Privacy policy
Data protection policy
This data protection policy (hereinafter “Data protection policy”) is up to date as of January 15, 2022.
The purpose of the Data protection policy is to detail the processing of data of Customers who use the Services of the company METAMORPHOZE, a one-person limited liability company registered with the Strasbourg RCS under number 910 941 988, whose headquarters are located at 139 A impasse de l’ill 67150 Nordhouse (hereinafter “the Company”).
It is recalled that this Data Protection Policy is an integral part of the General Conditions of Sale (Terms and Conditions). Thus, all terms not defined herein are defined in the Terms and Conditions.
Use of the Site and placing of an Order implies acceptance of the terms of this Data protection policy.
What is personal data?
Personal data (“Personal Data”) is information that can directly or indirectly identify a natural person. It can be a name, a first name, an email, a phone number or an address.
Who collects your personal data?
The Site and the Services are offered by METAMORPHOZE. In this context, in its capacity as data controller, the Company may collect the personal data of Customers.
The Company attaches great importance to respect for privacy and takes all necessary measures to ensure the confidentiality and security of Customers’ personal data.
Also, this Data Protection Policy aims to make Customers understand how the Company processes their personal data according to the principles set out by the General Data Protection Regulations (“GDPR”) which came into force on May 25, 2018.
To this end, the Company invites Customers to read this Data Protection Policy in order to be informed of the procedures for processing their personal data and their rights.
What data is collected and for how long is it collected?
When Customers browse the Site and / or place Orders, the Company may collect certain personal data from Customers, in particular: first name, last name, postal address, email address, telephone number.
The personal data of Customers is kept only for the time necessary to achieve the purpose for which the Company holds this data, in order to meet the needs of Customers or to fulfill its legal obligations.
To establish the retention period of personal data, the Company applies the following criteria:
In the event of an Order for Services, personal data is kept for the duration of the contractual relationship and for a period of three years after collection or the last contact with the Customers, for commercial prospecting purposes;
If the Customer makes a request to the Company, the personal data will be kept for the time necessary to process the request.
If the Customer creates an account, the personal data will be kept until the Customer requests the deletion of his account or at the end of a period of inactivity, within the limits of the duration of legal prescriptions.
If cookies are placed on the Client’s computer, personal data is kept for the duration of a session for session identification cookies and for any period defined in accordance with applicable regulations.
The Company may store certain data in order to fulfill its legal or regulatory obligations in order to allow it to exercise its rights and / or for statistical or historical purposes.
At the end of the periods mentioned above, the personal data will be deleted or the Company will anonymize them.
For what purposes are personal data collected?
The Company uses the personal data of Customers for the following purposes:
- End Use
- Legal basis for processing
- End Use : Legal basis for processing
- Provision of services on the website : Processing is necessary for the execution of the contract concluded with the Client
- Order management and processing :Processing is necessary for the execution of the contract concluded with the Client
- Monitoring of services : Processing is necessary for the execution of the contract concluded with the Client
- Invoicing, Management of arrears and litigation : Processing is necessary for the execution of the contract concluded with the Client
- Response to any questions / complaints from Customers : Processing is necessary for the execution of the contract concluded with the Client
- Development of trade statistics : Processing is necessary for the purposes of the legitimate interests pursued by the Company
- Management of requests for access, supression, rectification and opposition rights : Processing is of legal origin
Who are the recipients of personal data?
The personal data of Customers are collected and processed by the sales department of the Company.
The data may also be communicated to the Company’s subcontractors who act in the name and on behalf of the Company, and in particular the website host, payment providers and advertising technology.
As part of the proper performance of the Service, it is possible that the personal data of Customers will be transferred outside the European Union. In this case, the Company ensures that this transfer to countries recognized as ensuring an adequate level of protection of personal data, or, if applicable, on the basis of appropriate guarantees by the GDPR.
The Company may communicate the personal data of Customers in order to cooperate with the administrative and judicial authorities. The Company may finally communicate the personal data of Customers to third-party providers as part of statistical studies of the use of the Site and for the purpose of optimizing the Site. In this context, the personal data of Customers will be anonymized.
Why does the Company use cookies?
In accordance with the deliberation of the CNIL, the Company informs the Customers that cookies record certain information which is stored in the memory of their hard drive. This information is used to generate audience statistics for the Site and to offer services based on the information they have already selected during their previous visits.
An alert message, in the form of a banner, asks each person visiting the Site, beforehand, if they wish to accept cookies. These cookies do not contain confidential information about Site Customers.
