PRIVACY POLICY
Privacy Policy
Version of 12/11/2020
At MIYA PARIS, we attach particular importance to your personal data, because if you entrust it to us, we must take the greatest care of it and, above all, explain to you transparently how we collect and use it.
This privacy policy applies to you, as a user or customer, who accesses the website: https://miyaparisofficiel.fr/.
The purpose of this document is to inform you about how your personal data may be collected and processed.
What is personal data?
"Personal data" is any information about you that allows you to be identified directly or indirectly. For example, your first and last name or a photograph can be used to identify you directly. Your email address can identify you indirectly.
What is a treatment?
The term "processing" means any operation or set of operations performed on personal data, regardless of the method used (collection, recording, organization, storage, adaptation, alteration, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction, etc.)
Respect for your privacy and personal data is a priority for us and we are committed to processing your data in strict compliance with the French Data Protection Act of 6 January 1978 (hereinafter "French Data Protection Act") as amended and the General Data Protection Regulation (EU) of 27 April 2016 (hereinafter "GDPR").
In any event, we commit to respecting the following two essential principles:
You remain in control of your personal data.
Your data is processed in a transparent, confidential and secure manner.
Further information and our contact details
Legal reminder: Under data protection law, the data controller is the person who determines the purposes and means of the processing. When two or more controllers jointly determine the purposes and means of the processing, they are called joint controllers (or co-controllers). A data processor is a person who processes personal data on behalf of the data controller, acting under the controller's authority and instructions.
If you have any questions about the processing and use of your personal data, you can contact us by email at miyaparisofficiel@gmail.com.
HOW DO WE COLLECT YOUR DATA?
All your personal data is collected directly from you, either when you place an order on the Site, or during exchanges with our services.
In addition, data relating to your browsing on the Site may be used to target your needs and interests and to tailor our commercial and advertising offers accordingly.
WHY AND FOR WHAT REASONS DOES AVVA PARIS PROCESS YOUR DATA?
When the legal basis for the processing carried out is the pursuit of a legitimate interest, the data subjects have the possibility, on request, to obtain further information on the balancing of interests.
Your personal data is collected for the following purposes
Managing and tracking your contracts, orders, deliveries and invoices.
Legal basis
Contractual, the processing is necessary for the performance of a contract or pre-contractual measures.
To respond to your requests for information about our products or delivery conditions.
More details and legal basis
Legal basis:
-Your consent
To send you our newsletter and commercial offers.
More details and legal basis
Legal basis:
-Your consent
Manage and respond to your requests to exercise your "Data Protection" rights.
More details and legal basis
Legal basis:
-Legal obligation (GDPR and Data Protection Act)
To ensure the proper functioning and continuous improvement of our Site and its features.
More details and legal basis
Legal basis:
-Our legitimate interest in ensuring the best level of operation and quality of the site, thanks in particular to traffic statistics;
-Your consent when required.
MIYA PARIS is also authorized to use this data to comply with a legal or regulatory obligation.
In any event, and for each defined purpose, MIYA PARIS makes every effort to ensure the security and confidentiality of the personal data entrusted to it, in compliance with applicable laws and regulations.
WHAT DATA IS PROCESSED?
Whether the personal data requested is mandatory or optional, and the possible consequences of not providing it, are specified at the time of collection.
You can view the details of the personal data we may hold about you by clicking here: data details:
For the management and tracking of your contracts, orders, deliveries and invoices.
Name, Surname;
Email address;
Phone number;
Delivery postal address;
Billing address;
Data relating to means of payment: credit card number, expiry date, security code, bank details.
To respond to your requests for information about our products or our delivery conditions.
First name, last name;
Email address
To send you our newsletter and commercial offers
Email address
To process your requests to exercise your rights under the data protection law.
First name, last name,
email address
To ensure the proper functioning and continuous improvement of our site and its features.
Data relating to your browsing on our site via cookies
WHO ARE THE RECIPIENTS OF YOUR DATA?
Within the limits of their respective responsibilities and for the purposes mentioned above, the main people likely to have access to your data are the following.
