Skip to main content

Privacy Policy

Last updated: September 1, 2023

  1. DEFINITIONS

Capitalized terms refer to the following definitions:

The “Company” or “we ” refers to the company Manoyas Paris whose head office is located at 101 rue de Sèvres 75272 Cedex 06, registered in the Paris Trade and Companies Register under number 948235023 and whose intra-community VAT number is FR49948235023.

The “Site” designates the internet site(s) accessible from the URL link www.manoyas.com and their possible sub-sites allowing access to a content consultation area, to a reserved area to customers, etc. which are provided by the Company.

“You ” refers to the people concerned by the Processing carried out on the Site (users, prospects, customers, etc.).

Policy ” means this privacy policy.

Data ” corresponds to any information about an identified or identifiable natural person (the “ data subject ”) directly or indirectly, in particular by reference to an identifier (name, identification number, location data, online identifier, etc.) or to one or more elements specific to its identity.

Processing ” corresponds to any operation applied to Data (collection, recording, organization, conservation, adaptation, communication by transmission, dissemination, erasure, etc.).

A “ Data Controller ” is one who, alone or jointly with others, determines the purposes and means of the processing and a “ processor ” is one who processes Data on behalf of the Data Controller. On the Site, unless otherwise stated, we are responsible for data processing.

A “ Recipient ” is the natural or legal person, public authority, service or other body which receives communication of personal data, whether or not a third party.

Regulation ” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ( ''GDPR''); Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms; the rules applicable to commercial prospecting provided for by the Postal and Telecommunications Code, and more generally the laws and regulations applicable to the Data Processing that we carry out.

 

SHOWCASE SITE AND COMMERCIAL PROSPECTION

The Site presents the activities of our Company and various forms (contact, subscription to the newsletter). By completing the forms and communicating with us via the Site, you provide us with the following categories of information:

  • Identity data: civility/gender; name ; first name ; and optionally, we may ask you for your date of birth to offer birthday offers;
  • Contact data and correspondence: email address; postal address (address, postal code, city); telephone number; In the event of a request to customer service, the nature of your request and the content of your request.
  • Data from reviews and contributions: pseudonym, date of the review, content of the review, product or service concerned, if applicable, profile photo attached to the review; The Company may enrich its Site by collecting and republishing opinions and contributions made in relation to its offers by its customers on other sites (in particular social networks) when these contributions are freely accessible to the public;
  • Data necessary for carrying out loyalty, prospecting, study, survey, product testing and promotion actions;
  • Data relating to the organization and processing of competitions, lotteries and any promotional operation;
  • Data collected through actions to exercise the rights enshrined in the Regulations.

In accordance with our legitimate interest, and where applicable when necessary for the execution of pre-contractual measures taken at your request or a contract, we carry out processing on the above-mentioned Data for the following purposes:

  • Presentation of the Company's products and services;
  • Management, processing and monitoring of requests and exchanges with the Company, via the Site;
  • Management of relationships with prospects;
  • Management of people's opinions on the Company's products, services or content;
  • Prospecting and/or sending information, management of technical prospecting operations, choice of people to carry out loyalty actions, prospecting, surveys, product testing;
  • Organization of competitions or any promotional operations on the Site.

The data used for commercial prospecting management purposes is kept for a maximum of three years from the last active contact from the prospect or customer, and before in the event of withdrawal of your consent to receive messages from us. Data from opinions and contributions are kept for the duration of public access to the opinion on the Site.

In accordance with our legal obligations, identity and contact data will also be processed for the following purposes:

  • Updating of its prospecting files by the organization responsible for managing the list of opposition to telephone canvassing, in application of the provisions of the Consumer Code
  • Management of requests for rights of access, rectification and opposition, and more generally the rights described in the Policy.

