and Companies Register under the RCS number 751 658 881; Its head office is 110 avenue de France, 75013 Paris. It is a payment institution registered with the Prudential Control and Resolution Authority (ACPR) under number 16778.

SIRET number: 48054731400025

The COOKIE POLICY PLAYPLUG policy can be viewed at the following address:

https://www.payplug.com/fr/politique-relative-aux-cookies 

SARL DUCHATEL does not deal, does not keep or directly collect any banking data from its customers.


C/Shopify is the digital service provider chosen by SARL DUCHATEL to design the site "www.duchatel.com", from the services and functionalities of this web development platform based in the cloud, which is also responsible for its maintenance and accommodation on its servers.

 SARL DUCHATEL strongly hires visitors and users of the "www.duchatel.com" site to regularly consult the Shopify's privacy policy to verify that it approved, Because it influences the conditions of use (navigation and orders) of our website, on the processing of user data carried out by Shopify and its partners, on their conservation.

 

The Data Privacy Policy of the SHOPIFY company is notably available to the following addresses:

 

To meet European data protection requirements, when a person concerned accessing on a Shopify boutique is in the European economic area, his personal data will be processed by the Irish subsidiary of Shopify, Shopify International Ltd.

 

Shopify indicates that he complies with the requirements of the European regulation in terms of data protection of May 25, 2018 (GDPR), in particular by having updated his Privacy Policy, to include more information on the rights extended by the GDPR, as well as more detailed information on the way Shopify processes personal data, as required by RGPD. Shopify added a Addendum on data processingOn the conditions of use of online shopify, in accordance with article 28 of the GDPR. It has implemented a detailed procedure to process the requests for access to data from persons concerned, deletion requests and requests for government access; written a white paper To help merchants and partners understand how Shopify interprets and addresses its obligations under the GDPR.

 

As part of the provision of services, the personal data of a person accessing a Shopify store in the European economic area can be transferred to other regions, including Canada and the United States. These transfers will be made in accordance with the applicable data protection legislation. In order to ensure that the information is protected when it is transferred outside the EEE, Shopify is based on Intelligence Privacy Shield EU in the United States, as well as intra-group contracts between its various subsidiaries, which can process information in the name of Shopify International Ltd. The GDPR prohibits the export of the personal data of Europeans outside Europe, unless this information is adequately protected. Shopify protects personal data in accordance with the RGPD requirements during their transfer and processing in the United States and Canada. Shopify has set up its data flows so as to comply with these obligations for merchants. As stipulates section 12 of Shopify's privacy policy, all European personal data is initially received by merchants and processed in Ireland by Shopify International Ltd., an Irish subsidiary of Shopify, which then transfers this data in accordance with the GDPR:

For more information on how Shopify receives and processes personal data from the European Economic Area (EEE) and the United Kingdom in accordance with RGPD standards and good information security practices, consult theWhite paper on the GDPRof Shopify.

 

If you have any questions concerning your personal information or the privacy policy of Shopify, or if you wish to file a complaint concerning how Shopify processes your personal information, you can contact Shopify by e-mail at the addressprivacy@shopify.comor using the contact details below.

If you live in Europe:

  • SHOPIFY INTERNATIONAL LIMITED ATTN: Data Protection Officer
  • c/o intertrust ireland
  • 2nd Floor 1-2 Victoria Buildings
  • Haddington Road / Dublin 4, D04 XN32
  • Ireland

 

If you live in Asia, Australia or New Zealand:

  • Shopify Commerce Singapore Pte. Ltd.,
  • 77 Robinson Road, #13-00 Robinson 77,
  • Singapore, 068896,
  • ATTN: Legal/Privacy Team

 

If you live in another part of the world:

  • Shopify Inc. / ATTN: Chief Privacy Officer
  • 151 O’Connor Street, Ground Floor
  • Ottawa, we k2p 2l8
  • Canada

 

SARL Duchatel, for the sake of transparency towards its users of its site, therefore communicates above the permanent link of this policy.  In terms of personal data, Shopify indicates in particular in its policy:

"We do not carry out and never carry out sharing, disclosure, sales, rental or provision of personal information from other companies (other than Shopify merchants with which you interact in particular, or third party service or suppliers of third -party service used by these merchants if you are a customer, or the partners that you are committed if you are a merchant) for the marketing of their own products and services. We do not "sell" your customer information or "sell" it in the future, according to the term used by Californian law.

"If you are a merchant who uses Shopify services, we do not use the personal information that we collect about or concern your customers to contact or canvass your customers independently. However, Shopify can communicate with your customers or can be shredd with them if we get their information from another source, such as direct contact initiated by customers. ”

 

Shopify also indicates in its privacy policy:

"3. Customer information

What information do we collect from our merchant customers and why?

