The company Douze Paris (as defined in article 1 below) offers jewelry and jewelry items on its website www.douze-paris.fr and at its physical address in Paris.

In order to offer for sale, sell and deliver its products, Douze Paris collects personal data from users of its website during purchases made.

The purpose of this confidentiality policy is to inform users of the means implemented to collect, consult, process and store users' personal data.

Douze Paris, as data controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of April 27, 2016 relating to the protection of personal user data.

The customer is informed via the site that certain data must be collected by Douze Paris in order to be able to carry out its services. If the customer does not wish to communicate his data, Douze Paris will not be able to perform its services.

This confidentiality policy (“Policy”) may be modified at any time by Douze Paris, in particular in order to comply with any regulatory, jurisprudential, editorial or technical developments. The user must refer to the latest version of the Policy before any navigation.

1. The Data Controller

The data controller, who collects personal data and implements data processing, is:
Douze Paris, SAS with capital of €81,000, registered in the Paris Trade and Companies Register under number 824 126 833, whose head office is located at 12 rue Dupetit-Thouars in Paris 75003, France.

2. Collection of personal data

Douze Paris collects personal data from users on its website www.douze-paris.fr

The personal data that may be collected are as follows:
- user account data : namely the data that the User provides when creating their account, by completing the registration form (first name, last name, postal billing and delivery addresses, email address, telephone number mobile phone, password for connecting to the customer account);
- user personal data when the latter enters them in their customer account: date of birth
- transaction data : refers to the data that the user provides when making purchases, information relating to orders placed and returns such as their telephone number, address, email address and information relating to their means of payment;
- data relating to navigation : refers to the data that the Publisher collects during the User's navigation on the Site and Applications, such as in particular the date, time of connection and/or navigation, browser type , browser language, IP address, location data and geolocation.

Data relating to payment methods (bank card number, expiration date, authorization number and security code) are collected directly by our service provider Stripe.

Third-party providers of applications, tools, gadgets and plug-ins on our website and mobile application, as well as the networks on which we publish editorial and promotional content (such as Facebook and Instagram) may also use automated means, linked interests and context, to collect user data (interactions with functions and profiling of online activity). This data is collected directly by these service providers and/or third parties and is subject to their policies. To the extent permitted by applicable law, Douze Paris is not responsible for the practices of these service providers and third parties.

3. Purposes of collecting personal data

The Data collected as part of the use of the site is processed with the aim of meeting the purposes described in the table below.

The regulations in force protect the privacy of users and require any data controller to be able to demonstrate a legitimate basis for said processing. The regulation thus provides among the legal bases for processing:
- the execution of a contract to which the data subject is a party, such as a sales contract. Thus certain personal data of the customer are necessary to deliver the goods, manage the customer account and make returns;
- compliance with a legal obligation, in particular accounting by retaining invoices;
- the prior consent of the person concerned;
- the legitimate interest of the data controller, while respecting the rights and freedoms of users. Thus, improving the customer experience or preventing fraud may justify data collection.

Purposes of processing Use of data Legal bases for processing
Management of orders and sales of products and provision of services; management of complaints, withdrawals and product returns Use of data to provide products and services (shopping cart and orders; sale, return and refund of purchased products) The execution of a contract concluded between the client and the professional
Carrying out transactions, particularly payment Our payment provider (Stripe) uses information relating to payment methods when paying for each order. This data can also be used for fraud prevention when paying for the order and/or managing unpaid bills after the order. The execution of a contract concluded between the client and the professional
Creation and management of the customer account The personal data of a customer registered on the website is used (email address, password) - The execution of a contract concluded between the client and the professional
- Compliance with a legal obligation
Deliveries of ordered products Personal data (contact details, email address) are used to ensure deliveries The execution of a contract concluded between the client and the professional
Administer the website and fight against fraud Personal data (cookies) to update and enrich our Website and to fight against internet fraud.
After-sales service: exchanges with customer service Personal data is used to interact with customers. As such, exchanges between customer service and the customer carried out by telephone or chat can be recorded in order to improve the quality of service. The customer can object to this at any time The execution of a contract concluded between the client and the professional
Participation in special events (such as competitions, games, draws, offers) and participation in the loyalty program, excluding online gambling and games of chance subject to approval by the Gambling Regulatory Authority. Online games Personal data is used, including purchase information, to administer participation in various special events, as well as the loyalty program. - The execution of a contract concluded between the client and the professional (game rules)
- The legitimate interest of the data controller in order to offer preferential offers.
Operate, evaluate and improve products and services and the user experience (in particular to develop new products and services, analyze the customer base; perform data analysis, accounting and auditing), profiling. Personal data is used to evaluate and improve products and services, and to improve the customer experience, products and services offered by Douze Paris, through statistical operations and analysis of anonymized customer behavior, and measurement traffic to the website and mobile application The legitimate interest of the data controller in order to offer products and services adapted to customer needs
Send newsletters and special offers on the condition that the user checks the box expressing their acceptance, provided for this purpose, when registering for the Services Personal data is used to inform customers about our products and services and personalize the products offered on social networks. The legitimate interest of the data controller in order to offer products and services adapted to customer needs
Fulfill the obligations arising from all contracts or agreements linking Douze Paris to its customers Personal data is used to inform customers about our products and services and personalize the products offered on social networks. The legitimate interest of the data controller in order to offer products and services adapted to customer needs and consent (check box)
Analyze visits to the website and their frequencies, audience measurements, studies, statistics, surveys (cookies) and improve the user experience on the website Personal data, including cookies, is collected to understand the use of the Website The legitimate interest of the data controller in order to offer products and services adapted to customer needs

