Privacy policy
This privacy policy applies to the site: www.cozip.fr, which may collect user data. The purpose of this privacy policy is to expose users of the site to:
- How their personal data is collected and processed. All data likely to identify a user must be considered as personal data:
- What rights do users have regarding this data;
- Who is responsible for the processing of personal data collected and processed;
- To whom this data is transmitted;
- Possibly, the policy of the site in terms of files «cookies».
Article 2 – GENERAL PRINCIPLES OF DATA COLLECTION AND PROCESSING
In accordance with the provisions of Article 5 of the European Regulation 2016/679, the collection and processing of data of users of the site respect the following principles:
- Lawfulness, loyalty and transparency: data can only be collected and processed with the consent of the user who owns the data. Each time personal data is collected, it will be indicated to the user that his data is collected, and for what reasons his data is collected;
- Limited purposes: the collection and processing of data is carried out to meet one or more objectives determined in these general conditions of use;
- Minimisation of data collection and processing: only data necessary for the proper performance of the objectives pursued by the site are collected;
- Data retention reduced in time: the data is kept for a limited time, of which the user is informed;
- Integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
In order to be lawful, in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the following conditions listed:
- The user has expressly consented to the processing;
- Processing is necessary for the proper performance of a contract
Article 3 – PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF BROWSING THE SITE
The data controller will keep in its computer systems of the site and under reasonable conditions of security all the data collected for a maximum period of 1 year, for simple visits.
3.1 – PERSONAL DATA COLLECTED AND PROCESSED
The personal data collected on www.cozip.fr are as follows:
- Connection data (e.g. IP addresses, logs, login credentials, timestamp information, etc.)
- Information about the use of the site: number of orders, time spent, items viewed.
3.2 – HOW PERSONAL DATA IS COLLECTED
This data is collected when the user performs one of the following operations on the website:
- Registration on the website;
- Navigation on the website;
- Purchase of a good/service on the website;
- Consultation of an information article;
- Sign up for a newsletter.
Article 4 – PURPOSE OF PROCESSING PERSONAL DATA
The collection and processing of data is in particular for the following purposes: personalization of content on the web, newsletters and applications. And more generally all activities related to the sale of services or products in connection with the information presented on the website.
Article 5 – DATA HOSTING
www.cozip.fr is hosted by Shopify International Ltd.
Attn: Data Protection Officer
c/o Intertrust Ireland
2nd Floor 1-2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland
Article 6 – DATA CONTROLLER AND DATA PROTECTION OFFICER
6.1 – THE DATA CONTROLLER
The data controller is: COZIP represented by its legal representative Ingrid PERELLE.
6.2 – OBLIGATIONS OF THE DATA CONTROLLER
The controller undertakes to protect the personal data collected, not to transmit them to third parties without the user having been informed and to respect the purposes for which such data were collected.
In addition, the data controller undertakes to notify the user in the event of rectification or deletion of the data, unless this entails for him disproportionate formalities, costs and steps.
In the event that the integrity, confidentiality or security of the user’s personal data is compromised, the controller undertakes to inform the user by any means.
Article 7 – USER RIGHTS
In accordance with the regulations concerning the processing of personal data, the user has the rights listed below.
In order for the data controller to comply with his request, the user is required to communicate to him: his first and last name as well as his e-mail address, and if relevant, his telephone number.
The data controller is obliged to respond to the user within 30 (thirty) days maximum.
7.1 – PRESENTATION OF THE USER’S RIGHTS REGARDING DATA COLLECTION AND PROCESSING
1. Right of access, rectification and right to erasure
The user may become aware of, update, modify or request the deletion of data concerning him, respecting the following procedure:
The user must send an email to the controller of personal data, specifying the subject of his request and using the contact email address that is provided above
If they have one, the user has the right to request the deletion of their personal space by following the following procedure:
The user must send an email to the controller of personal data, specifying his personal space number. The data deletion request will be processed within 30 working days.
2. Right to data portability
The user has the right to request the portability of his personal data, held by the site, to another site, following the procedure below:
The user must make a request for the portability of his personal data to the data controller, by sending an email to the address provided above.
3. Right to restriction and objection of data processing
The user has the right to request the limitation or to oppose the processing of his data by the site, without the site can not refuse, except to demonstrate the existence of legitimate and compelling reasons, may prevail over the interests and rights and freedoms of the user.
In order to request the restriction of the processing of his data or to object to the processing of his data, the user must follow the following procedure:
The user must make a request to limit the processing of his personal data to the data controller by sending an email to the address provided above.
4. Right not to be the subject of a decision based solely on an automated process
In accordance with the provisions of Regulation 2016/679, the user has the right not to be the subject of a decision based exclusively on an automated process if the decision produces legal effects concerning him, or significantly affects him in a similar way.
5. Right to determine the fate of data after death
The user is reminded that he can organize what should be the fate of his collected and processed data if he dies, in accordance with the law n°2016-1321 of 7 October 2016.
6. Right to refer to the competent supervisory authority
In the event that the data controller decides not to respond to the user’s request, and that the user wishes to challenge this decision, or, if he thinks that it is infringed on any of the rights listed above, he is entitled to contact the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.
Article 8 – PERSONAL DATA OF MINORS
In accordance with the provisions of Article 8 of European Regulation 2016/679 and the Data Protection Act, only minors aged 15 years or more may consent to the processing of their personal data.
If the user is a minor under the age of 15, the consent of a legal representative will be required so that personal data can be collected and processed.
The website publisher reserves the right to verify by any means that the user is over 15 years old, or that he will have obtained the consent of a legal representative before browsing the website.
Article 9 – CONDITIONS FOR AMENDING THE PRIVACY POLICY
This privacy policy can be viewed at any time on the website.
The publisher of the site reserves the right to modify it to ensure its compliance with the law in force.
Therefore, the user is invited to regularly consult this privacy policy in order to stay informed of the latest changes that will be made.
Article 10 – USER ACCEPTANCE OF THE PRIVACY POLICY
By browsing the site, the user certifies that he has read and understood this privacy policy and accepts its conditions, particularly with regard to the collection and processing of his personal data.
