Privacy and Personal Data Protection Policy
Preamble
Through the website www.daum.fr (hereinafter referred to as "DAUM website"), any Customer and/or User may be required to provide DAUM with personal information, particularly when creating a customer account, completing the "contact" form, or making a purchase on DAUM's online store.
DAUM is committed to respecting the privacy of its Clients and/or Users, and in order to comply with applicable laws and regulations regarding the protection of personal data, including the General Data Protection Regulation (GDPR) of the European Union, DAUM has prepared this document to present its Privacy and Personal Data Protection Policy (hereinafter referred to as the "Charter") to its Clients and/or Users.
This Charter, established by DAUM, is accessible from every page of the DAUM website " www.daum.fr ", including versions optimized for browsing on mobile devices, tablets and smartphones.
The Site allows the sale of products online, the terms of which are defined in DAUM's General Terms and Conditions of Sale, forming a contractual whole with this Charter and the Legal Notice section.
The information provided on the DAUM website is intended for any person of legal age and with the capacity to consent. By creating an account or making a purchase on the DAUM website, the Customer acknowledges and expressly agrees that their Personal Data may be collected, used and disclosed by DAUM.
Therefore, DAUM expressly requests that minors under the age of 16 not submit their personal information and not make any purchases on the DAUM website without the consent of their parents or legal representatives.
DAUM may modify the Charter at any time, without any obligation to notify or inform its Clients and/or Users. DAUM therefore advises its Clients and/or Users to regularly consult the section " Privacy and Personal Data Protection Policy ". Any modification will take effect upon publication of the revised Privacy and Personal Data Protection Policy on the DAUM website.
Each Customer can contact DAUM directly by:
Mailing address: DAUM, Web Service, 126 rue La Boétie, 75008 Paris
Email: contact.web@daum.fr
Definitions
DAUM : refers to the company DAUM, a public limited company with a board of directors, with a capital of 4,510,995 euros, whose registered office is located at 126 rue La Boétie, 75008 Paris, registered with the RCS of Paris under number 027.897.
Client: refers to any person who visits the daum.fr website and transmits their Personal Data when creating an account and placing an order.
User: refers to all persons who consult the daum.fr website.
DAUM site: refers to the DAUM website, the URL of which is: daum.fr
Personal Data: This refers to information relating to an identified or identifiable natural person. Personal Data includes nominative data (such as names and contact details) and available electronic identification data (such as "cookies" or "IP addresses"). Electronic identification data allows the identification or geolocation of the connecting terminal and are generally insufficient on their own to identify a natural person nominatively.
- "Any reference to the singular includes the plural and vice versa, any reference to one gender includes the other gender."
Subject
This document informs each DAUM website Client and/or User about how DAUM uses, collects, and secures the Personal Data of its Clients and Users, as well as their rights to access and modify this data. This is done in compliance with the provisions of current laws and regulations, including Law No. 78-17 of January 6, 1978 relating to Information Technology, Data Files and Liberties (hereinafter the "Data Protection Act"), as amended by the provisions of Law No. 2004-801 of August 6, 2004 relating to the protection of individuals with regard to the processing of personal data, and the General Data Protection Regulation of the European Union (GDPR).
General Information on the Collection and Use of Personal Data
Generally speaking, DAUM only collects information that is relevant, adequate, and limited to what is necessary in relation to the purposes for which it is processed.
a) Collection and purpose of Personal Data when creating an account
To create a customer account on the DAUM website, the Customer and/or User must provide their email address.
- The email address is associated with each Customer's account profile, as the Customer uses their email address and password to log in to their account. DAUM legally justifies the processing of the email address for this purpose by its legitimate interest in ensuring the security of each Customer's accounts.
- DAUM also processes the email address of its Customers in order to send them important information about products, security or orders.
If the Customer agrees to receive marketing information from DAUM, DAUM will also process their email address for the purpose of sending them said information. DAUM legally justifies the processing of its Customers' email addresses for this purpose by their consent. Each Customer and/or User may revoke their decision at any time and withdraw their consent by modifying their preferences on their account or by contacting DAUM directly, as indicated in point VII of this Charter.
b) Collection of Personal Data when communicating with DAUM's customer support.
If the Client and/or User communicates with a customer service representative by email, telephone, or in person, then DAUM may collect Personal Data such as the name, email address, and country of residence of the Client and/or User. This is necessary for DAUM to provide the required assistance to the Client and/or User. DAUM legally justifies the processing of this data for this purpose by its legitimate interest in providing quality product support. DAUM legally justifies its advisors' access to client accounts by the necessity of this access to resolve problems, with the agreement of the Client and/or User, which they may withdraw at any time.
c) Collection of Personal Data when purchasing on the DAUM website
During the purchase process on the DAUM online store, DAUM collects the Customer's name, postal address, email address, and phone number. This information is collected to process and ship orders. DAUM legally justifies the processing of the name, postal address, and phone number for this purpose by fulfilling a contractual obligation. DAUM also processes Personal Data as part of its fraud detection process. DAUM legally justifies the processing of Personal Data for this purpose by its legitimate interest in protecting the DAUM website and its Customers from any attempts at fraudulent transactions.
