Privacy policy

We are pleased by your interest in La telierparfumeur.com. Data protection is particularly important to the management of La telierparfumeur.com. Our web pages can be used without providing personal data. However, processing may become necessary if a data subject wishes to use specific company services through our website. Where processing is necessary and has no legal basis, we generally obtain the data subject’s consent.

Personal data such as a person’s name, address, email address or telephone number is always processed in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection provisions. Through this privacy statement, La telierparfumeur.com informs the public about the nature, scope and purposes of the personal data we collect, use and process, and informs data subjects of their rights.

As controller, La telierparfumeur.com has implemented numerous technical and organisational measures to provide the most comprehensive protection possible for personal data processed through this website. Internet transmissions may nevertheless have security gaps, so absolute protection cannot be guaranteed. Data subjects are therefore free to provide personal data by other means, for example by telephone.

1. Definitions

This privacy statement is based on the terms used by the European legislature in adopting the GDPR. It should be clear and understandable to the public, customers and business partners. We therefore explain the terminology below.

a) Personal data

Personal data means any information relating to an identified or identifiable natural person, the “data subject”. An identifiable person can be identified directly or indirectly, particularly by a name, identification number, location data, online identifier, or factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.

b) Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

c) Processing

Processing means any operation or set of operations performed on personal data, whether automated or not, such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.

d) Restriction of processing

Restriction of processing means marking stored personal data with the aim of limiting its future processing.

e) Profiling

Profiling means any automated processing of personal data used to evaluate personal aspects of a natural person, particularly to analyse or predict work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f) Pseudonymisation

Pseudonymisation means processing personal data so that it can no longer be attributed to a specific data subject without additional information, provided that this information is kept separately and subject to technical and organisational measures ensuring that the data is not attributed to an identified or identifiable person.

g) Controller

The controller is the natural or legal person, public authority, agency or other body that alone or jointly determines the purposes and means of processing personal data. Where these are determined by Union or Member State law, the controller or specific criteria for its appointment may be provided for by that law.

h) Processor

A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

i) Recipient

A recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not. Public authorities receiving personal data in a particular inquiry under Union or Member State law are not considered recipients; their processing must comply with the applicable data protection rules according to its purposes.

j) Third party

A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor or persons authorised to process personal data under the direct authority of the controller or processor.

k) Consent

Consent is a freely given, specific, informed and unambiguous indication of the data subject’s wishes, expressed by a statement or clear affirmative action accepting the processing of their personal data.

2. Name and address of the controller

For the purposes of the GDPR, other applicable data protection laws in European Union Member States and other data protection provisions:

3. Cookies

The web pages of La telierparfumeur.com use cookies. Cookies are text files stored on a computer through an Internet browser. Many websites and servers use them. Many cookies contain a cookie ID: a unique string of characters allowing websites and servers to identify the particular browser in which the cookie was stored and distinguish it from other browsers.

Cookies allow La telierparfumeur.com to provide more user-friendly services that would otherwise be unavailable. Information and offers can be optimised with the user in mind. Recognising users makes the website easier to use: for example, login information need not be entered on every visit, as the website retrieves it from a cookie stored on the user’s computer. A shopping basket cookie similarly remembers the items placed in a virtual basket.

Data subjects may prevent cookies from being set at any time by adjusting their browser settings and may permanently refuse them. Existing cookies may also be deleted through a browser or other software, as supported by popular browsers. Disabling cookies may prevent some website features from being fully usable.

4. Collection of general data and information

La telierparfumeur.com collects general data whenever a data subject or automated system accesses the website. This information is stored in server log files and may include: (1) browser types and versions; (2) operating system; (3) the referring website; (4) sub-pages accessed; (5) access date and time; (6) IP address; (7) Internet service provider; and (8) similar information usable in the event of attacks on our IT systems.

La telierparfumeur.com does not use this general information to draw conclusions about the data subject. It is needed to: (1) deliver website content correctly; (2) optimise the content and advertising; (3) ensure the long-term viability of our IT systems and website technology; and (4) provide law enforcement with information needed for criminal proceedings following a cyberattack.

We statistically analyse anonymously collected information to improve company data protection and security and provide an optimal level of personal data protection. Anonymous server log data is stored separately from personal data supplied by data subjects.

5. Registration on our website

Data subjects may register on the controller’s website by providing personal data. The registration form determines which data is transmitted. Data entered is collected and stored exclusively for the controller’s internal use and purposes. The controller may transfer it to processors, such as a parcel service, which also use it internally for purposes attributable to the controller.

Registration also records the IP address assigned by the Internet service provider and used by the data subject, together with the registration date and time. This prevents misuse of our services and, where necessary, enables investigation of offences. Storage is necessary to protect the controller. The data is not transferred to third parties unless legally required or needed for criminal proceedings.

Voluntary registration allows the controller to provide content or services available only to registered users. Registered persons may change their registration data or have it completely deleted from the controller’s records at any time.

