1. ACCESS DATA AND HOSTING

You can visit our web pages without providing personal information. Each time an internet page is visited, the web server only and automatically saves a log file on the server, which contains, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transmitted, and the requesting provider (access data), and which documents the access.

This access data is used solely for the purpose of ensuring the trouble-free operation of the site and to improve our offering. In accordance with Art. 6, § 1, f) GDPR, this serves to safeguard our legitimate interests in a proper presentation of our offering, which prevail when balancing the respective interests of the parties. All access data is processed only as long as necessary to achieve the aforementioned processing purposes.

 HOSTING

Hosting and display services for the website are partly provided by our service providers in the context of processing on our behalf. Unless otherwise stated in this data protection declaration, all access data as well as all data collected in the forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact person specified in this data protection declaration. Our service providers are based in the USA. There is no decision by the European Commission determining an adequate level of data protection for the USA. Our cooperation is based on the standard contractual data protection clauses adopted by the European Commission.

CONTENT DELIVERY NETWORK

In order to reduce loading times, we use a content delivery network ("CDN" - Content Delivery Network) for several of our offerings. This service enables large multimedia files, for instance, to be delivered through regional servers of external CDN service providers. As a result, access data is processed on the servers of the service providers. Our service providers act for us as data processors. If you have any questions about our service providers and the basis of our cooperation with them, please contact the person specified in this data protection declaration. Our service providers are based in the USA. There is no decision by the European Commission determining an adequate level of data protection for the USA. Our cooperation is based on the standard contractual data protection clauses adopted by the European Commission.

Data Protection Declaration

The data controller is:

WILL SIDE

10 Chemin Latéral 

94140 ALFORTVILLE

France

contact@willside.fr

We appreciate your interest in our online shop.

The protection of your privacy is very important to us. 

Below, we inform you in detail about the processing of your data.

2. DATA PROCESSING FOR THE PURPOSES OF CONTRACT EXECUTION, CONTACT INITIATION

 DATA PROCESSING FOR THE PURPOSES OF CONTRACT EXECUTION

We collect personal data when you voluntarily provide it to us as part of your order or when you contact us (e.g., via contact form or email). Mandatory fields are marked as such because in these cases, we absolutely need this data to execute the contract or process your contact request, and you will not be able to complete your order and/or send your contact request without them. The respective input forms indicate which data is collected.

In accordance with Art. 6 (1) (b) GDPR, we use the data you provide to fulfill the contract and process your requests (including requests related to warranty rights, existing performance defects and their processing, as well as any statutory update obligations). You can find more information on how we process your data, especially regarding transfer to our service providers for the purpose of order, payment, and delivery processing, in the following sections of this privacy policy. After the contract has been fully executed, we restrict further processing of your data and delete it after the expiry of legally required retention periods under tax and commercial law in accordance with Art. 6 (1) (c) GDPR, unless you have expressly consented to further use of your data under Art. 6 (1) (a) GDPR, or we reserve the right for more extensive data use, permitted by law, which we inform you about in this statement.

CONTACT INITIATION

Within the scope of communication with our customers, we collect personal data in order to process your requests in accordance with Art. 6 (1) (b) GDPR when you voluntarily provide it to us as part of your contact initiation (e.g., via contact form or email). Mandatory fields are marked as such, because in these cases, we absolutely need this data to process your contact request. The respective input forms indicate which data is collected. After your request has been fully processed, we delete your data unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right for more extensive data use, permitted by law, which we inform you about in this statement.

3. PROCESSING OF DATA FOR THE PURPOSE OF EXECUTING DELIVERIES

To execute the contract, in accordance with Art. 6, § 1, b) GDPR, we transfer your data to the delivery service provider, insofar as this is necessary for the delivery of the ordered goods.

4. PROCESSING OF DATA FOR THE PURPOSE OF PAYMENT EXECUTION

As part of payment execution in our online store, we collaborate with the following partners: technical service providers, credit institutions, payment service providers.

 PROCESSING OF DATA FOR THE PURPOSE OF TRANSACTION EXECUTION

Depending on the chosen payment method, we transmit the necessary data to process the payment transaction to our payment service providers working for us as subcontractors, or to the commissioned credit institutions or the selected payment service provider, to the extent that it is necessary for the execution of the payment. This serves to fulfill the contract in accordance with Art. 6, § 1, b) GDPR. In some cases, payment service providers themselves collect the data required to process the payment, for example on their own website or through technical integration in the ordering process. The privacy policy of the respective payment service provider applies. If you have any questions regarding our partners for payment execution and the basis of our cooperation with them, please contact the person indicated in this data protection declaration.

 PROCESSING OF DATA FOR THE PURPOSE OF FRAUD PREVENTION AND OPTIMIZATION OF OUR PAYMENT PROCESSES

If applicable, we provide our service providers with additional data which they use, together with the data necessary for payment execution, as our subcontractors for the purposes of fraud prevention and optimization of our payment processes (e.g., invoicing, processing of disputed payments, accounting support). In accordance with Art. 6, § 1, f) GDPR, this serves to safeguard our legitimate interests in protection against fraud and efficient payment management, which prevail in a balancing of the respective parties' interests.

