Privacy policy
This CAHU Privacy Policy (hereinafter referred to as the "Privacy Policy") governs the relationship between:
The User (as defined in Section 1 below)
On the one hand
And
The person in charge of the processing: the company CAHU, a limited liability company, with a share capital of €10,000, registered in the Paris Trade and Companies Register under number 835 126 947, whose registered office is located at 16 rue du Grand Prieuré, 75011 Paris, represented by its manager, Mrs Clémence CAHU
On the other hand
Hereinafter referred to collectively as the "Parties" and individually as a "Party".
IT HAS BEEN PREVIOUSLY EXPOSED THAT :
CAHU's business is the development and operation of the website accessible at the URL address: https://cahuparis.com (hereinafter the "Site").
The Site is a platform offering the online sale of travel items, leather goods and accessories (as defined in Article 1 below).
ARTICLE 1 - DEFINITIONS
The Parties agree and accept that the following terms used with a capital letter, in the singular and/or in the plural, have the meaning given to them below in the context of these General Conditions:
"Buyer" means any User who purchases one or more Items on the Site.
"Item" refers to any travel product, leather goods and fashion accessories offered for sale on the Site.
"Order" refers to the process of purchasing an Item online by any Buyer on the Site.
"Personal data" or "Data" means any information that directly or indirectly identifies a natural person, such as surname, first name, age, IP address, e-mail address, location data, elements specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity, within the meaning of Article 4 of the GDPR.
"User" means any Internet user browsing the Site.
ARTICLE 2 - PURPOSE OF THE PRIVACY POLICY
The purpose of this Privacy Policy is to define the manner in which Personal Data is processed by CAHU.
ARTICLE 3 - PROTECTION OF PERSONAL DATA
Collection of Data
CAHU collects and uses the User's Personal Data in compliance with the provisions of Law No. 78-17 of January 6, 1978, known as "Informatique et Libertés" (hereinafter referred to as the "Law No. 78-17") and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR").
Data concerning Users is collected when visiting the Site, when subscribing to the CAHU newsletter, when communicating with customer service and/or during the Order process.
If the User refuses to adhere to this Privacy Policy, the User shall not access the Site and shall not place Orders.
Legal basis for processing Personal Data
The performance of CAHU's contractual relations with Users
In order to use the Site and benefit from the services it offers, Users must accept the General Conditions available on the Site.
This document formalizes a contractual relationship between each User and CAHU and serves as the legal basis for the collection and processing of their Personal Data.
User consent
When Users browse the Site, CAHU may install various cookies on the storage space of their terminal (in particular computer, mobile device).
When required by law, CAHU obtains the User's consent to the installation of these cookies on their terminal.
Compliance with a legal obligation to which CAHU is subject
The processing of Users' Personal Data by CAHU may be imposed by a legal obligation incumbent upon it.
Legitimate interests of CAHU
In certain cases, CAHU may have a legitimate interest authorizing it to process Users' Personal Data (in particular, processing aimed at preventing fraud).
In this context, CAHU ensures that the processing carried out is necessary for the realization of its legitimate interest and that it does not infringe on the interests and fundamental rights of Users.
Purposes of the processing of Personal Data
The Users' Data are mainly processed to:
allow their navigation on the Site ;
to enable them to subscribe to the CAHU newsletter;
ensure the follow-up and the smooth running of the Order (in particular payment, delivery, invoicing, accounting).
And as a subsidiary:
prevent and fight against fraud (hacking, anti-money laundering, etc.) ;
to improve navigation on the Site;
offer an optimized use of the Site on the different devices of the Users (computer, tablet, smartphone...);
communicate with Users: send e-mail with Order information or e-mail newsletters, exchange with customer service;
conduct optional satisfaction surveys on the use of the Site;
when required by law or in the context of legal proceedings or litigation;
to manage requests to exercise the rights listed in article 3.7 below;
to carry out statistics on the use of the tool and to constitute internal reports for CAHU's management teams.
CAHU may use the email address provided to send promotional emails regarding news, offers or any information that could potentially interest the User of the Website.
Categories of Data Processed
CAHU may process all or part of the following information:
name, first name, postal address, telephone number, and email address
transaction history;
bank details;
date and time of connection and/or navigation;
type and language of the browser;
URL accessed ;
IP address;
terminal used.
Recipients of Personal Data
All Personal Data collected and processed by CAHU is strictly confidential.
CAHU may temporarily and securely transfer to third parties certain Personal Data of the Users only when it is necessary to:
the execution of the Order placed by the User via the Site;
to operate and maintain the Site operated by SHOPIFY;
to respond to an injunction from the legal authorities.
In this respect, CAHU ensures that all of its partners who receive Users' Personal Data place the protection of personal data at the heart of their mission and undertake to take all measures to ensure the security and confidentiality of Personal Data.
CAHU does not share any Personal Data for commercial purposes with third parties.
The Site is hosted by Shopify Inc. whose head office is located at 151 O'Connor Street. Ottawa, Ontario K2P 2L8. Canada
Security of Personal Data
Personal Data are stored in France.
