This online store presents the products sold on the atelierrosarose.com site and allows you to interact with it. This personal data protection policy determines the processing of personal data carried out on this site.

What is a cookie ?

Cookies are small text files placed on your hard drive by the visited website allowing it to record and store certain information from your computer but also about you.

They are essential for the functioning of the internet because they allow good communication between two computers. The information collected is also used to operate applications that you use on the website.

How do cookies affect you?

Some cookies also capture personal data about you that they transmit to third-party companies. They may collect personal information that you have not voluntarily shared on the internet such as your browsing history, where you click on the site, a session ID, etc. Put together, the information collected makes it possible to establish an image of your personal life which can then be sold to advertisers. This is why we must ask your permission to install certain cookies on your computer.

Which cookies are subject to my express consent?

Not all cookies require separate express consent. Thus, so-called “operational” cookies which allow you to take advantage of the features specific to this site and which use your personal data only for this purpose are presumed to have your consent (deliberation of the CNIL no. 2013-378 of December 5, 2013). Those who use your data for other purposes and who belong in particular to service providers require your express consent.

What are cookies used for on this site?

We use cookies on this site to:

– allow you the proper functioning of the site,
– contribute to the security of the service requested by the user,
– allow or facilitate communication by electronic means,
– provide you with the service requested by the user,
– measure the audience of the site,
– connect to social networks.

Which cookies subject to your agreement are present on this site?

Audience measurement cookies
We use Google Universal Analytics cookies for the production of anonymous statistics limited to our site and our services. This does not allow us to identify you directly. This cookie is published by Google Inc, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States of America. It is then possible for Google to cross your data collected here with those from other sites or sources in order to establish a profile and carry out automatic profiling. Google Analytics has an average lifespan of two years and may transfer the data collected to its servers located in the United States of America for reuse for commercial purposes for other Google services, subsidiaries and business partners. Attached to American law, the Internet user can exercise his rights directly with the dedicated service at the address privacy-shield-google@google.com or by writing to the following address: GOOGLE Inc., Google Data Protection Office, Mr Keith ENRIGHT, Director Privacy Legal, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States of America.

Social network cookies
Facebook cookies use data that allows you to connect to social networks by offering you personalized content with advertising tracking from the personal data communicated from this site or communicated to third-party websites. It is published by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The data collected may be transmitted to its servers located in the United States of America and reused for commercial purposes for other Facebook services, subsidiaries and business partners. However, to be effective, this application crosses personal data to establish a profile. This cookie may trigger other cookies collecting personal data. Only Facebook Ireland Ltd controls the nature and quantity of data collected. Attached to Irish law, the Internet user can exercise his rights directly with the dedicated service or by writing to the following address: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

How to refuse cookies?

Some cookies are essential for the proper functioning of the site. By setting the browser to refuse all cookies necessary for the proper functioning of the site, certain features, pages, areas of the site will not be accessible. You can accept or refuse cookies which are incidental to the proper functioning of the site, in accordance with article 32-II of the law of January 6, 1978 known as the “Data Protection Act”, by accessing the tab configure my cookies.

Confidentiality and conditions for sharing your data

We consider the data you entrust to us to be confidential. However, in order to be able to provide you with these messages, we must share the data that you entrust to us with our subcontractors for hosting and securing our site. These partners are subject to an obligation of confidentiality and can only use your data to accomplish their mission. When a legal obligation obliges us or when we wish to assert our rights, we may be required to disclose some of your personal data.

Transfers of data outside the European Union

Our website is located in France. We do not transfer personal data outside the European Union.

In general, we keep your personal data only as long as we need it within the framework of our legal, contractual obligations, public service mission and to the extent authorized by the legislation in force.

Main treatments

The main purposes for which we use your data are:

– respond to your request through our contact forms.
– fulfill your order and deliver it.
– send our newsletter if you have registered.
– Legitimately for the improvement and development of our services
– Legitimately for the contribution to the security of our services and to prevent any fraudulent, illegal or unauthorized activity
– meet our legal, social and fiscal obligations.

