Privacy Policy
This policy describes:
1. How does the company uses your personal data ?
2. Who has access to your personal data?
3. How does the Company protect your personal data?
4. Where does the Company host your personal data?
5. How can you exercise your rights in relation to your personal data?
6. What cookies does the Company use?
7. Updates to this Policy
8. How to contact us
1. How does the Company use your personal data?
The Company may use your personal data for the following purposes:
- Create your customer account on the Site
- Manage your orders on the Site
- To send you informative emails about our Products
- To send you our newsletter
- Respond to your contact request made using the contact form on the Site
Most of the processing listed above is necessary for the performance of the contract entered into with the Company when you use our website to order products made available for purchase on the Site.
The processing of your personal data in order to send you informative emails is based on our legitimate interest in retaining our prospects and customers. You can stop these emails and solicitations at any time via the functionality provided for this purpose or by simple request by email.
The processing of your email in order to send you our newsletter is also based on consent you gave when subscribing to our newsletter. You can unsubscribe from our newsletter at any time via the function provided for this purpose or by simple request by email.
2. Who has access to your personal data?
Within the Company, and with regard to each processing purpose, your personal data is collected, processed and stored by the Company's authorized personnel, solely within the scope of their respective duties. In particular by customer service, the marketing department and the IT department.
We do not share personal data with other companies, organisations or individuals except in the following cases:
(1) Sharing with our vendors: The Company may disclose your information to companies that provide services for us or on our behalf. Examples of these service providers include companies that offer services necessary for the operation of the Site such as Shopify, our Site's administration platform, our email routing provider Klaviyo and our hosting provider, OVH.
(2) In fulfilment of a legal obligation, sharing in accordance with laws and regulations: The Company, may share your information as stipulated in laws and regulations, in order to resolve legal disputes, or as stipulated by judicial or administrative authorities under the law.
The Company will ensure the lawfulness of any sharing of personal data via data processing clauses with the companies with whom your personal data is shared, in particular obliging them to comply with this policy and to take appropriate security and confidentiality measures when processing personal data.
3. How does the Company protect your personal data?
The Company attaches great importance to the security of your personal data and has put in place industry-standard measures to protect your personal data and to prevent unauthorized access, disclosure, use, modification, alteration or loss of such information.
We have also taken the necessary precautions to ensure that our hosting provider preserves the security and confidentiality of the data and in particular to prevent it from being altered, compromised or communicated to unauthorized persons.
The Company also adopts the following organizational measures:
(1) We take reasonable and practicable steps to ensure that the personal data collected is minimal and relevant to the purposes for which it is processed.
(2) We store your personal data for as long as is strictly necessary for processing unless retaining your data is required or permitted by law. For example, we keep data related to the execution of your orders for the period required by law for accounting records, i.e. a maximum of 10 years from the financial year in question.
(3) We deploy access control mechanisms to ensure that only authorised personnel can access your personal data.
In the event of a personal data breach, the Company will comply with the applicable legal and regulatory requirements for reporting personal data breaches to the relevant supervisory authorities and/or data subjects.
4. Where does the Company host your personal data?
Your personal data will be hosted within the hosting infrastructure of our hosting provider OVH, located in France.
It may happen that some of our service providers access your data on our behalf in order to provide us with a specific service and are located in countries outside the European Union.
Where such transfers exist, we ensure that such transfers of personal data are regulated in accordance with applicable regulations in order to ensure an adequate level of data protection, either by an adequacy decision of the European Commission or by means of legal instruments such as data transfer contracts incorporating the Standard Contractual Clauses of the European Commission.
For any enquiries regarding the recipients and transfers of data we make outside the European Union, please contact us at the addresses set out in the "How to Contact Us" section below.
5. How can you exercise your rights in relation to your personal data?
You have the right to access, rectify, delete, limit and object to the processing of your personal data, as well as the right to define guidelines relating to the fate of your data after your death and the right to the portability of your personal data.
You may contact us at any time at the addresses indicated in the "How to contact us" section below in order to exercise your rights in relation to personal data under the conditions set out by the applicable regulations. You must indicate which right you intend to exercise and all the details necessary for us to comply with your request.
These rights are exercised under the conditions set out in the applicable regulations.
- The right of access means that you can ask us at any time to tell you whether we are processing any of your personal data and, if so, to tell you which personal data is concerned and the nature of the processing(s) carried out.
- The right to rectification means that you can ask us to rectify your personal data when it is inaccurate. You can also request that your personal data, if incomplete, be completed insofar as this is relevant to the purpose of the processing in question.
