Politique de confidentialité
Latest update : 15 March 2023
The processing, the confidentiality and the security of your personal data is particularly important to POESYS.
The purpose of this privacy policy is to inform you in a clear, simple and complete manner of the processing carried out on the personal data that you provide to us, or that we may collect during your browsing on our website, of their possible transfer to third parties as well as your rights and the options available to you in order to control your personal data and protect your privacy.
This Privacy Policy applies to the general processing activities of POESYS.
POESYS is responsible for the processing of personal data collected on the website https://www.funiculaireparis.com/ within the meaning of the regulations applicable to personal data and in particular EU Regulation 2016/679 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter “GDPR”).
The Privacy Policy is intended to explain the types of Personal Data we collect and how we process and protect this data in connection with the services we offer.
This Privacy Policy may change, for example, when we add new products, services or offers. We will post the updated Privacy Policy here. We encourage you to visit this page frequently to stay up to date with the latest information.
Glossary
Last activity : your last purchase or the date of your subscription to our newsletter.
Personal Data : information that can directly or indirectly identify you. It generally includes information such as your name, postal and e-mail address, telephone number, but also other information such as IP address, shopping habits, health and beauty information, information about your lifestyle or preferences, such as your hobbies and interests. Information relating to your health is classified as “sensitive personal data” and as such benefits from special protection.
Website : internet website
Third Parties : third party companies
Third party websites : third party websites, platforms and applications.
- ENTITY RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA
POESYS is a limited liability company with a capital of €5 000, whose registred office is located at 1 rte de la Barre, 27390 St Pierre de Cernières FRANCE, registred in the Bernay Trade and Companies Register under the number 911212694, is the controller of your Personal Data collected on the Website.
- WHO TO CONTACT IN CASE OF A PROBLEM REGARDING YOUR PERSONAL DATA?
If you have any questions about how we process your Personal Data, you can contact our personal data controller at the following e-mail address : bonjour@funiculaireparis.com
- PERSONAL DATA PROCESSED
When we collect your Personal Data through forms, we mark mandatory fields with asterisks. In accordance with the principle of data minimization, these mandatory fields contain only the information that is necessary for us to provide goods and services to you. If you do not complete these fields, we will not be able to provide you with our goods and services.
We may collect the following data either directly from you or from our Third Parties :
|
Data Category |
Personal data likely to be processed |
|
Log data |
Informations about the type of browser you use when visiting our Website, your IP address and device address, the hyperlinks you clicked on, the websites you visited before arriving on our website, and other information collected through cookies and similar tracking devices (actions performed on our Website or on Third Party Websites and information about how you interact with emails your receive from us). Your location and information about your mobile device (including your personalized unique device identifier), GPS data, or wireless network data. Your user name, profile picture and other information you choose to share when using Third Party Websites (for example when using Facebook’s “Like” feature). |
|
Basic data |
Name, title, age, date of birth, gender, password. |
|
Contact Information |
Postal address, e-mail address, landline telephone number, mobile telephone number. |
|
Purchase data |
Purchases of goods or services you make on our Website; purchase amount, order history, return history, payment history,wishlists, invoices. Payment information (payment method). Bank details when placing an order on our website. |
|
Personalisation data |
Your favorite brands, your favorite store, the answers you give in surveys or competitions, your preferences and habits regarding shopping and in general (for example your hobbies and interests). |
|
Open data |
Any other content or information you provide through our Website or submitted by you in connection with a purchase or a service request or other query, including the communications with our customer service department regarding refunds or Online purchases. |
|
Loyalty data/Engagement data |
Loyalty card number, account status and information regarding points collected and redeemed. |
|
Sensitive Data |
In certain limited circumstances, we may process information about adverse reactions to a product (which may therefore constitute health-related data) or diagnostic data (for example skin color and type, for the purpose of providing appropriate products). If we need to collect sensitive information about you, we will inform you of our legal obligations in a transparent way and ask for your consent before processing this Personal Data. |
|
VAT data |
For customers who qualify for VAT-free shopping or sales tax reductions while staying in the EU as a non-resident visitor : country of residence and passport number. |
- PURPOSES OF DATA PROCESSING OPERATIONS
- Tracking – website navigation
What categories of Personal Data may we collect?
Log Data
What is the purpose of the processing operations?
We (and third party services providers acting on our behalf or their own behalf) may use cookies and similar technologies to process data about you when you visit our Website and Third Party Websites.