ONLINE SALE

The Site allows you to make purchases, which leads us to carry out Processing on the following Data:

  • Identity and contact data
  • Data relating to the contractual and commercial relationship: details of the content of the order; pre-contractual exchanges relating to the order (subject, date, etc.); communications with the Company.
  • Payment and transactional data: transaction date, amount, payment method, order number, billing data;

This information is necessary for the management of our customer-prospect file, and more precisely for the following purposes in accordance with our General Terms and Conditions accepted when ordering on the Site and our legal obligations:

  • Carry out operations relating to file management concerning: contracts including registrations; the orders ; delivery of the product or service; legal and commercial guarantees; the bills ; accounting and monitoring of the commercial relationship (after-sales service) including for opinions on the Company's offers;
  • Prevention and fight against fraud and means of payment and in particular against bank card fraud;
  • Management of unpaid debts and disputes, provided that it does not relate to offenses and/or that it does not lead to exclusion of the person from the benefit of a right, a service or a contract.

Secure payment. All transactions carried out on our Site are secure. Payments by credit card are carried out by our payment service providers (“PSP”), as indicated in our general conditions or on the order page for our products and services. We therefore have an SSL encryption system to protect your personal data as well as the payment methods used. At no time are we directly in possession of your banking details through this process.

Shelf life. The personal data we process is retained for the periods shown in the table below.

Data concerned

The duration of the conversation

Data processed for commercial prospecting purposes

3 years from the prospect's last active behavior or Data collection

Data necessary to process your order and manage contractual and commercial relations

3 years from the last active behavior of the customer or failing that, from the end of the contractual relationship. For accounting documents (purchase orders, delivery notes, customer invoices): 10 years from the end of the financial year

Order contracts for an amount less than 120.00 euros

5 years from the conclusion of the contract.

Order contracts for an amount greater than 120.00 euros

10 years from the date of delivery or provision of service.

Bank details: in case of single payment

13 months for immediate debit payment cards and 15 months for deferred debit payment cards from the debit date (for the purposes of responding to a possible dispute)

Bank details: in the event of taking out a subscription with tacit renewal

13 months for immediate debit payment cards and 15 months for deferred debit payment cards from the debit date of the last payment due date, occurring at the end of the subscription (for the purposes of responding to a possible CONTESTATION)

DELIVERY OF HARDWARE PRODUCTS

To deliver the products ordered on the Site to you, we will ask you for your delivery postal address, if the latter is different from the billing address. If the delivery of a good is to a third party, you confirm that you have authorization to transmit their identity and delivery data. This Data will be transmitted to the carrier responsible for delivery.

Other information necessary for delivery will be processed in accordance with our General Terms and Conditions and our legitimate interest (delivery method, package size, delivery tracking information, delivery date, receipt receipt, signature of the receipt. ..).

The carrier responsible for delivery applies its own confidentiality policy to the Data transmitted to it as part of the order or which it is required to collect during delivery.

EXERCISE OF YOUR RIGHTS

For any request to exercise the aforementioned rights or for more information, you can contact the Company at the email address yasmine@manoyas.com

In accordance with the Regulations, you have the following rights over your Data:

  • Right of access to your Data, including the right to request a copy, and to the information provided in this confidentiality policy (art. 15 GDPR). When the legal basis for data processing is our legitimate interest, you have the possibility of requesting information relating to the balancing that we have carried out between the interests of our customers and those of the Company prior to this processing.
  • Right to rectification (art. 16 GDPR) and to update your data that we have.
  • Right to erasure of your Data (art. 17 GDPR) when the data is no longer necessary for us, you have withdrawn your consent to their Processing (if it was based on our consent) or you object to the Processing based on our legitimate interest or processing carried out for prospecting purposes or profiling purposes linked to prospecting.
  • Right to withdraw your consent at any time (art. 13-2c GDPR) for all data processing based on the legal basis of your consent. Furthermore, in terms of commercial prospecting, you have the possibility to unsubscribe from our mailing lists at any time by clicking on the unsubscribe link present in our communications or by contacting us to no longer receive solicitation messages.
  • Right to limitation of Processing, which, except for compelling reasons, can only be implemented with your agreement (art.18 GDPR) when:
  • You contest the accuracy of the data, for the time necessary for their verification,
  • If the processing of data is unlawful but you object to the erasure of the data and choose instead the restriction of the processing,
  • When we no longer need the data but you still need it for the establishment, exercise or defense of your legal rights.
  • When you have objected to processing based on our legitimate interest, for the time necessary to balance our respective interests.
  • Right to portability of Data directly provided by the data subject when they are subject to automated processing based on your consent or on a contract (art. 20 GDPR). This right means that you have the possibility to request the communication of this data in a structured, commonly used and machine-readable format so that it can be communicated to another data controller.
  • Right to object (art. 21 GDPR) to the processing of your data when this Processing has our legitimate interest as its legal basis.
  • Right to define the fate of your Data after your death (art. 40-1 of law 78-17 of January 6, 1978) and to possibly choose a trusted third party to whom the Company should entrust them.