Douze Paris does not share any personal data for commercial purposes with third parties.

The user has the option of modifying their personal data and withdrawing their consent at any time by logging into their customer account.

4. Service providers with access to users’ personal data

The personal data collected are transmitted to Douze Paris service providers, who can carry out processing on behalf of Douze Paris (subcontractors) and/or their own account (recipients of the data).
The recipients of the data are:
- Stripe: payment provider
- any police or administrative authority in the context of judicial requisitions concerning the fight against fraud
- customs services and providers in the event of delivery abroad.

Benda Bili subcontractors may have access to data collected for technical maintenance and development operations of the Douze Paris website, including entities that provide web hosting, information storage, email service providers, as well as analysis and tag management services, such as Google Analytics.

5. User rights over their personal data

In accordance with articles 14 to 22 of regulation 2016/679 of April 27, 2016, any natural person using the Douze Paris website has the right to exercise the following rights:

- A right of access, rectification and deletion of the data collected,
- A right to object to the processing of your data
- A right to limitation of processing,
- A right to portability of the data collected
- May formulate directives relating to the conservation, erasure and communication of his personal data after his death in accordance with article 40-1 of law 78-17 of January 6, 1978

Finally, if Douze Paris detects a personal data breach likely to create a high risk for the rights and freedoms of its users, it undertakes to inform the users concerned as soon as possible.

The user can exercise all of these rights by logging into their customer area, by contacting customer service at contact@douze-paris.fr or by regular mail to Douze Paris - 12 rue Dupetit-Thouars 75003 Paris, France.

The user must attach proof of identity to their request.

In the event of no response or an unsatisfactory response, the user may contact the supervisory authority of their country of residence, for France, the CNIL: https://www.cnil.fr/

6. Data retention period

User data will not be kept beyond the period strictly necessary for the purposes pursued as set out herein, in accordance with applicable regulations and laws. In this regard, data used for prospecting purposes may be kept for a maximum period of 3 years from the closure of the user's account or the last contact of the prospect concerned. User data is deleted when retention periods expire.

7. Payment providers

Payment for purchases on the website is made via Stripe.

Douze Paris does not have access to customer payment data.

8. Cookies, TAGS and trackers

When browsing our website and the mobile application, information relating to the navigation of the user's terminal (computer, tablet, smartphone, etc.) may be recorded through files called "Cookies".

The cookie makes it possible to monitor navigation or analyze user behavior, and in particular:
- to measure the use of our website and our application, as well as their content;
- to save information relating to the customer account when the user is connected to it;
- save the shopping cart for 30 minutes;
- to personalize the display of content accessible to the user.
The user can modify their cookie preferences, through the browser software used:

The user can modify their cookie preferences, through the browser software used:
- Safari: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
- Chromium: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,
- Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,
- Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies ,
-iOS: https://support.apple.com/fr-fr/HT201265

The user can also oppose the deposit of cookies by the website. http://www.youronlinechoices.com/fr/controler-ses-cookies/ .

9. Social networks

The official Douze Paris Facebook and Instagram accounts may allow users to post their content. The user is informed that the content published on these social networks can be seen by any third party, and that increased vigilance is required of users when they provide certain personal data on these sites or applications such as financial data, an address or any sensitive data. Douze Paris is in no way responsible for any damage caused by third parties due to or arising from the publication of their personal data by users.

The user can contact the data protection officer or personal data manager of Douze Paris at the following address: contact@douze-paris.fr