1. ACCESS DATA AND HOSTING
You can visit our web pages without providing any personal information. Each time a web page is visited, the web server only and automatically records a server log file that contains, for example, the name of the requested file, your IP address, the date and time of the visit, the amount of data transferred, and the requesting provider (access data), and which documents the visit.
This access data is used solely for the purpose of ensuring trouble-free operation of the site and improving our offer. In accordance with Art. 6, § 1, f) GDPR, this serves to safeguard our legitimate interests in providing a proper presentation of our offer, which prevail when balancing the respective interests of the parties. All access data is only processed for as long as is necessary to achieve the aforementioned processing purposes.
HOSTING
The web hosting and display services are partly provided by our service providers on our behalf. Unless otherwise stated in this data protection declaration, all access data as well as all data collected in the forms provided for this purpose on this website are processed on their servers. For any questions regarding our service providers and the basis of our cooperation with them, please contact the person indicated in this declaration of personal data protection. Our service providers are based in the United States. There is no European Commission decision finding an adequate level of data protection for the United States. Our cooperation is based on the standard data protection clauses adopted by the European Commission.
CONTENT DELIVERY NETWORK
In order to reduce loading times, we use a Content Delivery Network (“CDN”) for several of our offerings. This service allows for the distribution of content, for example, large multimedia files, through regional servers of external CDN service providers. As a result, access data is processed on the servers of the service providers. Our service providers act for us as subcontractors for data processing. For any questions regarding our service providers and the basis of our cooperation with them, please contact the person indicated in this declaration of personal data protection. Our service providers are based in the United States. There is no European Commission decision finding an adequate level of data protection for the United States. Our cooperation is based on the standard data protection clauses adopted by the European Commission.
Data Protection Declaration
The data controller is:
WILL SIDE
10 Chemin Latéral
94140 ALFORTVILLE
France
We are delighted by your interest in our online store.
Protecting your privacy is very important to us.
Below, we provide detailed information about the processing of your data.
2. DATA PROCESSING FOR CONTRACT EXECUTION, CONTACT
DATA PROCESSING FOR CONTRACT EXECUTION
We collect personal data when you voluntarily provide it to us in the context of your order or when you contact us (e.g. via contact form or email). Mandatory fields are marked as such, as in these cases we absolutely need this data to fulfill the contract or process your contact request, and without it you cannot complete your order and/or send your contact request. The respective input forms indicate which data is collected.
In accordance with Art. 6, § 1, b) GDPR, we use the data you provide to us to fulfill the contract and process your requests (including warranty claims and any existing performance defects, as well as any legal obligations to update). Further information on the processing of your data, especially regarding the transfer to our service providers for order fulfillment, payments, and deliveries, can be found in the following sections of this privacy statement. After complete fulfillment of the contract, we limit further processing of your data and delete it after the expiration of the statutory retention periods at the tax and commercial levels in accordance with Art. 6, § 1, c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6, § 1, a) GDPR, or if we reserve the right to broader use of data, authorized by law, and which we inform you about in this statement.
CONTACT
In the context of communicating with our clients, we collect personal data to process your requests in accordance with Art. 6, § 1, b) GDPR when you voluntarily provide it to us in the context of your contact (e.g. via contact form or email). Mandatory fields are marked as such, as we absolutely need this data to process your contact request. The respective input forms indicate which data is collected. After complete processing of your request, we delete your data, unless you have expressly consented to further use of your data in accordance with Art. 6, § 1, a) GDPR, or if we reserve the right to broader use of data, authorized by law, and which we inform you about in this statement.
3. DATA PROCESSING FOR DELIVERY EXECUTION PURPOSES
To execute the contract, in accordance with Art. 6, § 1, b) of the GDPR, we transfer your data to the delivery service provider, to the extent necessary for the delivery of the ordered goods.
4. DATA PROCESSING FOR PAYMENT EXECUTION PURPOSES
In the context of executing payments in our online shop, we work with the following partners: technical service providers, credit institutions, and payment service providers.
DATA PROCESSING FOR TRANSACTION EXECUTION PURPOSES
Depending on the selected payment method, we transmit the necessary data for processing the payment transaction to our payment service providers who work for us as subcontractors, or to the commissioned credit institutions or the selected payment service provider, to the extent necessary for the execution of the payment. This serves the purpose of contract execution in accordance with Art. 6, § 1, b) GDPR. In some cases, the payment service providers themselves collect the data necessary for processing the payment, for example on their own website or through technical integration into the ordering process. The data protection declaration of the respective payment service provider applies. If you have any questions regarding our partners for payment execution and the basis of our cooperation with them, please contact the designated person indicated in this statement on the protection of personal data.
DATA PROCESSING FOR FRAUD PREVENTION AND PAYMENT PROCESS OPTIMIZATION PURPOSES
Where applicable, we provide our service providers with additional data that they use, together with the data necessary for payment execution, as our subcontractors for the purposes of fraud prevention and optimization of our payment processes (e.g., invoicing, processing of contested payments, accounting support). In accordance with Art. 6, § 1, f) GDPR, this serves the safeguarding of our legitimate interests in fraud protection and efficient payment management, which prevail when balancing the respective interests of the parties.
