Privacy policy

Designation of the Parties

1.1. Pompom Paris

1.1.1. The website www.pompom-paris.com (The" Site ") Is published and operated by the company POMPOM, a simplified joint-stock company with a single partner with a capital of 1,000.00 euros, located 8 rue de Grenelle, 75006 Paris (France), registered in the Paris Trade and Companies Register (05) under the number 878 We "Or" POMPOM »). IntraCommunity VAT: FR 4878231505.

POMPOM is therefore responsible for the processing of personal data (" personal data ") The Users of the Site in accordance with the General Data Protection Regulation (" GDPR ") And to Law N ° 78-17 of January 6, 1978 relating to IT, files and freedoms (" LIL ") (Together the" Regulation »).

1.1.2. The Site is hosted by the company Squarespace Ireland Ltd, a company incorporated according to Irish laws, located Le Pole House, Ship Street Great, Dublin 8, Ireland, registered as number 527641.

1.1.3. If you have any questions, you can contact us by mail at the address above, by email at Contact@pompom-paris.com , Or through the dedicated contact form, heading « Contact us "From the Site's drop-down menu (the" Service Client »). You can also contact the host by mail at the address above or by phone at + 35 (0) 319058597.

1.2. The User

This Charter for the protection of personal data & the use of cookies (the « charter ") Is concluded between POMPOM and Internet users (" the user "Or" You ”) That connect, navigate and use the Site.

Subject and Application of the Charter

2.1. When you connect, navigate, use and place an order on the Site, the purpose of the Charter is to inform You about the terms and conditions:

The processing that We carry out of your personal data;

Of the connection witnesses (" Cookies ") That we are likely to use.

The purpose of the Charter is also to govern the rights and obligations of the parties under the Regulations, in particular to inform You of your rights and the manner in which you can exercise them.

2.2. When you log on to the Site, We strongly recommend that you carefully read all the provisions of the Charter before continuing to browse. You can always read the Charter on the Site, accessible from the bottom of each of the pages of the Site. You can also reach the Customer Service for any questions relating to the Charter. Continuing your browsing on the Site carries your full and unreserved consent to the Charter, which You certify that you have read and understood.

2.3. When you use some of the Site's features, you are always asked to read and accept the Charter before you can use the feature. In this case, POMPOM invites you to carefully read all the provisions of the Charter before continuing your navigation. You can always read the Charter on the Site, accessible from the bottom of each of the pages of the Site. You can also reach the Customer Service for any questions relating to the Charter. Continuing your browsing on the Site carries your full and unreserved consent to the Charter, which You certify that you have read and understood.

2.4. The Charter is supplemented by the General conditions of use Of the Site And the General conditions of sale , Also accessible from the bottom of each of the pages of the Site.

2.5. We may have to modify or update the Charter at any time, in particular in application of a legislative or regulatory provision or to adapt them to changes in the activities and/or content of the Site.

General informations

Personal data is all information relating to an identified or identifiable natural person, directly (eg: your name) or indirectly (eg your postal address), whether the identification of the natural person can be carried out from a single data item (ex: name) or from the crossing of a set of data (Ex: a woman living at such and such an address, with such telephone number). We collect, process and use your personal data in accordance with the Regulations and the provisions of this Charter, only to the extent necessary to enable You to access, navigate and use the features of the Site and our services. To learn more about your rights and the protection of personal data, you can consult the website of the National Commission for Information Technology and Freedoms ( www.cnil.fr ).

The processing of your personal data

4.1 When requesting a contact

When you want to contact us, you can write to us:

Either by email to Contact@pompom-paris.com ; In this case, we collect and process your email address, as well as any personal data that You send to us in your message (name, first name, address, etc.) ;
Either through the dedicated contact form, heading « Contact us The Site's drop-down menu; in this case, we must collect and process your name and email address, and if you wish, your first name and telephone number.

The personal data that We collect on the occasion of a contact request are processed only to enable us to respond to You and, according to your request (question on a product, question on the follow-up of your order, etc.), to answer it as best as possible, according to the following terms:

Responsible for treatment:	POMPOM
Finality (s) & legal base(s) :	The purpose is to process and respond to the purpose of your request. The legal basis for treatments is your consent.
Conhere (s) :	Your personal data is intended for the customer service. Depending on the purpose of your request, they may be transmitted: Internally, at the relevant department (s) (management, accounting, logistics, etc.) ; Externably, to our relevant provider (s) (carrier, accountant, legal, etc.).
Conservation Duration (s):	3 years after our last contact, subject to the exercise of your rights.
Consequence (s) of the lack of provision of your personal data:	We will not be able to contact you and therefore process and respond to your request.
Fully automated profile or decision making	Your request is not subject to fully automated action or decision-making.

4.2 When creating a personal account

When you want to create a personal account, we must collect and process your name, first name and email address. The personal data that We collect on the occasion of a request to create a personal account is processed only to enable us to activate your personal account, according to the following terms:

Responsible for treatment:	POMPOM
Finality (s) & legal base(s) :	The purpose is to activate the opening of your personal account. The legal basis for treatments is your consent.
Conhere (s) :	Your personal data is intended for the customer service.
Conservation Duration (s):	3 years after our last contact, subject to the exercise of your rights.
Consequence (s) of the lack of provision of your personal data:	We will not be able to activate your personal account and therefore respond to your request.
Fully automated profile or decision making	Opening a personal account is not subject to fully automated action or decision-making.