5. EMAIL ADVERTISING,

 EMAIL ADVERTISING WITHOUT NEWSLETTER SUBSCRIPTION AND YOUR RIGHT TO OBJECT

If we obtain your email address in the context of the sale of goods or the provision of services and you do not object, we reserve the right, in accordance with Art. 34-5, para. 4 of the Postal and Electronic Communications Code, to regularly send you by email offers concerning products from our assortment similar to those already purchased. This serves to safeguard our legitimate interests in advertising communication with our customers, which prevail when balancing the respective interests of the parties. You may object to this use of your email address at any time, either by sending a message to the contact specified in this data protection declaration or via a link provided for this purpose in the advertising email, without incurring any costs other than the communication costs according to basic rates. You may object to this use of your email address at any time by sending a message to the address mentioned below or via a dedicated link in the advertising email without incurring any costs other than the communication costs according to basic rates. After your unsubscribe request, we will remove your email address from the newsletter recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6, § 1, a) GDPR, or if we reserve the right to a broader use of the data, permitted by law, and which we inform you about in this statement.

6. COOKIES AND OTHER TECHNOLOGIES

 GENERAL INFORMATION

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or to conduct market research, we use technologies, including "cookies," on various pages. Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted at the end of the browsing session, that is, after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

PRIVACY PROTECTION AT THE TERMINAL DEVICE LEVEL

When using our online offer, we use technologies that are absolutely necessary for providing the online public communication service, which is expressly requested by the user. To this extent, storing information in your device or accessing information already stored in it does not require your consent.

For functions that are not strictly necessary, storing information in your device or accessing information already stored in it requires your consent. Please note that if you do not give your consent, some parts of the website may not be fully usable. If applicable, consents you have given will remain in effect until you change or reset the corresponding settings in your device.

POSSIBLE FURTHER DATA PROCESSING BY COOKIES AND OTHER TECHNOLOGIES

We use technologies that are absolutely necessary for the use of certain functions of our website (e.g., the shopping cart function). These technologies are used to collect and process the IP address, time of visit, device and browser information as well as information about your use of our website (for example, information about the contents of the shopping cart). This serves to safeguard our legitimate interests in an optimized presentation of our offer, which prevail in the context of balancing the respective interests of the parties in accordance with Art. 6(1)(f) GDPR.

We also use technologies to fulfill the legal obligations to which we are subject (for example, to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing purposes. You can find further information about this, including the corresponding legal basis for data processing, in the following sections of this privacy policy.

You can find your browser's cookie settings at the following links:

Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Since you have consented to the use of technologies in accordance with Art. 6(1)(a) GDPR, you can withdraw your consent at any time by sending a message to the contact specified in this privacy policy. You can also click on the following link: https://cms.jimdo.com/cms/. Refusing cookies may limit the functionalities of our website.

 USE OF THE JIMDO CONSENT MANAGEMENT TOOL

We use the Jimdo consent management tool on our website to inform you about the cookies and other technologies we use on our site as well as to obtain, manage, and document your consent, if necessary, for the processing of your personal data by these technologies. In accordance with Art. 6(1)(c) GDPR, this is necessary to fulfill our legal obligation arising from Art. 7(1) GDPR, under which we must be able to prove your consent to the processing of your personal data. The Jimdo consent management tool is provided by Jimdo GmbH, Stresemannstrasse 375, 22761 Hamburg, Germany ("Jimdo"). After you have submitted your cookie declaration on our website, Jimdo's web server saves your IP address, the date and time of your declaration, browser information, language, and the URL from which the declaration was submitted, as well as information about your consent behavior. In addition, a cookie is used that contains information about your consent behavior. Your data will be deleted after a period of 365 days, unless you have expressly consented to further use of your data in accordance with Art. 6, §

7. USE OF COOKIES AND OTHER TECHNOLOGIES

To the extent that you have given your consent in accordance with Art. 6, § 1, a) GDPR, we use the following cookies and other third-party technologies on our website. The data collected in this context will be deleted once the intended purpose has been achieved and we have ceased using the relevant technology. You can withdraw your consent at any time with effect for the future. You will find more detailed information about withdrawal options in the "Cookies and other technologies" section. You will find further information, in particular regarding the basis of our cooperation with the various service providers, by consulting the different technologies. For any questions related to the providers and the basis of our cooperation with them, please contact the contact person specified in this privacy policy.

USE OF GOOGLE SERVICES

We use the following technologies from Google Ireland Ltd, located at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google's technologies about your use of our website is generally transmitted to a server of Google LLC, located at 1600 Amphitheatre Parkway Mountain View, CA 94043, United States, and stored there. There is no European Commission decision on an adequate level of data protection for the United States. Our cooperation is based on the standard data protection clauses adopted by the European Commission. If your IP address is collected using Google technologies, it will be shortened by activating IP anonymization before being stored on Google's servers. Unless otherwise indicated for specific technologies, data processing is carried out on the basis of an agreement concluded for each technology between joint controllers in accordance with Art. 26 GDPR. You can find more information on data processing by Google in the Google privacy policy.

