B+B takes the matter of the protection of its clients' personal data and more generally those of the users of the website bplusb.shop (hereinafter referred to as the « Users ») very seriously.
The present personal data policy explains how your data is used and your rights regarding your personal data.
Internet users who sign up or make and order on the website bplusb.shop (hereinafter referred to as the « Website ») are asked to provide personal information.
a) Data controller
The data controller is COUTURIER.PARIS, SARL with a share capital of €10,010, registered in the Mâcon Trade and Companies Register under number 753 081 942, whose headquarters are located 41, rue Sigorgne 71000 MÂCON, hereinafter referred to as « B+B ».
b) Data collected by B+B
B+B collects the following data: first and last names, postal addresses, birth dates, email addresses, passwords, landline and/or mobile phone numbers, connection data and browser data, order history, payment data, messages sent to the customer services and claims.
Data required for the performance of the service is indicated by an asterisk.
B+B's service providers, Stripe and PayPal, collect payment data (bank card number, name of cardholder, date of expiry, security cryptogram). At no point does this data transit on B+B's servers or computer systems.
The social media on which B+B posts content may collect internet users' data; this collection is subject to these media network's own privacy and personal data protection policies.
c) Purpose and legal basis of processing
B+B only uses User data for the purpose of processing and improving services, delivering orders and to market and inform persons with a user account if they have agreed to receive such information or where its clients are not opposed.
To perform the service, namely the sale and delivery of products to clients, the legal grounds for processing is the performance of the contract made with the client, or in the steps preceding the conclusion of this contract (creation of a user account), the performance of necessary pre-contractual measures.
With regard to information given to users about new B+B products and services and any related events, the legal basis for processing is the legitimate interest the data controller has in proposing offers and informing its current and potential clients about its news.
The legal basis for web analytics of client and user behaviour by website usage tracks, surveys and studies, for the purposes of improving the service is the legitimate interest the data controller has in offering products and services suited to its clients' needs.
Recipients of B+B's newsletters who no longer wish to receive these may unsubscribe at any time by clicking on the link provided in each newsletter.
Data related to transactions and claims may also be kept as evidence, exclusively for the required legal term in a database archive, the legal basis for processing being a legal obligation in such cases.
d) Data protection
As data controller, B+B shall take the necessary measures to ensure the security of the personal data collected. In particular, B+B chooses service providers that offer an appropriate level of guarantees in light of the processing and nature of the processed data.
Users' personal data is collected on secured pages via the https protocol and is the object of daily backups. Users' personal data are hosted in France or within the European Union. Any person requesting access to Users' personal data must first provide a proof of identity.
e) User's rights
Each User has the following rights with regard to personal data collected on the Website:
- a right to access, allowing the person to know whether or not his/her personal data are being processed, and, where that is the case, access to information about the processing (purpose, storage, source, existence of automated decision-making) and request a copy of this data;
- a right to rectify inaccurate personal data;
- a right to object to the processing of his/her data and to the use of this data for marketing purposes or analysing behaviour on the Website;
- a right to limit processing under certain circumstances, namely for the analysis of a request to rectify or object to processing;
- a right to retrieve personal data in a structured, commonly used, machine-readable format, whether for the User him/herself or for a third party that the User will have appointed beforehand.
To do so, the User must write to B+B specifying in the subject of the letter or email that it is a request for information or a claim regarding personal data and shall provide proof of receipt by B+B at its request. The User must also provide proof of identity, which must be at least a copy of his/her national identity card and a proof of address. Should he/she fail to do so, B+B reserves the right to not process the request.
The requirement of a proof of identity is needed to preserve the confidentiality of the data and to send this data to the appropriate persons.
The letter must be sent to:
41, rue Sigorgne
B+B shall act on the User's request within one month. In the event of a complex request, B+B shall inform the User within the above period that it may only act on the request within an additional two (2) month period. If B+B refuses to act on the User's request, it shall provide its reasons for this decision.
The User may exercise his/her rights mentioned above by writing by email to: firstname.lastname@example.org
B+B is not required to respond to manifestly abusive requests.
f) Right to express advanced directives
The User has the right to express advanced directives as to what will happen to his/her personal data after his/her death.
These advanced directives may be sent to B+B by email to: email@example.com
g) Recipients of data
Personal data is collected for B+B and its service providers and under no circumstances for the purposes of being sold. B+B's service providers are:
- Payment service providers (Stripe);
- The service provider that prepares and dispatches products and receives returned products;
- The service provider in charge of managing, developing and hosting the Website, as well as email processing and client behaviour analytics services.
More widely, the recipients of personal data collected on the Website are:
- Administrative and judicial authorities in the event of an administrative or judicial requisition in compliance with existing legislation;
- Customs, for overseas deliveries.
h) Data storage period
Collected data is stored for the duration of and for the performance of the Services, and up to three months after a Client deactivates his/her User Account, and for a maximum three years from the last commercial relation with the User for marketing purposes.
These cookies, temporarily, during the time of the visit, retain email addresses and passwords that can be used to identify the User or visitor, as well as products and pages previously visited.
The cookies used other than those required to navigate the website are:
- « Google Analytics » cookie. This is used to determine how a given user users the Website.
- analytic cookies of social media used in connection with the Website.
Internet users who do not want cookies may change their navigation settings via the pop-up banner displayed each time they visit the website and choose which cookies they wish to deactivate. However, this may reduce certain functions of the Website, particularly as it will be harder to navigate.
You may customise your browser's settings as follows:
- in Firefox: click on « Firefox/Preferences ». Click on « Privacy & Security » and choose « Never » in « Accept third-party cookies ». You can also choose to only store cookies until you close Firefox.
- in Safari: click on « Safari/Preferences ». Click on « Privacy » and chose « Always block » under « Cookies and website data ». You can also click on « Remove all website data » when you end your navigation. You also have the option to enable a « Do not track » setting.
- In Chrome: click on « Settings », then on « Advanced ». Select « Privacy and security » and click on « Content settings » then « Cookies ». You can choose between various options for accepting or blocking cookies.
- In Edge: click on the « Tools » button then « Internet settings ». Click on « Privacy » then scroll down to allow all cookies and validate your choice by clicking on « OK ».
Internet users may sign up to the Website to receive a newsletter. They may unsubscribe at any time via the link provided at the bottom of each email or by sending a request to unsubscribe to B+B at: firstname.lastname@example.org
k) Complaints with a competent supervisory authority
Users may lodge a complaint with a competent supervisory authority. In France, the supervisory authority is the French data protection authority CNIL (www.cnil.fr).