CAHU undertakes not to infringe on the privacy of Users and to take all necessary precautions to preserve the security and confidentiality of their personal Data and in particular to prevent it from being modified, damaged or communicated to unauthorized persons, subject to the obligations that may be incumbent on it under Law No. 2004-575 of June 21, 2004 for Confidence in the Digital Economy.
The User acknowledges and accepts that for the above-mentioned period, CAHU shall retain all documents, information and records concerning its activity on the Site.
Users' rights
In accordance with the applicable legislation, the Users of the Site have the following rights:
right of access (article 15 RGPD) and rectification (article 16 RGPD), update, completeness of their Personal Data;
right to block or delete their Personal Data (Article 17 RGPD), when they are inaccurate, incomplete, equivocal, outdated, or whose collection, use, communication or storage is prohibited;
right to withdraw consent at any time (Article 13-2c GDPR);
right to limit the processing of their Personal Data (Article 18 GDPR);
right to object to the processing of their Personal Data (Article 21 GDPR);
the right to portability of the Data provided by the Users, when such Data are subject to automated processing based on their consent or on a contract (Article 20 GDPR);
the right to define the fate of their Personal Data after their death and to choose a third party to whom CAHU shall communicate their Data.
The User may exercise the above rights by contacting CAHU in writing at the following address CAHU 38 rue Lucien Sampaix - 75010 Paris or by email at dpo@cahuparis.com.
In this case, the User must indicate the personal data that he/she would like CAHU to correct, update or delete, identifying him/herself precisely with a copy of an identity document (identity card or passport).
Requests for deletion of Personal Data will be subject to the obligations imposed on CAHU by law, particularly with respect to the retention or archiving of documents.
Retention Periods
Users' Personal Information is retained for a period of three (3) years from the date of their last contact with CAHU.
Audience measurement statistics are not kept for more than thirteen (13) months.
However, at the end of the above-mentioned periods, including, as necessary, from the date of a User's request for deletion, the Personal Data may be archived intermediately so that CAHU can meet its legal obligations to retain:
the contract concluded within the framework of a commercial relationship will be kept for five (5) years from its conclusion;
the contract concluded by electronic means for an amount greater than or equal to two hundred (200) euros will be kept for three (3) years from its conclusion;
bank documents will be kept for five (5) years from the date of their communication;
documents relating to the management of orders will be kept for ten (10) years;
documents relating to the management of invoicing will be kept for ten (10) years.
Certain Data may be archived beyond the periods provided for:
in the event of litigation in order to establish the reality of the litigious facts;
and/or for the needs of research, the ascertainment and the pursuit of criminal offense with the sole aim of allowing, if necessary, the communication of these Data to the authorities.
Archiving implies that this Data is anonymized and can no longer be consulted online, but is extracted and stored on an autonomous and secure medium.
After the time limits set out in this article 3.8, the Users' Personal Data are deleted.
Complaint
If a User believes that the security of his/her Data has been compromised or that his/her Data has been misused, he/she is invited to contact CAHU as soon as possible:
by email at: dpo@cahuparis.com;
or by mail at : CAHU, 38 rue Lucien Sampaix - 75010 Paris.
If necessary, CAHU will investigate the complaint as soon as possible and will try to find a solution in accordance with the regulations in force.
CAHU Users may at any time file a complaint with the supervisory authorities, and in particular with the CNIL (https://www.cnil.fr/fr/plaintes or by mail: CNIL, Service des Plaintes, 3 Place de Fontenoy, TSA 807125 - 75334 PARIS CEDEX 07).
ARTICLE 4 - COOKIES
In order to allow the User not to have to identify himself each time he accesses the Site during the same day, except for the first access, CAHU uses session cookies.
These files deposited on the computer allow the User to be identified each time he/she connects to the Site (e.g., when he/she accesses the Site for the first time).
CAHU also uses third-party cookies.
Third parties authorized to access the Data collected in these third-party cookies by CAHU undertake to use this Data in accordance with the provisions of Law No. 78-17 and to respect the privacy of Users.
The User may access all the information contained in the files related to the cookies used by CAHU in accordance with the provisions of Law no. 78-17, and request their parameterization
either by email to dpo@cahuparis.com ;
or by registered letter with acknowledgement of receipt to the following address CAHU, 38 rue Lucien Sampaix - 75010 Paris.
When required by law, CAHU obtains the User's consent to the registration of cookies on his or her terminal.
ARTICLE 5 - MODIFICATION OF THE PRIVACY POLICY
CAHU reserves the right to modify or supplement the Privacy Policy at any time, in particular to adapt to changing regulations.
Users will be notified by e-mail of such changes and their consent will be required for them to become applicable.
In case of refusal of these modifications, Users will no longer be able to access their customer account or benefit from the services offered on the Site.
APPENDIX I - "COOKIES" BANNER WHEN CONNECTING TO THE SITE
We wish to guarantee your confidentiality and use your data with the greatest respect.