Privacy Policy

LACHAUME FLEURS ("LACHAUME"), controller, is fully committed to protecting your privacy and respecting your choices, in particular by making every effort to comply with the General Data Protection Regulation (or GDPR).

Generally speaking, LACHAUME is aware of the importance of the personal data it is likely to collect and process. It wishes to share with its internet users and customers what information is collected and for what purposes. It undertakes to protect this information and to use it only for the purposes for which it was collected.

For further details, we outline the main provisions below.

1. Customers and web users

“internet users” are those who surf on the company's institutional website.

“customers” are those who place orders on the e-commerce website.

 

2. Personal data

Data of a personal nature is a criterion which, alone or in combination, makes it possible to identify, directly or indirectly, a specific individual, for example: name, date of birth, passport photograph, e-mail address, etc.

 

3. The purposes of personal data processing

The personal data collected is mainly used for:

• To be contacted by the company (contact form),
• Subscribe to the newsletter or receive commercial information on the company's products,
• Place an order via the e-commerce website.

Only the personal data strictly necessary to meet these objectives are used.

 

4. What information is processed

For the aforementioned processing operations, the personal information processed is:

• Title, name and e-mail address for the contact form,
• E-mail address for newsletter or commercial information,
• First name, last name, address, e-mail address, credit card number, cardholder, date of validity and security code of the customer, and first name, last name, address and phone number of the order recipient.

 

5. Where your data is processed

Personal data is stored in databases on servers located within the European Union.

 

6. Lawfullness for processing

The processing operations corresponding to the targeted objectives are based on:

• Consent for the contact form,
• Consent to subscribe to the newsletter or receive commercial information,
• Contract for ordering on the e-commerce website.

 

7. Tracking technologies in our emails

If you are subscribed to our newsletter, our emails contain tracking technologies, namely tracking pixels, which are invisible images loaded when the message is displayed, and tracked links, which are links carrying an identifier that allows clicks to be detected. These technologies allow us to know, for example, whether you open our emails, when you do so, from what type of device, and which content you view in them.

We use them to measure and optimise the performance of our campaigns, to personalise our messages, to adjust the frequency and channel of our communications, and to ensure the deliverability of our emails.

These operations are based on your consent, obtained when your email address was collected, in accordance with Article 82 of French Act No. 78-17 of 6 January 1978, as amended. These tracking technologies may be placed on all devices from which you access the address you provided to us. They are implemented by our email service provider, acting as a processor on our behalf and in accordance with our instructions.

You may withdraw your consent at any time by writing to us at mesdroits@lachaume.com. This withdrawal does not affect your newsletter subscription: you will continue to receive our communications if you wish.

Irrespective of your consent, we retain the date (day only) of your last known open of one of our emails, in order to adjust the frequency of our communications or to stop them in the event of prolonged inactivity.

 

8. How long the data is kept

The retention period for personal data varies according to the objectives pursued, namely:

• 1 year for the contact form,
• Until unsubscription for newsletter or commercial information,
• 10 years for orders.
• 25 months maximum for data relating to the tracking of our emails (opens, clicks), or until you withdraw your consent.

 

9. Recipients of data

The recipients of this data are the data controller's team and its processors Shopify International Limited and Klaviyo Inc.

 

10. Access to your personal data

You have rights regarding your personal data, namely:

• Right of access and information to find out what data is held on you, and to obtain a copy.
• Right of rectification for any incomplete or incorrect data concerning you, which can be modified at your request.
• Right to erasure (or right to be forgotton) to obtain, in certain cases, the deletion of personal data (no longer necessary, unlawful processing, etc.).
• Right to restrict processing to temporarily freeze the use of certain personal data, meaning not using them but keeping them, for example, in case of data inaccuracy, unlawful processing, etc.
• Right to object on legitimate grounds, to the processing of your data, except if it is necessary to fulfill a vital obligation, for public interest, or for a contract.

 

To assert your rights, you can send your request by leaving a message at the dedicated e-mail address: mesdroits@lachaume.com (or by sending a letter of request to the headoffice).

If you do not receive a reply, or for any other reason, you may refer the matter directly to the Commission Nationale Informatique et Libertés (CNIL), 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX, France.