PRIVACY POLICY FROM THE SITE : NATHALIE TÔMA
These texts were translated into English by a francophone.
French law applies here.
ARTICLE 1: PREAMBULE
This privacy policy applies to: https://nathalietoma.fr
The purpose of this Privacy Policy is to expose website users to:
- The manner in which their personal data are collected and processed. All data that may identify a user must be considered as personal data. This includes first and last name, age, postal address, email address, user location or IP address;
- What are the rights of users regarding this data;
- Who is responsible for the processing of personal data collected and processed;
- To whom these data are transmitted;
- Possibly, the policy of the site regarding files “cookies”.
ARTICLE 2: GENERAL PRINCIPLES FOR DATA COLLECTION AND PROCESSING
In accordance with the provisions of Article 5 of the European Regulation 2016/679, the collection and processing of data from users of the site shall comply with the following principles:
- Legality, loyalty and transparency: data can only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, it will be indicated to the user that his data is collected, and for what reasons his data is collected;
- Limited purposes: the collection and processing of data is carried out in response to one or more purposes determined in these General Conditions of Use;
- Minimization of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site are collected;
- Data retention is limited in time: the data is retained for a limited time, which the user is informed of. Where this information cannot be communicated, the user shall be informed of the criteria used to determine the retention period;
- Integrity and confidentiality of the data collected and processed: the data controller is committed to ensuring the integrity and confidentiality of the data collected.
In order to be lawful, in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may take place only if they comply with at least one of the following conditions:
- The user has expressly consented to the processing;
- Processing is necessary for the proper performance of a contract;
- The processing meets a legal obligation;
- The processing is explained by a necessity linked to the protection of the vital interests of the data subject or of another natural person;
- The processing may be explained by a necessity related to the execution of a mission of public interest or which falls within the exercise of public authority;
- The processing and collection of personal data is necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF BROWSING THE WEBSITE
A. DATA COLLECTED AND PROCESSED AND MODE OF COLLECTION
The personal data collected on the site https://nathalietoma.fr are the following:
- Data transmitted directly by the customer:
– Via the contact form: Name and e-mail
– When ordering: Last name, first name, address, city, postal code, country, region, phone, e-mail.
- The data collected automatically:
During your visits, we may collect information such as « web analytics » relating to your browsing, the duration of your visit, your browser type and version. The technology used is the cookie. Anonymous data is kept for a maximum of 14 months.
This data is collected when the user performs one of the following operations on the site:
- Purchase goods on the site by the user.
- Contact form to send a request.
In addition, when a payment is made on the site, proof of the transaction including the purchase order and the invoice will be kept in the computer systems of the site publisher.
The collection and processing of data shall serve the following purposes:
- Order processing, parcel shipping
- Responding to requests sent via contact form
- Anonymous visitor statistics
The data processing carried out is based on the following legal bases:
- Contract execution
- User Consent
B. TRANSMISSION OF DATA TO THIRD PARTIES
The personal data collected by the site are transmitted to the publisher’s suppliers for order processing:
- Sogecommerce (Société générale) and PayPal for secure payments. We have no access to any banking information.
- The post office and DHL for the information necessary for the delivery of the parcels.
C. DATA HOSTING
The site is hosted by IONOS, whose headquarters are located at the following address:
7, place de la Gare, BP 70109, 57200 Sarreguemines Cedex
The host can be contacted at the following phone number: +33970 808 911.
The data collected and processed by the site as part of the order processing are hosted by the company IONOS which has its head office in France.
ARTICLE 4: DATA CONTROLLER
A. DATA CONTROLLER
The person responsible for the processing of personal data is: SASU TÔMAHÔM. He can be contacted as follows:
E-mail : contact@nathalietoma.fr
The data controller shall be responsible for determining the purposes and means of processing personal data.
B. OBLIGATIONS OF THE DATA CONTROLLER
The controller undertakes to protect the personal data collected, not to transmit them to third parties without the user being informed and to respect the purposes for which the data were collected.
The site has an SSL certificate to ensure that the information and the transfer of data passing through the site is secure.
An SSL (“Secure Socket Layer” Certificate) certificate aims to secure the data exchanged between the user and the site.
In addition, the data controller undertakes to notify the user in the event of rectification or deletion of the data, unless this entails for him disproportionate formalities, costs and steps.
If the integrity, confidentiality or security of the user’s personal data is compromised, the controller undertakes to inform the user by any means.
ARTICLE 5: USER RIGHTS
In accordance with the regulations concerning the processing of personal data, the user has the rights listed below.
In order for the data controller to grant his request, the user is required to communicate to him: his first and last name as well as his e-mail address, and if this is relevant, his account number or personal or subscriber space.
The data controller is required to respond to the user within a maximum of 30 (thirty) days.
A. PRESENTATION OF THE USER’S DATA COLLECTION AND PROCESSING RIGHTS
a. Right of access, rectification and right to erasure
If he has a personal space, the user can read, update, modify or delete data concerning him by going to his account on the site https://nathalietoma.fr.
b. Right to limitation and opposition of data processing
The user has the right to request the limitation or to oppose the processing of his data by the site, without the site being able to refuse, except to demonstrate the existence of legitimate and compelling reasons, which may prevail over the interests and rights and freedoms of the user.
In order to request the limitation of the processing of his data or to formulate an opposition to the processing of his data, the user must follow the following procedure:
The user must send an e-mail to the controller of personal data, specifying the subject of his request, at contact@nathalietoma.fr.
c. Right not to be decided solely on the basis of an automated process
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on an automated process if the decision has legal effects concerning him or her, or significantly affects him or her in a similar manner.
d. Right to determine the fate of data after death
Users are reminded that they can organise the future of their data collected and processed if they die, in accordance with Law No. 2016-1321 of 7 October 2016.
e. Right to refer to the competent supervisory authority
If the data controller decides not to reply to the request of the user, and that the user wishes to challenge this decision, or, if he thinks that one of the rights listed above is infringed, he is entitled to refer it to the CNIL (National Commission for Data Processing and Freedoms, https://www.cnil.fr) or any competent judge.
