GPDR

Thank you for your interest in our site.

We attach great importance to the protection of your personal data. It goes without saying that we comply with the legal provisions of the General Data Protection Regulation (GDPR) and any applicable national privacy policies. Below you will find information on how we implement data protection in the Arôma'plantes online store.

The person responsible for data entry and processing as described below is SAS Arôma'plantes - Route du Mont Ventoux - 84390 Sault.

1. Purpose of data protection

The object of protection relates to personal data. It includes so-called basic data such as your name, postal address, e-mail address and telephone number as well as information relating to your account, but also usage data, such as the time of your visit to our site, the browser you used and other data generated by your visit to our site. Also included is information about your participation in the online services of the Arôma'plantes online store (such as games, surveys, forums, chats) as well as the contents of your baskets, your orders and other personal information and requests.

We collect, store and use your personal data only to carry out your order or the service you have requested, on the basis of a legal authorization and within the framework of a consent that you may have given us separately. You can revoke your consent at any time for the future. The resulting consequences are specified below.

2. Data Security

You can provide us with your personal data in complete confidence. We secure the Arôma'plantes online store and your data by implementing technical and organizational measures against damage, destruction, alteration or access by unauthorized persons. Despite regular checks, it is nevertheless impossible to guarantee flawless protection against all risks.

When you register with us as a customer, access to your customer account is only possible after entering your personal password. You should always treat your payment information as strictly confidential and close your browser window when you have finished communicating with us, especially if you share your computer with others. We also take data protection within the company very seriously. Our employees and the service providers with whom we work are committed to respecting the obligation of confidentiality and the provisions relating to data protection.

Access to your personal data is strictly limited to employees authorized by virtue of their functions and bound by an obligation of confidentiality. However, the data collected may possibly be communicated to subcontractors contractually responsible for the performance of the tasks necessary for the proper functioning of the Site and its services as well as the proper management of the relationship with you, without you needing to give your permission. It is specified that, within the framework of the performance of their services, the subcontractors have only limited access to your data and have a contractual obligation to use them in accordance with the provisions of the applicable legislation in terms of protection of personal data. The subcontractors undertake not to sell, rent, assign or give access to third parties to your data without your prior consent, unless they are forced to do so for a legitimate reason (legal obligation, fight against fraud or abuse, exercise of defense rights, etc.)

3. Usage Data

For a simple visit to our site, it is not necessary for you to provide us with personal data. We only store and subsequently use access data without personal reference, such as browser type, screen resolution, operating system, page from which you are visiting us, user ID. 'an advertising medium through which you visit the online store, the type of device with which you visit the online store (PC, smartphone, Smart TV, etc.), the date and time of your visit, the pages viewed, the items you viewed and how you interacted with the online store or the name of the requested file. This data is evaluated to improve our offer and does not identify you.

4. Data processing in connection with the purchase or other actions

When you register as a customer, when you shop in our online store, when you participate in a game or when you want to use other services, we need your personal data. This is the case, for example, for the dispatch of goods, or to respond to individual inquiries regarding our offers and our products. We collect, store and use your personal data required for this purpose only insofar as this is necessary for the execution of the contract or the provision of the service, on the basis of a legal authorization or on the basis of your consent. expressly to the further use of your data. We store and use the personal data that you communicate to us in the context of your order, on the basis of Article 6, paragraph 1, letter b) of the GDPR for the processing of your orders or for the implementation terms of use (e.g. product review, wishlist). You decide how you use our online store.

When you register for the online shop, we store the data required for this on the basis of Article 6 (1) (b) GDPR until you terminate the user relationship. . You can modify or delete your profile in your account at any time. The data is then deleted from our system provided that there is no retention period or if the data does not continue to be required in certain cases (eg in the event of non-payment for debt collection) .

We retain and delete personal data in accordance with the retention periods defined by tax and commercial legislation as soon as the data is no longer required for the intended use.

Once an order has been placed, we use your name, address and customer number for sending postal mailings. The legal basis is Article 6(1)(f) GDPR. We also use your email address to send you relevant marketing information for up to one year following your last purchase. If you do not wish to receive advertising by post, you can notify us in writing, by telephone or by e-mail.

