1. ACCESS DATA AND HOSTING
You can visit our web pages without providing any personal information. Each time a web page is visited, the web server automatically saves a server log file which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data), and documents the access.
These access data are used solely for the purpose of ensuring the trouble-free operation of the site as well as improving our offer. In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our legitimate interests in a correct presentation of our offer, which outweigh the interests of the parties. All access data will be deleted no later than seven days after the end of your visit to the site.
HOSTING
The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in the forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact the person indicated in this privacy policy. Our service providers are based in the USA. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission.
CONTENT DELIVERY NETWORK
To reduce load times, we use a content delivery network ("CDN") for several of our offerings. This service allows content, e.g. large media files, to be delivered via regional servers of external CDN service providers. As a result, access data is processed on the servers of the service providers. Our service providers act for us within the framework of data processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact the person indicated in this privacy policy. Our service providers are based in the USA. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission.
Data protection declaration
The controller responsible for data processing is:
WILL SIDE
10 Chemin Latéral
94140 ALFORTVILLE
France
We appreciate your interest in our online shop.
Protecting your privacy is very important to us.
Below, we inform you in detail about the processing of your data.
2. DATA PROCESSING FOR CONTRACT EXECUTION AND CONTACT
DATA PROCESSING FOR CONTRACT EXECUTION
We collect personal data when you provide it voluntarily as part of your order or when you contact us (e.g., via a contact form or email). Mandatory fields are marked as such because we absolutely need this data to execute the contract or process your contact request, and without it, you cannot complete your order and/or send your contact request. The respective input forms show which data is collected.
In accordance with Art. 6 para. 1 lit. b GDPR, we use the data you provide to perform the contract and process your requests (including requests regarding warranty and performance defect rights, and any legal update obligations). You will find further information on the processing of your data, in particular on the transfer to our service providers for the purpose of executing orders, payments, and deliveries, in the following sections of this privacy policy. After complete execution of the contract, we limit the further processing of your data and delete it after the expiration of the legal retention periods provided for tax and commercial purposes in accordance with Art. 6 para. 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 lit. a GDPR or if we reserve the right to further use of the data, authorized by law, and about which we inform you in this statement.
CONTACT
As part of our communication with customers, we collect personal data to process your requests in accordance with Art. 6 para. 1 lit. b GDPR when you provide it voluntarily when contacting us (e.g., via a contact form or email). Mandatory fields are marked as such, because we absolutely need this data to process your contact request. The respective input forms show what data is collected. After fully processing your request, we delete your data unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 lit. a GDPR or if we reserve the right to further use of the data, authorized by law, and about which we inform you in this statement.
3. DATA PROCESSING FOR DELIVERY PURPOSES
To execute the contract, in accordance with Art. 6 para. 1 lit. b GDPR, we transfer your data to the delivery service provider, to the extent necessary for the delivery of ordered goods.
4. DATA PROCESSING FOR PAYMENT PURPOSES
As part of payment processing in our online shop, we work with the following partners: technical service providers, credit institutions, payment service providers.
DATA PROCESSING FOR TRANSACTION EXECUTION
Depending on the chosen payment method, we transmit the data required for processing the payment transaction to our payment service providers who work for us as processors, or to the mandated credit institutions or the selected payment service provider, to the extent necessary for executing the payment. This serves to execute the contract in accordance with Art. 6 para. 1 lit. b GDPR. In some cases, payment service providers collect the data necessary for payment processing themselves, for example on their own website or through technical integration into the ordering process. The privacy policy of the respective payment service provider applies. If you have questions about our payment partners and the basis of our cooperation with them, please contact the person indicated in this privacy policy.
DATA PROCESSING FOR FRAUD PREVENTION AND PAYMENT PROCESS OPTIMIZATION
Where applicable, we provide our service providers with additional data which they use, together with the data required for payment execution, as our processors for the purposes of fraud prevention and optimization of our payment processes (e.g., billing, processing contested payments, accounting support). In accordance with Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests in fraud protection and efficient payment management, which outweigh the interests of the parties.
5. ADVERTISING BY E-MAIL,
ADVERTISING BY E-MAIL WITHOUT NEWSLETTER SUBSCRIPTION AND YOUR RIGHT TO OBJECT
If we obtain your email address in connection with the sale of goods or services and without your objection, we reserve the right, in accordance with applicable legal provisions, to regularly send you offers for products from our assortment similar to those already purchased. This serves to safeguard our legitimate interests in advertising communication with our customers, which outweigh the interests of the parties. You can object to this use of your email address at any time by sending a message to the contact person designated in this privacy policy or via a dedicated link in the advertising email, without incurring costs other than communication costs at base rates. After unsubscribing, we will delete your email address from the newsletter recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 lit. a GDPR, or if we reserve the right to broader data usage authorized by law, as we inform you in this statement.
