PRIVACY AND COOKIES POLICY

Effective date : March 2024

CARVEN France ("CARVEN" or "we") is very concerned about privacy issues and is committed to protecting your privacy.  We would like to familiarize you with the personal data we collect and use, and inform you of your rights in accordance with applicable data protection laws, and in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ("GDRP").

This Privacy and Cookie Policy ("Privacy Policy") describes how we collect, use and disclose your personal information when you visit or make a purchase from www.carven.com (the "Site").

By providing us with your personal data, you agree to this Privacy Policy. We recommend that you read this Privacy Policy carefully as it provides important information about your personal data.

1/ THE COLLECTION OF PERSONAL DATA

When you visit the Site , we collect certain information about your device, your interaction with the Site and the information necessary to process your purchases. We may also collect information if you visit our stores in Europe; for example, when you voluntarily fill in a form to receive information about our events, products or services.  We may also collect additional information if you contact our Customer Service department. In this Privacy Policy, we refer to "Personal Data" as any information that uniquely identifies an individual (including the information below). You will find more information about the Personal Data we collect and how we collect it in the list below.

• Information you provide directly to us

Depending on what you provide, examples of Personal Data collected may include:

• Your identity (including full name, gender, photo, nationality, date of birth);
• Your contact details (including postal address, e-mail address and telephone number);
• Your personal status (including your title);
• Your preferences (including your height);
• Certain payment information (including billing information, type or method of payment);
• Other information you may provide by contacting us.

Source of collection. Your Personal Data may be collected :

• When you create an account on the Site;
• When you visit our stores in Europe and decide to fill in a form accepting to receive information about our events, products or services;
• When you purchase products or services in our stores or on our website;
• When you subscribe to our newsletter;
• When you visit our Site;
• When you contact our Customer Service.

• Device information

Examples of Personal Data collected: when you use our Site, we collect information from your device, such as web browser version, IP address, time zone, cookie information, the sites or products you visit, search terms, and how you interact with the Site.

 Source of collection: when you access our Site, your Personal Data is collected automatically, using cookies, log files, web beacons, tags or pixels.

• Sensitive Personal data

We will NOT ask you for or collect Sensitive Personal Data (for example, social security numbers, information relating to racial or ethnic origin, political opinions, religion or other beliefs, health, biometric or genetic characteristics, criminal history or trade union membership)on our website or to us. We therefore ask you not to send us or disclose such sensitive personal information on our website or in any other way.

• Minors

The Site is not intended for persons under the age of sixteen (16). We do not intentionally collect Personal Data from children. If you are a parent or guardian and you believe that your child has provided us with Personal Data, please contact our Customer Service Department (customer.service@carven.com) to request the deletion or confirm the processing of such Personal Data.

2/ SHARING PERSONAL DATA

We share your Personal Data with :

• Shopify : The Website is hosted by Shopify Inc. a company registered in Canada, whose registered office is located at the following address: 151, O'Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada. You can consult https://www.shopify.com/ E-mail: support@shopify.com
• Subsidiaries of CARVEN. CARVEN subsidiaries are authorized to access your Personal Data so that all ICCF group companies can provide you with a consistent level of service. This may include providing you with the products and services you have requested, improving the services provided and - with your prior consent - sending you Promotional Communications regarding offers, services, products or events (you may withdraw your consent for this purpose at any time - see section 9 below).
• Our employees who require access to your Personal Data and are authorized to collect and/or use it in accordance with this Privacy Policy.
• Our third-party service providers (including, without limitation, KLAVIYO, CEGID, ONETRUST, SHOPIFYPAYMENT) who provide services, such as data analysis, IT development and support, provision of information technology and related infrastructure, customer service, delivery services, e-mail delivery, auditing and other services.
• Any third party potentially affected in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or part of our business, assets or stock (including bankruptcy or similar proceedings).
• If necessary, we may also share your Personal Data with the appropriate authorities in order to comply with applicable laws and regulations, to respond to a search warrant or other lawful request for information that we receive, or to otherwise protect our rights.

3/ THE USE OF PERSONAL DATA

 Accordance with the GDRP, we collect and use your Personal Data, depending on how we use your data, on the following legal bases:

• Your consent: by giving your express consent (newsletter registration, account creation, purchase confirmation, cookie banner), you agree to the use of your personal data and you can object to this use at any time. o We use data such as your name, first name and e-mail address to send you newsletters and commercial or promotional communications, unless you have already purchased similar products or services on the site, in order to keep you informed of new products, services and offers. 

• Performance of the contract between you and CARVEN: the processing of your data, such as your address, surname, first name, e-mail, postal or telephone details, payment information, is necessary for the performance of the contract to which you have consented in order to process your order, payments and billing, shipping, provide you with after-sales services or manage refunds, or to examine your orders to detect any risk or potential fraud.