GOOGLE ANALYTICS

Data (IP address, time of visit, device and browser information, as well as information about your use of our website), from which pseudonymized usage profiles are created, is automatically collected and stored for web analytics purposes using Google Analytics. Cookies may be used for this purpose. Your IP address will generally not be merged with other Google data. Data processing takes place on the basis of a data processing agreement for personal data processing by Google.

OTHER WEB ANALYTICS AND ONLINE MARKETING SERVICE PROVIDERS

We use the tracking and analytics tool from Jimdo GmbH, located at Stresemannstrasse 375, 22761 Hamburg, Germany. In accordance with Art. 6, § 1, f) GDPR, this serves to safeguard our legitimate interests within the framework of a balancing of interests, namely for the purposes of statistical evaluation of your user behavior on our website and ensuring a needs-based, intuitive design and continuous optimization of our offerings. Jimdo tracking does not use cookies. Your data (IP address, device and browser information) is automatically collected, aggregated, and processed using pseudonymized usage profiles for the above-mentioned purposes. Your data is shortened, stored as a hash value, and further encrypted by a random value that changes every 24 hours. This prevents deductions about the identity of individual users. No further data consolidation takes place.

8. SOCIAL NETWORKS

 OUR ONLINE PRESENCE ON FACEBOOK (BY META), INSTAGRAM (BY META), LINKEDIN

To the extent that you have given your consent to the operator of the relevant social network, in accordance with Art. 6, § 1, a) GDPR, your data is automatically collected and stored for market research and advertising purposes when you visit our online presences on the social networks mentioned above. Pseudonymised usage profiles are created from this data. These may be used, for example, to place advertisements both within and outside the platforms that are presumed to correspond to your interests. Cookies are generally used for this. You can find more information about the processing and use of data by the operator of the relevant social network, as well as a contact option and your rights and settings options for the protection of your privacy, in the data protection information of the operators whose internet addresses are integrated below. We are at your disposal if you nevertheless need help in this regard.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., headquartered at 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is, as a rule, transferred to and stored on a server of Meta Platforms, Inc., headquartered at 1 Hacker Way, Menlo Park, California 94025, United States. There is no decision by the European Commission establishing an adequate level of data protection for the United States. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing in connection with the visit to an Instagram fan page is carried out on the basis of a joint responsibility agreement in accordance with Art. 26 GDPR. You can find more information (information concerning Page Insights data) here.

LinkedIn is a service provided by LinkedIn Ireland Unlimited, headquartered at Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information automatically collected by LinkedIn regarding your use of our online presence on LinkedIn is, as a rule, transferred to and stored on a server of LinkedIn Corporation, headquartered at 1000 W. Maude Avenue, Sunnyvale, CA 94085, United States. There is no decision by the European Commission establishing an adequate level of data protection for the United States. Our cooperation is based on the standard data protection clauses adopted by the European Commission.

9. CONTACT OPTIONS AND YOUR RIGHTS

 YOUR RIGHTS

In addition, you have the right to appeal to the competent data protection supervisory authority in France:

Commission Nationale de l'Informatique et des Libertés (CNIL) - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 - Phone: 01 53 73 22 22

As a data subject, you have the following rights regarding the processing of personal data:

Pursuant to Article 15 of the GDPR, you have the right to access the personal data concerning you that we process.

Pursuant to Article 16 of the GDPR, you have the right to obtain the rectification without undue delay of inaccurate personal data concerning you. You also have the right to request that this data be completed.

Pursuant to Article 17 of the GDPR, you have the right to obtain the erasure of your personal data to the extent that the processing is not necessary for:

- the exercise of the right to freedom of expression and information;

- compliance with a legal obligation;

- a reason of public interest;

- the establishment, exercise, or defense of legal claims.

Pursuant to Article 18 of the GDPR, you have the right to restriction of processing in the following cases:

- you contest the accuracy of the data;

the processing is unlawful but you object to its erasure;

- we no longer need your data but you still require it for the establishment, exercise, or defense of legal claims;

- you have objected to the processing of your data pursuant to Article 21 of the GDPR.

Pursuant to Article 20 of the GDPR, you have the right to receive your data in a structured, commonly used, and machine-readable format and the right to request the transmission of those data to another controller.

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence, your place of work, or our headquarters for this purpose.

 CONTACT POSSIBILITIES

RIGHT TO OBJECT

To the extent that we process personal data as explained above in order to safeguard our legitimate interests which prevail when weighing up the respective interests of the parties, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right to object for reasons arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for this processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

For any questions relating to the collection, processing or use of your personal data, for any requests for information, correction, restriction or deletion of data as well as for any withdrawal of consents given or any objection to a specific use of data, please contact our services directly via the contact details provided in the Legal Notice.