5. Payment data

In the case of payment in advance, you do not provide us with any direct payment data via the online shop.

If you choose to pay by credit card, the data is processed by the Caisse Régionale du Crédit Agricole Alpes Provence payment platform.

The E-transactions Platform designates the IT platform used by the Caisse Régionale du Crédit Agricole Alpes Provence, allowing the technical execution of the payment transaction between the company Arôma'plantes and the user of the payment instrument. and to ensure checks during card payments.

The Arôma'plantes company will have access to various personal data concerning bank card holders. This information does not include the confidential code (or any other personalized security data) for using the card and the visual cryptogram. Arôma'plantes can only use this personal data for the performance of the contract. Except for legal and regulatory obligations, Arôma'plantes cannot make any use of it that is not directly linked to the performance of the contract. It also ensures the existence and implementation of physical and logical access protection and control devices to this data.

3D Secure designates the secure Internet payment protocol (VerifiedbyVisac for Visa and MasterCardSecurecodec for MASTERCARD) making it possible to secure transactions and obtain proof of acceptance from the bank showing the checks carried out and the validity of the payment order.

In addition to the authorization request, the 3D Secure program generates a payment instrument user authentication request for payments made by means of CB, VISA, or MASTERCARD cards, from the acceptance payment page.

The response to the authentication request generated by the 3D Secure program is systematically transmitted to the client. Obtaining proof of acceptance is materialized by a positive response to the authentication request.

The operations will not be guaranteed in the event of dispute of the payment order by the user of the payment instrument if the customer has not obtained this proof of acceptance.

By default, the "E-transactions services" option includes the technical acceptance of card payments via the Paylib payment solution.

When you pay with us by credit card, you agree that your card data (type of card, name of holder, card number and period of validity, but not the check digit) are stored in encrypted form by the Caisse Régionale du Crédit Agricole Alpes Provence in order to facilitate your purchases in our online store by selecting the registered credit card. You can revoke your consent at any time for the future by sending us a written declaration by post or e- mail. In this case, each time you make a purchase, you must manually enter the bank card data again.

6. Transmission of data to third parties

In the context of subcontracting as provided for in Article 28 of the GDPR, we transfer your data to service providers who support us in the operation of our website and the related processes. Our service providers are strictly bound by our instructions and contractually bound to do so.

We use the services of the following providers:

hosting service;

shipping service;

payment service.

These service providers are only entitled to use your data for order processing and not for any other purpose. It is only transmitted to public institutions and authorities authorized to receive information within the framework of legal information obligations.

If you choose to be delivered by the DPD or La Poste services, the e-mail address that you indicated in the order will be sent by our care to the carrier and used within the framework of the delivery of the parcel to inform you of the delivery of your order to the relay point of your choice or to notify you of the probable time of delivery of the package. DPD and/or La Poste will use the e-mail addresses transmitted to them exclusively to provide information on the delivery of the parcel and will not pass them on to unauthorized third parties.

You agree that we communicate your e-mail address to DPD and La Poste for the exclusive purpose of informing you about the progress of the delivery. As part of this consent, you also give your consent to the sending of relevant emails. You can revoke your consent for future orders at any time by choosing another shipping method with another shipping service.

7.Newsletter

We offer you the possibility to subscribe to our newsletter on our website. If you have given us separate permission for us to inform you by e-mail about our own products and services, we process accordingly in accordance with Article 6 (1) (a) GDPR.

You may have given us the express permission below when subscribing to our newsletter, when registering during the order process. In this case, your personal data will be used, in accordance with the following declaration of consent, with a broader scope than that indicated so far in this data protection declaration:

Authorization to send e-mails.

I would like to be informed by e-mail about current trends, promotions and games offered by Arôma'plantes that are of interest to me.

You also consent to the information stored in connection with your e-mail address (customer master data, purchase data) and usage data (use of the online shop) being used to personalize the content of the newsletters . The basic customer data is the data entered during the purchase (address, city, country, telephone). Purchase data is information about the purchases you have made and refers to the products purchased (product groups, prices/discounts, item color and size) and the date of purchase. Usage data is based on the pages you have visited (categories or products viewed as well as functions used such as shopping cart, wishlist, fitting room and clothing donation). The purpose of the processing is the sending of e-mails that you have requested. In this respect, the data collected is only used to send, to the e-mail address that you have communicated to us and that you have confirmed, promotional e-mails which may include information on Arôma'plantes, on offers and discounts, etc., tailored to your personal interests and behavior.

