Confidentiality policy
This privacy policy aims to explain why we collect your data and how we will protect it.
Figurines Mine is committed to protecting your personal data and privacy.
As such, and following the application of the General Data Protection Regulations (hereinafter referred to as "GDPR"), we hereby communicate to you the conditions under which we will process your personal data.
What personal data do we process?
Purposes:
We may collect and store your personal data, in particular for:
Process and respond to your messages, Create and manage access to your accounts, Receive and process your order, Manage your subscriptions to our newsletters, Establish and monitor the commercial relationship that may arise from your messages, Write a review/comment published on the site, Collect your payment, Improve our monitoring and customer service, Manage the proper functioning and personalization of services, Send you commercial and advertising information based on your preferences, Detection attacks and litigation against fraud, Remember your choices regarding the use of cookies, Process and respond to your requests to exercise rights, To meet regulatory requirements in force or being adopted.
Data categories:
Contact details (e.g. name, first name, telephone number, email); Data relating to means of payment.
Legal basis for processing
The processing of personal data implemented is based on:
-
Either with the consent of the person concerned (Article 6.1.a of the GDPR) for all processing operations which require the prior collection of consent. In online forms, required fields are marked with an asterisk. If the mandatory questions are not answered, we will not be able to provide you with the requested services.
-
Either for the execution of a contract or the execution of pre-contractual measures,
-
Either for the pursuit of a legitimate interest (Article 6.1.e of the GDPR).
-
Either for compliance with a legal or regulatory obligation;
Your data is kept for the duration necessary to achieve the purposes mentioned above.
The duration of retention of Customers' personal data depends on the purpose concerned. In this context, customers' personal data is kept for the time necessary for the completion of their request. In the absence of any completion, personal data is deleted within the time limits recommended by the Commission Nationale Informatique et Libertés (CNIL), after a period of three years from their collection, subject to:
– legal possibilities and obligations regarding archiving,
– obligations to retain certain data, for evidentiary purposes, and/or anonymization of these.
The Customer's personal data collected and processed, for the purposes of executing the offers, are kept for the duration necessary for the management of the contractual relationship. By way of derogation, the personal data required to establish proof of a right or a contract are archived in accordance with legal provisions (5 or 10 years after the end of the commercial relationship depending on the case).
Who are the recipients of your data?
Your personal data is intended for Figurines Mine.
Our internal services: They are processed by staff from our various departments such as the sales department or the department in charge of IT security., Trusted companies or people: they process your information for us for the purposes stated above, following our instructions as described in our Privacy Policy and any other appropriate use cases in terms of confidentiality and security., Technical subcontractors: Personal data concerning you may be transferred to our subcontractors -technical contractors (within the meaning of article 4.8 of the GDPR) in a strictly supervised manner. In the event of a transfer, we ensure that subcontractors comply with the GDPR and take technical and organizational measures to guarantee data protection (art. 28 of the GDPR).
Traffic analysis (like Google Analytics), Payment provider (like Stripe), and Advertising provider (like Google Ads).
We sometimes need to allow our partners to process, on our behalf, the personal information we hold about you for the purposes set out in this policy or for any other reason required by law.
The personal data of customers collected is hosted in France.
In the case of using a service provider located outside the European Union, we undertake to verify that appropriate measures have been put in place so that personal data benefits from an adequate level of protection.
How does Figurines Mine keep your data secure?
We put in place all organizational and technical measures to ensure an appropriate level of security for your personal data and in particular to avoid any loss of confidentiality, integrity or accessibility.
We frequently back up data. Where possible, we limit access to personal information to only those who need to process it and implement technical and organizational measures to ensure that the retention of Customers' personal data is secure for the duration necessary to achieve the purposes pursued.
What are your rights over your personal data?
Per the Applicable Regulations, you have the following rights: A right of rectification: you have the right to obtain the rectification of inaccurate data concerning you. You also have the right to complete incomplete data concerning you, by providing a supplementary declaration. If you exercise this right, we undertake to communicate any rectification to all recipients of your data.
A right of erasure: in certain cases, you have the right to obtain the erasure of your data. However, this is not an absolute right and we may for legal or legitimate reasons retain this data.
A right to restriction of processing: in certain cases, you have the right to obtain limitation of the processing of your data.
A right to data portability: you have the right to receive the data you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to transmit it to a third party of your choice. This right only applies when the processing of your data is based on your consent, on a contract or when this processing is carried out by automated means.
A right to object to processing: you have the right to object at any time to the processing of your data for processing based on our legitimate interest, a mission of public interest and those for commercial prospecting purposes. This is not an absolute right and we may for legal or legitimate reasons deny your request to object.
The right to withdraw your consent at any time: you can withdraw your consent to the processing of your data when the processing is based on your consent. Withdrawal of consent does not compromise the lawfulness of processing based on consent given before such withdrawal.
The right to complain with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices.
In application of the GDPR, the conditions for exercising these rights may vary depending on the basis of the lawfulness of the processing mentioned in the first paragraph.
We will respond to any exercise of rights as quickly as possible and in any event within 30 days of receipt of the request.
We reserve the right:
-
To request proof of the identity of the applicant in the event of reasonable doubt regarding the latter, in order to respect its obligation of confidentiality.
-
To extend the response deadline by two months, then inform the applicant of this extension and the reasons for the postponement within one month of receipt of the request.
-
To refuse to respond to an exercise of rights if it was considered abusive (given their number, their repetitive or systematic nature).
Who to contact for all GDPR-related inquiries?
To exercise your rights, you can contact us:
Figurines Mine
Self-employed
Immatriculée au Registre du commerce et des sociétés de Créteil sous le numéro SIRET 82468682800024.
Adress : 17 villa du Petit Parc, 94000 Créteil
Telephone : +33 09 84 21 19 65
If, despite our efforts and our commitments, you believe that your rights concerning your personal data have not been respected, you can send a complaint to the Commission Nationale Informatique et Libertés: CNIL 3 Place de Fontenoy TSA 80715 75334 Paris Cedex 07
Reservation of modification of the Data Protection Policy
This Personal Data Protection Policy may be subject to change. This has been developed from a free model which can be downloaded from the site https://donnees.net. As we are constantly developing our services, we reserve the right to modify this Privacy Policy, in accordance with current legal provisions. Any changes are posted to this document promptly. We advise you to regularly consult this page to be aware of any modifications or updates made to our confidentiality policy.