We use cookies to make your experience better. To comply with the new e-Privacy directive, we need to ask for your consent to set the cookies. Learn more.
The Personal data protection charter is intended to inform customers and users about how the personal data they provide via the website https://boutique.toulousefc.com/ and https://boutique.toulousefc.com/ (the « Website ») is collected, used, and shared.
1. WHAT IS THE IDENTITY OF THE DATA PROCESSING MANAGERS?
The joint data controllers, within the meaning of European Regulation No. 2016-679 of 27 April 2016 and the amended French Data Protection Act of 6 January 1978, are:
2. THE NATURE OF THE PERSONAL DATA COLLECTED
As part of the use of the Website, its customers and users will be asked to provide certain Personal Data necessary to provide the products and services requested, in particular during purchases made on the Website, when creating a customer account, when registering for communications or when contacting our customer service.
SITUATION |
PERSONAL DATA COLLECTED |
LEGAL BASIS |
DURATIONS |
Creating of customer account |
· Identification data |
· Performance of the sales contract
|
At the latest 5 (five) years after last contact between ORECA company and customer |
Order processing |
· Identification data · Data relating to orders · Data related to payment methods |
· Performance of the sales contract
|
10 (ten) years for sales data necessary to comply with legal and regulatory obligations (limitation period, guarantee or archiving period) |
Verification following fraud or suspicion of fraud |
· Identification data · Navigation data · Data related to payment methods |
· Performance of the sales contract · Legal and regulatory obligation
|
13 (thirteen) months form last check and 5 (five) years if considered fraud |
Online browsing : Data collected by cookies or other tracking technologies |
· The various statistics related to the use of the Website ; · Information relating to the navigation of users on the Website in an « anonymized » manner in order to offer the products corresponding to their search on the Website |
· Legitimate interest · Consent |
13 (thirteen) months following your consent
|
Newsletters |
· Email address |
· Execution of the contract for customers · User's consent |
3 years after the last exchange with the client, or 3 years after the renewal of the consent |
Contact Form |
· Identification data |
· Legitimate interest |
5 (five) years after last contact between ORECA company and customer |
3. PURPOSES OF PROCESSING
The Personal Data collected on the customer and the user of the Website are the subject of computer processing enabling data processing managers to :
If this Personal Data is not transmitted, the order cannot be processed.
4. THE RECIPIENTS OF THE DATA
The Data communicated by the customer or by the user of the Website are collected by ORECA and its subsidiaries, in compliance with the legislation applicable to this practice.
These Data may be communicated to :
Any communication of these Data to a third-party is governed by the conclusion of a contract guaranteeing the protection of the Data communicated and the respect of the rights enjoyed by the users of the Website.
5. TRANSFER OF PERSONAL DATA
Data processing managers keeps Personal Data collected on servers located in the European Economic Area (EEA).
In the event that some of this Data should be communicated outside the European Economic Area, ORECA will ensure that these transfers are carried out in strict compliance with General Data Protection Regulation no. 2016/679.
6.WHAT ARE YOUR RIGHTS ON YOUR PERSONNAL DATA ?
The customer and user of the Website have, subject to the limits provided for by the regulations in force, the following rights with respect to the processing of your Personal Data :
The right of access allows to obtain from ORECA the nature of the processing of the Personal Data of the customer or the user of the Website (type of Data, origin of collection, etc.). It also makes possible to request a copy of all this information.
The right of rectification allows to obtain from ORECA, as soon as possible, the correction of the Personal Data of the customer or the user of the Website.
This right allows the customer or the user of the Website to obtain the early deletion of the Personal Data processed by ORECA. This right may be exercised subject to the compelling nature of the treatment in question.
In all circumstances, the data of the users are automatically deleted at the end of the retention period stipulated by this Data protection policy.
This right makes it possible to refuse Data processing or no longer appear in it. This right may be exercised subject to the compelling nature of the treatment in question.
This right allows the customer or the user of the Website to withdraw his content at any time, for the purposes for which ORECA has requested his consent authorizing the collection of his Personal Data.
This right allows the customer or the user of the Website to have his Personal Data handed over in a format that can be technically exploited by him or any person of his choice.
For any question relating to this Charter and/or to exercise your rights as described above, you may contact ORECA:
Each request must be submitted in writing and must be signed and accompanied by a photocopy of an identity document.
Data processing managers undertake to reply within a maximum of 1 (one) month of receipt of your application. If necessary, this period may be extended by 2 (two) months given the complexity and/or the number of requests addressed to ORECA. In this case, the customer will be informed of this extension and the reasons for the postponement.
In the event that a customer or a user of the Website considers that his rights have not been respected, hem ay request the intervention of the CNIL : www.cnil.fr
7. MODIFICATION OF THE PERSONAL DATE PROTECTION CHARTER
Data processing managers may occasionally modify the Charter of personal data protection, in order to comply with regulatory, jurisprudential, editorial or technical developments.
If applicable, the "last update" date will be changed to indicate the date the changes were made.
When necessary, customers and users will be informed and/or asked for their consent.
Data processing managers advises to regularly consult this page in order to be aware of any changes or updates to the Privacy Policy.