4.3 When placing an order

When you want to place an order, we collect and process:

Necessarily your name, mailing address, delivery number;
If you wish, your first name, phone number and additional delivery information.

The personal data that We collect when placing an order is processed only to enable us to process your order and deliver the products ordered to you, according to the following terms (except payment data):

Responsible for treatment:	POMPOM
Finality (s) & legal base(s) :	The purpose is the placing, processing, execution and follow-up of your order, including its delivery and follow-up. The legal basis for processing is the execution of the sales contract and/or the performance of our legal obligations.
Conhere (s) :	Your personal data is likely to be transmitted: Internally, at the relevant service(s) (sales, accounting, logistics, etc.) ; Externably, to our relevant service provider (s) (carrier, accountant).
Conservation Duration (s):	5 years after the performance of the sales contract, with the exception of the necessary personal data: The documents and accounting documents, retained for 10 years from the end of the fiscal year in which the sale occurred; In the event of a dispute relating to the sales contract, retained 5 years after the performance of the sales contract, increased by the time limits for suspensions and interruptions of the limitation period.
Consequence (s) of the lack of provision of your personal data:	You will not be able to finalize the placing of your order.
Fully automated profile or decision making	The placing of an order and its follow-up is not the subject of fully automated action or decision-making (subject to the provisions relating to the data relating to the means of payment).

In addition, on the occasion of the payment of your order, we must collect and process the data relating to the payment method used for the payment of your order, namely:

Selected payment mode;
If You pay by bank card, the name of the holder, the card number, the expiration date and the visual cryptogram, the place from which You proceed to the payment of the order.

The personal data that We collect on the occasion of the payment of your order is processed only to enable you to proceed with its payment and We allow, where applicable, to reimburse you in cases where you exercise your right of withdrawal or cancellation of your order, as well as to manage payment disputes. Your personal data is also processed to prevent online payment fraud, as follows:

Responsible for treatment:	POMPOM
Finality (s) & legal base(s) :	The purpose is the payment of your order, the refund of the price paid in the event of and the prevention of online payment fraud. The legal bases of processing are the execution of the sales contract, the execution of our legal obligations and/or the legitimate interest of POMPOM to prevent and guard against fraud in online payment.
Conhere (s) :	Your personal data is likely to be transmitted: Internally, at the relevant service(s) (accounting); External, to: Your online banking and/or payment service; To the provider of the fraudulent use prevention solution of your 3D SECURE bank card.
Conservation Duration (s):	Data relating to the means of payment used are kept for the duration necessary for the full payment of your order, increased: The period provided for in the event of exercise of your right of withdrawal and/or cancellation of your order; 13 months, depending on the debit date or 15 months in the case of deferred debit payment cards, your personal data is thus kept in intermediate archiving only for proof purposes in the event of a challenge to the payment. We never keep this data by default and you recommend that you do not save it in your browser.
Consequence (s) of the lack of provision of your personal data:	You will not be able to finalize the placing of your order.
Fully automated profile or decision making	The placing of an order is not the subject of fully automated action or decision-making. In particular, We do not retain traces of fraudulent behavior that may lead to a refusal to sell. However, be sure that your bank or payment service system may refuse payment for the order.

4.4 When subscriting to our newsletter

When you want to join our newsletter, we must collect and process your email address. The personal data that We collect on the occasion of a subscription request to our newsletter is processed only to enable us to subscribe to You and to receive our newsletter periodically.

Responsible for treatment:	POMPOM
Finality (s) & legal base(s) :	The purpose is to allow You to subscription to our newsletter. The legal basis for treatments is your consent.
Conhere (s) :	Your personal data is intended for the customer service.
Conservation Duration (s):	3 years after our last contact, subject to the exercise of your rights.
Consequence (s) of the lack of provision of your personal data:	We will not be able to give you a subscription to our newsletter and therefore send you our newsletter.
Fully automated profile or decision making	Subscription to our newsletter is not subject to fully automated action or decision-making.

Additional information on the recipients of your personal data and the processing of your personal data

5.1. Transfers of your personal data and terms

We do not sell or rent by your personal data to third parties. On the other hand, we may transfer your personal data to third-party providers, acting as subcontractors, on our own account and according to our instructions. We strive to select third-party providers located on the territory of the European Union. Nevertheless, it is possible that our third-party providers are located outside this territory. In this case, we are trying to select third-party providers in countries whose legal framework provides a satisfactory level of security. Otherwise, We supervise the transfer of your personal data of appropriate guarantees, in particular the signing of contractual clauses specially provided for this type of transfer or the self-certification mechanism known as Privacy Shield . Moreover, when the law, the regulations or a court decision compels us to do so, know that your personal data may be transmitted to public authorities or administrations, in particular the courts if this is required by the legislation currently in force.

