Personal Data

PERSONAL DATA AND COOKIE MANAGEMENT POLICY

Red Macchiato is committed to protecting the personal data of its customers and ensuring the highest level of protection.

To provide its service, Red Macchiato collects personal data from visitors to its website www.redmacchiato.com

The purpose of this section is to explain to customers how Red Macchiato uses the personal data they may provide on the site.

Red Macchiato, as Data Controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of personal data (GDPR).


1. WHO COLLECTS PERSONAL DATA?

The company that collects personal data and implements data processing is:

Red Macchiato, Micro-enterprise, registered with the Trade and Companies Register of Paris, whose registered office is located at 181 boulevard du Président Franklin Roosevelt, 33800 Bordeaux.

2. FOR WHAT PURPOSES DOES RED MACCHIATO COLLECT PERSONAL DATA?

Red Macchiato is only authorized to use the personal data of its customers if it has a valid legal basis.
Red Macchiato must ensure that it has one or more of the following legal bases:

  • the execution of a contract (e.g., to process and send an order or to open and manage a Red Macchiato account), or;
  • the execution of a legal obligation (e.g., keeping invoices), or;
  • when it is in the legitimate interest of Red Macchiato, or;
  • When the Client has given their consent to the collection of data.

    Red Macchiato's legitimate interest must not override the rights and freedoms of its customers. Examples of legitimate interests mentioned in the GDPR include fraud prevention, direct marketing, and data sharing within a group of companies.

    Red Macchiato collects and processes the personal data of its customers to carry out the following processing activities:

    What operations are performed on personal data?

    What are the justifications?

    • Customer account management, shopping cart and order management;
    • Execution of the contract between a Client and Red Macchiato
    • Payment transaction management;
    • Management of delivery operations;
    • Customer relationship management (telephone / email), order tracking, after-sales service, product returns and refunds;
    • Customer satisfaction management (Collecting customer feedback on products and customer service performance);
    • Red Macchiato's legitimate interest in improving the quality of service
    • Combating fraud during order payment and managing unpaid invoices after ordering;
    • Execution of the contract between a Client and Red Macchiato
    • Red Macchiato's legitimate interest
    • Statistical, analytical, selection and segmentation operations of customers in order to improve customer knowledge;
    • Red Macchiato's legitimate interest
    • Sending targeted commercial offers via email, SMS on social networks, on other websites or any other medium;
    • Customer Consent
    • Legitimate interest in sending marketing materials on paper
    • Measurement of website (mobile and desktop) and mobile application traffic;
    • Customer Consent
    • Provision of social media sharing tools;
    • Implementation of competitions and advertising games;
    • Red Macchiato's legitimate interest
    • Sharing information with business partners;
    • Execution of the contract between a Client and Red Macchiato
    • Customer Consent (for marketing purposes)

    3. WHAT ARE THE RIGHTS OVER THE DATA?

    3.1. What rights can be exercised?

    Pursuant to Articles 15 to 22 of Regulation 2016/679 of 27 April 2016, any natural person whose data has been collected has the right to exercise the following rights:

    • A right of access
    • A right of rectification,
    • A right to object to the processing of one's data and to have one's data erased
    • A right to object to profiling
    • A right to restrict processing,
    • A right to data portability

    When Red Macchiato detects a personal data breach likely to result in a high risk to the rights and freedoms of the Client, the latter will be informed of this breach as soon as possible.

    The Client also has the right to withdraw their consent at any time.

    3.2. How to practice them?

    These rights can be exercised with the company Red Macchiato, which collected the personal data, in the following manner:

    By post, writing to: Red Macchiato, 181 boulevard du Président Franklin Roosevelt, 33800 Bordeaux. By email, to: hello@redmacchiato.com

    The request must include the name, surname, postal address, email, and if possible the customer reference number, and must be accompanied by proof of identity.

    Red Macchiato will respond within one month of receiving the request. In certain cases, due to the complexity of the request or the number of requests, this period may be extended by two months.

    These rights may, in certain cases provided for by the regulations, be subject to exceptions.

    In the event of no response or an unsatisfactory response, the person concerned has the right to contact the data protection supervisory authority (the CNIL).

    4. WHAT HAPPENS TO THE DATA AFTER DEATH?

    The Client may formulate instructions relating to the retention, erasure and communication of his personal data after his death in accordance with article 40-1 of law 78-17 of 6 January 1978. These instructions may be general or specific.

    The Client may send their advance directives to hello@redmacchiato.com

    5. TO WHOM IS THE DATA TRANSMITTED?

    Your data is transmitted to Red Macchiato partners who may process the data on their own behalf (these are recipients) or solely on behalf of and according to the instructions of Red Macchiato (these are subcontractors).

    The recipients of the data are:
    - Payment institutions (banks)

    Red Macchiato also uses subcontractors for the following operations:

    • secure payment on the website
    • the fight against fraud
    • shipping your orders and parcels
    • Performing maintenance and technical development operations on the website, internal applications and the Red Macchiato information system.
    • Collecting customer reviews
    • Sending sales prospecting emails

    6. IS THE DATA SENT OUTSIDE THE EU?

    For certain operations, personal data may be transferred to companies located in countries outside the European Union. Prior to any transfer outside the European Union, and in accordance with applicable regulations, Red Macchiato ensures the security of these data transfers.

    Transfers outside the European Union may be carried out, in particular within the framework of the following activities:

    Activity

    Country of destination of the data

    Framework for data transfer

    Data exploitation for social networks

    UNITED STATES

    Privacy Shield / Standard contractual clauses

    7. HOW LONG IS THE DATA KEPT?

    Red Macchiato has established specific rules regarding the retention period for Customers' personal data. As a general rule, data is kept for the period necessary to fulfill the purposes for which it was collected.

