Privacy Policy

LACHAUME, controller, is fully committed to protecting your privacy and respecting your choices, in particular by making every effort to comply with the General Data Protection Regulation (or GDPR).

Generally speaking, LACHAUME is aware of the importance of the personal data it is likely to collect and process. It wishes to share with its internet users and customers what information is collected and for what purposes. It undertakes to protect this information and to use it only for the purposes for which it was collected.

For further details, we outline the main provisions below.

1. Customers and web users

“internet users” are those who surf on the company's institutional website.

“customers” are those who place orders on the e-commerce website.

 

2. Personal data

Data of a personal nature is a criterion which, alone or in combination, makes it possible to identify, directly or indirectly, a specific individual, for example: name, date of birth, passport photograph, e-mail address, etc.

 

3. The purposes of personal data processing

The personal data collected is mainly used for:

• To be contacted by the company (contact form),
• Subscribe to the newsletter or receive commercial information on the company's products,
• Place an order via the e-commerce website.

Only the personal data strictly necessary to meet these objectives are used.

 

4. What information is processed

For the aforementioned processing operations, the personal information processed is:

• Title, name and e-mail address for the contact form,
• E-mail address for newsletter or commercial information,
• First name, last name, address, e-mail address, credit card number, cardholder, date of validity and security code of the customer, and first name, last name, address and phone number of the order recipient.

 

5. Where your data is processed

Personal data is stored in databases on servers located within the European Union.

 

6. Lawfullness for processing

The processing operations corresponding to the targeted objectives are based on:

• Consent for the contact form,
• Consent to subscribe to the newsletter or receive commercial information,
• Contract for ordering on the e-commerce website.

 

7. How long the data is kept

The retention period for personal data varies according to the objectives pursued, namely:

• 1 year for the contact form,
• Until unsubscription for newsletter or commercial information,
• 10 years for orders.

 

8. Recipients of data

The recipients of this data are the controller's team and their subcontractor, Shopify International Limited.

 

9. Access to your personal data

You have rights regarding your personal data, namely:

• Right of access and information to find out what data is held on you, and to obtain a copy.
• Right of rectification for any incomplete or incorrect data concerning you, which can be modified at your request.
• Right to erasure (or right to be forgotton) to obtain, in certain cases, the deletion of personal data (no longer necessary, unlawful processing, etc.).
• Right to restrict processing to temporarily freeze the use of certain personal data, meaning not using them but keeping them, for example, in case of data inaccuracy, unlawful processing, etc.
• Right to object on legitimate grounds, to the processing of your data, except if it is necessary to fulfill a vital obligation, for public interest, or for a contract.

 

To assert your rights, you can send your request by leaving a message at the dedicated e-mail address: mesdroits@lachaume.com (or by sending a letter of request to the headoffice).

If you do not receive a reply, or for any other reason, you may refer the matter directly to the Commission Nationale Informatique et Libertés (CNIL), 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX, France.