Ireland
This policy outlines Kalista-parfums.com’s approach to the management of personal data and the protection of privacy. This policy may be updated from time to time. We place great importance on the principles of honesty and transparency, and we are committed to building a relationship of trust with our customers. That is why we encourage visitors and customers of our site to review our Privacy Policy regularly.
This policy provides you with information about the nature and use of the personal information you provide to us on the Site, the source and use of browsing information collected when you visit our Site, and your rights.
This policy supplements the Site’s “Terms and Conditions” and applies to all personal information and browsing data collected and processed during your visit to our Site. By using our Site, you agree to the terms of this policy. For further information, you may contact our customer service department at 03.85.86.90.80 or via the website chat feature Monday through Thursday from 9:00 AM to 6:00 PM and Friday from 9:00 AM to 5:00 PM.
ARTICLE 1: FOREWORD
The GDPR and You…
The protection of personal data is one of our top priorities. Our privacy policy is part of a legal framework characterized by the European General Data Protection Regulation (EU Regulation 2016/679 of April 27, 2016), effective as of May 25, 2018, and the Data Protection Act No. 78-17 of January 6, 1978, as amended regarding information technology, data files, and civil liberties.
The purpose of this privacy policy is to provide you with:
The controller of personal data
How your data is collected and processed. Personal data is any information that can be used to identify an individual.
Your rights regarding the use of your personal data
The recipients to whom your data is disclosed
The website's cookie policy
This Privacy Policy supplements the legal notices available on the website and in the Terms and Conditions.
ARTICLE 2: GLOSSARY
We promise, you'll get it!
Personal Data (or Personal Data) means any information relating to an identified or identifiable individual, that is, information that allows the individual to be identified directly (e.g., first and last name) or indirectly (e.g., cookies).
Processing of Personal Data means any operation or set of operations (whether automated or not) performed on personal data or sets of personal data, such as: the collection, recording, organization, storage, and transmission of data (…)
The Data Controller determines the purposes (the objectives of the processing) and the means of the processing.
The Subcontractor processes personal data on behalf of the data controller and in accordance with its instructions.
ARTICLE 3: GENERAL PRINCIPLES
We certainly have our share of legal obligations!
In accordance with the provisions of Article 5 of the General Data Protection Regulation (GDPR), the collection and processing of your personal data comply with the following principles:
... Legality, fairness, and transparency: The collection and processing of personal data may only be based on a predefined legal basis (performance of a contract, legal obligation, consent, legitimate interest, protection of vital interests)
... Limited purposes: Personal data is collected and processed to fulfill one or more specific purposes
... Minimizing data collection and processing : Only data that is strictly necessary for the proper fulfillment of the objectives pursued is collected
... Time-limited data retention: The data controller is required to establish retention periods for the personal data being processed
... Integrity and confidentiality of collected and processed data : The data controller undertakes to ensure the integrity and confidentiality of the data collected.
ARTICLE 4: DATA CONTROLLER
We are responsible for the data entrusted to us!
As a data controller, SAS ADV is committed to complying with the obligations set forth in the Regulation and the amended French Data Protection Act regarding the collection and processing of personal data. In accordance with Article 32 of the GDPR, we implement all necessary technical and organizational measures to ensure the protection of your personal data.
ARTICLE 5: PERSONAL DATA COLLECTED AND PROCESSED: WHAT DATA?
What do we know about you?
In accordance with the principle of data minimization, we collect only the data necessary to carry out our duties. Accordingly, in the course of its business, SAS ADV may collect and process the following information:
We do not collect any sensitive data such as religious beliefs, union membership, racial or ethnic origin, criminal convictions, or health-related data.
ARTICLE 6: PERSONAL DATA COLLECTED AND PROCESSED: FOR WHAT PURPOSES?
We'd like to explain!
In all of these situations, SAS ADV acts as “Data Controller” "as defined by the GDPR."