When we collect data that is not justified by our legal or contractual obligations, our legitimate interest or to respond to your request, we will ask for your consent and specify what it will relate to.

Newsletter

The service of sending the newsletter is a processing of personal data under the responsibility of ATELIER DE ROSA ROSE. As part of the management of the sending of this letter, we manage subscriptions and develop statistics related to this service. The data comes from the registration by the person wishing to subscribe to the service in the dedicated registration field on this website. Only personal data provided voluntarily and expressly by persons requesting registration for the Newsletter service are processed and require consent in accordance with Article 6.1 a of the GDPR. The data collected is as follows: e-mail addresses, date of subscription, statistics related to the Newsletter service, date of unsubscription. This data is mandatory to receive our service and we assure you that no automated decision-making is based on this collection. The recipients of this data are our communication department and its subcontractors as part of their mission as webmaster, outsourcing and sending the Newsletter. The data is not transferred outside the European Union.

We keep your e-mail address until your notification of unsubscription via the unsubscribe link located in each newsletter.

How to exercise your rights, see article 8 of this policy.

Contact form

The contact form is a processing of personal data under the responsibility of ATELIER DE ROSA ROSE. It allows you to interact with us on any request you initiate. Fields marked with an asterisk must be filled in so that we can respond to your request.

The recipients of this data are our communication department and our subcontractors as part of their webmaster and outsourcing mission. The contact form allows our communication department to respond to your request. In the event that your request concerns confidential or sensitive information, you are therefore strongly recommended to make your requests from your dedicated spaces, so that your request is directly processed by the service authorized to receive this information.

The data comes from the registration by the person wishing to interact with ATELIER DE ROSA ROSE in the dedicated fields in the form. Only personal data provided voluntarily and expressly by you are processed and subject to consent in accordance with Article “main processing” a of the GDRP. The data collected is as follows: name or company name, e-mail address, subject and content of the message. These data are mandatory for the processing of your request and we assure you that no automated decision-making is based on the basis of this collection. The recipients of this data are the communication department, the department concerned by the request and its subcontractors as part of their mission as webmaster and outsourcing of the website. The data is not transferred outside the European Union.

We keep the mandatory data until the end of the processing of the request.

How to exercise your rights, see article 8 of this policy.

The atelierrosarose.com site implements organizational, technical, software and physical measures in terms of computer security to protect personal data against alteration, destruction and unauthorized access. However, the Internet is not a completely secure environment and the atelierrosarose.com site cannot guarantee the security of the transmission or storage of information on the Internet.

If you have a request concerning the protection of your data, you can contact the email address contact@atelierrosarose.com or by post to the address indicated below.

As part of your interactions with us via this site, you have the right to access, query and rectify your data. You can also block or delete personal data concerning you which is inaccurate, incomplete, ambiguous, outdated or whose collection, use, communication or storage is unlawful. You can do this yourself directly by logging into your account and configuring its settings. If you cannot or do not know how to do it directly from your account, you can ask us by writing to us at the e-mail or postal address below.

You also have the right to oppose the processing of your data for legitimate reasons, provided that they are not in conflict with our legal, contractual obligation or public service mission. This implies that in case of opposition, we will not be able to respond to your request.

For your protection and the protection of all our users, we may ask you to provide proof of identity before we can respond to your requests.

On the other hand, we may not be able to respond positively to certain requests by which a user would oppose the processing of his personal data, in particular when these requests would no longer allow us to provide our services.

All of these rights can be exercised with ATELIER DE ROSA ROSE at the email address contact@atelierrosarose.com or by post at the following postal address:

ATELIER ROSA ROSE

1, rue des Fabreries

06130 Grasse

You can also lodge a complaint with the competent supervisory authority of your country of main residence and in particular with the CNIL for French residents.