Personal Data Protection Charter

The website www.calebasse.com (hereinafter the "Site") is an e-commerce platform dedicated primarily to the online sale of products from the company Calebasse.

In connection with accessing, consulting, browsing, and using the Site and the services it offers, you are required to share your personal data with Calebasse.

This data is protected by law. For this reason, Calebasse, in its capacity as data controller, has implemented appropriate security measures to protect your personal data.

Please take the time to read this charter, which explains how your personal data is used by Calebasse.

This charter supplements the General Terms and Conditions of Use as well as the General Terms and Conditions of Sale of the Site (and, where applicable, any document or information notice referencing this charter).

If needed, you can ask your questions directly to Calebasse by sending an email to contact@calebasse.fr.

Processing of your personal data

All data you enter on the Site is limited to what is strictly necessary to provide the products and services offered on the Site, namely:

• identification data (last name, first name, email address, postal address, etc.)
• banking and financial data (bank details, billing address, etc.)
• order-related data (order number, products ordered, promotional codes, etc.)
• data relating to returns of ordered products (reasons for the return, amount refunded, etc.)
• data relating to the follow-up of the commercial relationship (order history, requests for information, complaints, etc.)
• data relating to the organization of contests or other promotional operations (participation date, nature of prizes awarded, etc.)

If you place an order for a third party, we remind you that you are required to inform this person about the disclosure and processing of their personal data by Calebasse and to share this charter with them.

Furthermore, certain data is automatically collected by the Site, namely:

• location data (to indicate sales/pickup points near you)
• connection and browsing data (necessary for the proper technical functioning of the site and its services)

Some of this data is mandatory, while other information is optional to order products sold on the Site and benefit from other services offered on the Site. The mandatory or optional nature of the personal data to be provided is indicated at the time of collection. If you refuse to provide the mandatory data requested, Calebasse will not be able to provide the requested services or process your requests (such as creating your account on the Site, placing an order, or subscribing to the newsletter).

Why is your personal data collected?

Calebasse processes your personal data solely for the following reasons:

• creation of your account on the site
• order management
• after-sales service
• improving the catalog and your customer experience
• organization of promotional offers
• commercial prospecting
• personalization of site browsing and your experience
• improvement of the site and its services
• compliance with legal and regulatory obligations

Sharing of your personal data

In connection with accessing, consulting, browsing, and using the Site and the services it offers, your personal data may be shared with the following recipients:

• Calebasse and its authorized staff
• Subsidiaries (e.g., for order processing, after-sales service management, sending newsletters, etc.)
• Subcontractors of Calebasse (e.g., hosting providers, logistics providers, payment processors, emailing services)
• Trusted third-party partners for marketing and analytics (e.g., audience measurement providers, advertising partners such as online ad platforms, particularly for management and targeting of ad campaigns)
• Administrative or judicial authorities (in the event of an express request from them)

Protection of your data by Calebasse

Calebasse has implemented technical and organizational measures to protect your personal data, particularly against potential breaches that could accidentally or unlawfully result in the destruction, loss, alteration, unauthorized access, or disclosure of your personal data. These measures ensure an appropriate level of data security, taking into account the state of knowledge, implementation costs in relation to risks, and the nature of the data to be protected.

Calebasse also guarantees that its staff members and any person required to process your personal data comply with internal rules and procedures relating to data processing, particularly the technical and organizational security measures implemented to protect your personal data.

Retention of personal data

Generally speaking, your personal data will only be kept for the period necessary to achieve the purposes for which it was collected or to comply with legal or regulatory requirements.

Subject to exceptions, Calebasse retains your personal data:

• until your account is deleted or in the event of account inactivity for 600 days;
• in the absence of an account, for the entire duration of our commercial relationship.

Beyond these periods, your data is retained for three (3) years from the end of the commercial relationship for data processed for promotional purposes, five (5) years from the end of the commercial relationship for data kept for evidentiary purposes, and ten (10) years from the closing of the financial year for data kept for accounting purposes.

Your rights regarding your personal data

In accordance with applicable personal data protection regulations, you have the following rights regarding your personal data:

• you can request access to the personal data Calebasse holds about you and obtain a copy of it, including in electronic format;
• you can request the correction, update, and deletion of your personal data, as well as the restriction of its processing;
• you can object to the use of your personal data;
• you can withdraw your consent when it has been collected, without this withdrawal affecting the lawfulness of the processing carried out prior to the withdrawal;
• you can share your "last wishes" with Calebasse regarding your personal data in the event of your death (for example, its deletion or its transmission to any person of your choice).

In certain cases, you must explain to Calebasse why you are exercising one of these rights and, if necessary, provide proof of your identity.

For any questions and to exercise your rights, you can contact Calebasse directly by sending an email to contact@calebasse.fr.

Updated on 02/05/2023