On request, the controller provides information about the personal data stored concerning a data subject. It also corrects or erases data at the data subject’s request or indication unless a statutory retention obligation applies. All employees are available as contacts for these purposes.

6. Subscription to our newsletters

Users of La telierparfumeur.com may subscribe to our company newsletter. The relevant form determines the personal data transmitted to the controller when subscribing.

La telierparfumeur.com regularly informs customers and business partners about its offers. The newsletter can be received only if the data subject has a valid email address and registers for it. For legal reasons, a confirmation email is sent on first registration through the double opt-in procedure, to establish that the email address owner is authorised to receive the newsletter.

We also record the IP address assigned by the Internet service provider and used at registration, together with the date and time. This enables potential misuse of an email address to be traced later and serves the controller’s legal protection.

Personal data collected for newsletter subscriptions is used only to send the newsletter. Subscribers may also receive emails necessary to operate the service or manage a subscription, for example following changes to the newsletter offering or technical circumstances. Personal data collected by the newsletter service is not passed to third parties.

Data subjects may cancel their subscription and withdraw consent to storage for newsletter delivery at any time. Each newsletter contains a withdrawal link. Users may also unsubscribe directly through La telierparfumeur.com or communicate their request by another means.

7. Newsletter tracking

The newsletter contains tracking pixels: miniature graphics embedded in HTML emails to allow log recording and analysis. They enable statistical analysis of the success or failure of online marketing campaigns. The embedded pixel allows La telierparfumeur.com to see whether and when an email was opened and which links were accessed.

The controller stores and analyses this personal data to optimise newsletter delivery and better adapt future content to the data subject’s interests. It is not passed to third parties. Data subjects may withdraw the separate consent given through double opt-in at any time. The controller then deletes this personal data. inamsboutique.com automatically treats unsubscribing from the newsletter as withdrawal of consent.

8. Contact through the website

La telierparfumeur.com provides information allowing rapid electronic contact and direct communication with our company, including a general email address. When a data subject contacts the controller by email or a contact form, the personal data voluntarily transmitted is automatically stored to process the enquiry or contact the person. It is not transferred to third parties.

9. Routine erasure and blocking of personal data

The controller processes and stores personal data only for the period necessary to achieve the storage purpose, or as permitted by European or other applicable legislation. Once the purpose no longer applies or a statutory retention period expires, personal data is routinely blocked or erased in accordance with legal requirements.

10. Rights of the data subject

a) Right to confirmation

Each data subject has the right granted by the European legislature to obtain confirmation from the controller as to whether personal data concerning them is being processed. To exercise this right, they may contact any employee of the controller at any time.

b) Right of access

Each data subject has the right to obtain, free of charge and at any time, information about the personal data stored concerning them and a copy of it. European rules also provide access to the following:

  • the purposes of processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom data has been or will be disclosed, particularly recipients in third countries or international organisations;
  • where possible, the expected retention period, or the criteria used to determine it;
  • the right to request rectification, erasure or restriction of processing, or to object to processing;
  • the right to lodge a complaint with a supervisory authority;
  • where data was not collected from the data subject, any available information about its source;
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved and the significance and envisaged consequences for the data subject.

Data subjects also have the right to information about transfers to third countries or international organisations and the appropriate safeguards relating to them. To exercise access rights, they may contact any employee of the controller at any time.

c) Right to rectification

Each data subject has the right to obtain rectification of inaccurate personal data without undue delay. Taking the processing purposes into account, they may have incomplete personal data completed, including by a supplementary statement. They may contact any employee of the controller to exercise this right.

d) Right to erasure: the right to be forgotten

Each data subject has the right to obtain erasure of their personal data without undue delay, and the controller must erase it without undue delay where one of the following grounds applies, provided processing is not necessary:

  • The data is no longer necessary for the purposes for which it was collected or processed.
  • The data subject withdraws consent under Article 6(1)(a) or Article 9(2)(a) GDPR, and no other legal ground applies.
  • The data subject objects under Article 21(1) GDPR and there are no overriding legitimate grounds, or objects under Article 21(2).
  • The data has been unlawfully processed.
  • Erasure is required to comply with a legal obligation under Union or Member State law applicable to the controller.
  • The data was collected in connection with information society services referred to in Article 8(1) GDPR.

Where a ground applies and a data subject wishes to erase personal data stored by La telierparfumeur.com, they may contact any employee of the controller at any time. An employee of inamsboutique.com must ensure that the erasure request is fulfilled immediately.

Where the controller has made personal data public and must erase it under Article 17(1), it takes reasonable steps, including technical measures, taking account of available technology and implementation costs, to inform other controllers processing the data that the data subject has requested erasure of links, copies or reproductions, insofar as processing is not necessary. An employee of La telierparfumeur.com will arrange the necessary measures in individual cases.

e) Right to restriction of processing

Each data subject has the right to obtain restriction where:

  • the accuracy of the data is disputed, for a period allowing the controller to verify it;
  • processing is unlawful and the data subject opposes erasure, requesting restriction instead;
  • the controller no longer needs the data, but the data subject needs it to establish, exercise or defend legal claims;
  • the data subject has objected under Article 21(1) GDPR, pending verification of whether the controller’s legitimate grounds override theirs.

