THE USER’S PERSONAL DATA PROTECTION CHARTER
1. Personal data definition and nature
When you visit the www.drinking-straw.com website (hereinafter: the « Site »), we may request personal information from you in order for you to enjoy the available services that we provide (hereinafter, the « Services »).
The term « personal data » refers to all data that can be used to identify an individual in the context of this charter, which includes your name, first name, photograph, postal and e-mail addresses, phone numbers, data relating to your transactions on the Site, and any other information that you choose to communicate to us about yourself.
2. Purpose of this charter
The goal of this charter is to educate you about the methods we use to obtain your personal data while upholding your rights to the fullest extent possible.
In this regard, we inform you that we comply with Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, in its current version (hereinafter: the « Data Protection Act »), as well as Regulation (EU) 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter: the « RGPD »).
3. Data collector’s identity
ECOBL, a simplified joint-stock company incorporated in the Paris Trade and Companies Register under number 844 226 894, with its registered office at 20 rue Voltaire 93100 Montreuil FRANCE, is in charge of collecting your personal data (hereinafter referred to as « We »).
4. Délégué à la protection des données
We have designated a Data Protection Officer, whose contact information is as follows: www.drinking-straw.com
5. Personal data collection
The following is the legal basis for our collecting of your personal data:
(i) When you voluntarily give us with personal data during your visit to our Site, we have a legitimate interest in collecting the data so that we can better react to your requests for information about our Services.
(ii) Our Cookie Policy, which is attached, specifies your consent for social network cookies, advertising cookies, and Google Analytics cookies. Your personal information is gathered for one or more of the following reasons:
(i) Control your access to and usage of certain services on the Site,
(ii) Carry out customer management activities such as contracts, orders, delivery, bills, loyalty programs, and customer relationship follow-ups.
(iii) Create a database of clients and prospects,
(iv) To distribute bulletins, solicitations, and promotional materials. If you do not want to receive such information, you have the option to declare your rejection at the time your data is collected.;
(v) In order to compile commercial and traffic data for our services,
(vi) Organize competitions, lotteries, and other promotional activities, except for internet gambling, with the agreement of ARJEL (French Online Gambling Regulatory Authority),
(vii) Controlling people’s views about products, services, or content,
(viii)Personalize your replies to information requests,
(ix) Meet our legal and regulatory responsibilities.
When we gather your personal data, we warn you whether specific information is required or optional. Our services cannot function without mandatory data. You have the option of providing or not providing optional info. We also inform you of the potential implications of failing to respond.
6.Recipients of the collected data
Have access to your personal information :
(i) our company’s employees, the services in charge of control (auditor in particular)
(ii) hosting, newsletter and email management, CRM administration, and contact form management are some of our subcontractors.
Your personal information may also be provided to public authorities, only to satisfy our legal requirements, such as judicial officials, ministerial officers, and debt collecting agencies.
7.Personal data assignment
Your personal information will not be sold, leased, or traded with other parties.
8. Personal data retention duration
(i) In terms of data pertaining to customer and prospect management:
Your personal information is only retained for as long as is strictly necessary to handle our business relationship with you.
Regarding prospective canvassing activities aimed at you, your data might be kept for 3 (three) years after the business relationship has ended.
The data necessary to establish the evidence of a right or a contract and which must be saved in order to comply with a legal duty shall be kept for the term specified by the legislation in force.
Personal data belonging to a prospect, not a customer, may be stored for 3 (three) years from the date of collection or the prospect’s last interaction.
We may approach you again at the conclusion of this 3 (three) year term to check if you want to continue receiving commercial solicitations.
(ii)Concerning identification documents:
In the event that the right to access or rectification is exercised, the data linked to the identity papers may be maintained for the term specified in Article 9 of the Code of Criminal Procedure, namely 1 (one) year. These data may be preserved for a period of 3 (three) years if the right of opposition is exercised.
(iii) Concerning the maintenance of opposition lists to obtain prospecting:
The information that allows us to consider your right of objection is stored for a minimum of 3 (three) years after the right of opposition is exercised.
9.Security
We advise you to take all necessary precautionary, organizational and technological steps to ensure the security, integrity, and confidentiality of your personal data, particularly to prevent them from being distorted, damaged, or accessed by unauthorized third parties.
10.Preservation
We inform you that your data is retained and saved on the servers of the firm WP SERVEUR in France for the period of its retention. In the course of using the services we provide, your data will not be transmitted outside the European Union.
11. Cookies
We advise you to our Cookie Policy for additional information about cookies.
12.Access to your personal information
In line with the law n° 78-17 of January 6, 1978 dealing to data processing, files, and freedoms, as well as the RGPD, you have the right to demand communication and, if required, rectification or deletion of your personal data by writing to:
– e-mail: hello(arobase)drinking-straw.com
– postal: 20, rue voltaire 93100 montreuil, France
Persons whose data are acquired on the basis of our legitimate interest, as specified in the article “Collection of personal data,” are reminded that they can object to the processing of their data at any time. However, we may continue to process data if there are legitimate grounds for doing so that outweigh your rights and freedoms, or if the processing is required to establish, exercise, or defend our legal rights.
ur constater, exercer ou défendre nos droits en justice.
13.Data portability for your personal information
You have the right to portability of the personal data you have submitted to us, which is defined as data you actively and deliberately disclosed in the context of accessing and using the Services, as well as data created by your activity in the context of using the Services. We would like to remind you that this right does not apply to data gathered and processed on any other legal basis than consent or the fulfillment of a binding contract.
This right can be used at any time, including when you cancel your account on the Site, in order to retrieve and maintain your personal data. In this regard, we shall provide you your personal data via any methods considered appropriate, in a standard open format frequently used and machine-readable, in accordance with the state of the art.
14. Filing a complaint with a regulatory body
You are also informed that you have the right to file a complaint with a competent supervisory authority (CNIL, National Commission on Informatics and Liberty) in the Member State where you usually reside, your place of work, or the location where the violation of your rights occurred, if you believe that the processing of your personal data that is the subject of this charter violates the applicable texts.
This option may be used in addition to any other recourse available through administrative or judicial channels. Indeed, if you believe that the processing of your personal data, which is the subject of this charter, violates the applicable texts, you have the right to an effective administrative or judicial appeal.
15.Treatment Restrictions
You have the right to have the processing of your personal data limited in the following circumstances:
– During the time of verification that we implement, when you contest the correctness of your personal data,
– When the processing of your personal data is illegal and you choose to restrict rather than destroy your data,
– When we no longer require your personal information but you desire to keep it in order to exercise your rights,
– During the time of valid reasons verification, when you objected to the processing of your personal data.
16. Modifications
We retain the right to amend this policy, in whole or in part, at any time, at our own discretion. Such modifications will take effect with the publication of the revised policy. Your use of the Site following the implementation of such changes will represent your acknowledgment and acceptance of the revised policy. You should no longer use the Site if you do not agree with the revised charter.
17.Coming into force
This charter goes into force on April 1, 2022.