PRIVACY POLICY

Last updated: 07/02/2024.

On this page, we will talk about “ personal data ” and explain why and how your data is processed.

Definitions :
Personal data : Any information that directly or indirectly identifies a natural person.
Example : Name, first name, date of birth, photo, telephone number.
Data processing : Any operation involving personal data.
Example : Direct data collection or recording.
The publisher : The company publishing online public communication services.
Data controller : Refers to the person who determines the purposes and means of processing, i.e. the objective pursued by the processing.

Here the data controller is :
Freelance.
RCS number: 888 395 365 RCS Paris.
Head office: 50 Avenue des Champs-Elysées - 75008 Paris.
Email: contact@fashionmiamidoll.com.

Hereinafter referred to as the “ Publisher ”, “ We ”.

Publication director :
User : Any person connecting to or using the site.

Hereinafter referred to as the “ User ”, “ You ”.

The “site” designates all the pages of the publisher’s website accessible via the link www.fashionmiamidoll.com .

Processing of your personal data :
The publisher ensures that the user collects and processes personal information while respecting privacy in accordance with Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms.

Below,

We tell you what data We collect and in what way
objective (purpose). We also explain to you the basis on which we base this (legal basis) and finally we tell you the duration for which we keep your data.

When ?
Personal data is collected during :
- Placing an order.
- Creation/modification of customer account or user space.
- Payment of an order.
- Navigation on the Site and use of services.
- Request for information or to be contacted.
- Download free content.
- Interaction (comment, opinion).

What ?
The data that can be collected are :
- Identity data (surname, first name, address, title).
- Contact data (address, telephone number, email address).
- Technical data (connection data, navigation data, IP, login, etc.).
- Financial data (data relating to invoicing).
- Commercial data (purchase history, customer number, etc.).
Bank card data is not stored, it is directly communicated in secure mode to the payment service provider.

Why and for how long?
Data processing always serves a specific purpose and is always based on a legal basis. In addition, the data collected is limited to what is relevant and adequate with regard to the purposes for which it is processed. Some information is mandatory and will be marked with an asterisk.

Data processing based on a contractual or pre-contractual basis
meet the following purposes :
- Management and monitoring of the commercial relationship (record and execute orders).
- Process requests (contact form, request for information, complaints, etc.).
- Collection of unpaid debts.

This data is kept for the entire duration of the contract (plus) the duration of legal requirements which is 5 years in civil and commercial matters. Concerning the management of unpaid debts, the duration is 5 years from the end of the recovery procedure.

Data processing based on the legal basis of the legitimate interest of the publisher meets the following purposes :
- Marketing analysis (data kept for a maximum of 3 years after the end of the commercial relationship).
- Analysis of commercial statistics (data kept for a maximum of 3 years after the end of the commercial relationship).
- Improve the user experience on the Site by using cookies (data kept for a maximum of 13 months from collection).
- Prevent abuse and fraud and manage disputes (data kept for the duration of the procedure).

Data processing based on your consent (legal basis) serves the following purposes :
- Newsletter and/or commercial offer (data kept until You unsubscribe or 3 years from the last contact).
- Cookies for which consent is required (data kept for a maximum of 13 months).

Data processing based on a legal obligation (legal basis) serves the following purposes :
- Management of invoicing and accounting.

This data is kept for 10 years.

Data security :
Personal data is stored in secure conditions, in compliance with the provisions of the general data protection regulations and the national legislation in force. We take appropriate technical and organizational measures to prevent unauthorized access or modification, disclosure, loss or destruction of your data.

It is important that you maintain the confidentiality of your identifiers in order to prevent illegal use of your account.

Data transfer :
We do not sell your personal data to any third party. However, personal data may be shared with third party companies in the following cases :
- Payment service provider (contractual basis).
- Billing service (contractual basis).
- Transport provider (contractual basis).

Only the data strictly necessary for the execution of the service entrusted to them will be communicated to them. Depending on the location of the subcontractors, data may be transferred outside the EU. Indeed, data may be transferred to service providers established in the United States, as part of the provision of IT services. The latter have adhered to the EU-US Privacy Shield and ensure an adequate level of data protection (Decision (EU) 2016/1250 of 12-7-2016).

Exceptionally, We may, as part of a collaboration with a commercial partner, transmit your data to them, only if You consent to this transmission.

Your rights :
In accordance with the regulations applicable to personal data, you have the following rights :
- You can update or delete the data that concerns you.
- You can exercise your right of access to know the personal data concerning you that we process.
In this case, before implementing this right, we may ask you for proof of your identity in order to verify its accuracy :
- If the personal data we hold is inaccurate, you can request that the information be updated.
- You can request the deletion of your personal data, in accordance with applicable data protection laws.
- You can define directives relating to the fate of your personal data after your death in application of article 32 of the law of January 6, 1978.
- You have the right to request that the processing of your personal data be restricted. Thus, your data can only be kept and no longer used.
- You also have a right to portability and a right to limit the processing of your data (consult the site www.cnil.fr for more information on your rights).

If you no longer wish to receive advertising from us (exercise of the right to object or withdrawal of consent already given), contact us at the following address: contact@fashionmiamidoll.com.

To exercise these rights or for any questions about the processing of your data in this system, you can contact us:
- Electronically : contact@fashionmiamidoll.com.
- By postal mail : 50 Avenue des Champs-Elysées - 75008 Paris.

If you believe, after contacting us, that your rights are not respected, you can send a complaint online to the CNIL .