You can also obtain more information on the CNIL website .

In the event of a request to exercise, the Company reserves the right to ask you to specify your request and to provide proof of identity (which will be kept for one year in the event of exercising the right of access or rectification and three years in case of exercise of the right of opposition). If our response does not bring you complete satisfaction, you always have the possibility of submitting a complaint to the authority for the control and protection of Personal Data to which you are responsible (in France, the CNIL).

STORAGE DURATION

Commitments. Means for effective deletion of Data are put in place as soon as the retention or archiving period necessary to achieve the determined or imposed purposes is reached, in particular after deletion of your account with our Company or at the end of the contract with our Company.

Minimization. In any case, the Data subject to Processing are not kept beyond the time necessary for the execution of the obligations defined when the contract is concluded, or imposed by the legislation in force. Beyond that, they may be anonymized and kept for statistical purposes, particularly in aggregate form.

Litigation. Likewise, we may archive information demonstrating the execution of our contractual obligations until the expiration of the limitation periods / foreclosure applicable to legal actions, for the proper defense of our interests before the courts in the event of litigation. ulterior. This concerns in particular but not exclusively the durations provided for by the commercial code, the civil code and the consumer code.

RECIPIENTS

Commitments. We undertake to ensure that any recipient of data provides sufficient and appropriate contractual guarantees to respect your rights, so that the processing meets the requirements of the GDPR when this regulation applies (in particular with regard to subcontracting). Based on our legal obligations, your Data may be disclosed in accordance with a law, a regulation or under a decision of a competent regulatory or judicial authority.

The information you communicate to us is for internal use by authorized persons, it is strictly confidential and cannot be disclosed to third parties, except under the conditions provided for by the Regulations in the event of express agreement or if you have decided to make it public.

Subcontracting. Our external service providers (e.g. suppliers, carriers, etc.) may, as part of the processing described above, be recipients of personal data when this is necessary to carry out their mission.

Transfer outside the EU. We undertake to ensure compliance with the applicable regulations relating to data transfers to countries located outside the European Union and in particular according to the following methods:

  • We will transfer visitor, prospect and customer data to countries recognized as offering an adequate level of protection;
  • When the country of destination does not benefit from an adequate level of protection, we regulate the flows using transfer tools that comply with regulations (standard contractual clauses of the European Commission, in particular).

Aggregation of non-personal data. We may publish, disclose and use aggregated information (information relating to site users, prospects, customers, etc.) that we combine so that no natural person is individually identifiable. This processing is carried out in accordance with our legitimate interest for statistical purposes, industry and market analysis, presentation of our business, promotional and advertising purposes and other commercial purposes.

IT SECURITY

Commitments. We undertake to implement appropriate technical and organizational measures through physical and logistical security means to limit the risks of accidental, unauthorized or illegal access, disclosure, alteration, loss or even destruction of personal data about you.

Warnings. We invite you to be careful about what you decide to make public on the internet. With regard to personal data, including those relating to your private life or sensitive data made public at your initiative or deduced via your contributions, comments and positions of any nature whatsoever on the Site, or even social networks on groups and/or conversations with other users of the Site.

Https protocol. The URL address of the Site is accompanied by a closed padlock or a key appears at the bottom right of your browser indicating the existence of the Https security protocol, applicable to data storage in particular. This means that you are in a secure browsing zone, especially when you are asked for your bank card number.

Data breach. In the event of an event leading to the realization of risks of modification, disappearance or unauthorized access to the Data, we undertake to:

  • Examine the causes of the incident;
  • Take the necessary measures to limit the negative effects and harm that may result from the said incident;
  • Notify the incident to the competent authority and/or persons concerned as soon as possible when this meets a legal requirement.

Under no circumstances can the commitments defined in the point above be assimilated to any recognition of fault or responsibility for the occurrence of this incident.

