Privacy policy
PRIVACY POLICY
SAS ALMÉ, headquartered at 4 rue du collège d'Annecy, 84000 Avignon, attaches the utmost importance to the protection of your personal data. Almé undertakes, in its capacity as data controller, to collect and process your personal data in a transparent manner in accordance with the General Data Protection Regulation ("RGPD") and the French Data Protection Act ("Informatique et Libertés").
Below you will find all the information concerning the way in which Almé processes and protects your personal data, as well as the rights you have concerning your data.
1. WHY DOES ALMÉ COLLECT YOUR PERSONAL DATA?
Almé collects, processes and stores your personal data for the various purposes ("purposes") and on the basis of the following legal grounds:
1. To ensure the execution of a contract, (e.g.: site Terms and Conditions, contest rules), in the context of :
- Create and manage a customer account and manage our loyalty program;
- Fulfillment of online orders: delivery, returns, refunds;
- The organization of contests;
The publication of your instagram posts.
2. For legitimate purposes of constantly improving the relevance of messages sent to you and the quality of its products and services, in the context of :
- To manage our communications relating to Almé products, offers and events in order to provide you with communications tailored to your interests;
- Statistical studies and analysis of your shopping habits to better understand your interests;
- Measuring customer satisfaction levels to meet your expectations;
- Processing your customer service requests, so that we can respond to you.
3. To ensure compliance with our legal and regulatory obligations as defined by the legislation in force, in particular in connection with the management of requests to exercise personal data protection rights.
2. WHAT PERSONAL DATA IS COLLECTED?
Personal data is any information relating to an identified or identifiable individual. Almé may collect the following categories of data about you as a customer, prospect and/or user of its website:
- Data relating to your identity: title, surname, first name, postal address, telephone number, e-mail address, date of birth, customer account number if applicable, password.
- Data relating to your orders: transaction number, purchase details, purchase amounts, invoice payment data (payments, outstanding payments, discounts), product returns.
- Payment details: credit card number, expiry date, visual cryptogram (which is immediately deleted).
- Data required for loyalty and prospecting campaigns: purchase history, preferences and centers of interest, site browsing history, and IP address.
- Data relating to your exchanges with customer service or any other department and your level of satisfaction: opinions on the quality of products and in-store reception, messages exchanged with our customer relations department or any other department (e.g. Data Protection Office).
- Data relating to #almeparis instagram publications: photo, username/pseudonym
It is specified that all personal data collected is necessary for the management of Almé's activities, except for data collection fields that are not marked with an asterisk. If you do not provide this data or if you refuse to collect it, it will be difficult or impossible to manage Almé's activities and you will not be able to take full advantage of our services.
In any event, Almé ensures that the personal data processed is adequate, relevant and not excessive in relation to the purposes for which it is collected and/or processed.
3. WHO HAS ACCESS TO YOUR PERSONAL DATA?
Almé is committed to preserving the confidentiality of your personal data and to complying with all legal requirements concerning the sharing and disclosure of your personal data.
In this respect, your personal data will only be accessible to a limited list of recipients according to their needs and on a case-by-case basis, and in particular to authorized departments and personnel within Almé in order to accomplish the purposes set out above.
Your data may also be accessible to external service providers or subcontractors in order to carry out the tasks entrusted to them:
- Our technical subcontractors (hosting, IT supervision, etc.)
- Our logistics subcontractors (order preparation, deliveries)
- Our payment subcontractors (fraud prevention, payment processing)
- Our subcontractors in charge of customer relations (response to your requests, product reviews, satisfaction surveys, etc.)
Almé's subcontractors act on behalf of Almé and in accordance with our instructions. Almé ensures that these transfers are subject to appropriate safeguards, in particular by signing standard contractual data protection clauses adopted by the European Commission.
At no time does Almé sell or share your personal data with companies whose purpose is to acquire prospects and send commercial solicitations by SMS or e-mail without your consent.
The photos you have agreed to share on our instagram profile are accessible to the public.
4. HOW LONG WILL YOUR PERSONAL DATA BE KEPT?
Your personal data is kept in a form that allows you to be identified for no longer than is necessary for the purposes for which it is processed. Your data is kept by Almé in a secure environment for a limited period which may vary according to Almé's operational needs, the rights of the persons concerned, legal or regulatory retention obligations and applicable legal limitation periods, as well as the recommendations of the Commission Nationale de l'Informatique et des Libertés (CNIL).
- Personal data relating to purchases (purchase histories and identification data strictly necessary for consulting and re-issuing
invoices) are kept for ten years from the customer's last purchase.
- Personal data processed as part of the management of an order and its delivery are kept for the duration of the contractual relationship, then for the period of the legal statute of limitations, which is 5 years. - Personal data processed as part of the management of your requests for personal data protection are kept for 1 year from the last exchange, or for six years in the event of opposition.
- Prospecting data is kept for 3 years from the last contact with you.
5. DOES ALMÉ USE COOKIES?
Almé collects information relating to your browsing by means of cookies when you visit the Almé site. Almé does not deposit cookies without your consent, except for those strictly necessary for the operation of the site.
6. ARE YOUR PERSONAL DATA PROTECTED?
Almé undertakes to take all necessary measures to ensure the protection, confidentiality and security of personal data transmitted to it, in compliance with applicable legal provisions.
7. WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM?
You have the right to access, rectify, delete or port your personal data at any time, as well as the right to restrict or object to its processing. You may also withdraw your consent at any time.
You may also give us instructions at any time as to what you wish to happen to your data after your death.
You can exercise your rights by writing to us at the following address: dpo@almeparis.com or via our online contact form.
If you have any questions about the protection of your personal data, please contact us at dpo@almeparis.com.
Finally, you also have the right to lodge a complaint with a supervisory authority (in France the CNIL) in the event of a breach of applicable data protection rules.
This privacy policy may be modified by Almé. In this case, we will notify you by email of any significant changes and the revised version will be available on the Almé website.
8. EXERCISE OF RIGHTS
In accordance with the provisions of the General Data Protection Regulation (GDPR), you have the right to consult, rectify your data or unsubscribe from our website at any time. To exercise this right, please access the following link: Access to my data
