Privacy policy

The Policy

This privacy policy concerns this website www.valoisvarden.com (the "Website") and is provided by Maison Valois Varden, 5 rue de la Bigorre, 31820 Pibrac, acting as the data controller ("we" / "our"), and governs the privacy of its users who choose to use it ("Users" or "you"). It explains how we process your personal data, in accordance with data protection regulations, including the GDPR (General Data Protection Regulation), the French Data Protection Act No. 78-17 of January 6, 1978, and the PECR (Privacy and Electronic Communications Regulations).

This policy will explain the areas of this website that may affect your privacy and personal information, how we process, collect, manage, and store that information, and how your rights under the GDPR, DPA, and PECR are respected.

This policy contains terms that have specific meanings (e.g., recipient, personal data, data subject, processing, data controller, processor). For a better understanding, you can read their definitions in Article 4 of the GDPR.

If you have any questions regarding this privacy policy or the processing of your personal data, you can send them to the address above or by email to:

 

1. Purposes and Legal Bases for Processing Personal Data

We may collect and use users' personal data for the following purposes:

• To improve customer service: The information you provide helps us respond more effectively to customer service requests and support needs (including our after-sales service). This processing is based on the performance of our contract with you (when responding to your inquiries) or our legitimate interest in improving our products/services.

• To personalize the user experience: We may use information to understand how our users as a group use the services and resources provided on our website. This process is based on our legitimate interest in understanding our customers to improve our products/services or, where applicable, your consent (e.g., for placing cookies).

• To manage our website: We may use the feedback you provide to improve our products and services. This process is based on our legitimate interest in understanding our customers to improve our products/services. We may also analyze its traffic and optimize the user experience. This process is based on our legitimate interest in improving our website or, where applicable, your consent.

• To process orders and payments: We may use the information provided by users about themselves when placing an order solely to provide the service related to that order. This process is based on the performance of our contract with you.

• To manage accounts and wishlists: You may wish to open an account on the website to facilitate orders and manage your product wishlist. We may use your wishlist to produce internal reports to improve our products/services. This process is based on the performance of our contract with you (account management) and our legitimate interest in improving our products/services (internal reports).

• To enable you to share certain content on social media: Our website may include social sharing buttons, which allow web content to be shared directly from web pages to the respective social media platforms. You use social sharing buttons at your own discretion and accept that this may publish content on your social media feed or profile page. This process is based on your consent. For this process, we may act as joint controllers with the social networks for certain processing activities (only collection and transmission). You can find more information on how they process your personal data in their privacy policies, e.g.:

  • Facebook
  • Tiktok
  • Instagram

• To manage our accounting: We need to keep some of your personal data to fulfill our tax and accounting obligations. This process is based on a legal obligation to which we are subject.

• To manage your potential requests to exercise your rights over your personal data: As indicated below, you have certain rights over your personal data. To exercise them, you will need to provide us with information that we will process. This process is based on a legal obligation to which we are subject.

• To display advertising when you visit some of our business partners, such as social networks: When you visit the websites of our business partners, we may ask them to display advertisements to you. This process is based on your consent.

• To send periodic emails: We may use the email address to send user information and updates related to their order. Your email address is also used for:

  • Responding to their inquiries, questions, or other requests.
  • Sending newsletters with exclusive updates on exhibitions, events, artworks, our products/services, and more.

  We operate an email newsletter program, used to inform subscribers about products, services, and/or news we supply/publish. Users can subscribe through an online automated process where they have given their explicit permission. Subscribers can unsubscribe from one or all subscriptions at any time via an automated online service, or, if unavailable, by other means detailed in the footer of marketing messages sent. The type and content of marketing messages subscribers receive, and whether they may contain third-party content, are clearly indicated at the time of subscription.

  Email marketing messages may contain tracking beacons/clickable links or similar server technologies to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of subscriber data relating to commitment, geography, demographics, and already stored subscriber data.

  This process is based on your consent (for newsletters or promotional information if you are not yet a customer), our contract with you (to send information related to your order), or our legitimate interest in communicating with you (to respond to your various inquiries, questions, and/or requests or to send you promotional information if you are a customer).

• Implementing our anti-money laundering policy: This process is based on a legal obligation to which we are subject.

