Privacy Policy

The purpose of this privacy policy



The purpose of this privacy policy is to inform users of our site of the personal data we will collect and the following information, if applicable:

  1. The personal data we will collect
  2. Use of Collected Data
  3. Who has access to collected data
  4. Site user rights
  5. The site's cookies policy

This Privacy Policy operates alongside our Legal Notice

Identification of the data controller



The data processing manager for the carolineabram.com site is the company OPTA FILAO (FILAO PARIS), represented by Caroline Abram, with its head office at 241 RUE DE ROMAINVILLE, 93230 ROMAINVILLE, FRANCE.

Applicable laws



In accordance with the General Data Protection Regulation (GDPR), this privacy policy complies with the following regulations.

Personal data must be:

  1. processed in a lawful, fair and transparent manner with regard to the data subject (lawfulness, fairness, transparency);
  2. collected for specified, explicit and legitimate purposes, and not further processed in a manner incompatible with those purposes; further processing for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes is not considered, in accordance with Article 89(1), to be incompatible with the initial purposes (limitation purposes);
  3. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimization);
  4. accurate and, where necessary, kept up to date; all reasonable steps must be taken to ensure that personal data which is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay (accuracy);
  5. kept in a form allowing the identification of data subjects for no longer than is necessary for the purposes for which they are processed; personal data may be stored for longer periods insofar as they will be processed exclusively for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89 , paragraph 1, provided that the appropriate technical and organizational measures required by the Regulation are implemented in order to guarantee the rights and freedoms of the data subject (limitation of storage);
  6. processed in such a way as to ensure appropriate security of personal data, including protection against unauthorized or unlawful processing and against loss, accidental destruction or damage, using appropriate technical or organizational measures (integrity and confidentiality).

Processing is only lawful if and insofar as at least one of the following conditions is met:

  1. the data subject has consented to the processing of their personal data for one or more specific purposes;
  2. the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the latter's request
  3. the processing is necessary for compliance with a legal obligation to which the controller is subject;
  4. the processing is necessary to protect the vital interests of the data subject or of another natural person;
  5. the processing is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller;
  6. the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection personal data, in particular when the data subject is a child.

Consent



Users agree that by using our site, they consent to:

  1. the terms set forth in this Privacy Policy and
  2. the collection, use and retention of the data listed in this policy.

Personal data we collect

Data collected automatically

When you visit and use our site, we may automatically collect and store the following information:

  1. IP Address
  2. Location
  3. Links a user clicks while using the site
  4. Content the user views on your site

Data collected not automatically

The carolineabram.com site collects certain personal data such as your name, email address, telephone number and postal address when you fill out a form on the site or place an order. We use this data to process your order, manage your customer account and send you information about our products and services. Your personal data will never be sold or shared with third parties.

We may also collect the following data when you perform the location feature on our site.
This geographic data may be collected through methods of a Store filter Locator (Points of sale)

Please note that we only collect data that helps us achieve the purpose set out in this privacy policy. We will not collect additional data without informing you first.

How we use personal data

Personal data collected on our site will only be used for purposes specified in this policy or indicated on the relevant pages of our site. We will not use your data beyond what we disclose.

The data we collect automatically is used for statistical purposes.

Who we share personal data with

Employees
We may disclose to any member of our organization such user data as they reasonably need to fulfill the purposes set out in this policy .

Third Parties
We will not sell or share your data with third parties, except in the following cases:

  1. if required by law
  2. if required for any legal proceedings
  3. to prove or protect our legal rights
  4. to buyers or potential buyers of this company in the event that we seek to sell the company

If you follow any hyperlinks from our site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.

How long we store personal data

We do not store user data beyond what is necessary to achieve the purposes for which they are collected.

How we protect your personal data

We take all necessary security measures to protect your personal data against loss, theft or unauthorized access. We also use standard security protocols to secure all sensitive information transmitted through our site.

Your rights as a user



Under the GDPR, users have the following rights as data subjects:

  1. access right
  2. Right of rectification
  3. right to erasure
  4. right to restrict processing
  5. right to data portability
  6. right to object

You will find more information on these rights in Chapter 3 (art 12-23) of the GDPR.

How to modify, delete or dispute the data collected

If you want your information deleted or modified in any way, please contact our Privacy Officer by Email:

Cookie policy



A cookie is a small file, stored on a user's hard drive by the website. Its purpose is to collect data relating to the user's browsing habits.

We use this type of cookie on our site:

  1. PHPSESSID

    This allows us to identify your session in order to guarantee a set of data in accordance with your navigation. For example, displaying pages depending on the language selected by your browser.
    Some session variables are then generated from this id, to ensure optimal display of the data you have taken care to select.
  2. Cookies "_ga"

    Google Analytics uses cookies to collect information and generate reports on site traffic statistics, without however transmitting the identity of visitors to Google.
  3. COOKIES

    A simple boolean variable to get your approval for the use of our cookies.
  4. PrestaShop-xxxxxxxx

    This cookie is used to store information user session when browsing the site. It is generated randomly and differently for each user.
  5. prestashop_cookielaw

    This cookie is used to store site preferences. user regarding cookies.
  6. PrestaShop-redirect

    This cookie is used to redirect the user to the preferred language or store corresponding to their location.
  7. id_language

    This cookie is used to store the preferred language of the user in order to be able to display the site in this language during their next visit.
  8. PrestaShop-affiliate

    This cookie is used to track affiliates and to reward them based on the sales made thanks to their SEO.
  9. plm_cookies_accepted

    This cookie is used to store site preferences. user regarding cookies. It is created when the user accepts the use of cookies on the site.
  10. PrestaShop-affiliate

    This cookie is used to store a token security that prevents CSRF (Cross-Site Request Forgery) attacks
  11. guest-view

    This cookie is used to enable guests to modify their order.

You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your Internet browser, but this may decrease the quality of your user experience.

Additional Provisions



Changes

This Privacy Policy may be amended from time to time to maintain compliance with the law and to reflect any changes to our data collection process. We recommend that our users check our policy from time to time to ensure that they are aware of any updates. If necessary, we may notify users by email of changes to this policy.

Contact

If you have any questions, please feel free to contact us using the following:
01 82 30 51 11

241 rue de Romainville 93230 ROMAINVILLE FRANCE


Effective Date: November 18, 2022