• Compliance with our legal obligations: the processing of your personal data is made compulsory by applicable laws, and we may be required to provide information to regulatory bodies where required by law.

• Our legitimate interests: the company has a commercial interest in processing your data, such as browsing data (IP address, information relating to the customer's device, browsing path) in order to carry out performance analyses and statistics with the aim of improving our services and, for example, enabling the site to load correctly or optimizing the use of the site. This interest is justified, proportionate and does not infringe your privacy.

4/ TRANSFER OF PERSONAL DATA

The Personal Data we collect is stored within the European Econimic Area ("EEA").

However, as part of the Services, and subject to appropriate GDRP safeguards, CARVEN may transfer, stock, or process Personal Data outside the EEA.

For example, Personal Data processed by Shopify may be transferred to its entities in Canada and the United States. For more information, please see Shopify's privacy policy :  https://www.shopify.com/legal/privacy#why-we-process-your-information

By entrusting us with your personal data, you consent to such transfer, storage and/or processing within or outside the EEA.

You should be aware that countries outside the EEA may not offer the same level of protection for personal data as countries within the EEA.

Nevertheless, we take steps to ensure that your personal data is protected in an equivalent manner in or outside the European Union, in accordance with the regulations on personal data, and in particular by putting in place adequate contractual conditions in our contracts with our third-party partners who transfer such data to ensure that such data is processed in accordance with our instructions, so as to preserve its integrity and security.

5/ PROMOTIONAL COMMUNICATIONS

With your express prior consent (usually obtained by checking a specific box on a form), you may receive information about offers, services, products or events sent by CARVEN ("Promotional Communications").  We rely on your consent to process the Personal Data you provide to us for this purpose. Therefore, if you no longer wish to receive such information, you may withdraw your consent at any time (see "Your Rights" below).

6/RETENTION PERIOD

We will only retain your Personal Data for as long as is necessary for the purposes described in this Privacy Policy and in accordance with applicable law and the GDPR. The criteria used to determine our retention periods are:

• The duration of our business relationship with you and the provision of the services (for example, for as long as you have an account with us or continue to use the services) or the period necessary to perform the contract to purchase products;
• If there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period before we can delete them); or
• Applicable limitation periods, potential litigation or regulatory investigations.

7/ AUTOMATIC DECISION-MAKING

• If you are a resident of the European Union, you have the right not to be subject to a decision based solely on automated decision-making (which includes profiling), where that decision-making has a legal effect on you or significantly affects you.
• Our subcontractor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

• The temporary exclusion list of IP addresses associated with repeated transaction failures. This exclusion list persists for a few hours.
• Temporary refusal list of credit cards associated with refused IP addresses. This refusal list persists for a few days.

8/ HOW WE PROTECT YOUR PERSONAL DATA

We recognize and take seriously our responsibility to protect the Personal Data you entrust to CARVEN from loss, misuse or unauthorized access. CARVEN uses a variety of security technologies and organizational procedures to protect your Personal Data. For example, we implement access controls and use firewalls and secure servers. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure.  If you have reason to believe that your interaction with us is no longer secure (for example, if you believe that the security of your account has been compromised), please notify us immediately in accordance with the "How to contact us" section below.

9/ YOUR RIGHTS

In accordance with applicable law and the RGPD, you have the following rights regarding your Personal Data:

• Right of access: you may obtain information on the nature and use of Personal Data concerning you;
• Right of rectification: you may request that inaccurate or incomplete Personal Data concerning you be rectified or completed;
• Right to deletion: you may request the deletion of your Personal Data, in particular if it is no longer required for the purposes for which it is to be processed;
• Right to restriction of processing: you may request that the processing of your Personal Data be temporarily restricted in certain circumstances, for example if you dispute the accuracy of the Personal Data;
• Right to object: you may object to the processing of your Personal Data on the basis of our legitimate interests, including for commercial and marketing purposes;
• Right to portability: in applicable cases, you may request that the Personal Data you have provided to CARVEN be communicated to you in a structured and commonly used computer format;
• Right to lodge a complaint with the relevant national authority, the CNIL in France: if you have any objections to the way in which we process your Personal Data, you have the right to lodge a complaint with the CNIL, 3 place de Fontenoy TSA 80715, 75334 Paris, CEDEX 07.

• Where the processing of your Personal Data is based on your consent, you may withdraw it at any time. Withdrawal of your consent will not affect the processing of your Personal Data on other legal bases, such as the legal basis relating to the performance of a contract (on which the execution of your orders is based) and the storage of your order data when required by applicable law.

• If you no longer wish to receive our Promotional Communications, we remind you that you can withdraw your consent at any time from the unsubscribe link included in each electronic promotional message we send you. If you unsubscribe, we will promptly update our databases and take all reasonable steps to respond to your unsubscribe request as soon as possible, but we may continue to contact you to the extent necessary for the products or services you have requested.

