PRIVACY POLICY & COOKIES
In accordance with European Regulation n°2016-679 of April 27, 2016, known as the General Data Protection Regulation (RGPD) in force since May 28, 2018, and French law n°78-17 of January 6, 1978, relating to information technology, files and freedoms, known as the "Informatique et Libertés" law, the purpose of this policy is to inform you about the use and sharing of information that you may provide to us when requesting information, account opening and placing orders, on the categories of personal data we may collect or hold about you, how we use them, with whom we share them, how we protect them, and the rights you have over your personal data.
1. Definitions
Personal data: any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"); an "identifiable natural person" is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;
Processing: any operation or set of operations which may or may not be performed using automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Controller: the natural or legal person, public authority, department, or other body which, alone or jointly with others, determines the purposes and means of processing.
Sub-processor: the natural or legal person, public authority, department, or other body that processes personal data on behalf of the controller.
Recipient: the natural or legal person, public authority, department, or other body that receives personal data, whether or not it is a third party. However, public authorities which may receive personal data in the context of a specific investigation in accordance with Union law or the law of a Member State are not considered as recipients; the processing of such data by the public authorities in question complies with the applicable data protection rules according to the purposes of the processing.
Third party: a natural or legal person, a public authority, a service or a body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Consent of the data subject: any free, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or by a clear positive act, that personal data concerning him or her may be processed.
Cookies: text files that may be stored in a dedicated space on the hard disk of your Terminal (PC, tablet, cell phone) when you consult websites using your Internet browser.
Terminal: hardware equipment such as a computer, tablet, smartphone and more generally any means of communication on which a customer or prospect has a browser enabling him or her to consult a website.
2. The data controller
Personal data collected on the website during browsing, registration, opening an account and placing orders are processed by THE HOUSE OF ABA, a simplified joint stock company with capital of €1,000, registered with the Nanterre Trade and Companies Register under no. 903 359 099, owner of the TAYSHABA brand, whose registered office is at 107 Boulevard Bineau 92200 NEUILLY SUR SEINE.
3. The personal data we collect
When opening an account, requesting information, or placing an order, you may be asked to provide us with information such as your first and last name, billing address, telephone number and e-mail address.
The purpose of processing the information you provide is to respond to your requests or orders. This information is therefore mandatory. Otherwise, we will not be able to process your request or order.
When you browse our site, we also collect personal data indirectly via cookies placed on your device. Please refer to paragraph 9 below on cookies.
4. Purposes and legal basis
The data collected is processed electronically, and the table below sets out the various purposes for which the data may be used and the legal bases on which they are based:
4. Purposes and legal basis
The data collected is processed electronically, and the table below sets out the various purposes for which the data may be used and the legal bases on which they are based:
|
Objectives |
Legal Base |
|
Information requests of Orders Customer relationship management (payment, delivery, etc.) |
Contract performance or pre-contractual measures |
|
Customer relationship management (service improvement) |
Legitimate interest (conducting our business) |
|
Sales prospecting, information and communication operations. Proposal of new products and services Event registration |
Legitimate interest (promotion of our activities) |
|
Claims management |
Legitimate interest (defending our rights and interests) |
|
Management of accounting and tax obligations |
Meeting our legal obligations |
|
Managing people's rights requests |
Meeting our legal obligations |
This table does not include data transmitted and/or collected via cookies. In this respect, please refer to paragraph 9 below on cookies.
5. Recipients of your personal data
We never share your personal data with other companies for commercial prospecting purposes.
Your personal data will only be processed by authorized departments within
THE HOUSE OF ABA.
We work closely with service providers who may have access to your personal data. These are the subcontractors we use for the purposes mentioned above.
We only provide them with the data they need to carry out their services or assignments, and they will only act in accordance with our instructions and will be contractually bound to ensure the same level of security and confidentiality of your data as we do and to comply with the applicable regulations on the protection of personal data.
Personal data may be disclosed to third parties in application of a law or regulation, or by virtue of a decision by a competent regulatory or judicial authority.
6. Transfers outside the European Economic Area
Data collected and processed in this context is hosted within the European Union.
We have recourse to partners or service providers located outside the European Economic Area, such as SHOPIFY, who may have access to personal data.
We first ensure that an adequate level of data protection is provided, such as an adequacy agreement from the European Commission. In the case of US companies, we contract the European Commission's standard contractual clauses.
