)
AMI PARIS takes particular care to protect your personal data. This is why we want to inform you in a transparent way about our policy regarding the personal data that you entrust to us.
AMI PARIS undertakes to process your personal data in accordance with the provisions of the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and the French Data Protection Act n°78-17 of January 6, 1978 as amended relating to data processing, files and freedoms (“Informatique et Libertés” act), which defines the conditions under which processing of personal data can be implemented.
Any information collected through the website and that allows you to be identified, directly or indirectly, is considered personal data and will be processed in accordance with this policy.
DATA CONTROLLER
The data controller for the data collected and processed on our website is AMI PARIS, 54 RUE ETIENNE MARCEL, 75002 PARIS .
AMI PARIS has appointed a data protection officer or “DPO” who you can contact at the following address: dataprotection@amiparis.fr
PURPOSES, LEGAL BASES AND RETENTION TIME
User account management
Legal base :
- Legitimate interest
- Management of customer and user accounts to allow them to access order tracking and status
Data processed :
Customer ID, gender, last name, first name, postal address, email, telephone number, country, date of birth, title, city, order description
Retention time :
Inactive user accounts are deleted 3 years from the last account activity
Management of orders for products or services
Legal base :
Contract fulfillment
Data processed :
Customer ID, last name, first name, postal address, email address, order history, billing
Retention time :
- 3 years from the end of the contractual relationship
- Archiving for accounting purposes for up to 10 years
Management of sales prospecting and marketing activities
Legal base :
- Legitimate interest
- Development of prospecting activities
- Consent (for B2C relationships)
Data processed :
Last name, first name, customer ID, products and services purchased, mobile phone number (SMS), postal address, email address
Retention time :
- For customers: until consent is withdrawn or 3 years from the end of the commercial relationship
- For prospects: 3 years from the collection of personal data or from last contact from the prospect
Handling customer complaints
Legal base :
- Legitimate interest
- Contact form or email address available in the privacy policy to facilitate the processing of complaints
Data processed :
Comments, postal address, customer ID, last name, telephone number, first name, email address, contact file, position, company
Retention time :
The data is kept for 2 years from the closing of the complaint and then deleted
Managing cookies
Legal base :
Legitimate interest and consent
Data processed :
Information from browsing data (IP addresses, cookies)
Retention time :
Information from cookies is kept for a maximum of 13 months.
Management of dematerialized loyalty cards that were signed up to in stores
Legal base :
- Legitimate interest
- For managing customer loyalty accounts
Data processed :
First name, last name, telephone number, email address, postal address
Retention time :
Processing data is kept for a period of three years from the last contact with the customer
Personal data of minors
AMI PARIS services and products are not intended for minors. Consequently, AMI PARIS does not process data relating to minors.
It is the responsibility of the parents of minors or any person with parental authority to decide whether their child is authorized to use the services and products offered by AMI PARIS.
DATA RECIPIENTS
The data you entrust to us may be communicated to authorized persons within AMI PARIS’ internal services when their function requires it and where it is necessary for the implementation of the aforementioned processing.
AMI PARIS also transfers your data to subcontractors and commercial partners who are used to carry out the services as part of the implementation of the aforementioned processing.
TRANSFER OF PERSONAL DATA OUTSIDE THE EU
Some recipients of personal data may be located outside the European Union. These recipient countries may be recognized by the European Commission as providing an adequate level of protection of personal data or may not be subject to any adequacy decision.
In any event, appropriate measures to protect your personal data are put in place, in accordance with the provisions of the General Data Protection Regulation.
Our Digital (Marketing & E-commerce) and Retail departments transfer data outside the European Union and in particular to the United Kingdom, China, Hong Kong and Japan. This is overseen in accordance with the regulations.
RIGHTS REGARDING THE USE OF PERSONAL DATA
In accordance with the provisions of the GDPR, you can exercise your following rights:
· Right of access: the right to obtain confirmation that your personal data is or is not being processed, and to obtain communication thereof;
· Right of rectification: the right to obtain the rectification of inaccurate personal data or to be able to complete incomplete data;
· Right of erasure: the right to obtain the deletion of your personal data where possible;
· Right of opposition: the right to object at any time to the processing of your personal data, when it is based on our legitimate interest;
· Right to withdraw your consent: when the processing of your data is based on your consent. You can exercise this right at any time without having to provide a reason;
· Right to limitation: the right to request the freezing of processing data for a given period;
· Right to portability: the right to receive the personal data you have provided in a structured, commonly machine-readable format and to communicate it to a third party;
· Right to complain: the right to send a complaint to the supervisory authority in your country if you believe that your rights are not respected.
PROCEDURE FOR EXERCISING YOUR RIGHTS
To exercise your rights or to address any questions about the processing of your data, you can contact:
· by post, AMI PARIS, 54 rue Etienne Marcel, 75002, Paris;
· by email, dataprotection@amiparis.fr
If you believe, after contacting us, that your data protection rights are not respected, you can send a complaint to the supervisory authority in your country.
For France, you can contact the CNIL: https://www.cnil.fr/fr/plaintes .
DATA PROTECTION POLICY UPDATES
This personal data protection policy was published on 04/29/2024. If any changes are made to this policy you will be informed on this page.