DATA PROTECTION
RESPONSIBLE FOR DATA PROCESSING
Individual business DECO GALLERY / website: GALERIEDECO.COM
Palandri Ghislaine
Residence Vittori
20600 Bastia, France
Thank you for your interest in our online store. Protecting your privacy is very important to us. In the following we will inform you in detail about how we handle your data.
1. ACCESS DATA AND ACCOMMODATION
You can visit our website without giving any personal information. Whenever a web page is called up, the web server automatically saves only a server log file, which contains for example the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the access provider (access data) and documents the call. These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. Such data processing is necessary for the purposes of the legitimate interests pursued by the data controller in accordance with Article 6, point f) of paragraph 1 of the GDPR. All access data will be deleted no later than seven days after the end of your visit to the website.
Accommodation
The hosting and viewing services of the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise specified in this data protection declaration, all access data and all data collected in the forms provided on this site are processed on their servers. If you have any questions about our service providers and on the basis of our cooperation with them, please contact us as provided by our website.
2. PROCESSING OF PERSONAL DATA FOR THE EXECUTION OF CONTRACTS, ESTABLISHING CONTACT AND OPENING A CUSTOMER ACCOUNT
We collect personal data if you voluntarily provide it to us as part of your order or when you contact us (for example using the contact form or email). Mandatory fields are marked as such. We need this data to process the purchase contract (see our GTC) or to process any request from you. We cannot process and ship your order without this data. The data collected is visible on the respective input forms. We use the data you provide to process contracts and to process your inquiries in accordance with Art.6 (b) lit.1 GDPR.
Insofar as you have given your consent in accordance with Art.6 letter a) GDPR when deciding to open a customer account, we will only use your data for this purpose. You can find further information on the processing of your data, in particular the transfer to our service providers for the purposes of order processing, payment and shipping, in the following sections of this data protection declaration. . After complete processing of the contract or deletion of your customer account, your data will be limited for further processing and after the expiration of the retention periods under tax and commercial law in accordance with Article 6, point c) of paragraph 1 of the GDPR, unless you expressly consent to a further use of your data in accordance with Article 6, point a) of paragraph 1 of the GDPR or we reserve the right to use data at - beyond what is permitted by law and of which we will inform you in this statement. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this data protection declaration, or by using the contact form available from your customer account.
3. PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF SHIPPING AND DELIVERY
In order to fulfill the contract and in accordance with Art.6 (b) lit.1 GDPR, we pass on your data to the shipping service provider responsible for the delivery, insofar as this is necessary for the delivery. of the ordered goods.
Transfer of data to shipping service providers for shipment notification purposes
If you have given us your express consent during or after your order, in accordance with Art.6 (a) GDPR paragraph 1, we will pass on your e-mail address and telephone number to the service provider. selected shipment so that they can contact you prior to delivery for notification or delivery coordination purposes.
The consent can be revoked at any time by sending a message to the contact option described in this data protection declaration or directly to the e-mail address galeriedco@gmail.com . After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this statement.
4. PROCESSING OF PERSONAL DATA FOR THE EXECUTION OF PAYMENTS
When processing payments in our online store, we work with partners: technical service providers, credit institutions, payment service providers.
4.1 Data processing for transaction processing
Depending on the payment method chosen, we send the data necessary for processing the payment transaction to our technical service providers who work for us as part of the processing of orders, or to authorized credit institutions or to the payment service provider. selected, insofar as this is necessary to process the payment. This serves to fulfill the contract in accordance with Art.6 lit. b) lit.1 GDPR. In some cases, payment service providers collect the data necessary to process the payment themselves, for example on your own website or through a technical integration into the ordering process. The data protection declaration of the respective payment service provider applies in this regard.
If you have any questions about our payment processing partners and on the basis of our cooperation with them, please use the contact option described in this data protection declaration.
4.2 Data processing for fraud prevention and optimization of our payment processes
If necessary, we provide our service providers with additional data, which they use together with the data necessary for the processing of the payment as contractual processors for the purposes of fraud prevention and optimizing our payment processes. (eg invoicing, processing disputed payments, supporting accounting). This data transfer is carried out in accordance with article 6, point f) of paragraph 1 of the GDPR to protect our essentially legitimate interests in terms of fraud protection and efficient payment management.
5. COOKIES AND OTHER TECHNOLOGIES
General informations
In order to make the visit to our website attractive and to enable the use of certain functions, we use technologies which include cookies on various pages. Cookies are small text files that are automatically saved on your device (computer, tablet or phone). Some of the cookies we use are deleted again at the end of the browser session, i.e. after closing your browser (called session cookies). Other cookies remain on your terminal and allow us to recognize your browser on your next visit (persistent cookies).
We use technologies which are absolutely necessary for the use of certain functions of our website (for example, the shopping cart function). These technologies collect and process the IP address, time of visit, device and browser information, and information about your use of our website (for example, information about shopping cart contents). This primarily serves legitimate interests in an optimized presentation of our offer in accordance with Art.6 lit.f) lit.1 GDPR.
