PERSONAL DATA AND COOKIES
Personal data and cookies charter – Applicable on 19/11/2018
Users of the Site are strongly advised to consult the Charter regularly before consulting and using the Site.
ARTICLE 1 – SCOPE OF APPLICATION
The Charter applies to the Site, excluding third-party websites and services to which the Site may refer or allow access.
The Site may contain links to other sites over which ABSTRACT has no control. ABSTRACT endeavours to include on the Site only links leading to Internet sites that comply with the same rules as its own in terms of personal data and security. However, ABSTRACT cannot be held responsible for protecting and respecting the privacy of information that users of the Site communicate on other Internet sites. Users of the Site are advised to exercise caution and to be aware of the applicable rules regarding personal data on each site concerned. The personal data that the users of the Site choose to provide to third parties or that are collected by them are not covered by the Charter.
ARTICLE 2 – DATA CONTROLLER
The personal data on the Site are collected by ABSTRACT.
ABSTRACT is a limited liability company, with a share capital of 45 734.71 euros, registered in the Trade and Companies Register of Manosque under the number 343 208 948, with the intra-community VAT number FR 83 343 208 948 and whose registered office is located at ZA, 1264 AVENUE DE TRAVERSETOLO 04 700 ORAISON, represented by Mr. and Mrs. Barbier, as managers.
ARTICLE 3 – PERSONAL DATA COLLECTED
Within the framework of the use of the Site and depending on the service used by the user on the Site, ABSTRACT may collect and process the name, date of birth, gender, e-mail address, home/postal address, telephone number, IP address, geolocation, login, password, connection data and navigation data, order history, bank data, preferences and interests, products consulted and purchased, delivery incidents and complaints.
The mandatory or optional nature of the data is indicated at the time of collection by the use of an asterisk. Refusal to provide mandatory data may lead to the restriction or prohibition of the benefit of a feature or service.
ARTICLE 4 – USE OF PERSONAL DATA
The data collected helps ABSTRACT to establish and manage its relationship with the users of the Site, as well as to offer them a personalized experience, in line with their needs and interests.
In particular, ABSTRACT may use their personal data to:
execute a transaction or an order,
create a customer account,
prevent and detect security threats, fraud or other malicious activity
provide information about ABSTRACT products and services
provide and improve services provided by ABSTRACT, including customer service,
inform about new products, services and benefits,
send commercial offers and personalized information (newsletters, telephone canvassing, etc.),
personalize the Site,
measure the effectiveness of marketing campaigns, advertisements and web pages
allow users of the Site to participate in contests, promotions, sweepstakes or surveys,
to enable the activation and registration of products or services, such as keeping track of products that have been placed in the shopping cart by users of the Site
collect information requests and complaints from users of the Site,
managing a job application,
manage event registration,
to use social networks to enable the sharing of content,
collect and distribute contributions such as comments, ratings etc.
Credit card information is used only for the time necessary to complete a transaction, unless the Site user requests that it be retained for a future purchase.
ARTICLE 5 – RECIPIENTS OF PERSONAL DATA AND TRANSFERS
5.1 The data collected on the Site is intended for ABSTRACT and the subsidiaries of its group.
It may nevertheless be transmitted to or consulted by third-party companies (subcontractors) that ABSTRACT calls upon in the context of the execution of certain services and orders placed via the Site, such as
the service provider in charge of transporting the products ordered or to be repaired,
ABSTRACT’s bank and/or its payment service provider,
the service provider responsible for sending newsletters.
5.2 Marketing direct et indirect
ABSTRACT may, subject to prior consent, use information about the user of the Site in its possession to provide information about its products, promotions, special offers and other information relating to its products or services or which ABSTRACT believes may be of interest to users of the Site.
ABSTRACT may send this information by:
– Electronic mail ;
– Telephone ;
– SMS or MMS text message and/or any other form of electronic message;
– Traditional mail or any other means;
– Promotional banner on third party sites or social networks;
– Internet search engine.
