Privacy Policy

This Privacy Policy (hereinafter the “ Policy ”) describes how Castafiore (hereinafter the “ Platform ”) collects and processes your personal data.

The Policy applies to relationships between the Platform and users (hereinafter the “ Users ”), in the context of which the Platform collects personal data.

When the User consults the Platform and makes a purchase, he transmits personal data to the Platform as described below, and accepts that the practices and measures mentioned in this Privacy Policy are implemented.

The Platform has created an electronic file which lists this personal data. This database has been declared to the National Commission for Information Technology and Liberties, in accordance with the requirements of the “ Informatics and Freedoms ” law n°78-17 of January 6, 1978, amended by the law n°2004-801 of August 6, 2004.

The User is invited to regularly consult this Policy to ensure that he accepts its terms. If the User disagrees with the terms of this Policy, he or she is invited to stop using the Platform.

Article 1. Personal data

1.1. Data collected

When the User creates an account, the Platform collects the following data:

  • Civility
  • First and last name
  • Date of birth
  • Address
  • E-mail address
  • Password
  • Bank data
  • Possibly, data relating to physical characteristics (finger size, wrist circumference).

1.2. Legal basis for processing

When the User creates an account and/or agrees to receive the Newsletter, the legal basis for the processing of their personal data is Article 6 1, a) of the GDPR because it is based on their consent.

When the User orders an Item, the Platform processes their personal data. The legal basis on which the Platform may process such personal data is set out in Article 6(1)(b) of the (EU) General Data Protection Regulation 2016/679 (GDPR), since the processing of this information is necessary for the execution of the Transaction.

The Platform may also process ordinary personal data on the basis of the rules specified in Article 6 1, f) of the GDPR relating to the legitimate interest of the data controller, unless the rights to privacy and freedoms of the User do not prevail over his interests.

The Platform has a legitimate interest in the processing of personal data for marketing purposes and advertising personalization. This legitimate interest is based on the User's preferences so that the Platform can best personalize the offers presented. Furthermore, the Platform has a legitimate interest in processing personal data for analysis purposes.

1.3. Data controller

The data processing manager is the company Castafiore, publisher of the Platformhttps://castafiore.fr .

1.4. Recipients

The recipients of the data are the data controller and its service providers who are involved in the execution of orders such as the sellers of the Items, financial institutions as well as employees of logistics, transport and delivery services.

1.5. The duration of the conversation

The Platform does not keep data longer than necessary for the purposes for which they are processed.

The data will be retained until the user account is deleted. They will also be deleted after a period of 2 years without the User logging into their user account.

1.6. User Rights

The User has the individual right of access, withdrawal and rectification provided for by law and may in this regard delete information concerning him which is no longer relevant, by making a request by email to the company Castafiore, at the address contact@castafiore.fr .

Depending on the choices made when creating or consulting their accounts on the Internet, the User may choose whether they wish to receive offers from the Castafiore company and be informed of particular operations via email. If the User no longer wishes to receive these offers, they may request this at any time by clicking on an electronic link available on the emails for this purpose, or by modifying their account directly on the Platform.

If the User considers that his rights over his data are not respected, he has the possibility of filing a claim (complaint) with the National Commission for Information Technology and Liberties (CNIL).

1.7. Data transfer

The Platform may transfer data to third parties solely for the purposes of carrying out the transaction.

Any transfer or provision of data may only take place with the prior consent of the User.

The Platform does not carry out any data transfer outside the European Union.

1.8. Links to other sites

The Platform may contain URL links to other sites belonging to third-party companies. The Platform cannot be held responsible for the content of these sites, which may use their own cookies, collect User data or use them in a manner contrary to this Policy.

The Platform recommends that Users carefully read the privacy policies and conditions of use of third-party sites before communicating personal data to them.

Article 2. Cookies and other tracers

2.1. Definition

A cookie is a text file stored on the hard drive of the terminal used by the User (computer, tablet, mobile) through their browser software when consulting an online service. This means that a cookie is sent to the Platform each time the User accesses it via their browser.

Cookies do not store any sensitive or directly identifying personal data but simply provide information on the User's navigation so that their terminal can be recognized later.

Cookies do not cause any damage to devices, but make it easier, for example, to find User preferences and adapt the content of the Platform.

Only the User chooses whether they wish to have cookies saved on their device.

2.2. Cookies used by the Platform

Functional cookies allow:

  • To identify the User when they connect to the Platform.
  • To adapt the presentation of the site and advertising spaces to the display preferences of your terminal (language used, display resolution, operating system used, etc.), depending on the hardware and software for viewing or reading your terminal includes.
  • Make your searches easier by keeping your automatic searches and saved articles.
  • To offer personalized or non-personalized advertisements to the User.

These cookies have a maximum shelf life of 12 months.

Analytical cookies make it possible to analyze the use of the Platform and are collected for analytical purposes to establish statistics and volumes of attendance and use (sections and content visited, paths, etc.).

Social media cookies, generated by sharing buttons on social media applications, allow you to remember your sharing preferences with social media.

Cookies recorded by search engines, and in particular Google, follow Google legislation regarding their use. The User can find Google's Confidentiality Rules and Terms of Use via cookies on this page: Google's Privacy & Terms site .

These cookies have a maximum shelf life of 12 months.

2.3. User Preferences

When consulting the Platform for the first time or after an extended period, the User will see a banner relating to cookies appear.

This banner allows the User to define their preferences.

The User can at any time choose to express and modify their cookie preferences via their browser.