In addition, we may also use your data for any of the following purposes:

Internal and external (security) controls;

Development of our systems and processes;

Use for system development/test system development;

Development of services and products;

Control and optimization of customer needs analysis measures;

Control, in digital forms of reporting, of the success of the measures implemented;

Data enrichment, for example by publicly available or paid data;

Defense and proof in the event of a dispute;

You can revoke your consent at any time without affecting the legality of the processing carried out so far. If you withdraw your consent, we will stop processing the data concerned. If you no longer wish to receive newsletters in the future, you can unsubscribe at any time, for example by sending an e-mail to info@aromaplantes.com or via the link to unsubscribe from the newsletter which you will find in each e-mail containing the newsletter.

8. Services and online ordering

You can contact us via a web form or by phone. To be able to associate your request with your customer account and answer any questions you may have, we need your first name, last name and e-mail address. You may provide other information, but you are not required to do so. The legal basis for the processing is Article 6(1)(b) GDPR. We use your data exclusively to process your request and fulfill the order.

9. Personal recommendations on our website

Our site displays recommendations based on your behavior as a user. User behavior data is based on items you have previously viewed, searched for or purchased on our site. These data are stored in pseudonymised form in the recommendation device. We also use cookies to recognize users and associate them with usage data. Your personal data, such as name, date of birth address are not saved in this context. The recommendation device does not allow you to be identified.

You hereby consent to cookies being placed on your computer for the purposes described above, usage data about you being collected, stored and used. You also agree that your data will be stored in cookies beyond the session duration and can, for example, be called up again on your next visit to the site.

You can revoke this consent for the future at any time by refusing cookies in your browser settings. You can set your browser in such a way that the storage of cookies is only accepted with your consent. We draw your attention to the fact that the revocation of your consent to the storage and processing of cookies only has effect for the computer and the browser on which the setting is made. Please note that we can no longer offer you personalized product recommendations on the site.

10. Our own and third-party cookies.

Based on your consent, we collect and store information about how you use our offer. This information allows us to provide you with the most personalized and user-friendly offer possible. These cookies are necessary for the performance of the contract in accordance with Article 6(1)(b) GDPR. Other cookies (such as tracking or remarketing) are used to safeguard our legitimate interests in the best possible functionality of the site as well as to ensure a user-friendly and efficient design of the page visit, in accordance with Article 6, paragraph 1, point f), of the GDPR.

We use cookies, which are small text files that your browser stores on your computer or mobile phone. A cookie does not itself contain or collect any personal information about you or your internet usage. They are nevertheless important, for example, to analyze the behavior of visitors to our site, or to display personalized offers, or to keep registered users logged in for the duration of their visit. Cookies allow the site to “remember” you, either for the duration of your current visit (“session cookie”) or for several visits (“persistent cookie”). Their primary role is to enable you to use our site more effectively and to enable certain features on the site.

You hereby consent to the use of cookies and therefore to the collection, storage and use of usage data relating to you. You also consent to your data being stored in cookies beyond the duration of the session and can, for example, be called up again on your next visit to the site.

How can you control the receipt of cookies?

Most browsers automatically accept cookies. You can prevent cookies from being stored on your computer or mobile phone by configuring your browser so that it does not accept them. You will find detailed instructions on how to change your cookie settings by consulting the "Help" section of your browser.

You can also configure your browser so that you are informed about the location of cookies. The use of cookies then becomes transparent to you. If you do not want us to recognize your computer, you can prevent cookies from being stored on your hard drive through your browser settings. You can also delete cookies already stored on your device at any time.

For the management of cookies and user choices, the configuration of each browser is different. It is described in the browser's help menu, which allows the user to know how to modify his wishes in terms of cookies.