Users of the Site will be asked to indicate whether or not they consent to this information being used for direct and indirect marketing purposes, whether by ABSTRACT or by a third party (including its commercial partners). To this end, they must tick one or more boxes in order to express their express consent, after having previously taken note of the various commercial actions that may be carried out on the basis of the information they wish to communicate.
Thus, ABSTRACT uses the information of users of the Site who have given their prior consent to direct and indirect marketing activities only to the extent of the use to which they have knowingly consented.
Users of the Site may at any time revoke their consent or lack of consent or the extent of consent previously given in relation to direct and indirect marketing by filling in the form accessible via the URL: http://abstract-sport.com/gestion-des-donnees-personnelles/.
Furthermore, when ABSTRACT sends these Site users messages relating to direct or indirect marketing, it will remind them of their right to request that these communications of information be stopped.
5.3 Transfer to third parties or outside the European Union
In general, unless otherwise specified in the Charter, ABSTRACT undertakes not to share any personal information with third parties without the prior express consent of the user of the Site, except in the event that ABSTRACT has to:
– Respond to requests for information from competent authorities;
– Comply with regulations or an administrative or judicial decision;
– Detect and prevent security threats, fraud or other malicious activity;
– Enforce and protect the rights of ABSTRACT and its affiliates;
– To protect the rights or personal safety of ABSTRACT, its employees and third parties.
Personal data collected via the Site is hosted on servers located in France and the United States.
In the event that ABSTRACT should communicate the personal data of the users of the Site to a company of the ABSTRACT group or to a third party located outside the European Economic Area, ABSTRACT will have taken prior measures to ensure that such data will benefit from the same level of protection as that imposed by the applicable data protection law.
ARTICLE 6 – PROTECTION OF THE PRIVACY OF MINORS
The Site is not intended for minors. Nevertheless, access to the Site is not reserved for adults as long as it does not contain any content that is forbidden for those under 18.
The Site does not aim to collect personal data from minors.
If the information of a minor is nevertheless collected, the legal representative of said minor will have the possibility of contacting ABSTRACT to rectify, modify or delete this information in accordance with article 6 of the French Data Protection Act (Loi Informatique et Libertés) in application of the provisions of article 7 below.
ARTICLE 7 – RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA
7.1 Right to access, modify, rectify and delete
The users of the Site have a right of access to their personal data and, if necessary, the right to request:
– The rectification or deletion of said data;
– The limitation of the processing of said data by ABSTRACT,
– The opposition to the processing of personal data concerning them;
– Any information relating to their data.
Notwithstanding the rights referred to above, ABSTRACT shall not be obliged to intervene on data that remain essential to comply with ABSTRACT’s legal and regulatory obligations.
To this end, users of the Site should contact ABSTRACT by filling in the form accessible via the URL: http://abstract-sport.com/gestion-des-donnees-personnelles/ or by sending a letter to the address of its registered office:
ABSTRACT
ZA, 1264 AVENUE DE TRAVERSETOLO
04700 ORAISON
Email : marketing@abstract-sport.com
In accordance with the regulations in force, the request must be signed and accompanied by a photocopy of an identity document bearing the signature of the user of the Site making the request and specify the address to which the reply should be sent. A reply will then be sent to the user within 2 months of receipt of the request.
7.2 Right to data portability
Users of the Site also have a right to the portability of personal data concerning them that they have communicated to ABSTRACT in the context of the use of the Site, allowing them to recover part of their data recorded by ABSTRACT on the Site in order to store them or transmit them easily from the Site to another Internet site, with a view to their re-use for personal purposes.
To this end, users of the Site must send a request to this effect to ABSTRACT by completing the form accessible via the URL: http://abstract-sport.com/gestion-des-donnees-personnelles/. Upon receipt of the form duly completed by the user of the Site, ABSTRACT will send the user the personal data concerning him/her as soon as possible and at the latest within one month, except in the case of an exceptional extension to three months due to the complexity of the user’s request.