Your browser's cookie management settings internet can be changed. These settings can be found in the "Preferences" section of the various browsers:
Microsoft Edge ™
https://support.microsoft.com/fr-fr/topic/supprimer-et-gérer-les-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Safari ™
https://support.apple.com/fr-fr/guide/safari/sfri35610/14.0/mac/11.0
Chrome ™
https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en
Firefox ™
https://support.mozilla.org/fr/products/firefox/protect-your-privacy/cookies
Opera ™
https://help.opera.com/en/latest/web-preferences/
6. Social Media
Our online presence on Facebook, Twitter, Instagram, Youtube, Pinterest, LinkedIn
Insofar as you have given your consent in accordance with Art.6 letter a) GDPR to the respective social media operator, when you visit our online presence on the social media mentioned above above, your data is automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These can be used to, for example, place advertisements inside and outside platforms that are likely to match your interests. Cookies are generally used for advertising targeting purposes. Detailed information on the processing and use of data by the respective social media operator as well as a contact option and your related rights and setting options to protect your privacy can be found in the data protection information from the providers linked below. If you still need help in this regard, you can contact us.
Facebook is an offer of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland") The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually sent to a Facebook server, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA and stored there. There is no European Commission adequacy decision for the United States. Our cooperation is based on the standard data protection clauses of the European Commission. The processing of data when visiting a Facebook fan page is based on an agreement between the jointly responsible parties in accordance with Art.26 GDPR. You can find more information (information on Insights data) on the following page:
https://www.facebook.com/policies/cookies/
Twitter is a service provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”). Information automatically collected by Twitter about your use of our online presence on Twitter is usually transferred to a server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and stored there. There is no European Commission adequacy decision for the United States. Our cooperation is based on the standard data protection clauses of the European Commission. For more information, see the following page:
https://help.twitter.com/fr/rules-and-policies/twitter-cookies
Instagram is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). Information automatically collected by Facebook Ireland about your use of our online presence on Instagram is usually sent to and stored there to a Facebook, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA server. There is no European Commission adequacy decision for the United States. Our cooperation is based on the standard data protection clauses of the European Commission. The processing of data when visiting an Instagram fan page is based on an agreement between the jointly responsible parties in accordance with Article 26 of the GDPR. You can find more information (information on Insights data) here:
https://www.facebook.com/help/instagram/1896641480634370
YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information automatically collected by Google about your use of our online presence on YouTube is usually transferred to a server operated by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. There is no European Commission adequacy decision for the United States. Our cooperation is based on the standard data protection clauses of the European Commission. See the next page for more information:
https://policies.google.com/technologies/cookies?hl=fr
Pinterest is an offer of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). Information automatically collected by Pinterest about your use of our online presence on Pinterest is usually transmitted to a server at Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA and stored there. There is no European Commission adequacy decision for the United States. Our cooperation is based on the standard data protection clauses of the European Commission. See the next page for more information:
https://policy.pinterest.com/fr/cookies
LinkdeIn is the social network of the company LinkedIn Corporation domiciled at 1000 W. Maude Avenue - Sunnyvale, CA 94085 - United States. The use made of your data collected on LinkedIn is explained on the following page: https://fr.linkedin.com/legal/privacy-policy ?.
See the next page for more information:
https://fr.linkedin.com/legal/cookie-policy
7. CONTACT OPTIONS AND YOUR RIGHTS
As a data subject, you have the following rights:
* In accordance with Article 15 of the GDPR, the right to request information about your personal data processed by us to the extent specified therein;
* In accordance with Article 16 of the GDPR, the right to immediately request the correction of incorrect or incomplete personal data that we have stored;
* In accordance with Article 17 of the GDPR, you have the right to request the deletion of your personal data that we store, unless further processing
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation;
- for reasons of public interest;
- for the establishment, exercise or defense of legal claims;
* In accordance with article 18 of the RGPD, the right to request the limitation of the processing of your personal data, insofar as
- you dispute the accuracy of the data;
- the processing is illegal, but you refuse to delete it;
- we no longer need the data, but you need it to assert, exercise or defend legal claims or
- you have objected to processing in accordance with Article 21 of the GDPR;
* In accordance with Article 20 of the GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible person;
* In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our head office.
If you have any questions about the collection, processing or use of your personal data, the information, the correction, restriction or deletion of the data as well as the revocation of the consent granted or the opposition to a specific use of the data , please contact us directly using the contact details in our legal notice.
Right of opposition
If we process personal data as explained above in order to safeguard our legitimate interests, which predominate in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right of objection if there are reasons that arise from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms, or if the processing requires the The assertion, exercise or defense of Serve legal claims.
This does not apply if the processing is carried out for direct marketing purposes. Then we will no longer process your personal data for this purpose.