CHARTER ON RESPECT FOR PRIVACY

Updated on 03/11/2024

The purpose of this privacy policy (the “Policy”) is to formalize our commitment to respecting the privacy of users of the “ana-lucy.com” website.

The Charter and the General Conditions of the Site form a contractual whole. All capitalized terms not defined in this Charter are defined in the General Conditions available at: https://ana-lucy.com/pages/cgv

Personal data means any information relating to an identified or identifiable natural person. We collect and process personal data in the context of providing our Services or communicating about these Services exclusively, in strict compliance with the GDPR.

We only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. Therefore, you will never be asked to provide personal data considered "sensitive," such as your racial or ethnic origins, political, philosophical, or religious opinions.

By registering on the Site, you authorize us to process your personal data in accordance with the Charter. If you refuse the terms of this Charter, please refrain from using the Site and the Services.

1. In what cases do we collect your personal data and what data is collected?

We may collect and store your personal data, in particular when you:

• Browse the Site
• Perform actions on the Site or Services that result in the collection of personal data. Examples: account creation, online payment, etc.
• Contact us.

We use your personal data to enable the implementation and management of the Site's Services and to respond to your specific requests. We also use your personal data to operate and improve our Services, our Site, and our approach. This information is used solely by us and allows us to better tailor our Services to your expectations.

If you opted to receive emails and messages from us when you created your Account, you will receive electronic and alphanumeric messages about our products and promotions. We will then use the personal data you provided during registration.

You can unsubscribe from these mailings at any time.

1.1 Navigation on the Site

Connection Data: Each time you connect to our Site, we collect certain personal data such as your IP address, the MAC address of your computer, as well as the date and time of connection. We also collect information about the browser you are using.

Browsing data: We also collect information on how you access the Site, the pages viewed, and the duration of your visit. Cookies may be used in this context.

1.2 Creation of an Account

Access to certain Services requires the prior creation of an Account. In accordance with our Terms and Conditions, personal information such as your first and last name, postal address, email address, and telephone number will be requested when creating your Account.

1.3 Payment

Some of our Services require payment. For this purpose, we may use external service providers to process payments. These service providers may collect personal data to ensure the proper functioning of credit card or other payment methods, as well as, where applicable, for the delivery of products or services.

To complete a purchase, you will need to provide your billing and payment information, including your credit card number, expiration date, security code, and cardholder name if paying by credit card. We may also ask for your telecom provider, phone model, and a valid phone number to enable the purchase instruction directly to your mobile phone.

We store your payment and purchase details. Transaction information is stored in our systems or with the external service provider for accounting, compliance, and legal security purposes.

1.4 Subscription to our Newsletter

When creating your Account, you can, if you wish, consent to receive our newsletter containing news, new products, services, and promotions. You also have the option to subscribe to the newsletter by entering your email address in the dedicated fields on the Site. You have the right to withdraw your consent to receive our newsletter at any time, free of charge.

1.5 Contacts

To respond to requests you may send to our Customer Service, we may use your first and last name, email address and telephone number to confirm information about you and facilitate the handling of your requests.

2. How do we protect your personal data?

We have implemented technical and organizational security measures to guarantee the security, integrity and confidentiality of all your personal data, in order to prevent them from being distorted, damaged
or that unauthorized third parties have access to it. We ensure an appropriate level of security, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks and their likelihood.

However, it is specified that no security measure is infallible, we are not able to guarantee absolute security of your personal data.

Furthermore, you are responsible for maintaining the confidentiality of the password that allows you to access your Account. Do not share this information with anyone. If you share your computer, remember to log out before leaving a Service.

3. In what cases do we share your personal data?

When you browse the Site, your personal data may be transmitted to external service providers. These third parties provide a service on our behalf and in our name to enable the proper functioning of credit card payments and other Services.

Personal data may be transferred to countries outside the European Union (such as the United States) for the purpose of storing the data in a database.

In accordance with the GDPR, all transfers of personal data to a country located outside the European Union and/or not offering a level of protection considered sufficient by the European Commission have been subject to cross-border flow agreements in accordance with the standard contractual clauses issued by the European Commission.

Unless a third party asks you to accept a privacy policy and terms of use specific to it, third-party companies that have received your personal data have undertaken to process your personal data solely for the implementation of our Services.

We will never share your personal data with third-party companies for marketing and/or commercial purposes without obtaining your prior consent.

4. How long do we keep your personal data?

We will only keep your personal data for the duration of your registration on the Site in order to ensure your identification when you log in to your Account and to enable the provision of the Services.

Therefore, if you unsubscribe from the Site, your personal data will be deleted and only kept in archive form for the purpose of establishing proof of a right or contract.

In any event, we will keep your personal data for a period not exceeding that necessary for the purposes for which they are processed in accordance with the uses set out in this Charter and in compliance with laws and regulations.

5. What are your rights?

You are the only person who has provided us with the data in our possession, through the Site. You have rights over your personal data.

In accordance with the regulations on the protection of personal data, in particular articles 15 to 22 of the GDPR, and after having proven your identity, you have the right to ask us for access to your personal data, rectification or erasure of this data.

Furthermore, within the limits set by law, you also have the right to object to the processing, to limit it, to decide on the post-mortem fate of your data, to withdraw your consent at any time and the right to data portability.
personal data provided.

6. Can we modify the Charter?

We reserve the right to modify the Charter at any time. It is therefore recommended that you consult it regularly. In the event of modifications, we will publish these changes on this page and in the places we deem appropriate depending on the purpose and significance of the changes made.

Your use of the Site after any changes means you accept those changes. If you do not accept any material changes to this Charter, you must stop using the Site.