Privacy policy
1. What is the purpose of the privacy policy?
On the website www.onceuponafragrance.com (hereinafter "the Site"), the protection of your personal data is a priority. The company SPPC ensures that it complies with the law of 1978 known as "Informatique et libertés" and the European regulation on the protection of personal data of 27 April 2016 (hereinafter "the RGPD").
The following information is provided to you so that you can become aware of the commitments in terms of personal data protection of the SPPC company, which acts as the data controller for the personal data processing mentioned in this document.
2. What personal data is collected?
On its Site, SPPC collects the following data:
Name
First name
E-mail address
Telephone number
Postal address
It may also happen that users of the Site communicate other data by contacting SPPC using the contact form on the Site.
3. Who is the Data Controller?
The company SPPC
Simplified joint stock company with a single shareholder - RCS Paris 351 644562
130 Rue de Courcelles - 75017 Paris - France
contact@onceuponafragrance.com
4. Use of your personal data - purposes
4.1. The purposes of our processing
The processing that we carry out is done for the following purposes:
The management of commercial relations
The management of your requests on our website
The sending of the newsletter
The management of the customer service
The management of the personal account of the website
Measuring quality and satisfaction
Managing requests for access, deletion, rectification and opposition rights
Improving the services provided
Maintaining a secure environment of the Website
4.2. The legal basis of our processing
We only carry out data processing operations if at least one of the following conditions is met:
your consent to the processing operations has been obtained ;
the existence of our legitimate interest that justifies us implementing the processing of personal data concerned such as responding to information requests, developing products and their sale and securing the Website;
the execution of the contract when these are necessary for the good execution of the obligations of the parties;
Finally, in the context of the application of legal obligations.
It should be noted that you can always refuse to provide us with your data, in which case we will inform you of the possible consequences of this refusal when this data is mandatory.
5. Recipients of your data
The personal data that we collect are intended for us in our capacity as data controller and our subcontractors (logistics service provider, newsletter sending service provider). Our service providers may be recipients of this data to perform the services we entrust to them.
We undertake to ensure that your personal data will never be transferred or exchanged to third parties.
6. Transfers of your data
We transfer your personal data to partners located in the United States.
Each of these transfers is governed by legal instruments that comply with the applicable legal framework. Indeed, transfers to other countries are governed by standard contractual clauses approved by the European Commission.
7. The periods for which we keep your data
The retention periods we apply to your personal data are proportionate to the purposes for which they were collected. Consequently, we organize our data retention policy as follows
the time necessary to respond to your request for information;
3 years from our last contact with you for the use of data for prospecting purposes;
5 years in intermediate storage from the end of the operation for what concerns the respect of the legal and regulatory obligations of the company SPPC as well as to allow to establish the proof of a right or of a contract.
8. Your rights
Your rights regarding your data are as follows:
Your right to information:
You acknowledge that this Privacy Policy informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom
Your right to information: You acknowledge that this privacy policy informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared, the possibility of a transfer of data to a third country, the length of time your personal data is kept, the existence of your rights and how to exercise them.
Your right of access and rectification
Your right to information:
You acknowledge that this privacy policy informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data are shared
Your right to information: You acknowledge that this privacy policy informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared, the possibility of transferring data to a third country, the length of time your personal data will be kept, the existence of your rights and how to exercise them.
Your right to access and rectify your data:
You have the right to access all of your personal data at any time and to have your inaccurate, incomplete or obsolete personal data corrected.
Your right to limit data processing:
You may request the limitation of the processing of your personal data in the cases provided for in Article 18 of the GDPR.
Your right to object to data processing
You have the right to object to the processing of your personal data. However, we may continue to process them for legitimate reasons or the defence of legal claims.
Your right to withdraw your consent
Where the data processing we carry out is based on your consent, you may withdraw it at any time. We will then stop processing your personal data without affecting the previous operations to which you have consented.
Your right to appeal
You can address a complaint or a request to the competent authority. In France, the competent authority is the Cnil to which you can send a request electronically by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet.
Your right to define post-mortem directives
You have the possibility of defining directives relating to the conservation, the erasure and the communication of your personal data after your death with a trusted third party, certified and charged with enforcing the will of the deceased, in accordance with the requirements of the applicable legal framework.
How to exercise your rights
You may exercise your rights electronically at contact@onceuponafragrance.com. To do so, you must clearly indicate your surname(s) and first name(s) and the address to which you wish the reply to be sent.
In principle, you can exercise all your rights free of charge. However, as regards the right of access, you may be asked to pay a reasonable fee based on administrative costs for any additional copies of the data you request.
With respect to the right to information, SPPC will not be obligated to respond to your request if you already have the information you are requesting.
SPPC will inform you if it cannot comply with your requests.
9. Security of your data
SPPC places particular emphasis on the security of personal data.
It has put in place technical and organizational measures adapted to the degree of sensitivity of the personal data, in order to ensure the integrity and confidentiality of the data and to protect them against any malicious intrusion, loss, alteration or disclosure to unauthorized third parties.
10. Effective Date
This policy, accessible to all on the website is effective as of December 1, 2019.
11. management of cookies
11.1. What is a cookie?
When you browse our Site cookies, pixels and other tracers (hereinafter referred to together as "Cookies") are deposited on your browser.
A cookie is a small file, often encrypted, stored in your browser or your terminal and identified by a name. It is deposited when you visit a site. Each time you return to the site in question, the cookie is retrieved from your browser or terminal. Thus, each time you visit the Site, the browser is recognized.
The deposit of these Cookies may allow us to access your browsing data and/or personal data about you.
We may use advertising, content personalization, social networking or analytical cookies. You will be informed of this when you first visit the Site or the Application using these Cookies. You will then be asked to accept or decline them in accordance with the terms described below.
12.2. Your cookie preferences
Some cookies do not require your consent, such as :
Technical and functional cookies that are necessary for the operation of the Site;
Certain audience measurement Cookies or Cookies that allow us to test different versions of the Site for the purpose of optimizing editorial choices.
All other Cookies require your consent. These are advertising cookies, social networking cookies, content personalization cookies and certain audience analysis cookies. You can freely choose to accept or refuse the use of these Cookies.
You can accept or decline these Cookies when you first visit the Site. Your choices to accept or decline cookies will be retained for a period of six 6 months.
You are free to withdraw your consent and more generally to modify your preferences at any time.
It is also possible to set your browser to accept or reject certain cookies.
Each browser offers different configuration methods:
For Internet Explorer: click on "Settings", then "Internet Options". Click on "Privacy" and then on "Advanced Privacy Settings";
For Chrome: in the "Settings" menu, click on "Privacy and Security". Finally, click on "Authorization" and "Cookies and site data".
For Safari: go to the "Settings" application and then go to Safari. Click on the "Privacy and Security" tab. You can now choose to block all cookies;
For IPhone: in the "Settings" menu, then "Safari", click on "Cookies". You can now choose to block all cookies;
For Android: on " Chrome ", click on the tab " " at the top right of the screen, then on " Site settings " and then on " Cookies ". You can now choose to accept or block Cookies.
13. Collecting Your Feedback
SPPC may contact you by e-mail to invite you to evaluate any services and/or products you have received from us in order to collect your feedback and improve our services and products (the "Subject Matter"). We use an external company, Trustpilot A/S ("Trustpilot"), to collect your feedback, which means that we will share your name, e-mail address and reference number with Trustpilot for the Purpose. If you want to know more about how Trustpilot handles your data, you can read their privacy policy here.