• To exercise any of the above rights, please contact us using the details below (see "How to contact us" below). Please indicate clearly in your request which of the above rights you wish to exercise in relation to your Personal Data. For the protection of your rights, we can only implement requests concerning Personal Data relating to a particular person associated with the specific e-mail address you use to send us your request, and we may need to verify your identity before implementing your request. We shall certainly strive to respond to your request as quickly as possible and, in any event, within the time limits set by applicable law.

10/ COOKIES

•  What is a Cookie?

A Cookie is a file that is downloaded to your computer or device when you visit our Site. We use a number of different Cookies, including functional, performance, advertising and social media or content Cookies. Cookies enhance your browsing experience by enabling the Site to remember your actions and preferences (such as login and region selection). This means you don't have to re-enter this information each time you return to the Site or navigate from one page to another. Cookies also provide information about how people use the Site, for example whether this is their first visit or whether they are frequent visitors.

There are different types of Cookies:

Strictly necessary Cookies: these are necessary for the operation of the site and cannot be deleted from our systems. For example, they are essential for setting up your personal data, enabling you to connect to the site, fill in forms, send a communication or provide the service you have expressly requested. They do not store any personally identifiable information.

Functional Cookies: these are necessary for the proper operation of the site and the provision of our services. They enable us to provide you with enhanced functionalities and to personalize your visits.

Performance Cookies: these collect information on how the Site is used, and in particular measure the number of visitors or the performance of a site using statistics, to enable us to improve the performance of our Site, understand any malfunctions and make any necessary modifications. All information collected by these cookies is aggregated and therefore anonymous.

• What Cookies do we use?

We use the following Cookies to optimize your experience on our Site and to provide our services.

Strictly necessary Cookies: cookies, use of cookies (CARVEN or third party), lifetime.
Performance Cookies: cookies, use of cookies (CARVEN or third party), lifetime.
Functional Cookies: cookies, use of cookies (CARVEN or third party), lifetime.

• How long does a Cookie stay on your computer or mobile device?

The length of time a Cookie remains on your computer or mobile device depends on whether it is a "persistent" or "session" Cookie. Session Cookies last until you stop browsing the Site and Persistent Cookies last until they expire or are deleted. Most of the Cookies we use are persistent and expire between 30 minutes and thirteen (13) months from the date they are downloaded to your device. 

• How can I manage Cookies?

No Cookies are stored on the user's terminal unless the user has consented to them?

The only exception to this rule concerns cookies that are strictly necessary or essential to the operation of the site or service (see the categories of cookies listed above).

The Cookie banner appears when the user begins his/her user experience on the website and the user has been given the option of accepting or refusing cookies. No cookies, other than essential cookies, will be stored on the user's terminal until he/she has given his/her consent (i.e. clicked on accept on the cookie banner).

You can control and manage Cookies in different ways. Please note that deleting or blocking Cookies may have a negative impact on your user experience and some parts of the Site may no longer be accessible.

You can modify your choices from your browser, often in the "Tools" or "Preferences" menu of your browser. Further information on how to change your browser settings or block, manage or filter Cookies can be found in your browser's help file, in particular :

• If you use Internet Explorer, please visit https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d.
• If you are using Firefox, please visit https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox.
• If you're using Safari, please visit https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac.
• If you are using Google Chrome, please go to: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en.

11/ CHANGES TO OUR PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, for example, or for other operational, legal or regulatory reasons.

When we post changes to our Privacy Policy, we will change the "Effective Date" at the top of this document to indicate when those changes take effect. Please check this page regularly for the latest version.

If you do not agree to the revised version, you should modify your preferences or consider discontinuing your use of our Site. By continuing to access or use our Site and/or our services after the changes take effect, you agree to be bound by the revised Privacy Policy.

12/ HOW TO CONTACT US

For more information about our privacy practices, if you have any questions, or if you wish to file a complaint, please contact our Customer Service Department:

• By e-mail at customer.service@carven.com;
• By post: 6 Rond-Point des Champs-Elysées 75008 Paris

Shipment within 24h: Orders placed before 12pm (GMT+1) are dispatched the same day.
Need help? Contact us by e-mail at customer.service@carven.com, an advisor will be happy to answer you Monday to Friday, 10:00 am to 6:00 pm.
Free returns: Returns are quick and easy, thanks to the prepaid returns label included in the package.

CUSTOMER SERVICE
The customer service department is at your disposal for any information you may require concerning the online store.

Please do not hesitate to contact us by email: customer.service@carven.com.

If you have any questions about your order, please quote the order number on your delivery note or confirmation email.

©2024 CARVEN FRANCE. All rights reserved.