Privacy Policy

This Privacy Policy (the "Policy") describes how Castafiore (the "Platform") collects and processes your personal data.

The Policy applies to the relationship between the Platform and users (hereinafter "Users"), in the context of which the Platform collects personal data.

When the User visits the Platform and makes a purchase, he/she transmits to the Platform personal data as described below and agrees to the practices and measures mentioned in this Privacy Policy.

The Platform has set up an electronic file which lists this personal data. This database has been declared to the Commission Nationale de l'Informatique et des Libertés (CNIL), in accordance with the requirements of the French Data Protection Act (Loi Informatique et Libertés ) No. 78-17 of 6 January 1978, amended by Act No. 2004-801 of 6 August 2004.

The User is advised to consult this Policy regularly to ensure that he/she agrees with its terms. If the User does not agree with the terms of this Policy, the User is invited to stop using the Platform.

 

Article 1. Personal data

1.1. Data collected

When the User creates an account, the Platform collects the following data:

  • Civility
  • Name and surname
  • Date of birth
  • Postal address
  • E-mail address
  • Password
  • Bank data
  • Possibly data on physical characteristics (finger size, wrist size). 

1.2. Legal basis for processing

When the User creates an account and/or agrees to receive the Newsletter, the legal basis for the processing of his/her personal data is Article 6 1, a) of the GDPR as it is based on his/her consent.

When the User orders an Item, the Platform processes his/her personal data. The legal basis under which the Platform may process such personal data is set out in Article 6 1, b) of the General Data Protection Regulation (of the EU) 2016/679 (GDPR), since the processing of such information is necessary for the execution of the Transaction.

The Platform may also process ordinary personal data on the basis of the rules specified in Article 6 1, f) of the GDPR relating to the legitimate interest of the controller, unless the User's rights to privacy and freedoms prevail over his interests.

The Platform has a legitimate interest in the processing of personal data for marketing and advertising personalization purposes. This legitimate interest is based on the User's preferences so that the Platform can best personalize the offers presented. In addition, the Platform has a legitimate interest in processing personal data for analysis purposes. 

1.3. Personal data controller

The company responsible for processing the data is Castafiore, publisher of the platform https://castafiore.fr.

1.4. Recipients

The recipients of the data are the personal data controller and its service providers who are involved in the execution of orders, such as sellers of the Items, financial institutions and staff members of logistics, transport and delivery services. 

1.5. Data retention period

The Platform does not keep data longer than necessary for the purposes for which they are processed.

The data will be kept until the user account is deleted. They will also be deleted after a period of 2 years without the User logging in to his/her account. 

1.6. User rights

The User has the individual right of access, withdrawal and rectification provided for by law and may, in this respect, have any information concerning him/her that is no longer relevant deleted by sending a request by e-mail to the company Castafiore, at the address contact@castafiore.fr.

Depending on the choices made when creating or consulting his/her account on the Internet, the User may choose whether they wish to receive offers from Castafiore and to be informed of particular operations via e-mail. If the User no longer wishes to receive these offers, he/she may at any time make a request to this effect by clicking on an electronic link available in the e-mails to this effect, or by modifying his/her account directly on the Platform.

If the User believes that hi/her rights to his/her data are not respected, he/she may file a complaint with the French data authority. 

1.7 Data transfer

The Platform may transfer data to third parties solely for the purpose of executing the Transaction.

Any transfer or provision of data may only be made with the prior consent of the User.

The Platform does not transfer data outside the European Union. 

1.8. Links to other websites

The Platform may contain URL links to other websites owned by third parties. The Platform is not responsible for the content of these websites, which may use their own cookies, collect Users' data or use them in a manner contrary to this Policy.

The Platform recommends that Users carefully read the privacy policies and terms of use of third party websites before providing them with personal data.

 

Article 2. Cookies and other trackers

2.1. Definition

A cookie is a text file stored on the hard disk of the terminal used by the User (computer, tablet, mobile) through his/her browser software when consulting an online service. This means that a cookie is sent to the Platform each time the User accesses it via his/her browser.

Cookies do not store any sensitive or directly identifiable personal data but simply provide information about the User's browsing so that the User's terminal can be recognised later.

Cookies do not cause any damage to the devices, but make it easier to retrieve the preferences of the Users and to adapt the content of the Platform.

Only the User can choose whether to have cookies stored on his/her device. 

2.2 Cookies used by the Platform

Functional cookies allow :

  • To identify the User when he/she connects to the Platform;
  • To adapt the presentation of the website and advertising spaces to the display preferences of his/her terminal (language used, display resolution, operating system used, etc.), according to the hardware and software for viewing or reading that his/her terminal has.
  • Make it easy to search by keeping automatic searches and saved items.
  • To offer personalized or non-personalized advertising to the User.

These cookies are kept for a maximum period of 12 months.

Analytical cookies enable the use of the Platform to be analysed and are collected for analytical purposes in order to establish statistics and volumes of visits and use (sections and content visited, itinerary, etc.).

Social network cookies, which are generated by the sharing buttons on social network applications, enable to memorize your sharing preferences with social networks.

Cookies stored by search engines, including Google, are governed by Google's privacy policy. The User can find Google's Privacy Policy and Terms of Use regarding cookies on this page : Google's Privacy & Terms site.

These cookies are kept for a maximum period of 12 months. 

2.3. User Preferences

When consulting the Platform for the first time or after a prolonged period of time, the User will see a banner concerning cookies.

This banner allows the User to define his preferences.

The User may at any time choose to express and modify his preferences with regard to cookies via his/her browser.