Privacy Policy [Redandreamoon.com]
ARTICLE 1: PREAMBLE
The purpose of this privacy policy is to inform users of the site:
On how their personal data is collected. Personal data is considered to be any information that allows a user to be identified. As such, it may include: their first and last names, age, postal or email address, location or IP address (non-exhaustive list);
On the rights they have regarding this data;
On the person responsible for processing the personal data collected and processed;
On the recipients of this personal data;
On the site's policy on cookies.
This policy supplements the legal notices and the General Conditions of Use that can be consulted by users at the following address: [Legal notices | [General conditions]
ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA
In accordance with Article 5 of European Regulation 2016/679, personal data are:
Processed in a lawful, fair and transparent manner with regard to the data subject;
Collected for specific purposes (see Article 3.1 hereof), explicit and legitimate, and not further processed in a manner incompatible with these purposes;
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
Accurate and, if necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are deleted or rectified without delay;
Kept in a form which permits identification of the data subject for no longer than is necessary for the purposes for which they are processed;
Processed in such a way as to ensure appropriate security of the data collected, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Processing shall be lawful only if and to the extent that at least one of the following conditions is met:
The data subject has consented to the processing of his or her personal data for one or more specific purposes;
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
Processing is necessary for compliance with a legal obligation to which the controller is subject;
Processing is necessary to protect the vital interests of the data subject or of another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data prevail, in particular where the data subject is a child.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF BROWSING THE SITE
Article 3.1: Data collected
The personal data collected in the context of our activity are as follows:
[Age of majority, surname, first name, address, postal code, language and email]
The collection and processing of this data meets the following purpose(s):
[Verification of majority | Processing of shipments | [Invoicing]
Article 3.2: Data collection method
When you use our site, the following data is automatically collected:
[Statistical data on sales (products, purchases, shopping cart, amount]
The company may retain certain personal data beyond the periods announced above in order to fulfill its legal or regulatory obligations.
Article 3.3: Data hosting
The [redandreamoon.com] site is hosted by: [OVH]
ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER
Article 4.1: The data controller
The controller of personal data can be contacted as follows:
By email: [redandreamoon@gmail.com].
Article 4.2: The data protection officer
The data protection officer of the company or manager is: [Andrea Moon]
If you feel, after contacting us, that your “Data Protection and Liberties” rights are not respected, you can
send information to the CNIL.
ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING
Any user concerned by the processing of their personal data may exercise the following rights, pursuant to European Regulation 2016/679 and the Data Protection Act (Law 78-17 of 6 January 1978):
Right of access, rectification and right to erasure of data (set out in Articles 15, 16 and 17 of the GDPR respectively);
Right to data portability (Article 20 of the GDPR);
Right to limitation (Article 18 of the GDPR) and to opposition to data processing (Article 21 of the GDPR);
Right not to be subject to a decision based exclusively on an automated process;
Right to determine the fate of data after death;
Right to refer the matter to the competent supervisory authority (Article 77 of the GDPR).
To exercise your rights, please send your email to [redandreamoon@gmail.com]
In order for the data controller to comply with his/her request, the user may be required to provide him/her with certain information such as: his/her first and last names, his/her email address and his/her account number, personal space or subscriber number.
Visit the cnil.fr website for more information on your rights.
ARTICLE 6: CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY
The publisher of the site [redandreamoon.com] reserves the right to modify this Policy at any time in order to ensure that users of the site comply with the law in force.
Any changes will not affect purchases previously made on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user when validating the purchase.
The user is invited to read this Policy each time they use our services, without it being necessary to formally notify them.
This policy, published on [03/29/2024], was updated on [03/29/2024].