As part of our online sales activity through the website www.deeluxe.fr (hereinafter "the Site"), we process personal data relating to you. In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act ("loi Informatique et Libertés"), we are committed to ensuring the protection, confidentiality and security of your personal data and to guaranteeing maximum transparency regarding its processing.
For further information on the protection of your personal data, you can also visit the website of the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.
1. General Information
Through the Site, you are invited to provide us with personal data for the purposes detailed below. We may also collect certain information relating to your browsing activity on the Site, under the conditions further described in the "Cookies" section below.
2. Your Personal Data
2.1. The controller of your personal data
The data controller is the entity that determines the purposes and essential means of the processing.
The personal data collected on the Site is processed by:
JL26 – DEELUXE
A French simplified joint-stock company (Société par Actions Simplifiée) with share capital of €201,000, registered with the Trade and Companies Register (RCS) under number 477 884 969
BUREAUPOLE – BAT B2 avenue Elsa Triolet
13008 Marseille – France
Hereinafter referred to as "DEELUXE".
2.2. Collection of your personal data
2.2.1. What types of data?
Depending on the situation, we process your personal data, collected directly from you or resulting from your use of our services. We may also receive personal data that was collected from you by a third party, in particular when purchasing a DEELUXE gift card.
We may collect and process:
- Your identification data: last name, first name, postal address, title (Mr./Ms.);
- Your contact data used to ensure deliveries and after-sales service: email address, mobile phone number, postal address;
- Your connection, service usage and interaction data: IP address, connection and browsing data (pages viewed), incidents, complaints, order history, products viewed; we may also collect your location data in order to show you the nearest store;
- Your content data: cookies.
Whether providing data is mandatory or optional is indicated at the time of collection by an asterisk. Some personal data is collected automatically as a result of your actions on the Site.
We only process a piece of data or a category of personal data if it is strictly necessary for the purpose pursued. You can find information on these purposes in Article 2.3 below.
2.2.2. When?
We collect the personal data you provide us with, in particular when:
- you create your account on our Site;
- you sign up for the newsletter;
- you place an online order for a product;
- you pay for your online product order;
- you browse our Site;
- you take part in a game or contest;
- you take part in our loyalty program;
- you contact our Customer Service;
- you write a comment or review on our Site;
- you view our advertisements.
2.3. Why we collect your personal data
We collect and process your personal data only for specified, explicit and legitimate purposes, namely:
2.3.1. For the performance of a contract
The processing of your personal data is necessary for the performance of a contract, its follow-up, and to ensure a good contractual and business relationship, namely:
- Processing your product order and fulfilling it through our services;
- Invoicing; collection of payments;
- Managing deliveries and order tracking;
- Customer relations: providing a customer service accessible by mail, phone, email or instant messaging/chat, for any question or complaint;
- Sending information about changes or developments to our services;
- Managing unpaid invoices and disputes;
- Managing the exercise of your rights over your personal data under the conditions set out in Article 2.7;
- Verifying compliance with applicable legislation, our contracts and general terms and conditions of sale.
2.3.2. Based on your consent
With your consent, we may process your data in order to send you information, respond to specific requests, send you marketing messages, and as part of personalized or non-personalized advertising, namely:
- Sending marketing, advertising and promotional offers relating to our products by postal mail, email, mobile notifications, social media or any other medium;
- Personalized loyalty or prospecting campaigns;
- Conducting satisfaction surveys;
- Running contests or other promotional operations;
- Collecting customer reviews;
- Compiling business statistics;
- Measuring the opening of our emails using tracking pixels, in order to personalize the content and frequency of our communications.
2.3.3. Based on our legitimate interest
The processing of your personal data may be carried out on the basis of our legitimate interest in ensuring the proper functioning of our services, where that interest is justified and balanced and does not infringe on your privacy.
We may therefore share your data with our business or advertising partners, for customer-knowledge purposes, in order to improve the operation of our Site.