Users of the Site are informed that only the following personal data are concerned by this right to portability
– data actively and knowingly provided by the users of the Site requesting portability (e.g. postal address, user name etc.);
– data resulting from the use of the Site by said users (e.g. search history, user location data).
Under no circumstances shall the right to portability concern all personal data of the users of the Site held by ABSTRACT that would result from an analysis carried out by ABSTRACT on the basis of data provided by the users of the Site. Such data may, however, be consulted by the users of the Site in the context of their request for access to their personal information, as referred to in point 7.1 above.
7.3 Unsubscribing to the Newsletter
ABSTRACT offers Internet users who no longer wish to receive the Newsletter the opportunity to unsubscribe by clicking on the link provided for this purpose in one of the Newsletters, via their client account or by filling out the form accessible via the URL: http://abstract-sport.com/gestion-des-donnees-personnelles/.
7.4 Opposition to telephone solicitation
If users of the Site do not wish to receive telephone solicitations, they must communicate their telephone number to ABSTRACT at the following e-mail address marketing@abstract-sport.com, or by post to the address referred to in article 7.1 above.
The users of the Site will then receive a receipt specifying the date on which their registration will be effective knowing that this period will be a maximum of 30 days after the delivery of the receipt. The receipt will also indicate the duration of registration on this opposition list.
ARTICLE 8 – DATA PROTECTION
ABSTRACT takes all measures reasonably possible to protect the personal data of users of the Site, including, by way of example:
– Use of encryption to ensure data confidentiality;
– Reliable protection mechanisms to protect data from malicious attacks;
– Visitor control mechanisms, allowing only authorized personnel to access personal data;
ABSTRACT takes all reasonably possible measures to limit the personal data of users of the Site to sufficient and relevant data.
ABSTRACT retains personal data only for the period of time necessary to fulfill the purposes set forth in this Policy and will not retain personal data for longer periods of time unless a longer retention period is required or permitted by law.
ABSTRACT may archive collected data to meet its legal obligations in this regard.
ABSTRACT uses its best efforts to protect the personal data of users of the Site against damage, loss, misappropriation, intrusion, disclosure, alteration or destruction.
In order to prevent unauthorized access and/or disclosure, to preserve the integrity of the data and to ensure that it is used for the purpose for which it was collected, ABSTRACT has put in place a number of security measures.
ABSTRACT employees who, by virtue of their position, have access to the personal data of users of the Site undertake to maintain the utmost confidentiality in this regard.
When ABSTRACT sends highly confidential information (such as credit card numbers or passwords) over the Internet, ABSTRACT protects it using encryption methods such as the Secure Socket Layer (SSL) protocol.
However, ABSTRACT does not control all the risks associated with the operation of the Internet and draws the attention of the users of the Site to the existence of possible risks in terms of occasional loss of data or infringement of the confidentiality of data passing through this network.
ARTICLE 9 – RESPECT FOR PERSONAL DATA
9.1 CNIL Declaration :
ABSTRACT protects the personal data of the users of the Site by complying with the legislation in force and in particular with the European Data Protection Regulation (RGPD) No. 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
9.2 DPO Declaration :
ABSTRACT has also appointed Mr. Guillaume Barbier as Data Protection Officer (DPO), as referred to in Article 37 of the RGPD, in order to accompany and assist it in the process of compliance with the RGPD.
9.3 User Complaints :
9.3.1 With ABSTRACT: For any questions, comments or suggestions, users of the Site may contact ABSTRACT by e-mail at the following address: marketing@osp-concept.com
9.3.2 With the CNIL: Users of the Site also have the right to complain to the Commission Nationale de l’Informatique et des Libertés (CNIL), the supervisory authority in charge of compliance with obligations relating to personal data in France, by sending a letter to the following address: 3, place de Fontenoy – TSA 80715 – 75334 Paris Cedex 7.
ARTICLE 10 – COOKIES
Users of the Site are informed that when they consult the Site, cookies are deposited on their computer, their cell phone or any other electronic equipment used to consult the Site.
