Legal notice
This privacy policy is provided by kheoos, a simplified joint-stock company with capital of €224,720, whose registered office is located at 67 Bd Denfert Rochereau – 38500 Voiron, France, registered with the GRENOBLE Trade and Companies Register under number 838 448 181. VAT number: FR 16 838 448 181, in accordance with the provisions of Law No. 78-17 of January 6, 1978 as amended (the “French Data Protection Act” or “LIL”) and the General Data Protection Regulation (“GDPR”) No. 2016/679.
This policy concerns personal data that kheoos may collect when a user creates an account on the website www.market.preprod.kheoos.com and other kheoos platforms requiring account creation as well as when users make purchases.
SECTION 1 – Data and their use
Personal data is collected in certain situations, and all such data is provided by the user.
- Cookies: When users browse the website, a number of cookies are set, including those the user has accepted via the cookie banner. Cookies help to better understand user preferences and thereby improve the user experience on the website.
- Contact form: When a completed contact form is sent, the personal information provided, such as name and email address, is collected and used solely for the purpose of responding to the contact request.
- Creation of a user account and online orders placed via this account: postal and billing address, phone number, first and last name, email, VAT number, role within the company (administrator or account user), order history.
- Satisfaction surveys and the sending of promotions for Kheoos items.
- Newsletter: When a user subscribes to the newsletter, the email address is provided for the purpose of receiving the newsletter.
SECTION 2 – Legal basis for processing your personal data
Personal data is collected and processed in compliance with regulations and only under the following legal bases:
- When personal information is provided via the forms available on the website, the submission of this data constitutes consent for it to be collected and used solely for the reasons detailed in section 1.
- Where necessary to safeguard legitimate interests: Creation of a commercial profile based on website browsing, and fulfilling Customer Relationship Management activities. This profile is constructed using personal data and browsing information, such as viewed products, products added to the cart, sections visited, country of origin, etc., in order to assess preferences and/or interests with the aim of providing content, special offers, services, and products tailored to the profile. Management of all actions and surveys to assess satisfaction in order to create and improve services.
- Contract with clients: management of online purchase and sale processing. Personal information is used to process and ship orders, as well as to provide information about order status by email. Management and issuance of documents confirming the sale, account registration on the site, and the management and delivery of information regarding exclusive promotions and the latest updates tailored to the user’s profile by email.
SECTION 3 – Disclosure
Personal data is not disclosed outside of the different kheoos departments and Hubspot, which manages customer relations and whose servers are located within the European Union. Kheoos does not sell or rent personal data to third parties under any circumstances, and no data is transferred outside the European Union.
SECTION 4 – Retention of personal data
Personal data is retained only for as long as reasonably necessary:
- User browsing tracking and monitoring: up to a maximum of 8 months or until withdrawal of consent if this occurs before 8 months;
- Newsletter: unsubscribe by clicking the link at the bottom of the newsletter;
- Contact form: Data is retained for 2 years and then deleted.
SECTION 5 – Your rights and contact information
The right is guaranteed to access personal information held, to request that this information be rectified, restricted, or deleted (for certain data only). A copy of the personal data may also be requested, or processing may be objected to.
A Data Protection Officer has been appointed and can be contacted regarding any questions related to the processing of personal data and to exercise data subject rights at the following addresses.
These rights may be exercised by contacting Kheoos:
- By email: gdpr@kheoos.com
- By postal mail:
Data Protection Officer – Kheoos
67 Bd Denfert Rochereau – 38500 Voiron, France
The request must indicate surname and first name, and additional information and possibly proof of identity will be requested depending on the request (such identity proof will be destroyed once the right has been exercised). It is essential to specify precisely the right to be exercised, as well as the email or postal address to enable follow-up. A response will be provided within one month, except in the case of particular difficulty.
SECTION 6 – Complaints
The right is maintained to lodge a complaint with the supervisory authority (CNIL), via its website, at the following link: www.cnil.fr/fr/plaintes or by post: Service des Plaintes – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
CHANGES TO THE PRIVACY POLICY
Kheoos reserves the right to modify this privacy policy at any time and recommends checking it frequently. Changes and clarifications will take effect upon their publication on the website. For any questions regarding this privacy policy, contact may be made by email at: gdpr@kheoos.com.