On our Website, this processing serves three main purposes:
- 1.To ensure the main functionalities of the Website, in particular allowing you to browse our Website and connect securely, to memorize the progress of an order and to use certain functions, at your request. We call these “necessary cookies”.
- 2.To improve the performance of our Website, for example by using analytical tools to better understand our visitors, personalize content or interact with you based on your behavior on our Website. We call them “performance cookies”.
- 3.To present to you targeted advertisements when you browse other Websites or social media platforms, based on your behaviour on our Website. To this end, we share information relating to the use of the Website with Third Parties (advertisers, advertising agencies, advertising networks, data exchange, etc.) who may install their own cookies outside our Website and track your online activity on different sites for their own purposes. We call these “advertising cookies”.
Any Third Party who collects Personal Data on their own behalf is responsible for disclosing their own processing activities under their own privacy policies.
What is the legal basis for this processing?
« Necessary cookies » : our legitimate interests and the fulfilment of our contract with you.
For other cookies : your consent when you click “accept and continue” in our Website’s cookie consent tool.
You can review your cookie preferences at any time through our cookie consent tool or by changing your browser settings.
- Creation and management of accounts
What categories of Personal Data may we collect?
Basic data and contact informations.
What is the purpose of the processing operation?
When you decide to create an account on our Website, we process your Personal Data.
How long do we store your personal data?
We will retain your Personal Data for as long as your account is active and for a period of three (3) years after your Last activity and your account, unless we are required by law to retain it longer.
What is the legal basis for this processing?
We process this information for the fulfilment of your contract with you.
- Online purchase
What categories of Personal Data may we collect?
Basic Data, Contact Information, Purchase Data, Loyalty Data (if applicable) and, VAT Data ( if applicable ) Payment Data.
What is the purpose of the processing operation?
We process your Personal Data to manage your purchases of goods online and to deliver the products you have ordered.
Your bank details do not pass unencrypted on the POESYS servers.
Payments are made via a secure payment platform, supplemented by control measures, in order to guarantee the security of purchases made on SHOPIFY and to combat fraud.
How long do we store your personal data?
If you have an account : we will keep your Personal Data for as long as your account is active and for a period of three (3) years after your Last activity, unless we are required by law to keep it longer.
If you do not have an account : we may collect VAT Data (if applicable) and retain if for as long as required by law.
What is the legal basis for this processing?
We process this information for the fulfilment of our contract with you.
- Direct marketing and suggestion of products and services that may be of interest to you
What categories of Personal Data may we collect?
Log Data, Basic Data, Contact Information, Purchase Data, Personalization Data and Loyalty Data.
What is the purpose of the processing operation?
We process you Personal Data to send you information about products, services, special offers, promotions and other information, by post, e-mail, newsletter, SMS, “push” notifications or telephone.
These communications may contain suggestions for products or services (including those of Third Parties) that we believe may be of interest to you.
To determine the products or services that may be of interest to you, we will process your Personal Data and in particular your purchase history, your behaviour on our Website and Third Party Websites, your behaviour when you receive an e-mail from us, and your preferences, in order to include you in segments in accordance with our segmentation strategy.
We will also process your Personal Data to present you with targeted content, including online offers and advertisements for products and services that may be presented to you on our Website or on Third-Party Websites, through cookies or by directly communicating your email address (if you have not opted out of social media targeting). Please note that even if you refuse our cookies, you may still receive non-personalised advertisements from us.
How long do we store your personal data?
If you are only subscribed to a newsletter : until the date on which you unsubscribe from our direct offers.
If you have an account with us : for a period of three (3) years after your last activity with us, unless we are legally required to keep them longer.
What is the legal basis for this processing?
If you have previously purchased a product from us, we process this information on the basis of our legitimate interests.
In all other cases, we will seek your prior consent.
- Surveys and reviews
What categories of Personal Data may we collect?
Basic Data, Contact Information, Personalization Data and Open Data, Data provided through the form and Sensitive Data.
What is the purpose of the processing operation?
We process your Personal Data to conduct surveys in order to improve our products and services.
How long do we store your personal data?
Until the commercial aim is achieved, unless otherwise required by law.
What is the legal basis for this processing?
We process this information on the basis of our legitimate interests and your consent, where sensitive data needs to be collected.
- Customer service and claims management
What categories of Personal Data may we collect?
Basic Data, Contact Information, Purchase Data, Loyalty Data, Log Data, Payment Data and Open Data.
In some very limited cases : Sensitive Data and images (photos)
What is the purpose of the processing operation?
