PRIVACY CHARTER 


Updated on 02/11/2022

The purpose of this privacy policy (the "Charter") is to formalize our commitment to respect the privacy of users of the "ana-lucy.com" website.

The Charter and the General Conditions of the Site form a contractual whole. All capitalized terms not defined in this Charter are defined in the General Conditions which can be consulted as follows: https://ana-lucy.com/pages/cgv

Personal data means any information relating to an identified or identifiable natural person. We collect and process personal data in the context of providing our Services or communicating about these Services exclusively, in strict compliance with the GDPR.

We only collect personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. Thus, you will never be asked to enter personal data considered "sensitive", such as your racial or ethnic origins, your political, philosophical or religious opinions.

By registering on the Site, you authorize us to process your personal data in accordance with the Charter. If you refuse the terms of this Charter, please refrain from using the Site and the Services.

1. In which cases do we collect your personal data and what data is collected?

We may collect and store your personal data, in particular when you:

• Browse the Site
• Perform actions on the Site or Services resulting in the collection of personal data. Examples: account creation, online payment, etc.
• Contact us.

We use your personal data to enable the implementation and management of the Site Services and to respond to your specific requests. We also use your personal data in order to operate and improve our Services, our Site and our approach. This information is used only by us and allows us to better adapt our Services to your expectations.

If you decided to receive emails and messages from us when creating your Account, you will then receive electronic and alphanumeric messages relating to our products and promotions. We will then use the personal data you provided when registering.

You can unsubscribe from these mailings at any time.

2. How do we protect your personal data?

We have implemented technical and organizational security measures to guarantee the security, integrity and confidentiality of all your personal data, in order to prevent them from being distorted, damaged
or that unauthorized third parties have access to it. We ensure an appropriate level of security, taking into account the state of knowledge, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks and their probability.

However, it is specified that no security measure being infallible, we are not able to guarantee absolute security of your personal data.

Furthermore, it is your responsibility to ensure the confidentiality of the password allowing you to access your Account. Do not share this information with anyone. If you share your computer, remember to log out before leaving a Service.

3. In which cases do we share your personal data?

When browsing the Site, your personal data may be transmitted to external service providers. These third parties perform a service on our behalf and on our behalf to enable the proper functioning of credit card payments and other Services.

Personal data may be transferred to countries outside the European Union (such as the United States) for the purpose of storing the data in a database.

In accordance with the GDPR, all transfers of personal data to a country located outside the European Union and/or not offering a level of protection considered sufficient by the European Commission have been subject to cross-border flow agreements. in accordance with the standard contractual clauses issued by the European Commission.

Except in the case where a third party asks you to accept a confidentiality charter and its own terms of use, the third-party companies having received communication of your personal data have undertaken to process your personal data only. for the implementation of our Services.

We will never share, without having obtained your prior consent, your personal data with third-party companies for marketing and/or commercial purposes.

4. How long do we keep your personal data?

We will only keep your personal data for the duration of your registration on the Site in order to ensure your identification when you connect to your Account and to allow the provision of the Services.

Thus, if you unsubscribe from the Site, your personal data will be erased and only kept in archive form for the purposes of establishing proof of a right or a contract.

In any case, we will keep your personal data for a period not exceeding that necessary with regard to the purposes for which they are processed in accordance with the uses set out in this Charter and in compliance with laws and regulations.

5. What are your rights?

You are the only ones to have communicated to us the data in our possession, via the Site. You have rights over your personal data.

In accordance with the regulations on the protection of personal data, in particular articles 15 to 22 of the GDPR, and after having proved your identity, you have the right to ask us for access to the personal data concerning you, the rectification or erasure thereof.

In addition, within the limits set by law, you also have the right to oppose the processing, to limit it, to decide on the post-mortem fate of your data, to withdraw your consent at any time and the right to portability. Datas
of a personal nature provided.

6. Can we modify the Charter?

We reserve the right to modify the Charter at any time. It is therefore recommended to consult it regularly. If there are any changes, we will post those changes on this page and where we deem appropriate based on the purpose and significance of the changes made.

Your use of the Site after any changes means that you accept those changes. If you do not accept certain substantial modifications made to this Charter, you must stop using the Site.