5.2. Accommodation by the company Squarespace Ireland Ltd

Your personal data that We process is hosted by Squarespace Ireland Ltd, a company incorporated under the laws of Ireland, located Le Pole House, Ship Street Great, Dublin 8, Ireland, registered as number 527641. Squarespace Ireland Ltd is a subsidiary of Squarespace, Inc., a company incorporated under the laws of the State of New York (USA), located 225 Varick Street 12th Floor New York, NY 10014 (USA). Squarespace Inc. is a member of the self-certification mechanism says" Privacy Shield ». You will find the personal data protection policy of the company Squarespace Ireland Ltd at: https://fr.squarespace.com/privacy-new / . Squarespace Ireland Ltd is prohibited from processing your personal data for purposes other than performing the hosting services of the Site and personal data collected and stored by POMPOM.

5.3. Payment services by the company PayPal (Europe) S. to r.l. & Cie

We offer you to pay for your order via your PayPal account. This service is provided by PayPal (Europe) S.à r.l et Cie, a company incorporated according to Luxembourg laws, located 22-24, boulevard Royal, L-2449 Luxembourg (Luxembourg). PayPal (Europe) S.à r.l et Cie is a subsidiary of PayPal Holdings Inc., a company incorporated under the laws of the State of California (USA), located 2211 North 1st Street San Jose, CA 95131 United States. You will find the personal data protection policy of the company PayPal (Europe) S.à r.l et Cie at: https://www.paypal.com/fr/webapps/mpp/paypal-and-your-data . PayPal (Europe) S.à r.l et Cie company is prohibited from processing your personal data for any purpose other than executing the payment services of your order through your PayPal account.

5.4. Delivery services by the company La Poste SA

We have your order delivered through the company La Poste SA, a public limited company with a capital of 3,800,000,000 euros, registered in the Paris Trade and Companies Register under the number 356,000,000, located 9 rue du Colonel Pierre Avia, 75015 Paris (France). You will find the personal data protection policy of the company La Poste SA at: https://www.laposte.fr/donnees-personnelles-et-cookies . It is forbidden for the company La Poste SA to process your personal data for purposes other than to perform the delivery services of your order. When the delivery of your order occurs outside of metropolitan France, Corsica and the DROMs/COM, La Poste SA is likely to outsource said delivery to its local partners in the countries of destination.

5.4. Site analysis services

We use Google Analytics, the site's audience analysis and measurement tool. This service is provided by the company Google Inc., a company incorporated under the laws of the State of California (USA), located at 1600 Amphitheatre Parkway, Mountain View, CA 94043 (USA). Google Inc. is a member of the self-certification mechanism says" Privacy Shield ». You will find the personal data protection policy of the company La Poste SA at: https://policies.google.com/privacy . Google Inc. is prohibited from processing your personal data for purposes other than executing the site's analysis services.

Security of your personal data

We strive to put in place the necessary precautions to preserve the confidentiality and security of your personal data collected and processed in order to prevent its damage, destruction, loss, disclosure or unauthorized access to such data, in an accidental or illicit manner. POMPOM has implemented technical and organizational security measures taking into account the state of the art. The security measures are proportional to the risks presented by the processing and the nature of the personal data to be processed, as well as to the costs of implementing these measures. However, we draw your attention to the fact that the internet network is not secure. It is also up to you to take all appropriate measures to protect your personal data accordingly.

Your rights

7.1. The withdrawal of your consent

When the processing of your personal data is based exclusively on your consent, be aware that You may, without you justify, withdraw such consent at any time, by contacting us by mail at the address referred to above, or by email at Contact@pompom-paris.com . The withdrawal of your consent takes effect for the future. Accordingly, You certify that the withdrawal of your consent has no effect on the processing of your personal data that We have carried out between the granting of your consent and its withdrawal.

7.2. Complementary rights

You also have the following rights, which You can exercise by contacting us by mail at the address above, or by email at Contact@pompom-paris.com :

Right of access:	You have the right to us at any time: Ask about the nature and terms of the treatments concerning You that We carry out; Request a copy of all your personal data about You.
Right of rectification:	You have the right at any time to ask us to correct your personal data.
Right of opposition:	When the legal basis for processing is POMPOM's legitimate interest in conducting commercial prospecting operations, You have the right at any time to oppose any commercial prospecting.
Right to limitation:	When You dispute the accuracy of the personal data concerning you, and/or if We treat your personal data in contradiction with the Regulations but you refuse to delete it, and/or that We no longer need your personal data but you need it to claim, exercise or/and defend your rights, You have the right to ask us to limit the processing of your personal data.
Right to erasure:	When the legal basis for processing is the legitimate interest of POMPOM and/or your consent, you have the right at any time to ask us to erase the personal data concerning you.
Right to portability:	You have the right at any time to ask us to transmit to You and/or to transmit to the third party of your choice the personal data concerning You, in a format technically exploitable by yourself or by said third party.
Right to give directives:	You have the right at any time to give us instructions relating to the fate of your personal data after your death.
Right to seize a supervisory authority:	You have the right to file a claim before the CNIL ( https://www.cnil.fr/fr/plaintes ) Or any other competent supervisory authority.