Privacy policy

The below is an automatic translation from French. Thank you for your understanding. For legal purposes, the meaning from the original text in its native language is the only valid text. The below translation is purely indicative.

-

Casambu (“Casambu”, “us”, “we” and “our”) and our partners respect your privacy.

We ask that you read this privacy policy carefully to understand how your personal data is collected, processed and stored during your use of this Casambu website, accessible via the URL: www.casambu.com.

All personal data collected on this website is processed under the responsibility of the company Casambu, SARL with share capital of €20,000, registered with the Annecy Trade and Companies Register under number 900315151 and having its registered office at 101 Route de la Frasse, 74170 Les Contamines-Montjoie, France.

Within the meaning of the regulations applicable to personal data, Casambu is therefore responsible for processing.

This privacy policy describes:

  1. How Casambu uses your personal data

  2. How Casambu shares your personal data

  3. How Casambu protects your personal data

  4. Where Casambu hosts and transfers your personal data

  5. How you can exercise your rights relating to your personal data

  6. Privacy policy updates

  7. How to contact us

 

1. HOW CASAMBU USE YOUR PERSONAL DATA
Casambu may use your personal data for the following purposes:

  • Create your customer account on this website

  • Manage orders for products and/or services

  • Publish and manage the opinions left on the products and/or services ordered on this website

  • You send our newsletter following your subscription to the newsletter

  • Respond to your contact request made from our website

Most of the processing operations listed above are necessary for the performance of the contract concluded with Casambu when you use our website to order the products and/or services available for sale on the site.

The processing of your personal data in order to send you our newsletter is on the other hand solely based on your consent to receive our newsletter, which you can withdraw at any time. If you do not consent to the sending of the newsletter, please note that this will not prevent you from creating your customer account and placing orders on our website.

 

2. HOW CASAMBU SHARES YOUR PERSONAL DATA

Within Casambu, and with regard to each processing purpose, personal data concerning you is collected, processed and stored by authorized Casambu staff, only within the framework of their respective skills, and in particular by customer service. , the marketing department and the IT department.

We do not share personal data with other companies, organizations and individuals unless one of the following circumstances applies:

(1) Sharing with prior consent: after obtaining your consent, Casambu will share the information you have authorized with third parties or categories of specific third parties informed when collecting your consent

(2) Sharing with our service providers: Casambu may also disclose your information to companies that perform services for us or on our behalf. These service providers include companies that offer IT services such as our hosting provider or our email service provider, delivery services for our products, or that offer marketing activities on our behalf. These service providers may use your information only for the purpose of providing services to you on behalf of Casambu.

(3) In performance of a legal obligation, sharing in accordance with laws and regulations: Casambu, may share your information as required by laws and regulations, in order to resolve disputes legal, or as required by judicial or administrative authorities under the law.

Casambu will ensure the legality of any sharing of personal data via data processing clauses with the companies with which your personal data is shared, requiring them to comply with this privacy policy and to take measures to appropriate security and confidentiality when processing personal data.

 

3. HOW CASAMBU PROTECTS YOUR PERSONAL DATA

Casambu values ​​the security of your personal data and has adopted standard industry practices to protect your personal data and prevent unauthorized access, disclosure, use, modification , damage or loss of such information.

We have also taken the necessary precautions to ensure that our host maintains the security and confidentiality of the data and in particular to prevent it from being distorted, damaged or communicated to unauthorized persons.

Casambu also adopts the following organizational measures:

(1) We take reasonable and practicable steps to ensure that the personal data collected is minimal and relevant to what is necessary, having regard to the purposes for which it is processed.

(2) We keep your personal data for as long as is strictly necessary for the purpose of the processing, unless the retention of your data is required or permitted by law. For example, we keep the data related to the execution of your orders for the duration required by law for the conservation of accounting records, i.e. a maximum of 10 years from the financial year concerned.

(3) We deploy access control mechanisms to ensure that only authorized personnel can access your personal data.

In the event of a personal data breach, Casambu will comply with the legal and regulatory requirements applicable to the notification of personal data breaches to the competent supervisory authorities and/or the persons concerned.

 

4.WHERE CASAMBU HOSTS AND TRANSFERS YOUR PERSONAL DATA
Your personal data will be hosted within the hosting infrastructure of our host, Shopify, located in Usa

Some third parties to whom we communicate your personal data are located in countries outside the European Union, and in particular in the USA.