2.3.4. In order to comply with our legal or regulatory obligations
We may process your personal data for record-keeping and evidentiary purposes in order to comply with our legal obligations.
Your personal data is retained for the period necessary to fulfill each of the purposes mentioned above.
2.4. How long we retain your personal data
Most data (for example, your account information or information relating to an order placed on the Site) is retained for as long as you are an "active" member, and for a limited period set out in the table below.
Your data is then archived with restricted access for an additional period, for limited reasons authorized by law (payment, warranty, disputes, etc.). After this period, it is deleted.
| Purpose of processing | Legal basis | Retention period in the active database | Archiving |
|---|---|---|---|
| Management of online orders (order processing, tracking, delivery, business relationship, disputes) | Contract | 5 years from the last activity | 5 years |
| Use of a customer account | Contract | 5 years from the last activity | 5 years |
| Transaction identifier and handling of complaints relating to payment or the order | Contract | — | 13 months from the debit date, or 15 months for deferred-debit payment cards |
| Sending messages by email or SMS (newsletters, information about promotions or sales). In the event of an unsubscribe request, we will stop sending newsletters. | Consent | For as long as the data subject does not unsubscribe (via the unsubscribe link included in newsletters) | — |
| Measuring the opening of our emails using tracking pixels (personalizing the content and frequency of our communications) | Consent | For as long as the data subject does not object to tracking or unsubscribe from our communications | — |
| Targeted advertising / advertising profiling | Consent | 13 months from the placement of advertising cookies | — |
| Sharing data with our third-party partners for customer-knowledge purposes | Legitimate interest | 1 year | — |
2.5. Recipients of your personal data
The data collected is intended for our internal departments and our subcontracted service providers. This includes situations where partners are involved in providing services, such as staff working in logistics, transport and delivery services, and staff working in marketing and advertising.
The data processed may also be transmitted to the competent authorities, at their request, in connection with legal proceedings, judicial investigations and requests for information from the authorities, or in order to comply with other legal obligations.
2.6. Is your personal data processed outside the European Union?
We may subcontract the processing of, or share, your personal data with third parties (in particular Google Analytics) located in a country subject to personal data protection laws different from those of the European Union.
In such cases, we ensure that the transfer of your personal data is carried out in accordance with applicable legislation and, in particular, that appropriate contractual, technical and organizational measures are put in place, such as the standard contractual clauses approved by the EU Commission.
2.7. Your rights to control your personal data
You have the right to access, rectify, restrict and erase your personal information, as well as the right to data portability, and the right to object, on legitimate grounds, to the processing of this data. You may exercise these rights at any time by contacting us:
- By email: [email protected]
- By postal mail: SAS JL26 – DEELUXE, BUREAUPOLE – BAT B, 2 avenue Elsa Triolet, 13008 Marseille, France
You may issue instructions regarding the storage, deletion or disclosure of your personal data after your death.
You may also exercise your choices regarding our use of cookies (see the "Cookies" section below).
2.8. How to exercise your rights
To enable us to respond quickly, please provide us with your last name, first name, email address, address and, if possible, your customer reference, specifying the means by which you would like to receive our response (email, postal address).
Please note that, in the event of reasonable doubt, we may ask for a photocopy of an identity document bearing your signature in order to verify your identity and process your request.
A response will then be sent to you within one (1) month of receipt of your request. However, this period may be extended by two (2) months, taking into account the complexity of the request or the number of requests received.
If you are not satisfied with our response, you have the option of lodging a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the supervisory authority responsible for ensuring compliance with personal data obligations in France.
2.9. Security of your personal data
We are committed to implementing the necessary protective measures to preserve the confidentiality and security of your personal data and to prevent it from being altered, damaged or destroyed, or from being accessed by unauthorized third parties.
2.10. Third-party websites
The Site may contain hyperlinks to other websites. We are in no way responsible for the privacy policy or personal data protection practices of these third-party websites.