    Unless otherwise required by law, Red Macchiato complies with the retention periods recommended by the CNIL.

    The retention periods considered are as follows:

    • Data from prospects (people who have never purchased) is kept for 3 years after the last contact from the prospect.
    • Customer data is kept for 3 years from the date of the last purchase.
    • Cookies for audience measurement, targeted advertising and sharing to social networks are stored on the customer's terminal for a period of 13 months.

    8. IS DATA COLLECTED ON MINORS UNDER 16 YEARS OLD?

    You must be 16 years old to create an account on the Red Macchiato website and make purchases.

    Since Red Macchiato does not collect data on minors under 16 years of age, any internet user under 16 years of age must refrain from creating an account.

    9. WHAT ARE THE RULES RELATING TO COMMERCIAL PROSPECTING?

    Red Macchiato uses your contact details to send you targeted advertisements, including via email, postal mail, social networks or third-party websites.

    Red Macchiato complies with the rules laid down by Directive 2002/58/EC of 12 July 2002 which requires the prior express consent of the customer for sending commercial prospecting by electronic means (email or SMS).

    Therefore, when creating your account on the site, you are expressly asked for your consent to receive offers from Red Macchiato by email.

    Red Macchiato will not send you personalized solicitations by email or SMS if you have not consented to it.

    There is an exception where the Client, without having given prior consent, may nevertheless be solicited if he is already a client of the company Red Macchiato and the purpose of the solicitation is to offer similar products or services.

    In all cases, the customer has the option to object to receiving these solicitations by taking the following actions:

    - When creating the account, do not check the box related to prospecting;
    - For email, by clicking on the unsubscribe link provided in each email;
    - For SMS, by sending a stop SMS to the number indicated in it;
    - By contacting customer service.

    Red Macchiato may contact you by telephone to offer you deals on products or services. If you do not wish to be contacted, you can register on the national opt-out list for telemarketing calls, accessible at www.bloctel.gouv.fr

    10. Does Red Macchiato use cookies, tags, and trackers?

    Information relating to browsing on the site may be recorded in "Cookies" files placed on your device, subject to the choices you have made regarding Cookies and which you can change at any time.

    10.1. WHAT IS A COOKIE?

    The term "cookie" encompasses several technologies that allow for tracking browsing activity or analyzing user behavior. These technologies are numerous and constantly evolving. They include, in particular, cookies, tags, pixels, and JavaScript code.

    A cookie is a small file that allows the system to remember the device used by the internet user.

    There are two types of cookies:

    - first party cookies, placed by Red Macchiato for the purposes of navigation and operation of the site;
    - Third-party cookies placed by partner companies to identify customer interests and send personalized offers or allow the customer to share content on social networks. These third-party cookies are managed directly by the companies that issue them and must also comply with data protection regulations.

    10.2. WHY ARE COOKIES, TAGS AND TRACKERS USED?

    The cookies that Red Macchiato uses allow:

    - to compile statistics and data on the frequency and use of the various elements comprising our services. For this purpose, we use audience measurement cookies.
    - to adapt the presentation of our Site according to the terminal used;
    - to adapt the presentation of our Site according to the preferences of each Client;
    - to remember information relating to a form that you have filled out on our Site (registration or access to your account, service subscribed to, contents of an order basket, etc.);
    - to allow you to access reserved and personal areas of our Site, such as your account, using identifiers;
    - to implement security measures, for example when you are asked to log back into your account after a certain period of time;
    - to share information with advertisers on other websites to deliver relevant advertisements tailored to your interests. For this purpose, we use advertising cookies.
    - sharing information on social networks. For this purpose, we use cookies to enable sharing on these networks.

    10.3. HOW TO CONFIGURE THE DEPOSIT OF COOKIES, TAGS AND TRACKERS?

    In accordance with Directive 2002/58/EC of 12 July 2002, Red Macchiato collects your prior consent before placing advertising, audience measurement and social media sharing cookies.

    You can choose at any time to express and modify your cookie preferences, using the methods described below.

    10.3.1. Configuring your navigation software

    You can configure your browser to allow cookies to be stored on your device or, conversely, to reject them, either systematically or according to their origin. You can also configure your browser to prompt you to accept or reject cookies on a case-by-case basis before a cookie is likely to be stored on your device.

    How do you exercise your choices, depending on the browser you are using?

    Each browser has a different configuration for managing cookies and your preferences. This is described in your browser's help menu, which will explain how to modify your cookie settings.

    For Internet Explorer™: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies ,
    For SafariTM: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
    For ChromeTM: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,
    For FirefoxTM: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,
    For OperaTM: http://help.opera.com/Windows/10.20/fr/cookies.html

    10.3.2. Configuring cookies using a tool provided by Red Macchiato

    In order to comply with regulations, Red Macchiato uses a tool that allows users to configure cookie settings when connecting to the website www.redmacchiato.com

    To access the list of cookies stored and configure their storage

    10.3.3. Opt-out list for managing cookie placement

    You also have the option to object to the placement of cookies by accessing the website http://www.youronlinechoices.com/fr/controler-ses-cookies/ .

    10.3.4. Link to third-party publishers

    Red Macchiato uses social media sharing cookies; users can consult the data protection policy to configure cookies:

      Red Macchiato uses advertising cookies; users can consult the data protection policy to configure cookies:

        Red Macchiato uses the Google Analytics audience measurement cookie which can be configured at the following address: https://tools.google.com/dlpage/gaoptout?hl=fr.