When the products available for sale on the website are delivered by resources located in countries outside the European Union, we will in particular be required to transfer your personal data to these countries. It may also happen that service providers access your data on our behalf in order to provide us with a specific service and are located in countries outside the European Union.

When such transfers exist, we ensure that these transfers of personal data are supervised in accordance with the applicable regulations in order to ensure an adequate level of data protection, either by an adequacy decision of the European Commission, or through legal instruments such as data transfer contracts incorporating the European Commission's Standard Contractual Clauses.

For any request concerning the recipients and the transfers of data that we carry out outside the European Union, please contact us at the addresses indicated in the "How to contact us" section below.

 

5. HOW YOU CAN MANAGE YOUR RIGHTS RELATING TO YOUR PERSONAL DATA

You have a right of access, rectification, erasure, limitation, opposition concerning the processing of your personal data as well as the right to define directives relating to the fate of your data after your death and the right to the portability of your personal data.

You can contact us at any time at the addresses indicated in the “How to contact us” section below in order to exercise your rights in terms of personal data under the conditions laid down by the applicable regulations. You must indicate which right you intend to exercise as well as all the details necessary for us to respond to your request.

These rights are exercised under the conditions laid down by the applicable regulations.

  • The right of access means that you can ask us at any time to tell you whether we are processing personal data relating to you and, if so where appropriate, to indicate to you which personal data are concerned as well as the characteristics of the processing(s) carried out.

  • The right of rectification means that you can ask us to rectify your personal data where it is inaccurate. You can also request that your personal data, if incomplete, be completed insofar as this is relevant to the purpose of the processing in question.

  • The right to erasure means that you can ask to erase your personal data in particular when:

  • Their retention is no longer necessary with regard to the purposes for which they were collected;

  • Your personal data is being processed on the basis of your consent, you wish to withdraw this consent, and there is no other legal ground which could justify the processing;

  • You have objected to the processing of your personal data and therefore wish to have it erased;

  • Your personal data has been unlawfully processed;

  • Your personal data must be erased to comply with a legal obligation which is provided for either by European Union law or by French law

  • The right to restriction means that you can ask us to restrict the processing of your personal data:

  • When you dispute the accuracy of your personal data for a period of time allowing us to verify the accuracy thereof;

  • When following a processing established as non-compliant, you prefer the limitation of the processing to the complete erasure of your personal data;

  • When we no longer need your personal data for the purposes of the processing but you still need them for the establishment, exercise or defense of legal claims;

  • When you have objected to the processing of your personal data and you want the processing to be limited for the duration allowing us to verify whether the legitimate reason you invoke is justified.

The restriction of processing means that the processing of your personal data will then only mean the storage of your corresponding personal data. We will then no longer carry out any other operation on the personal data in question.

  • The right to object means that you can object to the processing of your personal data, where such processing is based on the pursuit of Casambu's legitimate interest. The right of opposition is exercised subject to justifying a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons justifying the continuation in accordance with the applicable regulations.

  • The right to define directives concerning the fate of your data after your death allows you to make known your instructions concerning the storage, erasure and the communication of your personal data after your death.

  • The right to portability means that you can ask us, under the conditions laid down by the applicable regulations, to receive your personal data in a format structured, commonly used and machine-readable, and to transmit them to you, or to ask us to transmit them directly to a third party of your choice where this is legally and technically possible.

When we process your personal data on the basis of your consent, you finally have the option of withdrawing your consent at any time by contacting the addresses indicated in the ''How to contact us'' section or by clicking on the unsubscribe link present in each of our communications

However, the withdrawal of your consent does not call into question the validity of the processing carried out before this withdrawal.

 

6. UPDATES TO THIS PRIVACY POLICY

Casambu reserves the right at any time to modify or update, in whole or in part, this privacy policy, due to changes in the applicable regulations regarding the protection of personal data or the processing of personal data. data done.

Any substantial modification of the privacy policy will be notified to you by e-mail when you have provided us with a valid e-mail address and will be published on the website. We recommend that you regularly review this privacy policy in order to be fully aware of our commitments to the security and protection of your personal data.

 

7. HOW TO CONTACT US

If you have any questions, comments or suggestions, please contact us by visiting the contact us page or submitting them to hello@casambu.com.

Or by post to 101 Route de la Frasse, 74170 Les Contamines-Montjoie, France.

If you are not satisfied with Casambu's response to a request to exercise rights in accordance with Article V above or wish to report a breach of applicable data protection regulations , you have the right to lodge a complaint with the CNIL by post (CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or with the data protection authority of the country in which you usually reside or work.


Document updated on April 10, 2023