3. Cookies
3.1. What are cookies?
Cookies are files used to manage automatic authentication, session tracking, and the recording of specific information about users accessing the Site and, in the case of online purchases, the recording of shopping carts. More specifically, cookies are small files that the website sends to the user's browser, where they are stored and sent back to the server (without modification) each time the user accesses the same part of the Site. It is possible to block all cookies, although this would affect the use of the Site.
Cookies are used on the Site for various purposes:
- To make browsing easier and improve the ergonomics of your visit: by saving your settings, they save you from having to enter your login details every time you visit a new page;
- To improve the provision of services: by tracking your use of the Site, they allow us to check that the Site meets your needs and expectations.
Cookies are not used to personally identify you. The purpose of using cookies is to improve the operation of the Site: you can manage and/or delete cookies if you wish.
The Site uses Google Analytics. As a result, when you visit it, your browser automatically sends certain information to Google. To find out how Google uses this information, please refer to Google's privacy policy: policies.google.com/privacy.
3.2. Cookies used by the Site
3.2.1. Functional cookies
These are cookies necessary for the operation of the Site. They allow you to use the main features of our site (for example, access to your account). Without these cookies, you will not be able to use our Site normally. These are cookies placed by DEELUXE that relate solely to the operation of the Site.
3.2.2. Analytics and statistics cookies
These cookies are used to compile Site traffic statistics and detect browsing issues, in order to monitor and improve the quality of the Site's operation (for example, the most frequently visited pages, user searches in the Site's search engine, etc.).
These are mainly cookies placed by Google Analytics and Facebook.
If you wish to disable the tracking of analytics cookies, you can use the module offered by Google: tools.google.com/dlpage/gaoptout, and follow the instructions.
3.2.3. Tracking pixels in our emails
Our marketing emails may contain a tracking pixel, an invisible image that tells us whether the message has been opened. This measure is used to personalize the content and frequency of our communications. It relies on your consent and remains optional: you can decline it when signing up, or object to it at any time from the preference management page available at the bottom of each of our emails, without losing your newsletter subscription. Tracking of basic message deliverability is carried out independently of this consent.
3.3. Cookies used by third-party partner websites
Cookies known as "third-party cookies" may be placed on your browser, with your consent, by our partners acting as data controllers.
This is the case:
- when certain modules and features are integrated into our Site, such as social media buttons;
- for targeted advertising purposes.
We do not manage the cookies of these partner companies and have no control over or responsibility for these cookies or the use of the data collected through them. In this regard, we recommend that you review these partners' own policies relating to these cookies.
You can view the list of these partners and control the placement of their cookies on your browser:
- Facebook: fr-fr.facebook.com/policies/cookies
- Instagram: help.instagram.com
- Twitter: help.twitter.com
3.4. How to manage and configure your cookies
Several options are available to you for managing cookies. Any settings you configure may change your internet browsing experience and your conditions of access to certain services that require the use of cookies.
You may choose, at any time, to express and change your cookie preferences, either on a case-by-case basis or by systematically refusing them, using the methods described below.
You can configure your browser software so that cookies are saved on your device or, conversely, rejected, either systematically or depending on their issuer.
You can also configure your browser software so that you are prompted to accept or refuse cookies on a case-by-case basis, before a cookie is likely to be saved on your device.
The configuration for managing cookies and your choices differs for each browser. These settings can be changed in the browser menu, under the "Options" or "Preferences" section. For more information on these settings, please refer to the following links:
- Google Chrome: support.google.com/chrome
- Mozilla Firefox: support.mozilla.org
- Internet Explorer: support.microsoft.com
- Safari: support.apple.com
If the information in the links above is not sufficient regarding cookie settings management, we suggest you consult your browser's "Help" section.
In any case, cookie consent remains valid for 13 months.
4. Changes to the personal data protection policy
We may amend this personal data protection policy and will ensure that you are informed, either by a special notice on the Site, by email, or by a personalized notice, in particular as part of newsletter mailings.
Last updated: May 2020.