Where a condition applies, a person wishing to restrict data stored by La telierparfumeur.com may contact any employee of the controller. An employee will arrange the restriction.

f) Right to data portability

Each data subject has the right to receive the personal data they provided to a controller in a structured, commonly used and machine-readable format, and to transmit it to another controller without hindrance, where processing is based on consent under Article 6(1)(a) or Article 9(2)(a) GDPR or a contract under Article 6(1)(b), and is carried out by automated means. This does not apply where processing is necessary for a task in the public interest or the exercise of official authority vested in the controller.

Under Article 20(1) GDPR, the data subject may also have data transmitted directly between controllers where technically feasible and without adversely affecting others’ rights and freedoms. To exercise portability rights, they may contact any employee of La telierparfumeur.com at any time.

g) Right to object

Each data subject may object at any time, on grounds relating to their particular situation, to processing based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

La telierparfumeur.com will then cease processing unless it demonstrates compelling legitimate grounds overriding the data subject’s interests, rights and freedoms, or processing is needed to establish, exercise or defend legal claims.

Where data is processed for direct marketing, the data subject may object at any time, including to related profiling. If the data subject objects to inamsboutique.com concerning direct marketing processing, La telierparfumeur.com will no longer process the data for those purposes.

The data subject may also object, on grounds relating to their particular situation, to processing by La telierparfumeur.com for scientific or historical research or statistical purposes under Article 89(1) GDPR, unless necessary for a task carried out in the public interest.

To exercise this right, the data subject may contact any employee of La telierparfumeur.com. In the context of using inamsboutique.com services, and notwithstanding Directive 2002/58/EC, the data subject may also object by automated means using technical specifications.

h) Automated individual decision-making, including profiling

Each data subject has the right not to be subject to a decision based solely on automated processing, including profiling, producing legal effects or similarly significantly affecting them, insofar as the decision is not necessary for entering into or performing a contract between the person and a controller, is not authorised by Union or Member State law applicable to the controller with appropriate safeguards, or is not based on the person’s explicit consent.

If the decision is necessary for entering into or performing a contract, or is based on explicit consent, La telierparfumeur.com implements suitable measures to safeguard the data subject’s rights, freedoms and legitimate interests, including at least human intervention by the controller, the ability to express a view and the ability to contest the decision.

To exercise rights relating to automated individual decisions, data subjects may contact any employee of La telierparfumeur.com at any time.

i) Right to withdraw data protection consent

Each data subject has the right to withdraw consent to personal data processing at any time. To exercise this right, they may contact any employee of La telierparfumeur.com.

11. Legal basis for processing

Article 6(1)(a) GDPR provides the legal basis where we obtain consent for a specific purpose. Where processing is necessary to perform a contract with the data subject, such as supplying goods or services, Article 6(1)(b) applies. The same applies to necessary pre-contractual steps, for example enquiries about products or services.

Where La telierparfumeur.com must process data to meet a legal obligation, such as tax requirements, Article 6(1)(c) applies. In rare cases, processing may be necessary to protect a person’s vital interests. For example, if a visitor is injured at our premises, their name, age, health insurance details or other vital information may need to be passed to a doctor, hospital or other third party. Article 6(1)(d) would then apply.

Processing may also rely on Article 6(1)(f), where no earlier ground applies and processing is necessary for legitimate interests pursued by our company or a third party, except where overridden by the data subject’s interests or fundamental rights and freedoms requiring personal data protection. The European legislature specifically recognised such processing and noted that a legitimate interest may exist where the person is a customer of the controller: Recital 47, sentence 2, GDPR.

12. Legitimate interests pursued by the controller or a third party

Where processing relies on Article 6(1)(f) GDPR, our legitimate interest is conducting our business for the wellbeing of all employees and shareholders.

13. Personal data retention period

The relevant statutory retention period determines how long personal data is stored. When it expires, the data is routinely deleted insofar as it is no longer required to perform or enter into a contract.

14. Provision of personal data as a statutory or contractual requirement; necessity for entering into a contract; obligation to provide data and possible consequences of not doing so

Providing personal data may be partly required by law, for example tax rules, or by contractual provisions, such as information about the contracting party. Entering into a contract may require the data subject to provide personal data for our processing. For example, a person must provide us with personal data when La telierparfumeur.com enters into a contract with them. Failure to provide it would prevent the contract from being concluded.

Before providing personal data, the data subject should contact an employee, who will explain whether provision is legally or contractually required, whether it is necessary to conclude the contract, whether there is an obligation to supply it and the consequences of not doing so.

15. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.