5. EMAIL ADVERTISING
EMAIL ADVERTISING WITHOUT SUBSCRIBING TO THE NEWSLETTER AND YOUR RIGHT TO OBJECT
If we obtain your email address in connection with the sale of goods or services and without objection on your part, we reserve the right, in accordance with art. 34-5, para. 4 of the Postal and Electronic Communications Code, to regularly send you offers by email concerning products from our range similar to those already purchased. This serves to safeguard our legitimate interests in advertising communication with our customers, which take precedence when balancing the respective interests of the parties. You can object to this use of your email address at any time by sending a message to the contact person designated in this data protection declaration, or via a link included for this purpose in the advertising email, without incurring any costs other than the communication costs according to the basic rates. You can object to this use of your email address at any time by sending a message to the address mentioned below or via a dedicated link in the advertising email, without incurring any costs other than the communication costs according to the basic rates. After unsubscribing, we will remove your email address from the Newsletter recipient list, unless you have expressly consented to further use of your data in accordance with art. 6, § 1, a) GDPR, or if we reserve the right to broader use of the data permitted by law, which we will inform you about in this declaration.
6. COOKIES AND OTHER TECHNOLOGIES
GENERAL INFORMATION
In order to make visiting our website attractive and to enable the use of certain functions, to present suitable products, or to carry out market research, we use technologies, including "cookies," on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browsing session, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).
PRIVACY PROTECTION AT THE TERMINAL EQUIPMENT LEVEL
When using our online offering, we use technologies that are absolutely necessary to provide the online public communication service, which is explicitly requested by the user. In this respect, the storage of information on your device or access to information already stored on it does not require your consent.
For functions that are not strictly necessary, the storage of information on your device or access to information already stored on it requires your consent. Please note that if you do not give your consent, certain parts of the website may not be fully usable. If necessary, the consents you have given remain valid until you adjust or reset the corresponding settings on your device.
POSSIBLE DATA PROCESSING DOWNSTREAM BY COOKIES AND OTHER TECHNOLOGIES
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g., the shopping cart function). These technologies are used to collect and process the IP address, visit time, information about devices and browsers, as well as information about your use of our website (e.g., information about the contents of the shopping cart). This serves the purpose of safeguarding our legitimate interests in an optimized presentation of our offering, which prevail when balancing the respective interests of the parties in accordance with Art. 6, § 1, f) GDPR.
In addition, we use technologies to fulfill legal obligations to which we are subject (e.g., to be able to prove consent to the processing of your personal data) and for web analysis and online marketing purposes. You can find more information on this, including the corresponding legal basis for data processing, in the following sections of this privacy statement.
You can find the cookie settings for your browser at the following links:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
To the extent that you have consented to the use of technologies in accordance with Art. 6, § 1, a) GDPR, you can withdraw your consent at any time by sending a message to the designated contact in this privacy statement. You can also click on the following link: https://cms.jimdo.com/cms/. Refusing cookies may limit the functionality of our website.
USE OF THE JIMDO CONSENT MANAGEMENT TOOL
We use the Jimdo consent management tool on our website to inform you about the cookies and other technologies we use on our site and to obtain, manage, and document your consent, if necessary, for the processing of your personal data by these technologies. In accordance with Art. 6, § 1, c) GDPR, this is necessary to fulfill our legal obligation, arising from Art. 7, § 1 GDPR, under which we must be able to prove your consent to the processing of your personal data. The Jimdo consent management tool is provided by Jimdo GmbH, Stresemannstrasse 375, 22761 Hamburg, Germany ("Jimdo"). After you have submitted your cookie declaration on our website, Jimdo's web server records your IP address, the date and time of your declaration, information about your browser, language, and the URL from which the declaration was sent, as well as information about your consent behavior. In addition, a cookie is used that contains information about your consent behavior. Your data will be deleted after a period of 365 days, unless you have expressly consented to further use of your data in accordance with Art. 6, §
7. USE OF COOKIES AND OTHER TECHNOLOGIES
To the extent that you have given your consent in accordance with Art. 6, § 1, a) GDPR, we use the following cookies and other technologies from third-party providers on our website. Data collected in this context will be deleted once the intended purpose has been achieved and we have discontinued the use of the corresponding technology. You can withdraw your consent at any time with future effect. Further information on withdrawing consent can be found in the "Cookies and other technologies" section. You can find further information, particularly on the basis of our cooperation with different providers, by consulting the different technologies. For any questions regarding the providers and the basis of our cooperation with them, please contact the contact person indicated in this statement on the protection of personal data.
USE OF GOOGLE SERVICES
We use the following technologies of Google Ireland Ltd, headquartered at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google's technologies regarding your use of our website is generally transferred to a server of Google LLC, located at 1600 Amphitheatre Parkway Mountain View, CA 94043, United States, and stored there. There is no European Commission decision finding an adequate level of data protection for the United States. Our cooperation is based on the standard data protection clauses adopted by the European Commission. If your IP address is collected using Google's technologies, it will be shortened by activating IP anonymization before being stored on Google's servers. Unless stated otherwise for different technologies, data processing is based on an agreement concluded for each technology between joint controllers in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in the Google Privacy Policy.