7. How long we keep your personal data
The HOUSE OF ABA retains personal data only for as long as is necessary for the operations for which it was collected and in compliance with current regulations.
Personal data required for orders are kept for the entire duration of the contractual relationship, plus a period corresponding to the statutory limitation periods, taking into account any interruptions or suspensions of the applicable limitation periods.
Invoices are kept for 10 years from the end of the financial year.
The personal data of prospective customers is kept for a period of 3 years from the last contact with THE HOUSE OF ABA.
Personal data concerning the management of the exercise of rights is kept for a period of 5 years from the end of the procedure linked to your request.
As an exception to the preceding paragraphs, in the event of a claim or dispute, all or some of your data may be retained for a longer period if it is useful in defending our rights.
At the end of the above periods, your personal data will either be deleted or made anonymous.
8. Your rights to your personal data
You have, under the conditions defined in Articles 15 et seq. of the RGPD, with certain exceptions:
- a right of access enabling you to obtain confirmation that personal data concerning you are or are not being processed and, where they are, access to said personal data as well as to several pieces of information about our processing operations (Article 15 of the RGPD) ;
- the right to rectification of inaccurate or incomplete personal data (article 16 of the RGPD).
- the right to obtain the deletion, in certain cases, of personal data concerning you (article 17 of the RGPD).
- the right to obtain the limitation of processing in certain cases (article 18 of the RGPD).
- the right to portability, enabling you to receive the personal data you have provided us with, in a structured, commonly used and machine-readable format, and/or to ask us to transmit this data to another data controller, where the processing is based on consent or contract and the processing is carried out using automated processes (Article 20 of the RGPD).
- a right to object on grounds relating to your particular situation where the exercise of this right is based on legitimate grounds (Article 21.1 of the RGPD) and a right to object to commercial prospecting (Article 21.2 of the RGPD).
- a right to withdraw your consent when processing is based on consent, and this without affecting the lawfulness of the processing carried out prior to such withdrawal.
In compliance with the conditions laid down by the regulations, you can exercise your rights by sending us an e-mail eshop@tayshaba.com or by writing to us at the following address:
THE HOUSE OF ABA / TAYSHABA 107 Boulevard Bineau 92200 NEUILLY SUR SEINE
We also inform you that you have the right to lodge a complaint with the competent supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL) https://www.cnil.fr
9. Cookie policy
We use various cookies on our site to measure the audience and integrate services to improve its interactivity.
A cookie is a small piece of information, identified by a name, which may be sent to your browser by a website to which you connect. Your web browser will store it for a certain period of time and send it back to the web server each time you reconnect.
Two types of cookies are deposited on our site:
1°) Cookies not requiring consent: these are cookies that are strictly necessary for the operation of our website. These cookies enable our site's main services to function optimally and securely.
2°) Cookies subject to consent:
- Site analysis cookies: Shopify Analytics cookies used to track the use and performance of our site and improve its operation (for example, the pages that are most frequently consulted),
- Third-party cookies to enhance site interactivity : these include YouTube for video hosting. These third parties will also collect and use your browsing data on their own behalf to offer targeted advertising and content based on your browsing history. For more information, we encourage you to consult their privacy policies.
- Cookies to remember your preferences on the site.
- Cookies for marketing communications.
The default setting is to refuse these cookies. You can give your consent for these cookies to be deposited in our cookie manager.
10. Security of your information
We take appropriate measures to ensure that your personal data is protected against unauthorized access, modification, disclosure, loss, or destruction.
To this end, we implement appropriate technical and organizational measures, taking into account the nature of the data and the risks involved in processing it, to preserve the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged or accessed by unauthorized third parties.
When we use service providers or subcontractors, we ensure that appropriate protection measures are in place.
11. Revision and updating of the Privacy Policy
This Privacy Policy is updated regularly to reflect changes in legislation and case law, our data collection and use practices, the features of our Services or our website and technological advances.
THE HOUSE OF ABA will post any changes to the Privacy Policy on its website and will provide notice to its customers in accordance with applicable legal requirements.
If you have any questions about our Privacy Policy, you can contact us at eshop@tayshaba.com or by writing to us at THE HOUSE OF ABA, 107 Boulevard Bineau 92200 NEUILLY SUR SEINE, FRANCE.