- The right to erasure means that you can request the erasure of your personal data in particular when: (i) its continued processing is no longer necessary in relation to the purposes for which it was collected (ii) your personal data is processed on the basis of your consent, you wish to withdraw that consent, and there is no other legal basis capable of justifying the processing (iii) you have objected to the processing of your data (iv) your personal data has been unlawfully processed; (v) your personal data must be erased to comply with a legal obligation that is provided for either by European Union law or by French law.
- The right to restriction means that you can ask us to restrict the processing of your personal data (i) when you contest the accuracy of your personal data for a period of time that allows us to verify its accuracy, (ii) when the processing of your data is established as non-compliant, you prefer to restrict the processing rather than the complete erasure of your personal data (iii) when we no longer require your personal data for the purposes of processing but that they are still necessary for the establishment, exercise or defence of legal claims; (iv) where you have objected to the processing of your personal data and you wish to have the processing restricted for as long as it allows us to verify whether your claim is justified. Restricting the processing of any of your personal data means that that data will only be stored and we will then no longer carry out any further operations on the personal data in question.
- The right to object means that you can object to the processing of your personal data by the Company in its pursuit of its legitimate interests. The right to object is exercised subject to a legitimate justification relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons to justify the continuation in accordance with the applicable regulations.
- The right to set guidelines for the fate of your data after your death allows you to make known your instructions regarding the storage, erasure and disclosure of your personal data after your death.
- The right to portability means that you can ask us, under the conditions set out in the applicable regulations, to receive your personal data in a structured, commonly used and machine-readable format, and to transmit it to you, or to ask us to transmit it directly to a third party of your choice where legally and technically feasible.
When we process your personal data on the basis of your consent, you also have the option of withdrawing your consent at any time by contacting the addresses indicated in the "How to contact us" section or by clicking on the unsubscribe link in each of our commercial communications.
However, the withdrawal of your consent does not call into question the validity of the processing carried out before such withdrawal.
6. What cookies does the Company use?
We use different types of cookies on our Site.
A cookie is a tracker placed on your device that is used to record information relating to your consultation and browsing on the Site. When you connect to the Site, we may install cookies on your device.
We first use so-called technical cookies, which are cookies that are strictly necessary for you to browse the Site and the proper functioning of certain specific features. These include cookies that allow information entered in a form on the Site (such as delivery information, for example) to be saved.
As our site is created via Shopify, you can find more information about the technical cookies used by our Site in the "Cookies necessary for the operation of the store" section of the Shopify conditions specified on the www.shopify.fr/legal/cookies site.
We also use cookies for audience measurement and advertising purposes, to analyse the number of visitors to our website and to display personalized advertising content.
To this end, we use tools provided by third-party publishers that allow us to carry out traffic measurements and audience measurements of our Site and to send you targeted advertising based on your previous browsing behavior (articles and pages already viewed or searched).
When you visit our Site for the first time and the Company plans to place cookies, other than so-called "technical" cookies on your device, we inform you that we use cookies via an information banner.
You will then have the option of consenting or not to the use of such cookies.
By consenting to the use of these third-party cookies, you agree that we transfer data collected from the cookies to the third parties from which these cookies originate, namely ContentSquare, Google, Facebook, Klavyo, Pinterest, Tik Tok and Wisepops.
You have a number of options to disable non-technical cookies in the future, including advertising, including:
- You can choose to disable cookies through your browser settings and features. However, it is reminded that the settings are likely to modify the conditions of access to content and services requiring the use of cookies. If the terminal is configured to refuse all cookies, it may not be possible to browse our Site properly.
- You can also go to the following site to select which cookies you want to disable: www.youronlinechoices.com/fr/controler-ses-cookies/
- Finally, you can click on the icon on our Site to directly set your cookie preferences at any time.
7. Updates to this Policy
The Company reserves the right at any time to modify or update, in whole or in part, this policy, due to the modification of the applicable regulations on the protection of personal data or the data processing carried out.
Any material changes to the Policy will be notified to you by email when you have provided us with a valid email address and will be published on the Website. We recommend that you regularly review this policy in order to be fully aware of our commitments in terms of security and protection of your personal data.
8. How to contact us
If you have any questions, comments or suggestions, please contact us by post justifying your identity to: ZIGGY - 14 rue Sainte-Colombe, 33000 Bordeaux, France or by sending an email to the address hello@ziggyfamily.com or finally via the contact form provided on the Site.
If you are not satisfied with the Company's response to a request to exercise your rights in accordance with Article V above or if you wish to report a breach of the applicable data protection regulations, you have the right to lodge a complaint with the CNIL by mail (CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, FRANCE) or on its website (www.cnil.fr), or with the data protection authority of the country in which you usually reside or work.
