I. Controller
1.1 The controller is Quetsche, whose head office is located at 189 rue d’Aubervilliers 75018 Paris – France. Quetsche – and its service providers acting on its behalf – determines the purposes, the technical and juridical means of the data processing and commits to take all necessary measures to ensure that the processing is compliant with the provisions of the Data Protection Act of January 6, 1978, modified by the law of August 6, 2004 (hereinafter “the Law”) and the regulation (EU) 2016/679 of April 26, 2016, general regulation on data protection (hereinafter “GDPR”).
1.2. Quetsche is free to choose any natural or legal person to process the Internet user’s personal data at its request and on its behalf (hereinafter « the processor »). Quetsche commits to select processors providing sufficient guarantees regarding technical and organizational security measures of the personal data processing.
II. Personal data processing
2.1. The use of the Website, the access to specific pages and/or all information or services requested by the Internet users may lead to the communication of personal data. The processing of those data by Quetsche, as controller, and/or by the processors acting on Quetsche behalf, shall be compliant with the Law and the GDPR Regulation.
2.2. The purpose of this Privacy Policy is to inform the Internet users, before accessing specific pages of the Website and communicating its personal data, about the way Quetsche processes its data. The Internet users shall be aware of this Privacy Policy before providing personal data by filling the forms provided in that respect on the different pages of the Website.
2.3 The personal data will be processed mainly in an automated manner, with procedures linked to the purposes described in point 3.
Quetsche cares that Internet users’ personal data are processed safely and in confidentiality and takes all necessary measures to avoid loss, bad use, deterioration, or deletion of personal data.
2.4. Quetsche also collects Internet user’s specific personal data in order to recognize him/her and offer him/her an optimal and personalized user experience. This collection also aims to correct potential mistakes in the Website. The collected data concern the user’s connection (IP address, geographical zone, day and hour of connection, pages seen and/or used, etc) as well as the equipment from where the connection occurred.
III. Purposes of personal data processing
The User’s personal data is processed in order to process and deliver his/her orders.
The order process on the Website www.quetsche.shop requires the creation of a Customer account in which his/her information is stored and protected by a password chosen by the Customer. Subject to validation by an “opt-in” of the Customer, personal information (personal data, email address, gender, etc….) can also be used by Quetsche and/or its partners for marketing purposes like the sending of newsletters or requests.
IV. Personal data likely to be processed
The information given by the Internet users while filing the forms or creating his/her account is collected and processed. This information includes the Internet user’s name, gender, size, address, email, and phone number.
V. Consent
The Internet user can withdraw his/her consent at any time.
The withdrawal of his/her consent does not question the legality of the process already done, based on the consent given before the withdrawal. This right can be exercised by email to the address shop@quetsche.studio.
VI. Duration of personal data’s storage
In compliance with the Law and GDPR Regulation, Quetsche only stores Internet user’s personal data during a timeframe reasonably necessary to achieve the purposes for which it is collected.
VII. Communication of Internet user’s personal data for internal purposes
7.1. The personal data can be provided to Quetsche’s employees and staff who, acting under Quetsche’s direct authority, are considered controllers or processors and receive appropriate operational instructions. The personal data can be disclosed to the controller’s employees or staff, appointed by Quetsche, provided that the data are collected according to the pursued purposes.
7.2. Quetsche ensures that the processors, employees, or staff guarantee the same level of protection as itself and ensures that these processors, employees, or staff process the personal data only for the pursued purposes, with the required discretion and security.
7.3. The personal data directly communicated by the Users through the online forms can be disclosed and collected by external providers acting on Quetsche’s behalf.
7.4 The data are not subject to a transfer to a third country outside the European Union.
VIII. The User’s rights
8.1. Quetsche guarantees fair and lawful processing of Internet user’s personal data.
8.2. Quetsche guarantees the Internet user a right to access his/her personal data.
According to article 15 of GDPR, the Internet user shall have the right to obtain from Quetsche the following (nonexhaustive) information:
- The purposes of the processing;
- The categories of personal data concerned;
- The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations ;
- Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- The existence of automated decision-making, including profiling, is referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
8.3. Quetsche guarantees the right to rectification and deletion of the User’s personal data. According to article 16 of GDPR, incorrect or inaccurate data can be rectified or deleted at any time. First, the Internet user shall proceed by himself to the necessary modifications from its user account, then he/she shall ask Quetsche to proceed to the modifications if necessary.
The Internet user shall have a right to obtain the deletion of his/her personal data in the cases listed in article 17 of GDPR.
8.4. Quetsche guarantees the right to restriction of processing
The Internet user shall have the right to obtain restriction of processing where one of the cases described in article 18 of GDPR applies.
8.5. Quetsche guarantees the right to data portability
According to article 20 of GDPR, the Internet user shall have the right to receive from Quetsche the personal data concerning him/her, in a structured, commonly used, and machine-readable format.
The Internet user shall also have a right to transmit those data to another controller without hindrance from Quetsche, in the cases described in GDPR.
8.6. Quetsche guarantees the right to object to the processing
The Internet user shall have the right to object, on compelling and legitimate grounds relating to his/her particular situation, at any time to processing of personal data concerning him/her. In such a case, Quetsche will not process the personal data, unless there are compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
8.7. Quetsche guarantees the right to lodge a complaint
The Internet user shall have the right to lodge a complaint regarding the processing of his/her personal data by Quetsche with the CNIL, supervisory authority competent in the French territory.
8.8. The Internet user can exercise the rights listed above, at any time, by contacting shop@quetsche.studio.
IX. Processor’s limitation of liability
The website may contain hyperlinks to websites controlled and exploited by third parties not linked to Quetsche. In such a case, Quetsche cannot be held responsible for the content of these websites, or for these third parties’ practices as regards personal data protection. Quetsche cannot be held responsible for the loss, the data corruption, or the identity theft, which may be caused particularly but not only by the presence of viruses or by cyber-attacks.
X. User’s data modification process
The Internet user can, at any time, modify the disclosed personal data by contacting shop@quetsche.studio.