However, DAUM does not display or store the Client's payment card information. In fact, a third-party, independent company called OGONE processes the payment card information of Clients when they pay using a bank card on the DAUM website. To obtain complete information on the processing of Personal Data by OGONE, DAUM advises its Clients to read OGONE's privacy policy.
d) Collection of Personal Data when filling out the "Contact" form on the DAUM website.
When completing the "contact" form on the DAUM website, DAUM collects the client's and/or user's name, country of origin, email address, and any information provided in the free-form message. This information is collected to process inquiries submitted by the client and/or user. DAUM legally justifies the processing of this personal data by the consent given by the client and/or user, as part of the measures taken at their request (for example, processing an application, a file, a quote request, or any other information...).
When filling out the "contact" form, certain data is mandatory. In the event of inaccurate or false statements, the consequences could be an inability for DAUM to respond.
e) Social Networks
DAUM maintains an information and presentation page for its brands and products on various social networks such as FACEBOOK, TWITTER, and INSTAGRAM. DAUM does not create or use any databases independent of these social networks based on the personal information that each Client and/or User publicly shares.
Generally speaking, DAUM's legitimate interests may justify its processing of personal data (for example, for security purposes, particularly IT security).
Processing and Securing Personal Data
a) Data sharing
The information requested from the Customer is necessary for processing the Order, delivery, and invoicing, in particular. Indeed, the Personal Data collected on the Site is intended for the exclusive use of DAUM and its service providers or subcontractors performing services on its behalf.
DAUM implements all necessary measures to ensure the security and confidentiality of data transmitted online (online payment on the website "www.daum.fr"). To this end, this website uses a secure SSL (Secure Socket Layer) payment method and works with the secure solutions of OGONE.
The bank details provided by the Customer are encrypted and never transmitted through DAUM's servers.
Except for bank details, which are transmitted directly to the OGONE website, DAUM is the sole recipient of the collected Personal Data, as well as its service providers or subcontractors performing services on its behalf. Therefore, in order to process requests and/or orders, DAUM will need to transmit certain collected information to its internal departments, including in particular the Sales Administration, logistics, accounting, and web departments.
Furthermore, for the purposes of processing orders, shipping, or maintaining its website, it will need to transmit certain personal information to service providers, third-party companies, such as external carriers such as CHRONOPOST (or any authorized carrier) for shipping orders.
In the event of using service providers or subcontractors, DAUM may disclose the personal data of the Client and/or User to third parties who may be domiciled abroad, particularly outside the European Union.
DAUM will then require them to take, in accordance with current regulations, all organizational and technical measures to ensure an adequate level of protection of the Client's and/or User's personal data (in particular by implementing Standard Contractual Clauses approved by the European Commission).
DAUM may also transmit certain Personal Data of its Clients and Users if it receives a request from a judicial authority or any administrative authority authorized by law to request the disclosure of this information in accordance with the applicable laws.
Finally, in the event of a change of control of the company, a collective procedure or a transfer of assets of the company, the Personal Data collected by DAUM may be transferred.
DAUM makes every effort to ensure the confidentiality and security of the Personal Data collected when transmitting them to the aforementioned parties.
b) Analysis of Personal Data
To allow DAUM to analyze how its Clients and/or Users navigate the DAUM website and to compile aggregated statistics on website usage and response rates, DAUM, with the help of third-party analytics service providers, collects certain information during navigation on its site. This information includes IP address, device geolocation, browser type, browser language, date and time of requests, visit duration, pages viewed, and elements (such as links) clicked. DAUM may use cookies, pixel tags, invisible pixels, web beacons, or other similar means on its website or in its email messages to simplify the collection and analysis of such information. DAUM uses this information to provide more relevant and higher-quality content on its site, to measure the effectiveness of its advertising, to identify and resolve problems, and to improve the overall user experience of its site. DAUM may also use one or more third-party service providers to provide online advertising on its behalf. They may then use a pixel tag or other similar technology to collect information about visits to its site and use this information to send targeted advertisements. For more information regarding these practices and if the Client and/or User wishes to refuse the collection and use of their information by our third-party service providers, DAUM invites them to visit the Networkadvertising.org website.
If the Client and/or User does not wish information to be collected through these technologies, most web browsers provide a simple procedure allowing you to automatically refuse a large number of these technologies or to choose to accept or refuse them. Furthermore, if the Client and/or User resides in a country of the European Union or within a jurisdiction that requires authorization to use cookies on the DAUM website, the Client and/or User has the option of managing their cookie preferences on this site, unless certain cookies are required for optimal functioning. In this case, the Client and/or User cannot choose to disable these cookies.
