Personal data

Introduction

We attach particular importance to respecting the privacy of users of our site and to compliance with the legal provisions in force.

This privacy policy allows you to better understand the principles of collection, processing and protection of personal data that we apply, as required by the data protection laws in force and in particular the European General Data Protection Regulation (Regulation 2016/679, called "GDPR").

Fine cosmetic grocery store whose head office is located at 39, route d'Herqueville, 27430 Andé, France is responsible for the processing of personal data for the Blancrème merchant site, accessible at the following URL: blancreme.com

We may update this privacy policy at any time. We encourage you to review it before submitting your personal data to us. By using blancreme.com, you authorize us to collect, record, organize, store, use, and/or transfer your personal data in accordance with this privacy policy.

What personal data do we collect?


We consider any information that can identify you directly or indirectly to be “personal data”.

We are mainly likely to collect the following personal data:

  • registration data: title, surname, first name, postal address, email address, telephone number
  • login details: username and password
  • data relating to purchases made: products purchased, promotional codes used, gift wrapping choices, purchase history
  • order data: order date, order destination address, choice of carrier, payment method
  • product data: reviews posted on our site
  • data relating to the monitoring of our commercial relationship, in particular communication preferences (newsletter), complaints, history of declared purchases, your requests or your correspondence with our Customer Service
    subscribe to our newsletter
  • browsing data: IP address, browser, terminal

When do we collect your personal data?

We collect personal data from you when:

  • you visit our site
  • you create an account on our site
  • you make a purchase on our site
  • you give your opinion on a product
  • you subscribe to our newsletters
  • you contact us, in particular when you call or make a request or complaint to our Customer Service, when you give your opinion on our products and/or services.

What is the legal basis for our processing of personal data?

The processing of personal data that we carry out as part of our activity may have several legal bases:

  • Legitimate interest: we need to collect your personal data to know you better in order to offer you personalized offers and services, ensure the security of our site, improve our content, etc.
  • Execution of a contract: the collection of your data is necessary when you subscribe to one of our online services (creation of an account on our merchant site, participation in a promotional offer, purchase, etc.)
  • Your consent: In some cases, the law requires us to obtain your consent to collect or use your data. This is the case, for example, when we wish to send you commercial solicitations (new products, promotional offers, competitions, etc.) by email.
  • Legal obligations when current legislation requires the processing of data

Why is your personal data collected?

We collect your personal data under the aforementioned legal bases.
The main purposes are as follows:

  • Create, register and manage your account
  • Process your purchases and orders
  • Communicating with you: managing your requests, your complaints, shipping packages
  • Administer your participation in promotional events
  • Site administration, statistical analysis and improvement of service quality
  • Management of your orders (orders, deliveries, after-sales service, etc.)
  • Customer relationship management (CRM), in particular to get to know you better and provide you with personalized information about our products and services (in particular, by email, on social networks or any other medium)
  • Manage newsletter mailings and let you benefit from your accumulated advantages
  • Manage the publication of product reviews
  • Administer our website, its security and combat fraud
  • Analyze and anticipate the market in order to adapt our products and services and best meet your needs
  • Where applicable, prevention and detection of fraud
  • Management of your requests (sample, advice, promotional operation, complaints, right of access, rectification, opposition, etc.)

Who do we share your personal data with?

We never sell, rent, or transfer your personal data to other companies for commercial prospecting purposes. Your data is confidential.

They may be transmitted to service providers and subcontractors chosen for their expertise and reliability who act on our behalf and according to our instructions, in particular to provide you with services such as: processing and shipping orders, carrying out technical maintenance and development operations, processing purchase declarations, etc.

Each service provider or subcontractor:

  • Receives only the personal data necessary for the purposes assigned to it
  • Has an obligation not to use this data, for any reason whatsoever

If we sell a business or assets, we may disclose your personal data to the prospective buyer of that business or assets. If Épicerie fine cosmétiques or any part of its assets are acquired by a third party, personal data held about its customers and relating to those assets will be one of the transferred assets. If applicable, in the latter case, the buyer who will act as the new data controller will process your data and its personal data protection policy will govern the processing of your personal data.

