13.1 Personal Data
Personal data collected
The Personal Data of the Users are notably collected at the time of the opening of their account on the Site, their purchase of Products and the related payments.
The main Personal Data collected are: name; first name; email address; password; billing address; delivery address; navigation data (language preference; date and time of access to the Site; pages of the Site visited.)
Furthermore, Users also have the option of offering Products as gifts, in which case they must provide all the personal information required of the final recipients of the Products.
Purposes of the treatment of the collected Personal Data
In accordance with the French Law 78-17 of January 6, 1978, as amended by the laws of August 6, 2004 and June 20, 2018, the Company undertakes to process the Personal Data provided by its Users, in particular in order to carry out its obligations under the Product orders, to carry out statistics or analyses, commercial prospecting, as well as to send qualified information to said Users.
Moreover, it is reminded that the Personal Data requested from the User are notably necessary for the order of Products, its payment and its execution, as well as for the establishment of invoices.
However, they are not resold.
Recipients of the Personal Data
The Company undertakes to guarantee the confidentiality of the Personal Data processed in the performance of its obligations.
Furthermore, as this data may be communicated to the Company's partners responsible for the execution, processing, management and payment of orders, the Company ensures that these partners present the same sufficient guarantees regarding the implementation of appropriate technical and organizational measures, so that the processing meets the requirements of the applicable regulations.
In addition, the Company has the right to disclose Users' Personal Data, if required by law or in the event of a breach of this Agreement by such Users.
13.2 Consent
The consent of the Users is presumed for the use of the said data for the sole purpose of opening their account on the Site, their orders of Products and the related payments.
When Users' Personal Data is used for marketing purposes, Users' prior express consent is required. Users always have the option to withdraw their consent by sending an email to: nicolas@orchidee-diffusion.com.
13.3 Storage
The site is hosted by EMONSITE
The Personal Data collected are hosted by the company EMONSITE
13.4 Security
The Company undertakes to implement all necessary means to ensure the security and confidentiality of Personal Data.
Thus, in order to protect the Personal Data of its Site visitors, the Company takes a set of precautions and follows best practices in this regard, to ensure that such data is not lost, misappropriated, accessed, disclosed, modified or destroyed in an inappropriate manner.
13.5 Cookies
What is a "cookie"? A "cookie" or tracer is an electronic file deposited on a terminal, such as a computer, a tablet or a smartphone, and in particular read when connecting to a website, reading an email, installing or using a software or a mobile application, regardless of the type of terminal used.
In particular, the proper functioning of the Site implies the presence of cookies implanted in the User's computer, at the time of connection, in order to record information relating to navigation (pages consulted, date and time of consultation, etc.) and the identity of its visitors.
When connecting to the Site for the first time, a banner explaining the use of "cookies" will appear. From then on, by continuing to browse, the User will be deemed to have been informed and to have accepted the use of the said "cookies".
The period of validity of this acceptance is a maximum of 13 months. At the end of this period, the consent will have to be collected again.
The User has the right to oppose the use of cookies by configuring his browser software.
13.6 Personal Data Rights
The User has, in accordance with national and European regulations in force, a permanent right of access, modification, rectification, limitation, opposition and portability of information concerning him/her.
To exercise his rights, the visitor just has to write to the following email address: nicolas@orchidee-diffusion.com
If the User no longer wishes to receive the Company's news, solicitations (by telephone, SMS, postal mail or email) and invitations, he/she has the option of indicating this via the link reserved for this purpose, of modifying his/her choices by contacting the Company under the conditions mentioned above or, where applicable, by modifying the parameters of his/her online account.
In addition, if a User has reason to believe that the security of his or her Personal Data has been compromised or that such Data has been misused, he or she is entitled to contact the Company at the following email address: nicolas@orchidee-diffusion.com
The Company will investigate complaints regarding the use and disclosure of Personal Data and attempt to resolve them in accordance with applicable regulations.
For any additional information or complaint, the User may contact the CNIL (www.cnil.fr).
13.7 Payment
The payment of the Products is made by credit card on the Company's Website, using a secure payment service.
Users' transaction information is retained for as long as necessary to fulfill their Offer. Upon expiration, the corresponding transaction information is deleted.
All direct payment gateways are PCI-DSS compliant, managed by the PCI Security Standards Council, which is a joint effort of companies such as Visa, MasterCard and American Express.