For exemple :

- For Internet Explorer™:

 https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies

- For Edge: https://privacy.microsoft.com/fr-fr/windows-10-microsoft-edge-and-privacy;

- For Safari™: http://www.apple.com/legal/privacy/fr-ww/cookies/ and http://www.apple.com/legal/privacy/fr-ww/;

- For Chrome™: https://support.google.com/chrome/answer/95647?hl=fr&hlrm=en;

- For Firefox™: https://support.mozilla.org/fr/kb/enable-disable-cookies-preferences;

- For Opera™: http://help.opera.com/Windows/10.20/fr/cookies.html.

The user can also consult the CNIL guide available at the following address: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

Even if you decide to refuse cookies in general, this of course does not prevent you from visiting our site. However, it may happen that, as a result, you may not be able to use all the features and services or that certain content offered by us may not be available.

You can object to the processing at any time. All you have to do is use one of the following options:

You can prevent the storage of cookies by setting your browser software accordingly. However, we draw your attention to the fact that in this case you may not be able to use all functions of this website to their full extent.

11. Duration of storage

The personal data of people who have been inactive for 3 years are deleted from our database at the end of this period.

We use PrestaShop cookies which contain information relating to the visit (id_customer, id_cart, id_lang,...)

Username,

Computer IP,

Information on the basket, orders

browser language,

connection dates...

A PrestaShop cookie lasts 480 hours (20 days).

12. Your rights as a user

Regarding the processing of your personal data, the GDPR grants you certain rights as a user of websites:

Right of access (article 15 of the GDPR):

You have the right to obtain confirmation that personal data concerning you is being processed; if this is the case, you have a right to information on this personal data and on the information set out in detail in Article 15 of the GDPR.

Right to rectification and right to erasure (“right to be forgotten”) (Articles 16 and 17 of the GDPR):

You have the right to obtain, as soon as possible, the rectification of personal data concerning you which are inaccurate and you have the right to obtain, if necessary, that incomplete personal data be completed.

You also have the right to obtain the erasure, as soon as possible, of personal data concerning you when one of the reasons listed in detail in Article 17 of the GDPR applies, for example when the data is no longer necessary for the purposes pursued:

Right to restriction of processing (Article 18 of the GDPR):

You have the right to obtain the restriction of processing when one of the elements listed in Article 18 of the GDPR applies, for example during the duration of a possible verification, if you have objected to the processing.

Right to data portability (Article 20 of the GDPR):

In certain cases listed in detail in Article 20 of the GDPR, you have the right to receive the personal data concerning you, in a structured, commonly used and machine-readable format, or to obtain that this data is transmitted to a third.

Right to object (Article 21 of the GDPR):

When data is collected on the basis of Article 6(1)(f) of the GDPR (data processing for the purposes of legitimate interests), you have the right to object at any time, for reasons relating to your particular situation, to the processing of personal data. In this case, we will no longer process the personal data, unless we demonstrate compelling legitimate grounds for the processing which override the interests and rights and freedoms of the data subject, or for the recognition, exercise or defense of legal claims.

Right to lodge a complaint with a supervisory authority:

In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, if you consider that the processing of personal data concerning you constitutes a breach of the provisions relating to data protection. . The right to lodge a complaint can be exercised with a supervisory authority in the Member State in which your habitual residence is located, your place of work or the place where the infringement is alleged to have been committed.

13. Contact Information / Data Protection Service.

For any questions, information and other requests, please contact info@aromaplantes.com or the contact address:

Aroma'plants

Mont Ventoux road

84390 Sault

France

For calls from France you can call the following number:

04 90 64 14 73 (Free call. If you contact us from a mobile, the cost of the call will depend on your telephone operator.)

Our data protection department is also at your disposal for any information or suggestion on the question of data protection:

Aroma'plants

Mont Ventoux road

84390 Sault

France

Web: http://www.distillerie-aromaplantes.com/

Email: info@aromaplantes.com

tel . : 0033 4 90 64 14 73

Aroma'plants

Version: 06 June 2022

Service and order hotline: 04 90 64 14 73

Monday to Friday 9:00 a.m. to 6:00 p.m.

Free call. If you contact us from a mobile, the cost of the call will depend on your telephone operator.