Authorised staff from the various departments of MIYA PARIS (administrative, accounting, marketing, sales, logistics and IT);
The companies responsible for managing the Site;
Companies responsible for transporting the Products;
Authorised personnel of our subcontractors (where applicable), such as banking partners;
Where appropriate, the competent courts, mediators, auditors, lawyers, bailiffs, debt collection agencies, police or gendarmerie authorities in the event of theft or judicial investigation, emergency services;
Third parties may place cookies on your devices (computers, tablets, mobile phones, etc.) when you consent to it.
Your data is not communicated, exchanged, sold or rented to any persons other than those mentioned above.
HOW LONG DO WE KEEP YOUR DATA?
We only retain your data for as long as necessary for the purposes described above, as summarized in the table below:
For the management and tracking of your contracts, orders, deliveries and invoices.
For the duration of the relationship and for 3 years after the end of the business relationship.
To respond to your requests for information about our products or our delivery conditions.
3 years from the end of the business relationship
Or 3 years from the date of your last contact.
To send you our newsletter and commercial offers
3 years from the end of the business relationship
OR 3 years from the date of your last contact.
For the processing of your requests to exercise your rights under the data protection law
1 year in the event of exercising the right of access or rectification
3 years in the event of exercising the right to object.
To ensure the proper functioning and continuous improvement of our Site and its features.
13 months. After this period, the raw traffic data associated with an identifier is deleted or anonymized.
Information collected through cookies and trackers is stored for a period of 25 months. After this period, this data is either deleted or anonymized.
WHAT ARE YOUR RIGHTS?
In accordance with data protection law and the GDPR, you have the following rights:
Right of access (Article 15 GDPR), rectification (Article 16 GDPR), updating, completion of your data (more information).
The right to block or delete your personal data (Article 17 GDPR), if it is inaccurate, incomplete, misleading, outdated or if its collection, use, disclosure or storage is prohibited (more information).
The right to withdraw your consent at any time (Article 13-2c of the GDPR).
Right to restrict the processing of your data (Article 18 of the GDPR).
Right to object to the processing of your data (Article 21 of the GDPR) (learn more).
The right to data portability for the data you have provided to us, when your data is subject to automated processing based on your consent or on a contract (Article 20 GDPR).
The right to determine what happens to your data after your death and to choose whether or not we disclose your data to a third party you have previously designated (learn more).
In the event of your death and in the absence of instructions from you, we undertake to destroy your data, unless its retention is necessary for evidentiary purposes or to comply with a legal obligation.
These rights can be exercised by sending a simple request by email to miyaparisofficiel@gmail.com.
Finally, you can also lodge a complaint with the supervisory authorities, in particular the CNIL (https://www.cnil.fr/fr/plaintes).
WHAT ABOUT LOGIN DATA AND COOKIES?
MIYA PARIS uses connection data (date, time, Internet address, visitor's computer protocol, page viewed) and cookies (small files stored on your computer) on its site to identify you, remember your visits and benefit from measurements and statistics on the site's audience, particularly based on the pages viewed.
You can consent, refuse or choose the type of cookies you agree to place on your computer devices.
To learn more
To learn more about cookies (how to manage, delete, and identify them), please visit the CNIL website: http://www.cnil.fr/vos-droits/vos-traces/les-cookies/#c5554.
IS YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
MIYA PARIS processes your data within the European Union.
However, given the nature of its business, and subject to informing you beforehand, MIYA PARIS may transfer your data outside the European Union. In this case, MIYA PARIS will inform you of the measures taken to control this transfer and ensure its compliance.
WHAT SECURITY MEASURES ARE IN PLACE TO PROTECT YOUR DATA?
MIYA PARIS and its potential subcontractors undertake to implement all technical and organizational measures to ensure the security of our personal data processing and the confidentiality of your data, in accordance with the French Data Protection Act and the GDPR.
In this respect, MIYA PARIS takes the necessary precautions, depending on the nature of your data and the risks presented by our processing, to preserve data security and, in particular, to prevent it from being falsified, damaged or accessed by unauthorized third parties (physical protection of premises, authentication process of our customers with personal and secure access using confidential usernames and passwords, logging of connections, encryption of certain data, etc.).