BANDEJA SHOP GENERAL DATA PROTECTION REGULATION (GDPR)
Access to Bandeja shop's services requires the collection of personal data, for example to create an account, place an order or receive a newsletter. In accordance with European law (GDPR) and the CNIL, we are committed to respecting your privacy. The forms necessary to collect your data are limited to the information we need. We tell you when, how and why we need it to process your request.
1. Collection of personal data
When creating an account or placing an order on the Bandeja shop website in its various forms (Bandeja-shop.com/fr/, Bandeja-shop.com/en/, Bandeja-shop.com/de/, Bandeja-shop.com/es/, Bandeja-shop.com/it/, Bandeja-shop.com/pt/, Bandeja-shop.com/se/), BANDEJA SHOP collects personal data about the user. The company responsible for collecting this data is BANDEJA SHOP (publisher of the Bandeja shop websites), a simplified joint stock company (SAS) registered with the Antibes Trade and Companies Register under the number 929 857 555, whose registered office is located at 181 chemin du Puissanton 06220 Vallauris - France.
Owner: BANDEJA SHOP – 181 Chemin de Puissanton 06220 Vallauris - France
Hosting: Google Cloud Platform - Google LLC , 1600 Amphitheatre Parkway, MOUNTAIN VIEW CA 94043, USA
Personal data includes any data that can identify a user:
*Profile and contact information such as:
Name, first name, telephone number, date of birth, e-mail address, postal address...
*Order information:
Customer number, order number, purchase details, payment details, delivery and billing addresses, notices, complaints, customer service messages, delivery and payment status...
*Usage data:
When a user accesses Bandeja shop, the following technical data is collected:
- IP Address
- Date and time of connection
- Name and URL of the file accessed
- Access site (reference URL)
- Search engine used, operating system, name of internet provider
This data includes optional information that the user chooses to provide to Bandeja shop in order to improve its services.
In order to fight fraud, Bandeja shop may store information about transactions carried out on its Site, excluding however the storage of credit card data.
2. Purposes of data collection
Personal data are collected for one or more of the following purposes:
- Managing orders on the Bandeja shop website
- Keeping sales statistics, market research and behavioural analysis
- Creation and management of prospect files, including technical operations such as standardisation, enrichment and duplication
- The implementation of operations relating to customer management
- Selecting certain customers from the file to carry out personalised prospecting and promotional activities
- Sending newsletters and promotional messages from Bandeja shop, for which it is possible to unsubscribe at any time by clicking on the link provided for this purpose at the bottom of the relevant emails
- Compliance with legal and regulatory obligations
- The fight against fraud
3. Fight against fraud
In order to fight against fraud and to secure the transaction, Bandeja shop has set up a verification system such as:
Requesting certain supporting documents from the customer once payment has been made, in the event of an automatic alert during the order process.
Blocking an account or an order if the identified customer account has already been used to commit fraud.
4. Recipients of the data collected
Bandeja shop undertakes not to pass on customer data to third parties for commercial purposes.
Only Bandeja shop and its contractual partners for order processing have access to the information provided by the user. The only persons authorised to access the user's personal data are: the sales department, the administrative departments, the IT department, the after-sales service and the departments in charge of control (auditor, departments in charge of internal control procedures, etc.), within the limits of their respective responsibilities.
These services also include public bodies, in order to meet legal obligations, court officers, judicial officers and debt collection agencies.
5. Security
We take all necessary precautions to protect the security of the personal data of the users of our Bandeja shop website and in particular to prevent it from being distorted, damaged or accessed by unauthorised parties.
6. Cookies
"Cookie" technology does not allow the identification of a user but records information about the navigation of his or her computer on the Bandeja shop website (e.g. pages viewed, date and time, etc.). It is used to measure the number of pages viewed, the number of visits, as well as the activity of visitors to the Bandeja shop Site and their frequency of return in order to improve our services. The data collected by the cookies is only and strictly for internal use and is never passed on to third parties.
The use of this information stored through advertising cookies is intended to inform Bandeja shop about the content, themes, types of products or brands that interest the user.
They are not necessary for the operation of the site, but require the user's express consent. If the user wishes to object to this, he/she can simply set these options in his/her browser. However, it is possible that this action prevents the full execution of the functions offered to customers or the completion of an order in our online shop.
7. Consent
By voluntarily providing personal data to Bandeja shop, by creating an account or placing an order, the user expressly consents to the collection and use of this personal data in accordance with the applicable privacy laws with regard to the accuracy and portability of data.
8. Right of access and rectification
In accordance with the French law n° 78-17 called "Informatique et Libertés" of January 6, 1978, every user of Bandeja shop has the right to access, rectify, question and, if necessary, oppose data concerning him/her, which can be exercised :
By e-mail: to [email protected]
By post : to BANDEJA SHOP 181 Chemin de Puissanton, 06220 Vallauris, France
9. CNIL declaration
The RGPD redefines the role of the data protection authorities (DPAs) of the member countries. In France, it is the "Commission nationale de l'informatique et des libertés (CNIL)" which carries out this task.
10. Duration of data storage
The user's data is stored for the time necessary to provide our services, for as long as the user has a customer account and even after the account has been closed, in accordance with legal (tax or official) obligations for a maximum of 10 years after the account has been created.
11. Rights of the user on his personal data
The user has the following rights:
- Right of access and information.
- Right of rectification. (The user can retrieve, check and update his personal information by logging in to "My account".
- Deletion of data or limitation of the use of his account.
- Opposition to use.
- Right to data portability and transferability.
- Right of appeal under the supervision of authorities.
- Right to object to marketing.
- Revocation of consent.
Please note that the user's fundamental right to object to the use of personal data by the Bandeja shop website applies, but does not exempt the user from his legal obligations. Bandeja shop reserves the right to provide information to legal authorities, if necessary.
This RGPD page will be updated regularly to comply with the legal conditions and rules in force.
In case of dispute, the user has the possibility to refer to the CNIL.