We may also be required to transmit your personal data to local authorities, if this is required by law or as part of an investigation and in accordance with applicable regulations.

How do we protect your personal data?

Epicerie fine cosmétiques implements appropriate technical and organizational measures, with regard to the nature of the data and the risks that their processing involves, to preserve the security and confidentiality of your personal data and, in particular, to prevent them from being distorted, damaged, or accessed by unauthorized third parties.

These measures may include practices such as limited access to data by personnel of departments authorized to access it due to their functions, contractual guarantees in the event of use of an external service provider, privacy impact studies, regular reviews of our privacy practices and policies and/or physical and/or logical security measures (secure access, authentication process, backup copies, antivirus software, firewall, etc.).

In the unlikely event that we believe that the security of your personal data in our possession or control has or has been compromised, we will notify you in accordance with legal requirements and by the methods provided by law.

What is our policy regarding minors?

Our website is designed and intended for a general audience. It is intended for individuals aged 18 and over. We do not knowingly request or collect personal information from individuals under the age of 18.
If we become aware or discover that we have collected personal data from a minor, we will take appropriate steps to contact the person and, if necessary, delete this personal data from our servers and/or those of our service providers. We may use your personal data to conduct age checks and enforce our age rules.

If you are not 18 years of age or older, please do not create a user account or make any purchases or orders on our Site. Please contact an adult, your guardian, or legal representative to complete the necessary steps.

What is our cookie policy?

To learn more about our cookie policy, we invite you to consult our Cookies & Third Party Services Policy .

How long is your personal data kept?

We ensure that your personal data is kept for a period that does not exceed the period necessary for the purposes set out in this privacy policy or in accordance with what is provided for by applicable law.

As a general rule:

  • Prospect/customer data is retained, unless you object or request deletion, for a period of three years from the date of collection, the last contact, or the end of the business relationship. At the end of this three-year period, we may contact you again to find out if you wish to continue receiving commercial solicitations. In the absence of a positive and explicit response from you, your data will be deleted or archived in accordance with the provisions in force.
  • Data relating to identity documents are kept for one year in the event of exercising the right of access, rectification, limitation, deletion or portability and three years in the event of exercising the right of opposition.
  • Data enabling proof of a right or contract to be established, or retained for the purpose of complying with a legal obligation, are archived in accordance with the provisions in force.
  • Product reviews are published on the site and are therefore kept for the entire duration of its publication.

Our database, where our website and customer account information are stored, is located on the servers of Gandi.net in the Paris region of France.

We never have access to your passwords; they are encrypted and therefore secure. We also do not have access to your payment information. This information is transferred directly to PAYZEN, which guarantees the security of your payments and the anonymity of your bank details.

In the case of the newsletter, emails as well as first and last names, if provided, are stored on the site of a third-party company: Mailchimp, a company that meets data security requirements. The data recorded in Mailchimp can only be used and viewed by employees of the company Épicerie fine cosmétiques.

What are your rights regarding your personal data and how can you exercise them?

You can unsubscribe from our mailing lists at any time by contacting us at the address below or by following the "Unsubscribe" link contained in each of our emails.

You can also change your preferences in your account at any time.

You can also request the deletion of your account on our site: you will receive the history of your data by email and the latter will be anonymized on our servers during the legal retention period imposed by the applicable regulations.

In accordance with applicable regulations, you have the right to access, rectify, delete, and transfer information concerning you, as well as the right to object to and limit processing. You may withdraw your consent at any time. You may also provide instructions regarding the retention, deletion, and communication of your personal data after your death. To exercise these rights, you must send us a request accompanied by a copy of your identity document bearing your signature:

Fine cosmetic grocery store – Blancrème
Customer service
39 Route d'Herqueville
27430 Andé
France

We will inform you of the actions taken following your request as soon as possible.

In accordance with applicable regulations, you may also lodge a complaint with the competent supervisory authority responsible for data protection or seek legal redress if your data is misused.

For any questions regarding this privacy policy, we invite you to contact our Data Protection Officer (DPO):

Fine cosmetic grocery store
Legal Department / Data Protection Officer
39 Route d'Herqueville
27430 Andé
France