DAUM also collects data on how users use the DAUM website. The information collected for analysis purposes includes the date and time the application accesses its servers, the device location, language settings, and information and files downloaded to or from the site or operating system. DAUM uses this data to improve the quality and functionality of its website.
DAUM legally justifies the processing of this analytics data by its legitimate interest in understanding its customers' interactions with its website, in order to improve the customer experience and the functioning of its website.
The third-party analytics service provider that DAUM currently uses is:
Analytics Service: Google: DAUM uses Google Analytics to track website statistics, as well as demographic data, interests, and user behavior on our sites. DAUM also uses Google Search Console to better understand how users access our site and to improve its SEO. Learn more about how we use this analytics information , the control you have over the use of your information, and how to opt out of Google Analytics data collection.
c) Security measure
DAUM does not control all the risks associated with the functioning of the Internet and draws the attention of its Clients and/or Users to the existence of potential risks inherent in its use and operation. However, DAUM has made every effort to implement all necessary precautions to preserve the confidentiality and security of the Personal Data processed and to prevent it from being distorted, damaged, destroyed or accessed by unauthorized third parties.
DAUM attaches the utmost importance to the protection and security of its information systems. Tools have been implemented to detect potential security breaches. These tools may incidentally result in access to Personal Data by its security teams. This data will be collected and processed solely for the purpose of managing these breaches and in compliance with applicable regulations concerning the protection of personal data.
Personal Data Protection
The data is kept for a period that does not exceed the time necessary for the purposes for which it was collected, subject to legal archiving possibilities and obligations to retain certain data, in accordance with the law in force.
For orders, DAUM retains the collected data for the purpose of order fulfillment, and then for the time necessary to establish proof of a right or contract; this data may be archived in accordance with the provisions of the French Commercial Code relating to the retention period of books and documents created in connection with commercial activities and the French Consumer Code relating to the retention of contracts concluded electronically.
Each Client can access and modify their Personal Data by:
Directly on their personal account on the daum.fr website.
By expressly requesting it from DAUM via the contact form available on the website daum.fr or by writing to the following addresses:
Email: contact.web@daum.fr
Mailing address: 126 rue La Boétie, 75008 Paris
Rights of Customers and Users Regarding Their Collected Data
Each Client and/or User has the following rights regarding their Personal Data:
The right to be informed and to access one's data : Each Client and/or User has the right to be informed in a concise, transparent, understandable and easily accessible manner about how their personal data is used.
The right of rectification : Each Client and/or User has the right to obtain the rectification of their personal data that is inaccurate. Each Client and/or User also has the right to have incomplete personal data completed.
The right to erasure : Each Client and/or User has the right, in certain cases, to obtain the erasure of their personal data. However, this right is not absolute, and DAUM may have legal or legitimate reasons to retain said data.
The right to restrict processing : Each Client and/or User has the right to obtain, in certain cases, the restriction of the processing of their personal data.
The right to object : Each Client and/or User may object to the processing of their personal data for commercial prospecting purposes, including profiling related to this prospecting.
The right to portability : Each Client and/or User, when this right is applicable, may receive the personal data that he/she has provided to DAUM concerning him/her, or request, when it is technically possible, that this data be transmitted to a third party, in a readable format, without any possible opposition from DAUM.
The right to withdraw consent to the processing of personal data: In the event that DAUM processes the personal data of the Client or User, based on their consent, this consent may be withdrawn at any time in accordance with the procedure described below.
It is specified, in accordance with applicable law, that the withdrawal of the Client's or User's consent is only valid for the future and therefore cannot call into question the legality of the processing carried out before this withdrawal.
The right to lodge a complaint with a supervisory authority : Each Client and/or User has the right to contact a supervisory authority (such as the CNIL in France) to lodge a complaint concerning DAUM's personal data protection practices.
The right to transmit instructions regarding the use of data after death (this right is applicable in France): Each Client and/or User has the right to give DAUM instructions regarding the use of their personal data after their death.
Conditions for exercising their rights by Customers and Users
Each Client and/or User may exercise the rights described in Article VI hereof at any time by contacting DAUM via:
the following email address: web@daum.fr
or
the following postal address: DAUM Company, web service, 126 rue La Boétie, 75008 Paris
Regarding the right of rectification, the Customer or User may exercise it by directly modifying their data via their customer account on the DAUM website by going to the "personal space" section.
Data processing manager and data protection officer
If the Client and/or User resides in a country of the European Economic Area or in Switzerland, their Personal Data collected by DAUM will be controlled by Ms. Laura BRAMI, located at the following address: 126 rue La Boétie, 75008 Paris.
Update
Last updated: November 12, 2020
This Charter may be updated at any time, so DAUM advises each Client and/or User to consult it regularly.