Privacy policy
Inda Atelier (as mentioned in article 1 below), proposes to the sale clothes, accessories and house’s furniture on its website https://www.atelierinda.com .
In order to offer for sale and deliver its products, Inda Atelier collects personal data from users of its website.
The purpose of this privacy policy is to inform users of the means used to collect, consult, process and store users’ personal data.
Inda Atelier, as the controller, undertakes to comply with the provisions of (EU) Regulation No. 2016/679 of 2016 April 26 on the protection of personal data.
The customer is informed that some data must be collected by Inda Atelier in order to perform its services. If the customer does not wish to communicate these data, Inda Atelier will not be able to perform its services.
The present privacy policy can be modified at any time by Inda Atelier, to be able to conform to all regulatory, jurisprudential, editorial or technical evolutions. The user must refer before any navigation to the last version of the Policy.
1. The Data Controller
The person in charge of processing, who collects the personal data and implements the data processing is :
Inda Atelier, self-employed company, registered in the register of companies under the number 42.130.237.3-907.000
2. Personal datas collecting
Inda Atelier is led to collect users personal data on the Internet site https://www.atelierinda.com.
The personal data likely to be collected are the following:
– User’s account data: the data that the User fills in when creating an account by filling in the registration form (first name, last name, billing and delivery addresses, email address, cell phone number, password for the connection to the customer account);
– User’s personal data when he/she registers them in his/her customer account: date of birth, size of clothes and shoes;
– Transaction data: refers to the data that the user provides when making purchases information related to orders and returns such as phone number, address, email address and payment information;
– exchanges made with the customer service;
– data related to navigation: refers to the data that the Editor collects during the User’s navigation on the Site such as the date, the time of the connection and/or navigation, the type of browser, the language of the browser, its IP address, location data and geolocation.
Data relating to payment methods (credit card number, expiration date, authorization number, security code) are collected directly by our service providers Shopify Payment, Apple Pay and Paypal.
The networks on which we publish editorial and promotional content (such as Facebook and Instagram) may also use automated means, linked to centers of interest and context, to collect user data (interactions with functions and profiling of online activity). This data is collected directly by these providers and/or third parties and is subject to their policies. To the extent permitted by applicable law, Inda Atelier is not responsible for the practices of these providers and third parties.
Some services may be altered or inaccessible in the absence of consent to the collection of the data mentioned in this Privacy Policy.
3. Purposes of collecting personal data
The Data collected in the course of using the site is processed for the purposes described in the table below.
The regulations in force protect the privacy of users and require any person responsible for processing to be able to justify a legitimate basis for said processing. The regulation thus provides among the legal bases for processing :
– the performance of a contract to which the data subject is a party, such as a sales contract. Thus, some of the customer’s personal data are necessary to deliver the goods, manage the customer account and make returns;
– the respect of a legal obligation, in particular accounting by the conservation of invoices;
– the prior consent of the person concerned;
– the legitimate interest of the data controller, with respect to the rights and freedoms of users. For example, improving the customer experience or preventing fraud may justify data collection.
| Purposes of the processing | Data use | Legal basis of the processing |
|---|---|---|
| Order’s managements, product’s sales and service’s provisions; complaint’s managements, withdrawals and product returns | Use of data to provide products and services (from shopping cart and orders; sale, return and refund of purchased products) | Contract’s execution concluded between the client and the professional |
| Processing transactions, especially payment transactions | Our payment service providers (Stripe and Paypal) use the information relating to the means of payment during the payment of each order. These data can also be used for fraud prevention during the payment of the order and/or management of unpaid orders. | Contract’s execution concluded between the client and the professional |
| Customer account creation and management | Customer’s personal data registered on the website are used (email address, password) | Contract’s execution concluded between the client and the professional – Respecting a legal obligation |
| Deliveries of ordered products | Personal data (contact information, email address) are used to ensure deliveries | Contract’s execution concluded between the client and the professional |
| Manage the website and fight against fraud | Personal data (cookies) to update and enrich our Website and to fight against internet fraud. | |
| Personal data is used to interact with customers. As such, exchanges between the customer service and the customer made by phone or email may be recorded to improve the quality of service. The customer may object to this at any time | Contract’s execution concluded between the client and the professional | |
| Participation in special events (such as contests, games, sweepstakes, offers) and participation in the loyalty program excluding online gambling subject to approval by the French Gaming Regulatory Authority | Personal data is used, including purchase information, to administer participation in various special events, as well as the loyalty program. | – Contract’s execution concluded between the client and the professional
(Game rules) |
| To operate, evaluate and improve products and services and the user experience (including developing new products and services, analyzing the customer base; performing data analysis, accounting and auditing), profiling | The personal data are used to evaluate and improve the products and services, and for the improvement of the customer experience, products and services offered by Inda Atelier, by operations of statistics and analysis of the anonymized customer behaviors, and measure of frequentation of the website. | The legitimate interest of the data controller to offer products and services tailored to the needs of customers |
| Send newsletters and privileged offers provided that the user checks the box expressing his acceptance, provided for this purpose, when registering for the Services | Personal data is used to inform customers about our products and services and to personalize the products offered on social networks. | The legitimate interest of the data controller to offer products and services tailored to the needs of customers |
| Do the obligations arising from any contracts or agreements between Inda Atelier and its customers | Personal data is used to inform customers about our products and services and to personalize the products offered on social networks. | The legitimate interest of the data controller to offer products and services tailored to the needs of customers and consent (check box) |
| To analyze visits to the website and their frequency, audience measurements, studies, statistics, surveys (cookies) and improve the user experience on the website and mobile application | Personal data, including cookies, are collected to understand the use of the Website and the mobile application | The legitimate interest of the data controller to offer products and services tailored to the needs of customers |
Inda Atelier does not share any personal data for commercial purposes with third parties.