The first time that users of the Site browse the Site, a banner appears describing the precise purposes for which cookies are used, the possibility that they have to oppose them and informing them that continuing to browse the Site implies consent to the deposit and use of cookies on their terminal. If they do not accept the use of these cookies, users of the Site must deactivate them by following the instructions below.
Definition. A cookie is a file containing small amounts of information that is downloaded to the Site users’ computer or mobile device when they visit the Site.
Cookies perform a variety of functions, such as allowing them to navigate efficiently between pages, save their preferences and generally enhance their experience on the Site. They are managed by the browser used to browse the Internet.
The data obtained is limited. It concerns only the number of pages visited, the city where the IP address of the connection to the website is located, the frequency and recurrence of visits, the duration of the visit, the browser, the operator or the type of terminal from which the visit is made. Data such as the surname, first name of the user of the site or the postal address of the connection are not, under any circumstances, obtained.
ABSTRACT uses the following cookies:
Strictly necessary cookies:
These are cookies that are necessary for the functioning of the Site. They allow users of the Site to use the essential features of the Site, such as accessing secure areas, playing videos, remembering their preferences in order to customize their user interface (e.g., their choice of language or region) or maintaining an active session. These cookies do not collect personally identifiable information. All information that these cookies collect is anonymous.
Accepting these cookies is a necessary condition for using the Site; if users of the Site refuse to accept them, ABSTRACT will not be able to ensure normal navigation on the Site.
Functionality cookies:
They are used to enable the use of the various features of the Site and to improve its operation.
These cookies do not collect information that can identify the users of the Site. Any information that these cookies collect is anonymous and is only used to improve the functionality of the Site.
If users of the Site disable these cookies, some or all of these features may no longer be available. Users of the Site can find more information about the functionality cookies ABSTRACT uses and their purposes in the table below:
Cookies Google Analytics Social Networks Opening Popup ;
Functionalities Site audience measurement Sharing of content on social platforms and tracking of subscribers’ navigation on the Site;
Measuring the time spent on a page;
Access and recipients Google Facebook, Twitter, Google+, etc. ABSTRACT.
Analytics cookies:
These allow ABSTRACT to recognize, count the number of users and learn how users move through the Site. This allows ABSTRACT to improve the functionality of the Site, for example, by ensuring that users of the Site can easily find what they are looking for. These cookies do not collect personally identifiable information. All information collected by these cookies is anonymous and only used to improve the functionality of the Site.
The Site uses Google Analytics cookies. The information collected by Google Analytics cookies will be transmitted to and hosted by Google on servers located in the United States of America in accordance with their privacy policy. For an overview of Google’s privacy policy and how it applies to Google Analytics, visit https://www.google.fr/intl/fr/policies/privacy/.
Deactivation, setting, deletion and expiration of cookies :
During the user’s first visit, a cookie management banner appears on the Site. The user can then configure the collection of cookies. If they wish to change their choice, they will have to reset their browser data so that the banner is displayed again.
However, if they decide to deactivate all cookies through their browser settings, particularly cookies used to operate the Site (e.g., cookies used to save their shopping cart or log in to their account), they may no longer have access to all or part of the Site.
Moreover, the fact of deactivating a cookie or a category of cookies does not remove them from their browser, as deletion requires a specific action.
Continued browsing constitutes acceptance, and the period of validity of the consent of the users of the Site is thirteen (13) months maximum. If the user of the Site accepts cookies, they will remain stored on the user’s computer for five (5) years, unless the user of the Site deletes them via their browser.
Otherwise, the cookies expire and are therefore deactivated at the end of a period of 13 months after their first deposit in the terminal equipment of the user of the Site.
ARTICLE 11 – UPDATING THE CHARTER
ABSTRACT reserves the right to update or modify the Policy from time to time. ABSTRACT will post the amended Policy on the Site or notify users of the Site, as appropriate, by e-mail notification; users of the Site are advised to check the content of the Policy regularly.