Privacy policy and protection of personal data
Brutale Broderie offers ready-to-wear items for sale on its website www.brutalebroderie.com.
Within the framework of its activity, Brutale Broderie collects personal data of the users of its website.
Brutale Broderie undertakes to ensure that the collection and processing of this type of data on the www.brutalebroderie.com website complies with the European Union Regulation n°2016/679 known as the General Regulation on Data Protection (hereafter referred to as the "GDR") and with the Law n°78-17 of 6 January 1978 known as the "Informatique et Libertés" Law.
Brutale Broderie reserves the right to modify this Privacy Policy at any time in order to comply with legislative and regulatory changes applicable in this area.
Certain services may be altered or inaccessible without consent to the collection of the data mentioned in this Privacy Policy.
This Privacy Policy is an integral part of Brutale Broderie's General Terms and Conditions of Use and General Terms and Conditions of Sale.
Who is the controller?
The data controller, who collects personal data and carries out the processing of these data is :
Brutale Broderie, whose head office is located at 24 avenue Pierre Donzelot 35700 RENNES
What personal data is collected by Brutale Broderie and why?
Brutale Broderie collects several types of personal data from users of the website www.brutalebroderie.com.
Brutale Broderie undertakes to collect data that is strictly adequate, relevant and limited to what is necessary for the determined, explicit and legitimate purposes of treatment for which they are intended.
Brutale Broderie undertakes to process the data collected in a lawful, fair and transparent manner and in accordance with the purposes of processing as set out in article 6 of the RGPD.
Personal and contact data of the user :
Data filled in when subscribing to the Brutale Broderie newsletter: email address
Purpose: to send you newsletters so that you can be informed of news, collaborations and events organised by Brutale Broderie.
Legal basis for processing: your consent
Data filled in when creating a customer account and when making a purchase without an account: email address, first name, surname, date of birth, billing and delivery postal addresses, mobile phone number, password.
Purpose: we need it to create and manage your Brutale Broderie customer account, to process your orders, complaints, cancellations and returns.
Legal basis of the processing: the execution of the sales contract concluded between you and Brutale Broderie.
Data collected during exchanges with Brutale Broderie's customer service (information, order tracking, delivery, returns, maintenance, satisfaction, product defects etc.).
Purpose: Brutale Embroderie after-sales service
Legal basis for processing: the execution of the sales contract concluded between you and Brutale Broderie.
Transaction data :
Data filled in when placing an order and returning a product (surname, first name, billing and delivery addresses, telephone number, email address, information about the means of payment).
Purpose: ordering, carrying out transactions, deliveries and returns
Legal basis for processing: the execution of the sales contract concluded between you and Brutale Broderie and the respect of our legal obligations.
Navigation data :
Data collected automatically when the user browses the www.brutalebroderie.com website (date, connection and/or browsing time, browser type, browser language, IP address, location and geolocation data).
Purpose: implementation of the T&Cs, security and internal statistics
Legal basis for processing: Brutale Broderie's legitimate interest to offer you services adapted to your needs and respect of our legal obligations.
Data relating to means of payment (credit card number, expiry date, visual cryptogram, security code) are collected directly by our STRIPE and PAYPAL service providers.
Brutale Broderie does not have access to data relating to your means of payment.
In order to facilitate your subsequent purchases, and after Brutale Broderie has received your express consent, you may choose to save your bank details beyond the transaction in your customer account.
You can at any time modify or delete the saving of this banking data in your customer account.
Cookies
When you browse the Brutale Broderie Site, information relating to the browsing of your device may be recorded by means of files called "cookies" or "tracers", provided that you have expressly and previously consented to this.
As soon as you access the Site, you are informed of their existence and you are asked whether you accept them or not.
By clicking on "I accept", you consent to this navigation information being recorded on the www.brutalebroderie.com website. Your agreement will then be valid for 13 months. Beyond this period, Brutale Broderie will ask for your consent again.
If you refuse the cookies or if you delete them, we inform you that you will no longer be able to benefit from the functionalities for which they are necessary.
These cookies are only intended to facilitate your customer experience on the Brutale Broderie Site (memorisation of your shopping basket and automatic connection to your customer account) as well as to measure the frequentation of our site.
Brutale Broderie does not re-target advertising.
Who are the service providers who have access to your data?
Your personal data will not be disclosed, transferred or sold to third parties under any circumstances.
Your data may be transferred to trusted service providers, whose services we use to provide you with ours.
Your data may also be communicated to third parties if Brutale Broderie is obliged to do so by law, a court decision or a judicial requisition.
Shopify (hosting of the www.brutalebroderie.com website)
Stripe (online payment)
PayPal (online payment)
Colissimo / La Poste (transport and delivery of your Brutale Broderie pieces)
What are your rights?
In accordance with Articles 14 to 22 of Regulation n°2016/679 of 27 April 2016, any individual using the www.brutalebroderie.com website has a right of access to his or her personal data, a right to rectify them, as well as, in certain cases and/or under certain conditions, a right to have the data erased, a right to have them ported, a right to limit their processing, and a right to object to their processing.
Pursuant to Article 85 of the French Data Protection Act of 6 January 1978, you may also define guidelines for the storage, deletion and communication of your data after your death.
You can exercise all these rights by contacting Brutale Broderie's customer service department at the following e-mail address: pauline@brutalebroderie.com or by post at the following address: BRUTALE BRODERIE / Pauline Malingrey 24 avenue Pierre Donzelot 35700 Rennes, France.
In case of reasonable doubts about your identity in the exercise of these rights, Brutale Broderie may ask you to justify them.
In the absence of a reply within one month of receipt of the request, unless duly notified, or in the absence of a satisfactory response from Brutale Broderie, you may lodge a complaint with the competent supervisory authority.
In France, this complaint should be addressed to the Commission Nationale Informatique et Libertés (CNIL) by mail 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07 or on its website www.cnil.fr.
Terms and duration of data retention
The data collected is kept in a form allowing the identification of the persons concerned for a period not exceeding that necessary for the purposes for which it is processed.
In all cases where the processing of personal data is based on your consent, they will be kept until you withdraw your consent.
The data that may be collected on the occasion of Brutale Broderie's personalised orders, on the other hand, will only be kept in a form that allows the identification of the persons concerned for the time of the design and development of the design concerned and until the subsequent order is completed.
The data contained in your customer account (surname, first name, email address, password, billing and delivery postal addresses, mobile phone number, date of birth, garment size) are kept for a period of three years from the last order placed on the Brutale Broderie website.
The data filled in at the time of a purchase without creating a customer account are kept for the time necessary for the execution of the contract.
In application of article L.123-22 of the French Commercial Code, the data relating to the transactions filled in when placing an order and returning a product will be kept for accounting purposes for a period of 10 years from the end of the financial year concerned.
Brutale Broderie undertakes to take all useful precautions to guarantee the appropriate security of the personal data we hold.
***
If you have any questions about this Privacy and Data Protection Policy, please do not hesitate to write to pauline@brutalebroderie.com.