This privacy policy aims to explain to you why we collect your data and how we will protect them.

Isabelle Bouhon – Chrom'Art is committed to the protection of your personal data and your privacy.

In this respect, and in application of the General Regulation of Data Protection (hereinafter " RGPD "), we provide, below, the conditions in which your personal data are to be processed by us.

What personal data do we process ?

Purposes :

We may collect and retain any of your personal data, in particular for :

Process and respond to your messages, Create, and manage access to your accounts, Receive and process your order, Receiving and processing your participation in a survey or enters a competition, Manage your subscriptions to our email newsletters, to Establish and ensure the monitoring of the commercial relationship that may result from your posts, see your payment, Ensure that the accounting and the management, to Improve our follow-up and customer service, Manage the smooth functioning and personalisation of the services, send You marketing and advertising information according to your preferences, Detection of attacks and uses litigation against fraud, Remember your choice regarding the use of the cookies, Process and respond to your requests for exercise of rights, To meet the regulatory requirements in force or in the process of adoption

Categories of data :

Contact information (for example name, surname, phone number, email), technical information, and location generated in the context of the use of our services

Foundation legal treatments

The processing of personal data implemented are based :

  • Be on the consent of the person concerned (Article 6.1.has the RGPD) for all treatments that require the collection's prior consent. In the online forms, the mandatory fields are marked with an asterisk. Failing to answer the mandatory questions, we will not be able to provide you with the requested services.
  • Either for the execution of a contract or the execution of pre-contractual measures,
  • For the pursuit of a legitimate interest (Article 6.1.e of the RGPD).
  • Soit pour le respect d’une obligation légale ou règlementaire ;

Your data will be kept for the time necessary for the fulfilment of the purposes mentioned above.

The period of conservation of personal data of the Customers depends on the purpose in question. In this framework, the Customers ' personal data is kept for the time necessary to perform
de leur requête. A défaut d’une quelconque réalisation, les données personnelles sont supprimées dans les délais recommandés par l’Autorité de Protection des Données, au terme d’un délai de trois ans à compter de leur collecte, sous réserve : – des possibilités et obligations légales en matière d’archivage,
– obligations of retention of certain data, for evidentiary purposes, and/or anonymization of
these.
Les données personnelles du Client collectées et traitées, pour les besoins d’exécution des offres, sont conservées pour la durée nécessaire à la gestion de la relation contractuelle. Par dérogation, les données personnelles requises pour à l’établissement de la preuve d’un droit ou d’un contrat sont archivées conformément aux dispositions légales (5 ou 10 ans après la fin de la relation commerciale selon le cas).

What are the recipients of your data ?

Your personal data is intended to Isabelle Bouhon – Chrom'Art.

Our internal services : They are treated by the staff of our different services such as commercial service or the service in charge of computer security., Businesses or people you trust : they treat your information to us for the purposes set out above, in accordance with our instructions as they are described in the privacy Policy and all other use cases appropriate in terms of privacy and security., Sub-contractors technical : The personal data about you may be transferred to our sub-contractors in technical terms (within the meaning of section 4.8 of the RGPD) so framed strictly. In the event of a transfer, we will ensure that sub-contractors comply with the RGPD and to take measures technical and organizational to ensure the protection of data (art. 28 of the RGPD).

Analysis of traffic (such as Google Analytics), Payment service provider (such as Stripe)

Sometimes we need to allow our partners to treat, in our name, the personal information we hold about you for the purposes set out in this policy or for any other reason required by law.

The Customers ' personal data collected is hosted in France.

In the case of use of a service provider located outside of the european Union, we are committed to ensuring that appropriate measures have been put in place to ensure that personal data are an adequate level of protection.

How to Isabelle Bouhon – Chrom'Art preserves the safety of your data ?

We put in place all the technical and organizational measures to ensure an appropriate level of security to your personal data, and in particular, to avoid any loss of confidentiality, integrity or accessibility.

We do frequent backup of your data, We proceed to the encryption of your data to protect them during their transfer, to the extent possible, we limit access to personal information to only those who are in need of treatment, ensure that these third-party guarantee to the said personal data the same level of protection, Put in place technical and organizational measures to ensure the conservation of personal data of Customers is secure, and for the duration necessary for the exercise of the objectives pursued.

What are your rights over your personal data ?

In accordance with the Applicable Regulations, you have the following rights :
A right of rectification : you have the right to obtain the rectification of inaccurate data concerning you. You also have the right to complete incomplete data concerning you, by providing a supplementary declaration. In case of exercise of this right, we are committed to communicating any correction to all of the recipients of your data,
A right of erasure : in some cases, you have the right to obtain the erasure of your data. However, this is not an absolute right and we can for legal reasons or legitimate retain such data.
A right to restriction of processing : in some cases, you have the right to obtain the limitation of the processing on your data,
A right to data portability : you have the right to receive your data that you have provided to us, in a structured format, commonly used and readable by a machine, for your own personal use or to pass to a third party of your choice. This right only applies when the processing of your data is based on your consent, on a contract or that the processing is carried out by automated means,
A right to object to the processing of : you have the right to object at any time to the processing of your data for the treatments based on our legitimate interest, a public interest mission, and those for the purposes of commercial prospecting. This is not an absolute right and we can for legal reasons or legitimate to refuse your request of opposition,
The right to withdraw your consent at any time : you can withdraw your consent to the processing of your personal data when the processing is based on your consent. The withdrawal of consent does not affect the lawfulness of the processing based on consent made prior to such withdrawal,
The right to lodge a complaint with a supervisory authority : you have the right to contact your data protection authority for you to complain about our practices relating to the protection of personal data,

En application du RGPD, les conditions d’exercice de ces droits peuvent varier selon la base de licéité du traitement mentionné dans le premier paragraphe.
We will respond to any exercise of the right as soon as possible and in any event within a period of 30 days from the receipt of the request.

We reserve the right to :

  • To ask for proof of the identity of the applicant in case of reasonable doubt about the latter, and in order to comply with its obligation of confidentiality,
  • To extend the response period of two months, informing then the applicant of such extension and of the reasons for the report within a period of one month from the receipt of the request,
  • To refuse to respond to an exercise of the right if it was considered abusive (in view of their number, their repetitive or systematic nature).

Reserve of change in the data protection Policy

This Policy of personal data protection may be set to change. Any amendment shall be published on this document in a timely manner. We recommend that you consult this page regularly to take notice of any changes or updates to our privacy policy.

0
    Shopping cart
    Your shopping cart is empty...