6. COOKIES AND OTHER TECHNOLOGIES
GENERAL INFORMATION
To make the visit to our website attractive and to allow the use of certain functions, to present suitable products, or to perform market research, we use technologies, including "cookies", on different pages. Cookies are small text files that are automatically saved on your terminal device. Some of the cookies we use are deleted at the end of the browser session, i.e., after closing your browser (session cookies). Other cookies remain on your terminal device and allow us to recognize your browser on your next visit (persistent cookies).
PRIVACY PROTECTION AT THE TERMINAL EQUIPMENT LEVEL
When using our online offer, we use technologies that are absolutely necessary to provide the online communication service, which is expressly requested by the user. To this extent, the storage of information on your terminal device or access to information already stored on it does not require your consent.
In the case of functions that are not strictly necessary, the storage of information on your terminal device or access to information already stored on it requires your consent. We draw your attention to the fact that, if you do not give your consent, some parts of the website may not be fully usable. Where applicable, the consents you have given remain until you adjust or reset the corresponding settings in your terminal device.
POTENTIAL SUBSEQUENT DATA PROCESSING BY COOKIES AND OTHER TECHNOLOGIES
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g., shopping cart function). These technologies are used to collect and process IP address, visit time, device and browser information, as well as information about your use of our website (e.g., information about shopping cart content). This serves to safeguard our legitimate interests in an optimized presentation of our offer which outweigh the interests of the parties in accordance with Art. 6 para. 1 lit. f GDPR.
In addition, we use technologies to fulfill legal obligations to which we are subject (e.g., to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing purposes. You will find further information on this, including the corresponding legal basis for data processing, in the following sections of this privacy policy.
You can find cookie settings for your browser under the following links:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
To the extent that you have consented to the use of technologies in accordance with Art. 6 para. 1 lit. a GDPR, you can withdraw your consent at any time by sending a message to the contact person designated in this privacy policy. You can also click the following link: https://cms.jimdo.com/cms/. Refusing cookies may limit the functionality of our website.
USE OF THE JIMDO CONSENT MANAGEMENT TOOL
We use the Jimdo consent management tool on our website to inform you about cookies and other technologies we use on our site, as well as to obtain, manage, and document your consent, if necessary, to the processing of your personal data by these technologies. In accordance with Art. 6 para. 1 lit. c GDPR, this is necessary for the fulfillment of our legal obligation, derived from Art 7 para. 1 GDPR, according to which we must be able to prove your consent to the processing of your personal data. The Jimdo consent management tool is provided by Jimdo GmbH, Stresemannstrasse 375, 22761 Hamburg, Germany ("Jimdo"). After you have submitted your cookie declaration on our website, the Jimdo web server saves your IP address, the date and time of your declaration, information about your browser, the language and URL from which the declaration was sent, as well as information about your consent behavior. Furthermore, a cookie is used that contains information about your consent behavior. Your data will be deleted after a period of 365 days, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1
7. USE OF COOKIES AND OTHER TECHNOLOGIES
To the extent that you have given your consent in accordance with Art. 6 para. 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. Data collected in this context will be deleted once the intended purpose has been achieved and we have ceased using the corresponding technology. You can withdraw your consent at any time with effect for the future. You will find more information on the possibilities of withdrawing consent in the "Cookies and other technologies" section. You will find further information, including the basis of our cooperation with various providers, by consulting the individual technologies. For any questions regarding the providers and the basis of our cooperation with them, please contact the person indicated in this privacy policy.
USE OF GOOGLE SERVICES
We use the following technologies from Google Ireland Ltd, based at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google technologies regarding your use of our website is generally transferred to a server of Google LLC, based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. If your IP address is collected using Google technologies, it will be shortened by activating IP anonymization before being stored on Google servers. Unless otherwise indicated for the individual technologies, data processing is carried out based on an agreement concluded for each technology between joint controllers in accordance with Art. 26 GDPR. You will find more information on data processing by Google in the Google privacy policy.