| DATA COLLECTED | REASONS FOR THE COLLECTION | LEGAL BASIS | RETENTION PERIODS |
|---|---|---|---|
| VISITING THE WEBSITE | |||
Identity Personal life Professional Life Web Localization | We use this data to: - Contact you when you fill out the contact form - Respond to you when you contact us via online chat - Conduct audience analysis or compile statistics (if agreed) | Consent | Browsing data on our website is retained for a maximum of 13 months. The data collected through the form is retained for 3 years from the date of collection or the last contact from the prospect. Data collected through the online chat feature is retained only for as long as necessary to answer your questions or process your request |
- To offer you personalized services - Monitor and improve our website - Secure our website and protect both us and you against fraud. | Legitimate Interest | ||
| CUSTOMER RELATIONSHIP MANAGEMENT | |||
Identity Personal life Professional Life Economic Information Login credentials Location Internet | We use this data to: - Manage the business relationship - Manage your registration and customer account (creation, modification, closure) - Manage the online store (process orders, manage online accounts, and track payments) - Manage payments, billing, etc. - Process and track your order, including delivery - Manage and monitor product compliance (including product returns and customer complaints) - Process all requests submitted via the website or by email as part of our customer service - Answer your questions and interact with you in any other way | Performance of a contract | The data is retained for the duration of the contractual relationship and for 5 years thereafter. Invoices are retained for 10 years. Data related to credit card payments is retained until the products ordered have been paid for in full and is then archived for evidentiary purposes in the event of a dispute regarding the transaction. No banking information (such as credit card numbers) is retained. |
- Monitor and improve the quality of our products and services; - Protect transactions from fraud. - Handle any disputes related to a purchase | Legitimate interest | ||
| SIGN UP FOR THE NEWSLETTER | |||
Identity Personal life Professional Life | We use this data to: - Send you marketing communications (if you have requested them) | Consent | Browsing data on our website is retained for a maximum of 13 months. The data collected through the form is retained for 3 years from the date of collection or the last contact from the prospect. Data collected through the online chat feature is retained only for as long as necessary to answer your questions or process your request |
- Conduct audience analysis or compile statistics | Legitimate Interest | ||
- Maintain an opt-out list if you have requested not to be contacted; | Legal Requirements | ||
| RESPONSE TO THE ONLINE CHAT | |||
Identity Personal life Professional Life | We use this data to: - Respond to your inquiries when you contact us via online chat - Conduct the necessary research to best address your requests | Consent | Data collected through the online chat feature is retained for 3 years from the date of the last communication with the third party |
| Legitimate interest | |||
| LEAD MANAGEMENT | |||
Identity Personal life Professional Life Internet | We use this data to: - Manage and monitor our business relationship - Update your contact information - Keep our prospect records up to date | Legitimate Interest | Prospect data is retained for 3 years after the last interaction |
ARTICLE 7: PERSONAL DATA: WHO HAS ACCESS TO YOUR DATA PERSONAL?
We don't just give them to anyone!
SAS ADV is committed to sharing your personal data only with authorized internal personnel and authorized third parties, such as tax, customs, or economic authorities, the judicial system, the police, and the gendarmerie, as well as social services and health authorities.
SAS ADV may, if necessary, share your personal data with third-party service providers such as the web host for the PLANETWORK website.
The use of these service providers is necessary for the proper delivery of our services. We are committed to verifying and ensuring their compliance with the GDPR and the amended French Data Protection Act.
Except for the recipients listed above, SAS ADV undertakes not to disclose your personal data to third parties or external organizations without your express consent.
SAS ADV does not and will not sell, transfer, or disclose your personal data to unauthorized third parties.
SAS ADV does not use any automated decision-making based on your personal data. No profiling is carried out during data processing, and the data we collect will never be used without human intervention.
ARTICLE 8: YOUR RIGHTS
You hold all the cards!
8.1 Your rights
In accordance with applicable regulations, you have the following rights regarding your personal data:
8.2 The Internal GDPR Officer
SAS ADV has appointed an internal GDPR officer. To exercise your rights, please contact our officer at the following address:
Email address: rgpd.kalista@gmail.com
Mailing Address: 28 Rue Nicéphore Nièpce, P.O. Box 30026, 71401 AUTUN Cedex / France
8.3 Filing a complaint with the CNIL
You may file a complaint at any time with the competent authority, namely the French Data Protection Authority (CNIL), by clicking the following link: https://www.cnil.fr/fr/plaintes.
8.4 Ways to block commercial solicitations
You can opt out of receiving further emails by clicking on the unsubscribe link provided for that purpose.
ARTICLE 9: SECURITY MEASURES
You entrust us with your data, and we take good care of it!
SAS ADV is committed to protecting personal data and ensures that it is processed securely and only for as long as necessary to achieve the intended purpose.
SAS ADV has implemented technical and organizational measures to ensure an adequate level of data protection in light of the nature and purpose of the processing.
Accordingly, in accordance with Article 32 of the GDPR regarding the security of processing, SAS ADV has implemented:
- Pseudonymization and encryption of personal data;
- Measures to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services
- Measures to restore data availability and access within a reasonable timeframe in the event of a physical or technical incident;
- A procedure designed to regularly test, analyze, and evaluate the effectiveness of technical and organizational measures to ensure the security of processing.
However, our security obligation remains an obligation of means, meaning that we do everything in our power to ensure the confidentiality and integrity of your personal data.
All individuals with access to your personal data have been trained in best practices regarding data protection. They are bound by a duty of confidentiality, and failure to comply with this requirement may result in disciplinary action.
ARTICLE 10: DATA TRANSFERS OUTSIDE THE EUROPEAN UNION
A well-organized trip!
As part of our business operations and in order to process your requests, we do not transfer your data directly outside the European Union.
However, if your personal data is transferred outside the European Union, we will ensure that those countries provide an adequate and appropriate level of data protection.
We are committed to informing you in advance of any potential data transfers outside the European Union, and we will therefore provide you with details of the safeguards we have put in place to ensure an adequate and appropriate level of protection.
ARTICLE 11: COOKIES
You can either eat cookies or go on a diet
Like most websites, our website uses cookies, which can be divided into five categories:
If you wish to limit the cookies stored on your device, we recommend that you opt out by default using the cookie management banner we have implemented on our website.
You will also find in our Cookie Policy the steps to follow to accept, customize, or reject cookies by selecting your preference using the banner that appears at the bottom of your screen.
ARTICLE 12: UPDATES TO THE PRIVACY POLICY
You're almost there—you're almost done reading!
This privacy policy is subject to change.
This was last updated on August 26, 2022.