INTELLECTUAL PROPERTY

The Content of the Site may be protected by copyright and database law. Any representation, reproduction, translation, adaptation or transformation, in whole or in part, carried out illegally and without the consent of the Company or its successors or assigns constitutes a violation of Books I and III of the Intellectual Property Code and will be liable to give rise to legal proceedings for counterfeiting.

You contractually undertake with regard to the Company not to use, reproduce or represent, in any way whatsoever, the Content of the Site, whether or not protected by an intellectual property right, for any other purpose. than that of their reading by a robot or a browser. This prohibition does not apply to indexing robots whose sole purpose is to scan the content of the Site for indexing purposes.

 

GENERAL

Obligatory or optional nature. On the Site, you are informed of the mandatory nature of the responses by the presence of an asterisk or any other type of notice. In the event of an incomplete request (for example: online registration or order, request for information, etc.), the Company reserves the right to request additional information or to exclude by any technical means the possibility of validating the form concerned.

Hypertext links. The Site may provide links to sites, applications and services other than its own, which may be operated by third party companies. We are not responsible for the processing of personal data carried out by these third party sites, or sites pointing to the Site, the user of which is invited to consult the personal data protection policies for more information. The Policy is applicable only to the activities of the Company, which cannot be held responsible for the failure of a third party to comply with its obligations regarding the protection of personal data.

Scope. The Policy is not exhaustive of all processing and we reserve the right to supplement it by any means.

Language. The Policy is written in French. In the event that it is translated into one or more languages, only the French text will be authentic in the event of a dispute.

Non-waiver. The temporary or permanent non-application of one or more clauses herein shall not constitute a waiver on its part of the other clauses herein which continue to have their effects.

Changes - Updates. We reserve the right to modify this privacy policy. The persons concerned will be notified when this is provided for by the applicable regulations. The update date is indicated in the header and we invite you to consult it regularly.

INFORMATION ABOUT COOKIES

Presentation: Cookies and trackers (hereinafter "cookies") refer to connection cookies and more generally, any file - deposited when consulting a website or mobile application, installing or the use of software in the user's terminal equipment - intended to read or write information in this equipment. Cookies allow us to collect Site consultation data (IP address, Internet service provider, hardware configuration, software configuration, browser type and language, etc.).

Cookies may be placed by the Company or by third party companies without your consent when they are strictly necessary for the operation of the site or to facilitate communication to the online public, for example when they are intended for authentication, to be kept in memory the contents of a shopping cart, to generate attendance statistics, or to limit free access to a sample of content requested by users.

Duration: The maximum retention period for cookies is 13 months after their first deposit in your terminal and this period is not extended with each visit.

Consent to the deposit of cookies: You are informed of the presence of cookies that are not strictly necessary by an information banner on the Site. With the exception of cases of use not subject to consent, cookies and trackers will only be placed on your terminal with your express agreement. You may be asked periodically to reiterate your consent, in order to ensure that it is still valid.

Cookie settings: You can always change your preferences via your browser settings ( Firefox with enhanced protection against tracking; Firefox with cookie deletion; Chrome ; Internet Explorer ; Safari ; Opera ; Microsoft Edge ). You can also configure your device's browser to activate the “Do Not Track” option, which will indicate to visited sites, advertising agencies or applications that you do not wish to be “tracked”. This functionality is available in particular for the following browsers: Firefox ; Chromium ; Internet Explorer ; Safari ; Opera ; Microsoft Edge .

In the event of refusal of cookies that are not essential to the operation of the Site: Certain functionalities of the Site such as video players or interactive content use services offered by third parties and deposit cookies allowing them to identify your consultation of the content. If you refuse to deposit these cookies, the personalization features will not be able to function and the content that will be offered to you (notably video or advertising suggestions) will still be present but will be unrelated to your interests.

Types of cookies: In addition to cookies whose sole purpose is to enable or facilitate communication via our Site or cookies strictly necessary for the provision of the Site or Service to which you have subscribed, the data controller may analyze traffic and use made of the Site and, where applicable, facilitate and improve navigation, carry out prospecting operations, develop commercial statistics or display targeted advertisements. The conditions of the trackers are those of Shopify https://www.shopify.com/legal/cookies