The Customer going to the home page or another page of the Site directly from a search engine will be informed:
- the precise purposes of the cookies used;
- the possibility of opposing these cookies and changing the settings by clicking on a link in the banner;
- and the fact that continuing to browse constitutes agreement to the deposit of cookies on your terminal.
- To guarantee the free, informed and unequivocal consent of the User visiting the Site, the banner will not disappear until he has continued browsing.
Unless prior consent of the Customer, the deposit and reading of cookies will not be carried out:
- if anyone who goes to the Site (home page or directly to another page of the Site from a search engine for example) does not continue browsing: a simple lack of action cannot be in effect assimilated to a manifestation of will;
- or if she clicks on the link in the banner allowing her to configure cookies and, if necessary, refuses the deposit of cookies.
How do I manage the setting of cookies on my computer?
The configuration of cookies is presented in a dedicated tab.
For more information concerning the functioning of cookies, the User can refer to the CNIL website via the following link: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser
Why does the Company collect the IP address?
Each computer connected to the Internet has an IP address. As soon as a User navigates on the Site, the Company collects the IP address of the User in order to analyze the traffic on the Site and to control the activity of the User on the Site in order to ensure that it does not carry out acts likely to infringe the General Conditions of Sale and General Conditions of Use appearing on the Site.
What connection data is collected?
In case of termination of the contract, the host must keep for one year from the day of the termination of the contract or the closure of the account the information provided during the subscription of a contract (Order) by the User or during the creation of an account, namely:
Name and surname or company name;
Associated postal addresses;
- The pseudonyms used;
- The associated email or account addresses;
- Telephone numbers;
The host of the Site must finally, when the subscription to the contract (Order), keep for one year from the date of issue of the invoice or payment transaction, for each invoice or payment transaction, the information payment, for each payment transaction:
- The type of payment used;
- The payment reference;
- The amount ;
- The date and time of the transaction.
How does the Company ensure the security of personal data?
The Company takes care to secure the personal data of Customers in an adequate and appropriate manner and has taken the necessary precautions in order to preserve the security and confidentiality of the data and in particular to prevent it from being distorted, damaged or communicated to unauthorized persons. To do this, the Company notably includes IT protection measures such as antivirus, firewalls, or even controls authorizing access to information.
What are the obligations of Customers?
Customers acknowledge that the personal data disclosed by them is valid, adequate and up to date. Only Customers are responsible for their personal data communicated.
Customers agree not to infringe the privacy and protection of personal data of any third party.
In order to improve the relevance of its services, the Company records statistical and non-personal information relating to the use of the Service (frequency of use, quantity and type of data entered).
What are the rights of Customers?
In accordance with the provisions of the Data Protection Act of January 6, 1978 as amended and the GDPR, Customers are informed that they have in particular a right of access, rectification, erasure, limitation of processing data, data portability, as well as a right to object to the processing of their personal data.
The right of access: the Company undertakes to provide the User, if the latter so requests, with a copy of the personal data concerning him.
The right of rectification: The User has the right to request the Company to rectify the personal data communicated to him by the latter.
The right to object: The User can object to their personal data being processed by the Company.
The right to be forgotten: The User can obtain from the Company, under certain conditions, the erasure as soon as possible of certain personal data concerning him. This right to be forgotten cannot be obtained in certain cases in particular for reasons of public interest, for archive purposes or to comply with legal obligations conditioning the processing of personal data by the Company.
The right to limit processing: The User can obtain from the Company that it limits the processing of his personal data and those in particular when the User objects to this processing, disputes the accuracy of the data or when he thinks the use is illegal.
The right to data portability: Under certain conditions, the User can request to receive all of their personal data so that they can transfer it to another data controller without the Company being able to object.
Customers can exercise their rights with the Company, subject to proving their identity, either directly on the Site under the “Contact us” section, or by post to the following address :
METAMORPHOZE
139 A impasse de l’ill 67150 Nordhouse
Mail: support@metamorphoze.com
The Company will comply with the directives given by any User relating to the conservation, erasure and communication of their personal data after their death. In the absence of such directives, the Company will grant the requests of the heirs as limited by the applicable provisions of the Data Protection Act.
What about email prospecting?
No commercial prospecting by email will be carried out with Customers.
How are Customers informed of changes to this Privacy Policy?
The Company may modify this Data Protection Policy at any time. The Company will inform the Customers by any means of the modifications made to this.
The Company invites Customers to regularly read the Privacy Policy in order to keep themselves fully informed of its provisions.
How to contact the Company?
Customers can contact the Company for any question they may have about this Data Protection Policy by email to the following address: contact@metamorphoze.com, or by post to the following address: 139 A impasse de l’ill 67150 Nordhouse