Privacy Policy
The company Douze Paris (as defined in Article 1 below) offers jewelry items on its website www.douze-paris.fr and at its physical address in Paris.
To offer for sale, sell, and deliver its products, Douze Paris collects personal data from users of its website when purchases are made.
The purpose of this privacy policy is to inform users of the means implemented to collect, consult, process, and store users' personal data.
Douze Paris, as the data controller, undertakes to comply with the provisions of Regulation (EU) No 2016/679 of April 27, 2016, concerning the protection of users' personal data.
The client is informed via the site that certain data must be collected by Douze Paris to be able to perform its services. If the client does not wish to provide their data, Douze Paris will not be able to perform its services.
This privacy policy ("Policy") may be modified at any time by Douze Paris, particularly to comply with any regulatory, jurisprudential, editorial, or technical developments. Users should refer to the latest version of the Policy before browsing.
1. The Data Controller
The data controller, who collects personal data and implements data processing, is:
Douze Paris, SAS with a capital of €81,000, registered with the Paris Trade and Companies Register under number 824 126 833, whose registered office is located at 12 rue Dupetit-Thouars in Paris 75003, France.
2. Collection of personal data
Douze Paris collects users' personal data on its website www.douze-paris.fr
The personal data that may be collected are as follows:
- user account data: namely the data that the User provides when creating their account, by filling out the registration form (first name, last name, billing and delivery postal addresses, email address, mobile phone number, password for logging into the customer account);
- user's personal data when they provide it in their customer account: date of birth
- transaction data: refers to the data that the user provides when making purchases, information relating to orders placed and returns such as their telephone number, address, email address, and payment method details;
- navigation data: refers to the data that the Publisher collects when the User browses the Site and Applications, such as the date, time of connection and/or navigation, browser type, browser language, IP address, location data, and geolocation.
Payment method data (credit card number, expiration date, authorization number, and security code) is collected directly by our service provider Stripe.
Third-party providers of applications, tools, gadgets, and plug-ins on our website and mobile application, as well as the networks on which we publish editorial and promotional content (such as Facebook and Instagram) may also use automated means, linked to interests and context, to collect user data (interactions with functions and online activity profiling). This data is collected directly by these providers and/or third parties and is subject to their policy. To the extent permitted by applicable law, Douze Paris is not responsible for the practices of these providers and third parties.
3. Purposes of personal data collection
The Data collected in connection with the use of the site is processed to fulfill the purposes described in the table below.
Current regulations protect users' privacy and require any data controller to be able to justify a legitimate basis for said processing. The regulations thus provide among the legal bases for processing:
- the performance of a contract to which the data subject is a party, such as a sales contract. Thus, certain personal data of the customer are necessary to deliver the goods, manage the customer account, and handle returns;
- compliance with a legal obligation, particularly accounting, by retaining invoices;
- the prior consent of the data subject;
- the legitimate interest of the data controller, while respecting users' rights and freedoms. Thus, improving the customer experience or preventing fraud can justify data collection.
| Purposes of processing | Data use | Legal bases for processing |
|---|---|---|
| Management of orders and product sales and provision of services; management of complaints, withdrawals and product returns | Use of data to provide products and services (from shopping cart and orders; sale, return and refund of purchased products) | Performance of a contract concluded between the client and the professional |
| Execution of transactions, including payment | Our payment provider (Stripe) uses payment method information when making payment for each order. This data may also be used for fraud prevention when paying for the order and/or managing unpaid invoices after the order. | Performance of a contract concluded between the client and the professional |
| Creation and management of the customer account | Personal data of a customer registered on the website is used (email address, password) | - Performance of a contract concluded between the client and the professional - Compliance with a legal obligation |
| Delivery of ordered products | Personal data (contact details, email address) is used to ensure deliveries | Performance of a contract concluded between the client and the professional |
| Administering the website and combating fraud | Personal data (cookies) to update, enrich our website and to combat online fraud. | |
| Customer service: exchanges with customer service | Personal data is used to interact with customers. As such, exchanges between customer service and the customer by phone or chat may be recorded to improve service quality. The customer can object at any time. | Performance of a contract concluded between the client and the professional |
| Participation in special events (such as contests, games, sweepstakes, offers) and participation in the loyalty program, excluding online gambling subject to the approval of the Online Gaming Regulatory Authority | Personal data is used, including purchase information, to administer participation in various special events, as well as the loyalty program. | - Performance of a contract concluded between the client and the professional (game rules) - Legitimate interest of the data controller to offer exclusive offers. |
| Operate, evaluate and improve products and services and user experience (including to develop new products and services, analyze the customer base; perform data analysis, accounting and auditing), profiling. | Personal data is used to evaluate and improve products and services, and to improve the customer experience, products and services offered by Douze Paris, through statistical operations and analysis of anonymized customer behavior, and measurement of website and mobile application traffic. | Legitimate interest of the data controller to offer products and services adapted to customer needs |
| Sending newsletters and privileged offers, provided that the user ticks the box expressing their acceptance, provided for this purpose, when registering for the Services. | Personal data is used to inform customers about our products and services and to personalize the products offered on social networks. | Legitimate interest of the data controller to offer products and services adapted to customer needs |
| Fulfill obligations arising from any contracts or agreements binding Douze Paris to its customers | Personal data is used to inform customers about our products and services and to personalize the products offered on social networks. | Legitimate interest of the data controller to offer products and services adapted to customer needs and consent (checkbox) |
| Analyze website visits and their frequency, audience measurements, studies, statistics, surveys (cookies) and improve user experience on the website | Personal data, including cookies, is collected to understand website usage. | Legitimate interest of the data controller to offer products and services adapted to customer needs |
Douze Paris does not share any personal data for commercial purposes with third parties.