GOOGLE ANALYTICS
Data (IP address, visit time, device and browser information, as well as information about your use of our website), from which pseudonymized usage profiles are created, are automatically collected and stored for web analysis purposes using Google Analytics. Cookies may be used for this purpose. Your IP address will generally not be merged with other Google data. Data processing takes place based on a data processing agreement with Google.
OTHER WEB ANALYSIS AND ONLINE MARKETING SERVICE PROVIDERS
We use the tracking and analysis tool of Jimdo GmbH, based at Stresemannstrasse 375, 22761 Hamburg, Germany. In accordance with Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests as part of a balancing of interests, namely for the purposes of statistical evaluation of your user behavior on our website and ensuring a needs-based, intuitive design and continuous optimization of our offers. Jimdo tracking does not use cookies. Your data (IP address, device and browser information) are automatically collected, aggregated, and processed using pseudonymized usage profiles for the aforementioned purposes. Your data is shortened, stored as a hash value, and further encrypted by a random value changing every 24 hours. This prevents deduction of individual user identities. Any further aggregation of data does not take place.
8. SOCIAL NETWORKS
OUR ONLINE PRESENCE ON FACEBOOK (BY META), INSTAGRAM (BY META), LINKEDIN
To the extent that you have given your consent to the operator of the corresponding social network, in accordance with Art. 6 para. 1 lit. a GDPR, your data is automatically collected and stored for market research and advertising purposes when you visit our online presences on the aforementioned social networks. Pseudonymized usage profiles are created from this data. These can be used, for example, to place advertisements on and off the platforms that are presumed to correspond to your interests. Generally, cookies are used for this. You will find more information on data processing and usage by the relevant social network operator, as well as contact possibilities and your rights and setting options for protecting your privacy, in the privacy notices of the operators whose web addresses are integrated below. We are at your disposal if you nevertheless need help in this regard.
Instagram (by Meta) is an offer from Meta Platforms Ireland Ltd., located at 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transferred and stored on a server of Meta Platforms, Inc., located at 1 Hacker Way, Menlo Park, California 94025, USA. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing in the context of visiting an Instagram fan page is carried out based on an agreement between joint controllers in accordance with Art. 26 GDPR. You will find further information (information concerning Page Insights data) here.
LinkedIn is an offer from LinkedIn Ireland Unlimited Company, located at Wilton Place, Dublin 2, Ireland ("LinkedIn"). Information automatically collected by LinkedIn regarding your use of our online presence on LinkedIn is generally transferred and stored on a server of LinkedIn Corporation, located at 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission.
9. CONTACT POSSIBILITIES AND YOUR RIGHTS
YOUR RIGHTS
In addition, you have the right to lodge a complaint with the competent supervisory authority for data protection in France:
Commission Nationale de l'Informatique et des Libertés (CNIL) - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 - Phone: 01 53 73 22 22
As a data subject, you have the following rights:
Under Article 15 of the GDPR, you have the right to access the personal data concerning you that we process.
Under Article 16 of the GDPR, you have the right to obtain, without undue delay, the rectification of your inaccurate personal data. You also have the right to request that such data be completed.
Under Article 17 of the GDPR, you have the right to erasure of your personal data to the extent that the processing is not necessary for:
- exercising the right of freedom of expression and information;
- compliance with a legal obligation;
- reasons of public interest;
- the establishment, exercise, or defense of legal claims.
Under Article 18 of the GDPR, you have the right to restriction of processing in cases where:
- you contest the accuracy of the data;
- the processing is unlawful, but you oppose erasure;
- we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims;
- you have objected to processing pursuant to Article 21 of the GDPR.
Under Article 20 of the GDPR, you have the right to receive your data in a structured, commonly used, and machine-readable format and to request the transmission of this data to another controller.
Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority of your habitual residence, your workplace, or our registered office.
CONTACT POSSIBILITIES
RIGHT TO OBJECT
Insofar as we process personal data as explained above in order to safeguard our legitimate interests which outweigh the interests of the parties, you can object to this processing with effect for the future. If processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If processing is carried out for other purposes, you only have a right to object for reasons arising from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for this processing which override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.
This does not apply if processing is carried out for direct marketing purposes. We will then no longer process your personal data for this purpose.
For any questions regarding the collection, processing, or use of your personal data, for any request for information, correction, limitation, or deletion of data, as well as for any withdrawal of granted consent or objection to a particular use of data, please contact us directly using the contact details provided in the Legal Notice.
Subscribe to our newsletter
Don't miss any news by subscribing to our newsletter!