GOOGLE ANALYTICS
Data (IP address, visit time, device and browser information, and information on your use of our website), from which pseudonymized usage profiles are created, are automatically collected and stored for web analysis purposes using Google Analytics. Cookies may be used for this purpose. Your IP address will not generally be merged with other Google data. Data processing is based on a data processing agreement with Google.
OTHER WEB ANALYTICS AND ONLINE MARKETING SERVICE PROVIDERS
We use the tracking and analysis tool from Jimdo GmbH, headquartered at Stresemannstrasse 375, 22761 Hamburg, Germany. In accordance with Art. 6, § 1, f) GDPR, this serves to safeguard our legitimate interests in the context of a balance of interests, namely the purposes of statistical evaluation of your user behavior on our website and ensuring a needs-based, intuitive design and continuous optimization of our offerings. Jimdo tracking does not use cookies. Your data (IP address, device and browser information) is automatically collected, aggregated, and processed using pseudonymized usage profiles for the aforementioned purposes. Your data is shortened, stored as a hash value, and further encrypted by a randomly changing value every 24 hours. This prevents the deduction of the identity of individual users. No further data matching takes place.
8. SOCIAL NETWORKS
OUR ONLINE PRESENCE ON FACEBOOK (BY META), INSTAGRAM (BY META), LINKEDIN
To the extent that you have given your consent to the operator of the corresponding social network, in accordance with Art. 6, § 1, a) GDPR, your data is automatically collected and stored for market research and advertising purposes when you visit our online presence on the above-mentioned social networks. Pseudonymized usage profiles are created from this data. These can be used, for example, to place advertisements inside and outside the platforms that are presumed to correspond to your interests. Generally, cookies are used for this purpose. You will find further information on the processing and use of data by the operator of the respective social network, as well as a possibility to contact and your rights and setting options for the protection of your privacy, in the data protection information of the operators, the internet addresses of which are integrated below. We are at your disposal if you still need assistance in this regard.
Instagram (by Meta) is an offering from Meta Platforms Ireland Ltd., headquartered at 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transferred and stored on a server of Meta Platforms, Inc., headquartered at 1 Hacker Way, Menlo Park, California 94025, United States. There is no decision by the European Commission confirming an adequate level of data protection for the United States. Our cooperation is based on the standard contractual clauses for data protection adopted by the European Commission. Data processing when visiting an Instagram fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. You can find further information (information regarding Page Insights data) here.
LinkedIn is an offering from the company LinkedIn Ireland Unlimited, headquartered at Wilton Place, Dublin 2, Ireland ("LinkedIn"). Information automatically collected by LinkedIn regarding your use of our online presence on LinkedIn is generally transferred and stored on a server of LinkedIn Corporation, headquartered at 1000 W. Maude Avenue, Sunnyvale, CA 94085, United States. There is no decision by the European Commission confirming an adequate level of data protection for the United States. Our cooperation is based on the standard contractual clauses for data protection adopted by the European Commission.
9. CONTACT OPTIONS AND YOUR RIGHTS
YOUR RIGHTS
You also have the right to lodge a complaint with the competent data protection supervisory authority in France:
National Commission for Data Protection and Liberties (CNIL) - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 - Telephone: 01 53 73 22 22
As a person affected by the processing of personal data, you have the following rights:
Under Article 15 of the GDPR, you have the right to access the personal data concerning you that we process.
Under Article 16 of the GDPR, you have the right to have your personal data corrected without undue delay if it is inaccurate. You also have the right to request that this data be completed.
Under Article 17 of the GDPR, you have the right to erasure of your personal data where the processing is not necessary for:
- the exercise of the right to freedom of expression and information;
- compliance with a legal obligation;
- reasons of public interest;
- the establishment, exercise or defense of legal claims.
Under Article 18 of the GDPR, you have the right to restriction of processing where:
- you contest the accuracy of the data;
- the processing is unlawful, but you oppose its erasure;
- we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims;
- you have objected to processing pursuant to Article 21 of the GDPR.
Under Article 20 of the GDPR, you have the right to receive your data in a structured, commonly used, machine-readable format and to request the transmission of this data to another controller.
Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. In general, you can do this by contacting the supervisory authority in your habitual residence, place of work, or our headquarters.
CONTACT OPTIONS
RIGHT TO OBJECT
To the extent that we process personal data as explained above to safeguard our legitimate interests which prevail when balancing the respective interests of the parties, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right to object for reasons that arise from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
This does not apply if the processing is carried out for direct marketing purposes. We will then no longer process your personal data for this purpose.
For any questions regarding the collection, processing, or use of your personal data, for any inquiries, corrections, restrictions, or deletion of data, as well as for any withdrawal of consent or objection to specific data uses, please contact our services directly using the contact details provided in the Legal Notice.