The user has the right to modify their personal data and withdraw their consent at any time by logging into their customer account.
4. Service providers with access to users' personal data
The collected personal data is transmitted to Douze Paris's service providers, who may process it on behalf of Douze Paris (subcontractors) and/or for their own account (data recipients).
The data recipients are:
- Stripe: payment provider
- any police or administrative authority in the context of judicial requisitions concerning the fight against fraud
- customs services and providers in case of international delivery.
Benda Bili's subcontractors may access the collected data for maintenance and technical development operations of the Douze Paris website, including entities that provide web hosting, information storage, email service providers, as well as analytics and tag management services, such as Google Analytics.
5. Users' rights regarding their personal data
In accordance with articles 14 to 22 of Regulation 2016/679 of April 27, 2016, any natural person using the Douze Paris website has the right to exercise the following rights:
- A right to access, rectify, and erase collected data,
- A right to object to the processing of their data
- A right to restriction of processing,
- A right to data portability
- May formulate directives regarding the retention, erasure, and communication of their personal data after their death in accordance with article 40-1 of law 78-17 of January 6, 1978.
Finally, if Douze Paris detects a personal data breach likely to create a high risk for the rights and freedoms of its users, it undertakes to inform the affected users as soon as possible.
The user can exercise all these rights by logging into their customer area, by contacting customer service at contact@douze-paris.fr or by simple mail to Douze Paris - 12 rue Dupetit-Thouars 75003 Paris, France.
The user must imperatively attach proof of identity to their request.
In case of no response or an unsatisfactory response, the user may contact the supervisory authority of their country of residence; for France, the CNIL: https://www.cnil.fr/
6. Data retention period
User data will not be retained beyond the period strictly necessary for the purposes pursued as set out herein, and in accordance with applicable regulations and laws. In this regard, data used for prospecting purposes may be retained for a maximum period of 3 years from the closure of the user's account or the last contact of the prospect concerned. User data is erased when the retention periods expire.
7. Payment providers
Purchases on the website are paid via Stripe.
Douze Paris does not have access to customer payment data.
8. Cookies, TAGS, and trackers
When browsing our website and mobile application, information relating to the navigation of the user's device (computer, tablet, smartphone, etc.) may be stored through files called "Cookies".
Cookies allow for tracking navigation or analyzing user behavior, and in particular:
- measuring the traffic of our website and application, as well as their content;
- saving information related to the customer account when the user is logged in;
- saving the shopping cart for 30 minutes;
- customizing the display of content accessible to the user.
The user can modify their cookie preferences through the browsing software used:
The user can modify their cookie preferences through the browsing software used:
- Safari: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
- Chrome: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,
- Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,
- Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies ,
- iOS: https://support.apple.com/fr-fr/HT201265
The user can also object to the deposit of cookies by the website http://www.youronlinechoices.com/fr/controler-ses-cookies/.
9. Social networks
Douze Paris's official Facebook and Instagram accounts may allow users to post their content. Users are informed that content published on these social networks may be seen by any third party, and that increased vigilance is required from users when they provide certain personal data on these sites or applications, such as financial data, an address, or any sensitive data. Douze Paris is in no way responsible for any damage caused by third parties due to or arising from the publication of their personal data by users.
The user can contact Douze Paris's data protection officer or personal data manager at the following address: contact@douze-paris.fr