"We collect the name, e-mail address, shipping and billing addresses, payment details, business name, telephone number and IP address of our merchants, just like the information relating to orders you place, to the merchant sites supported by Shopify that you visit and to the device and the browser you use.

“We use this information to provide services to our merchants, including the management and processing of orders, risk protection and fraud, authentication and payments. We also use this information in order to improve our services.

"If you opt for Shop Pay, we keep and use this information in order to pre-fill your payment information. We also use this information to help us personalize and improve your experience when you visit the shop of a merchant by presenting you goods and services likely to be interested.

“We use some of the personal information you provide to us in order to reach a certain level of automated decision -making. For example, we use certain personal information (such as IP addresses or payment information) in order to automatically block certain potentially fraudulent transactions for a short period of time.

 

"When do we collect this information?"

We collect this information when you use or access a shop that uses our services, for example when you visit the site of a merchant, place an order or open an account on the site of a merchant.

"We also collect this information when you opt for Shop Pay, or when you use Shop Pay to pre-fill your payment information.

“In addition, we collaborate with third parties who provide us with information concerning the customers of our merchants, for example to rule out the merchants associated with fraud.

 

"When and why do we share this information with third parties?"

Shopify collaborates with several third parties and service providers in order to provide services to merchants, and we are likely to share personal information with them as part of these efforts.

We are also likely to share your information in the following cases:

To prevent, investigate or take measures concerning illegal activities, suspicions of fraud, situations involving potential threats to the physical integrity of any person, violations of our conditions of use or any other agreement relating to services, or for other requirements provided by law.

If the merchant you visit or access the store asks us to transfer this information (for example, if he authorizes a third party application to access the personal information of customers).

To comply with legal requirements or to meet court orders, assignments, mandates or other legal requests from public authorities (including to meet national security or public security requirements).

“Personal information can also be shared with a company that acquires our company or the merchant company whose shop you visit or access, whether through a merger, acquisition, bankruptcy, dissolution, reorganization or any other transaction or similar procedure.

Shopify is responsible for all subsequent transfers of personal information to third parties in accordance with the Privacy Shield UE-United States, the Swiss-United States Privacy Shield and the Personal Information Protection Act and Electronic Documents in Canada (LPRPDE). »»

 

The legitimate uses carried out by SARL DUCHATEL of your personal data

Pursuant to legal provisions, the uses we make of your personal data is strictly limited and legitimate. Regarding the purposes of the treatments, it is above all a question of being able to ensure the services you expect from our company, mainly after having placed or requested information, so that we can directly and indirectly, using our partner, make the expected deliveries, but also be able to communicate if necessary with you, or communicate in the context of information to which you have previously consented. Other data is collected to allow you access to our site and its use.

Thus, to a purchase on our site (legal basis), correspond the purposes of processing of the following personal data: ensure the delivery of your products / Manage our commercial relationship (including returns, withdrawals, possible complaints, etc.) / Treat all requests related to your personal data rights.

To your consent (legal basis) correspond to the process of processing the following personal data: receive our newsletters and personalized / promotions…

We also have a legitimate interest in gathering information or data since it allows the use of our site, its improvement (quality, performance, etc.), monitoring these uses seen to improve the navigation experience, the development of statistics and analyzes in order to improve the knowledge of our users/customers; That they are likely to preserve our rights, to fight against fraud.

 

You can exercise the following rights by contacting our Personal Data Officer 

In accordance with legal provisions, you benefit:

  • Of a right of access:You have the right to access personal data concerning you that we process;
  • Of a right to information:You can get information about how we process your data.
  • Of a right of rectification: If they are inaccurate or incomplete, we can correct your data on your request;
  • A right to erasure:You have the right to delete your data (subject to the terms exposed to article 8 below);
  • Of a right to portability : Insofar as the conditions for the exercise of such a right are met, you have the right to request the portability of your data;
  • Of a right of opposition:You can at any time ask not to receive our communications.

You can simply send all or part of your rights by sending a mail to this effect for our delegate to personal data:

  • Madame Anne BONREPOS
  • Data delegate
  • SARL DUCHATEL
  • 48 Avenue Édouard VII
  • 64200 Biarritz / France

By email, at the following address: "contact@duchatel.com".

Due to the sensitivity of questions relating to personal data, we reserve the right to ask you for proof of identity, when requesting or later.

If you no longer wish to receive our newsletters or promotional offers, you can simply click on the unsubscribe link present in all our emails.

In the event of a complaint relating to the protection of your personal data, you can contact the French supervisory authority at any time: the National Commission for Data Protection, located 3 place de Fontenoy, 75007 Paris