The user has the faculty to modify his personal data and to withdraw his consent at any time by connecting on his customer account.
4. Service providers with access to users’ personal data
The personal data collected are transmitted to the service providers of Inda Atelier, which can operate a treatment for the account of Inda Atelier (subcontractors) and/or their own account (recipients of the data).
The recipients of the data are:
– Shopify Pyament, Apple Pay and Paypal, payment providers
– any police or administrative authority within the framework of legal requests concerning the fight against fraud
– the services and providers of customs in the event of delivery abroad.
The subcontractors of Inda Atelier can have to reach the collected data for :
– the preparation, the orders shipping and the return of the products
– the improvement of the contents of the site
– technical maintenance and development of the Inda Atelier website, including entities that execute orders and provide web hosting, information storage, email service providers, as well as analytics and tag management services such as Google Analytics.
For more details on these analytics services and how to opt-out, please visit the following sites – https://support.google.com/analytics/answer/6004245
– Google Analytics: https://support.google.com/analytics/answer/6004245?hl=fr
5. Users’ rights regarding their personal data
In accordance with Articles 14 to 22 of Regulation 2016/679 of 27 April 2016, any natural person using the Atelier Inda website has the right to exercise the following rights:
– A right of access, rectification and deletion of the data collected,
– A right of opposition to the treatment of its data
– A right to the limitation of the treatment,
– A right to the portability of collected data
– Can formulate directives relating to the conservation, the erasure and the communication of its personal data after its death in accordance with the article 40-1 of the law 78-17 of January 6, 1978
Finally, if Inda Atelier detects a violation of personal data likely to generate a high risk for the rights and freedoms of its users, it undertakes to inform the users concerned as soon as possible.
The user can exert the whole of these rights by connecting himself in his space customer, by contacting the customer service to hi@atelierinda.com .
The user will have to join to his request a proof of identity.
In case of no response or unsatisfactory response, the user may refer to the supervisory authority of his country of residence, for France, the CNIL: https://www.cnil.fr/
6. Duration of data retention
User data will not be kept beyond the period strictly necessary for the purposes stated herein and in accordance with the applicable laws and regulations. In this regard, data used for prospecting purposes may be retained for a maximum of 3 years from the closing of the user’s account or the last contact of the prospect concerned. The user’s data is deleted when the retention periods expire. Nevertheless, the data may be archived beyond the periods provided for the needs of research, the establishment, and the prosecution of criminal offenses for the sole purpose of allowing, as necessary, the provision of these data to the judicial authority.
Archiving implies that these data will be made anonymous and will no longer be available for consultation online but will be extracted and stored on an autonomous and secure medium.
7. Security measures for personal data collected
As the person in charge of the treatment, Inda Atelier commits itself to take all the useful precautions in order to preserve the safety and the confidentiality of the data and in particular, to prevent that they are not altered, deformed or that unauthorized third parties have access to them.
Inda Atelier has concluded service contracts with partners having a certain expertise in the field of data protection.
All data is hosted in France or in the European Union.
Payment providers
The payment of purchases on the website is made either via Paypal, Apple Pay or via the secure platform of our payment provider Shopify Payment (via Stripe).
Paypal (Europe) S.à.r.l. et Cie, is a Luxembourg limited partnership with shares, registered with the Luxembourg Trade and Companies Register under number B118349, whose registered office is located at 22-24, Boulevard Royal – L-2449 Luxembourg. For any information, the Customer can consult the following website
https://www.paypal.com.
Stripe. For any information, the Customer can consult the following website: https://stripe.com/fr
Inda Atelier does not have access to the payment data of the customers.
However, the user can choose to save his payment card data in his customer account. These data are not stored at Inda Atelier, but at Stripe and/or Paypal. The user can at any time modify or delete these banking data by connecting on his customer account.
8. Cookies, TAGS and tracers
When browsing our website, information relating to the navigation of the user’s terminal (computer, tablet, smartphone, etc.) may be recorded through files called “Cookies”.
The cookie makes it possible to carry out a follow-up of navigation or an analysis of the behavior of the user, and in particular:
– to measure the frequentation of our website and our application, as well as their content;
– to save information relating to the customer account when the user is connected to it;
– to save the shopping cart for 30 minutes;
– customize the display of content available to the user.
The user can modify his preferences in terms of cookies, through the navigation software used:
The user can modify his preferences in terms of cookies, through the navigation software used:
– Safari: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
– Chrome: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,
– Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,
– Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies ,
– iOS: https://support.apple.com/fr-fr/HT201265
The user can also oppose the deposit of cookies by the website http://www.youronlinechoices.com/fr/controler-ses-cookies/.
9. Social networks
The official Facebook and Instagram accounts of Inda Atelier may allow users to post their content. The user is informed that the contents published on these social networks can be seen any third party, and that an increased vigilance is required from the users when they provide certain personal data on these sites as financial data, address or any sensitive data. Inda Atelier is in no way responsible for any damage caused by third parties due to or resulting from the publication of their personal data by the users.
10. Links towards third sites
The website can provide links to sites, applications and services other than those of Inda Atelier which can be operated by third companies.
Inda Atelier is not responsible for the treatment of the personal data by these third sites. The user will have to consult the policies of protection of the personal data.
11. The delegate for the protection of the data
The data protection officer or personal data manager of Inda Atelier ensures compliance with the regulations and rules in force, and must in particular establish a register of personal data processing activities.
The user can contact the data protection officer or personal data manager of Inda Atelier at hi@atelierinda.com.