We process your Personal Data when you contact us in order to respond to your requests and comments, to process any complaints you may have and your requests to exercise your rights as a data subject and, if need be, to refund you.
How long do we store your personal data?
General inquiries and feedback regarding service issues, stock availability, etc. for a period of three (3) years from our last communication with you.
Communications related to personal injury, accidents and other health and safety issues may be retained longer in the event of legal claims or settlements.
What is the legal basis for this processing?
The processing of your Personal Data is necessary for the fulfilment of our contract with you.
- Fraud prevention and other regulatory purposes
What categories of Personal Data may we collect?
Basic Data, Contact Information, Purchase Data, Loyalty Data, Log Data, Payment Data and Open Data.
In some very limited cases : Sensitive Data and images (photos).
What is the purpose of the processing operation?
We process your Personal Data in order to fulfill our legal obligations, in particular in connection with the regulations on cosmetics and particularly to EU Regulation 1223/2009 of November 30, 2009 relating to cosmetic products (we may for example process certain data concerning your health or the symptoms and reactions that you have observed when using our products, in order to comply with our cosmetovigilance obligations), data protection and the fight against money laundering.
We also process your Personal Data to prevent or detect fraud or other crimes, to verify your identity and payment or credit status, to protect the login credentials of loyalty cardholders, to maintain the integrity of hardware systems and software from our Website and to fight against counterfeiting and selective distribution.
How long do we store your personal data?
We will archive your data for regulatory purposes for the duration of any legal or regulatory proceedings.
Quel est le fondement juridique de ce traitement?
The processing of your Personal Data is necessary to fulfill our legal obligations and/or defend our legitimate interests.
- SHARING OF PERSONAL DATA ?
We do not transfer or disclose your Personal Data to any party other than the parties mentioned below.
- a.Third parties (companies or individuals). These providers, which may be (i) advertising and media consultancies, (ii) market research consultancies, (iii) technical service providers, (iv) web designers and developers, (v) cloud service providers, (vi) electronic storage providers, (vii) customer services; (x) recruitment agencies, (xi) sale point or store delivery companies, (xii) payment service providers (non-exhaustive list), are all likely to have access to your Personal Data if this information is necessary to the exercise of their functions. These providers may not use your Personal Data for any other purposes;
- b.Official bodies and regulatory authorities (e.g. tax authorities), courts, public authorities and external advisers (lawyers, accountants, insurers, insurance brokers, auditors, etc.); and
- c.Other parties, in order to fulfill legal or regulatory obligations under applicable laws, court orders or subpoenas.
- TRANSFER OF PERSONAL DATA OUTSIDE THE EEA
Many of our service providers are based in France and provide an adequate level of data protection.
Where we need to transfer your Personal Data to Third Party based in a country where the data protection legislation is not deemed to offer the same level of protection, we ensure adequate data protection measures relying on standard contractual clauses.
For more information on the transfer mechanism, please contact our Personal Data Controller.
- YOUR RIGHTS
You have the following rights in accordance with the law applicable to you and you can exercise these rights :
- Obtain confirmation whether or not we are processing your Personal Data and, if necessary, obtain a copy if need be;
- Have inaccurate or incomplete Personal Data rectified;
- Have Personal Data erased, in certain cases. Please note that this is not an absolute right and we may have legal grounds to deny your request;
- Object to the processing when it is based on our legitimate interests. We may, however, invoke compelling legitimate grounds to continue the processing. You also have the right to object at any time to the processing of your Personal Data for marketing purposes. (To unsubscribe from our marketing communications, you can change your account preferences by logging into your account, or simply by clicking on the unsubscribe link at the bottom of each communication);
- Limit the processing of your Personal Data;
- Receive the Personal Data you have provided to us in a structured, commonly used and machine-readable format and transmit it to another data controller (portability of Personal Data);
- Withdraw your consent to future processing at any time, if you have consented to Personal Data processing activities. This withdrawal has no effect on the legality of any processing carried out before the withdrawal of consent; and
- File a complaint with a competent supervisory authority such as the Commission Nationale Informatique et Libertés (CNIL) 3, Place de Fontenoi – TSA 80715 – 75334 PARIS CEDEX 07. FRANCE.
To this end, you can contact us by e-mail at bonjour@funiculaireparis.com or via our online contact form accessible on our website or by simple mail at the address POESYS – Service Relation Client : 1 route de la Barre 27390 St Pierre de Cernières FRANCE accompagnied by an identity document.