Personal Data Privacy Policy

Article 1: Preamble

This privacy policy applies to the website: www.boplumedermatologie.fr

The purpose of this privacy policy is to inform users of the website:
o The manner in which their personal data is collected and processed. Personal data includes any data that can identify a user in the context of the services contractually provided by the site. This includes, in particular, first and last name, postal address, email address, date and place of birth, bank details, mobile phone number, user location, and IP address;
o What are the users' rights regarding this data?
o Who is responsible for the processing of personal data collected and processed;
o To whom this data is transmitted;
o Possibly, the site's policy regarding "cookie" files.
This privacy policy supplements the legal notices and the General Terms and Conditions of Sale, which users can consult at the following address: www.boplumedermatologie.fr

Article 2: General principles regarding data collection and processing

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of user data on the site comply with the following principles:

o Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that their data is being collected, and for what reasons their data is being collected;
o Limited purposes: the collection and processing of data is carried out to meet one or more specific purposes as defined in these general terms of use;
o Minimization of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site are collected;
o Limited data retention: data is retained for a limited period, of which the user is informed. When this information cannot be provided, the user is informed of the criteria used to determine the retention period;
o Integrity and confidentiality of data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if at least one of the following conditions is met:

o The user has expressly consented to the processing;
o The processing is necessary for the proper execution of a contract;
o The processing is in response to a legal obligation;
o The processing is justified by a necessity related to safeguarding the vital interests of the person concerned or of another natural person;
o The processing may be explained by a necessity related to the performance of a task carried out in the public interest or which falls within the exercise of public authority;
o The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.

Article 3: Personal data collected and processed during browsing on the website

1. Data collected and processed and method of collection

The personal data collected on the site is as follows:
Name, Surname, Email, address, orders placed by the user.

This data is collected when the user performs one of the following actions on the site:

a request for information;
an online order.

The data controller will store in its computer systems on the site and under reasonable security conditions all the data collected for a period of: 12 months plus the limitation period in matters of consumer or commercial law.
The collection and processing of data serve the following purposes:
To respond to inquiries or online sales.

2. Transmission of data to third parties

The personal data collected by the site is not transmitted to any third party other than the structures of the group to which it belongs, and is processed only by the publisher of the site and/or the structures of the group to which it belongs.
Its technical subcontractors (IT management, web design, hosting, etc.) are authorized to access the data within the limits provided by the GDPR.

3. Data Hosting

The site is hosted by: Shopify Inc.
Address: 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada
Contact: support@shopify.com

The data collected and processed by the site is exclusively hosted and processed in France.

Article 4: Data Controller

1. The data controller

The data controller for personal data is BOPLUME DERMATOLOGY. They can be contacted as follows: contact@boplumedermatologie.fr. The data controller is responsible for determining the purposes and means of processing personal data.

2. Obligations of the data controller

The data controller undertakes to protect the personal data collected, not to transmit it to third parties without the user having been informed and to respect the purposes for which this data was collected.

The site uses an SSL certificate to ensure that information and data transfers through the site are secure. An SSL (Secure Socket Layer) certificate is designed to secure the data exchanged between the user and the website.

Furthermore, the data controller undertakes to notify the user in the event of rectification or deletion of data, unless this would entail disproportionate formalities, costs and procedures for them.

In the event that the integrity, confidentiality or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means.

Article 5: User Rights

In accordance with regulations concerning the processing of personal data, the user has the rights listed below.
In order for the data controller to comply with their request, the user is required to provide them with: their first and last name as well as their email address.
The data controller is required to respond to the user within a maximum period of 30 (thirty) days.

1. Presentation of user rights regarding data collection and processing

1.1 Right of access, rectification and erasure
The user can access, update, modify or request the deletion of their personal data by following the procedure outlined below:
contact@boplumedermatologie.fr

1.2 Right to restriction and objection to data processing
The user has the right to request the limitation or to object to the processing of their data by the site, and the site cannot refuse this request unless it can demonstrate the existence of legitimate and compelling reasons that may override the interests, rights and freedoms of the user.
To request the restriction of the processing of their data or to object to the processing of their data, the user must follow the following procedure:
contact@boplumedermatologie.fr

1.3 Right not to be subject to a decision based solely on automated processing
In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision produces legal effects concerning him or her, or similarly significantly affects him or her.

1.4 Right to determine the fate of data after death
Users are reminded that they can organize what should happen to their collected and processed data if they die, in accordance with Law No. 2016-1321 of October 7, 2016.

1.5 Right to refer the matter to the competent supervisory authority
In the event that the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if he believes that one of the rights listed above has been infringed, he has the right to contact the CNIL (National Commission for Information Technology and Freedoms, https://www.cnil.fr) or any competent judge.

3. Personal data of minors
In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over can consent to the processing of their personal data.

If the user is a minor under 15 years of age, the agreement of a legal representative will be required in order for personal data to be collected and processed.

The website publisher reserves the right to verify by any means that the user is over 15 years of age, or that they have obtained the agreement of a legal representative before browsing the site.

Article 6: Use of "cookie" files

The site uses “cookies”.

A “cookie” is a small file (less than 4 KB) stored by the website on the user's hard drive, containing information about the user's browsing habits.

These files allow it to process statistics and traffic information, facilitate navigation and improve the service for the user's convenience.

For the use of “cookie” files involving the saving and analysis of personal data, the user’s consent is necessarily requested.

This user consent is considered valid for a maximum period of one (1) month. After this period, the site will again request the user's permission to store "cookie" files on their hard drive.

Users are hereby informed that they can object to the recording of these “cookie” files by configuring their browser software.

For your information, users can find instructions on how to configure their browser software to block the recording of “cookie” files at the following addresses:

Chrome: https://support.google.com/accounts/answer/61416?hl=fr
Firefox: https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website
preferences
Safari: http://www.apple.com/legal/privacy/fr-ww/
Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows
internet-explorer-delete-manage-cookies
Opera: http://www.opera.com/help/tutorials/security/cookies/

If the user chooses to disable cookies, they can still browse the site. However, any site malfunction caused by this action cannot be attributed to the site's publisher.

Article 7: Conditions for modifying the privacy policy

This privacy policy can be consulted at any time at the address indicated below:

https://boplumedermatologie.fr/pages/politique-de-confidentialite in order to guarantee its compliance with current law.
Therefore, users are encouraged to regularly review this privacy policy to stay informed of any changes.