ARTICLE 6: USE OF “COOKIES” FILES
The site may use “cookie” techniques.
A “cookie” is a small file (less than 4 kb), stored by the site on the user’s hard drive, containing information about the user’s browsing habits.
These files allow it to process traffic statistics and information, facilitate navigation and improve the service for the comfort of the user.
For the use of “cookie” files involving the storage and analysis of personal data, the consent of the user is necessarily requested.
a. Opposition of the user to the use of “cookie” files by the site
Cookies that are not essential to the operation of the site are only placed on the user’s terminal after obtaining the user’s consent.
More generally, the user is informed that he can object to the saving of these “cookies” files by configuring his browser software.
It is possible to set your Internet browser to disable cookies. However, it is important to note that by disabling cookies, your unsernames and passwords will no longer be saved on any website.
For Internet Explorer:
- Open the Tools menu, then Internet Options.
- Click the Privacy tab, then under Settings,
- Move the cursor up to block all cookies or down to allow all cookies,
- To finish, click OK.
For Chrome:
- Click the Google Chrome menu
- Select Settings.
- Click Show advanced settings.
- In the Privacy section, click the Content Settings button.
- In the “Cookies” section, select “Block all cookies”
For Firefox:
- From the Tools menu, select Options.
- Select the Privacy panel.
- In «Conservation rules»: to use the custom parameters for the history.
- Uncheck the “Accept cookies to disable cookies” box
- Click OK to close the “Options” window
For Safari:
- Open the menu at the top right
- Select Preferences then Privacy
- Next to “Block cookies”, check “Always”
- If you want to know all the cookies saved on your computer, click on «Details»
- Close the window, please.
For Opéra:
- Click on Preferences
- Then click on Advanced
- Then Select Cookies
- You have several choices:
- Accept cookies: All cookies are accepted (default)
- Accept only those from the visited site: Cookies from third parties, from a domain outside the one I am visiting, are refused
- Never accept cookies: All cookies are refused
If the user decides to disable the “cookie” files, he can continue browsing the site. However, any malfunction of the site caused by this manipulation could not be considered as being due to the publisher of the site.
b. Description of the “cookies” files used by the site
The website editor draws the user’s attention to the fact that the following cookies are used when browsing:
- Cookies Google Analytics (exhaustive list): Web analytics – know site visit statistics
- Cookies Search Console: Web analytics – check the correct operation of the site, including its links
- pum- : keep in mind that you accept cookies/close the popup so
not to bother you again on your next visit. Duration of the cookie: 1 month.
The user acknowledges having been informed of these cookies and authorises the site to use them.
However, it may, if it wishes, object to the storage of these cookies by configuring the browser installed on its system, to be notified of the arrival of a cookie and to be able to refuse it.
Nevertheless, the refusal of cookies does not prevent access to and use of the site.
Protection against spam
In order to filter messages recognized as spam via contact forms, we use two data analysis services: reCAPTCHA and Akismet. Use of these forms implies acceptance of the privacy policies specific to these services, described below.
- Google reCAPTCHA (Google Ireland Limited)
Google reCAPTCHA is a form entry protection service on our website. It is used to differentiate entries made by a human being from automated abuse.
The use of reCAPTCHA is subject to Google Ireland Limited’s privacy policy and terms of use. Data transmitted: cookies and usage data. Place of treatment: Ireland.
- Akismet (Automattic Inc.)
The Akismet service checks some of the data transmitted via the contact forms on our site with a global spam database. Use of this service is subject to the privacy policy of Automattic Inc. Data transmitted: contents of the “name” and “email address” fields. Place of treatment: United States.
When browsing the website, it is made known to the user that “cookies” files of third parties can be saved.
In particular, the following third parties:
Articles on this site may include embedded content (for example videos, images, articles, etc.). Content integrated from other sites behaves in the same way as if the visitor went to this other site. These websites may collect data about you, use cookies, embed third-party tracking tools, track your interactions with such embedded content if you have an account connected to their website.
- Widget vidéo YouTube (Google Ireland Limited)
YouTube is a video content visualization service provided by Google Ireland Limited, allowing our site to integrate this type of content on its pages. Privacy policy Data transmitted: cookies, usage data. Place of treatment: Ireland.
In addition, the site incorporates social network buttons, allowing the user to share his activity on the site. “Cookies” files from these social networks are therefore likely to be stored on the user’s computer when using these features.
The user’s attention is paid to the fact that these sites have their own privacy policies and general conditions of use possibly different from the site. The publisher of the site invites users to consult the privacy policies and the general conditions of use of these sites.
ARTICLE 7: CONDITIONS FOR CHANGES TO THE PRIVACY POLICY
This Privacy Policy may be accessed at any time at the following address:
Accueil
The publisher of the site reserves the right to modify it in order to guarantee its conformity with the current law.
Therefore, the user is invited to regularly consult this privacy policy in order to stay informed of the latest changes that will be made.
However, in the event of a substantial change to this policy, the user will be informed as follows:
It is brought to the attention of the user that the last update of this privacy policy occurred on: 29/08/2021.
ARTICLE 8: USER ACCEPTANCE OF THE PRIVACY POLICY
By browsing the website, the user certifies that he has read and understood this privacy policy and accepts the conditions thereof, with particular regard to the collection and processing of his personal data, as well as the use of files “cookies”.