2. What Types of Information We Collect

We collect information:

1. Directly, by an action on your part. This is the case when you:

   • Place an order on the website,
   • Create a wishlist,
   • Subscribe to our newsletter and other communication content,
   • Interact with us via our "contact" page.

   In these cases, we inform you when providing your personal data is mandatory. If you do not provide this "mandatory" information, we cannot guarantee that we will be able to respond to your request or enter into a contract with you.

2. From our relationship (e.g., order-related data).

3. Automatically, when you consent to us on placing tracking tools (such as web bugs) on your device.

3. Sharing Your Personal Information

We do not sell, trade, or rent users' personally identifiable information to third parties.

We may share generic demographic information not linked to any personally identifiable information regarding visitors and users with our business partners, trusted affiliates, and advertisers for the purposes outlined above.

Generally, we share your personal data with the following recipients:

• Internally: to the teams in charge of the identified processing activities, as part of their duties.
• To third-party providers to help us operate our business, fulfill our contractual obligations (including product delivery or online payment), and the website or administer activities on our behalf, such as sending out newsletters. We share your information with these third parties for these limited purposes.
• To other third parties if such disclosure is required by law, regulation, or court order or if such disclosure is reasonably necessary to comply with legal processes, respond to any claims, or protect the safety of your personal data or your/our rights.

Your personal data may be disclosed to certain recipients located or hosting data outside the European Economic Area (EEA).

In the event that your personal data is transferred to countries outside the EEA that have not been subject to a European Commission adequacy decision, we commit to implementing appropriate safeguards (primarily through the signing of standard contractual clauses of the European Commission with the recipient) or to relying on a derogation provided under the GDPR.

In any case, you can obtain more information about potential transfers outside the EU and get a copy of any safeguards in place upon request (see contact details above).

4. How Long We Keep Your Personal Information

Generally, your personal data is kept for as long as necessary to achieve the purposes described in this Privacy Policy. This will normally be for the duration of our relationship with you.

Thereafter, they may be archived as long as we need them to establish proof of a right or contract or for a legally dictated duration.

5. How to Exercise Your Rights

You can exercise the following rights by contacting us at the address/email mentioned above:

• Right to request access to your data: You can always ask us which personal data we process about you and how we process it, as well as access to/copy of that data.

• Right to rectification: You can always ask us to correct any personal data we process about you that is inaccurate or incomplete.

• Right to erasure ("right to be forgotten"): In some cases (e.g., you withdraw your consent, oppose the processing of your data, or if it is no longer necessary for the purposes for which it was collected or otherwise processed), you can ask us to delete the personal data we process about you. However, we may not positively respond to your request (e.g., if we need to retain your data to comply with a legal obligation or if we need to retain it for the establishment, exercise, or defense of legal claims).

• Right to data portability: Where we process your data based on your consent or our contract with you and this is done by automated means, you can ask us to send you or a third party a copy of it.

• Right to restriction of processing:

  In certain cases (for example, if you dispute the accuracy of your personal data, you have objected to its processing, and we need to verify whether we need to stop processing), you can ask us to limit the processing of your data. This means that, except for storage, your data can only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for important public interest reasons.

• Right to Object to Processing

  Regarding processing based on our legitimate interest, you can ask us to stop processing your personal data, particularly for marketing purposes. However, in certain cases (for example, if we need to continue processing for the establishment, exercise, or defense of legal claims), we may not be able to comply with your request.

• Right to Set Instructions for Your Personal Data After Your Death

  You can provide, modify, or revoke specific instructions regarding the storage, deletion, and disclosure of your personal data that we process about you after your death.

  You also have the right to withdraw your consent at any time. Concerning processing based on your consent, you can withdraw your consent at any time without affecting the lawfulness of the processing carried out before its withdrawal.

  A copy of an identity document may be requested if we have doubts about your identity.

  Finally, you can also file a complaint with the specific authority responsible for data protection regulation (France: www.cnil.fr).

  6. Changes to This Privacy Policy

  Maison Valois Varden reserves the right to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage users to frequently check this page for any changes to stay informed about how we help protect the personal information we collect. However, you will be informed of any substantial changes.