Privacy Policy – Personal Data Protection
SAS OR’IZON
(hereinafter referred to as "the Professional" »)
In the context of visits to its Website and Orders placed, the Professional collects personal and confidential information from its website Clients.
The processing of personal data is justified by different legal grounds depending on how the personal data is used.
Among the applicable legal bases:
- Contract: personal data processing is necessary for the execution of the agreed contract.
- Consent: acceptance of personal data processing through explicit consent (checkbox, click, etc.).
- Legitimate interest: the Professional has a justified, balanced commercial interest in processing the data that does not infringe on privacy.
- The law: the processing of personal data is mandated by a legal text.
This collection is made with the informed consent of Users, expressed by reading this notice, voluntarily checking the box confirming the reading of said notice, and the voluntary and unilateral action of ordering products on the Website.
The data processing carried out by the Professional aims to: Order and customer relationship management, order payment, service and message personalization addressed to the Client, third-party commercial prospecting, online ad personalization, Site security, customer insight, and Site statistics and performance.
Within this framework, the Professional ensures that the collection and processing of client data comply with the following principles:
- Lawfulness, fairness, and transparency: data can only be collected and processed either with the consent of the data-owning client or strictly within the scope of the service requested by the data-owning client.
- Limited purposes: data collection and processing are carried out to meet one or more objectives specified in this privacy notice;
- Minimization of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the Professional are collected;
- Integrity and confidentiality of collected and processed data: the data controller commits to ensuring the integrity and confidentiality of the collected data.
Data Controller:
SAS OR’IZON
With a share capital of €20,000
Having its registered office at 17 rue de Reitwiller, Gimbrett, 67370 Berstett
Registered with the Strasbourg Trade and Companies Register
Under number 883 838 088 R.C.S.
Collected information
In general, the Professional collects the following information directly from Clients:
Name, first name, address, email address, phone number, connection data and browsing data, order history, preferences and interests, products viewed, delivery incidents, complaints.
In some cases, the Professional may collect location data.
The mandatory nature of the data is indicated during collection by an asterisk. Some data are collected automatically due to the client's actions on the site, while other information may be provided by partners.
The collection process
The Professional collects information provided by the Client on the occasion of:
- From creating a customer account
- From placing an order
- From browsing the Site
- From interactions with customer service
- From viewing advertisements
Collection medium
The information collected by the Professional is stored on a computer system and in a dematerialized form.
Right of access
Under the conditions defined by the Data Protection Act and the European Data Protection Regulation (Articles 14 to 22 of Regulation 2016/679 of April 27, 2016), individuals have the right to access their data, object, rectify, query, restrict, port, and erase it.
Data subjects also have the right to object at any time, for reasons related to their particular situation, to the processing of personal data, as well as the right to object to commercial prospecting.
Data subjects may contact the data controller by any written means to exercise their rights regarding access to their personal information, at the following contact details:
SAS OR’IZON
support@dearbball.fr
Furthermore, individuals have the right to file a complaint with the CNIL.
Information security
The company adheres to generally accepted standards to protect the information it collects and receives, both during transmission and after receipt.
The company maintains appropriate administrative, technical, and physical protection measures to safeguard customers' personal information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other illegal form of processing.
This includes, for example, firewalls, antivirus software, password protection, and other access and authentication controls.
However, no method of transmission or storage is completely secure.
If the customer believes that the security of their personal information has been compromised, they must contact the Professional to inform them.
If the Professional believes that the transmitted information has been compromised, they will inform the customer in accordance with applicable law.
Sharing information with third parties:
The collected data may be shared with service providers (subcontractors) engaged by the Professional to carry out its services for the purposes mentioned above, for example for managing, processing, fulfilling, and paying for orders, as well as for marketing operations.
For advertising targeting, the professional may share certain non-identifying data to contact the customer and send personalized ads on social media.
For third-party commercial marketing:
Email and SMS data may be shared with partners for electronic marketing campaigns only if the customer consents. Consent can be withdrawn at any time and/or the list of business partners can be requested at any time by writing to the professional at the following email address: Klaviyo, SMS BUMP
- Prospecting by telephone and postal mail
Postal and telephone data may be transmitted to third-party advertisers through partners as part of postal and telephone prospecting campaigns. Consent can be withdrawn at any time and/or the list of commercial partners can be requested at any time by writing to the professional at the following email address support@dearbball.fr and/or by registering on the Bloctel list on the site. http://www.bloctel.gouv.fr/
Data transferred outside the EU
The client is informed that data concerning them may be transmitted for the purposes mentioned above to companies located in countries outside the European Union that have a lower level of data protection than in the European Union.
Prior to transfer outside the European Union, the Professional will take all necessary measures and guarantees to secure such transfers.
Personal data of minors
The professional's services are not intended for Minors; therefore, it does not process data specifically concerning minors.
It is the responsibility of parents and anyone exercising parental authority to decide whether their minor child is allowed to use the professional's services.
Use of data on social networks
The client is informed that information related to browsing is captured by social networks for advertising targeting purposes on their own behalf via cookies placed during navigation on the site.
The legal basis for this processing is the consent given when accepting cookies. It is possible to withdraw consent by adjusting the browser settings.
The Client is invited to consult the Site's cookie management policy as well as the personal data protection policies of the Site's various partners regarding social networks in order to precisely understand the information collected by these third parties.
