Privacy policy
Personal data – Website management
Activities relating to the www.paraboot.com website involve the processing of personal data.
This privacy policy applies to all visitors and customers to the site.
However, when you place an order with a delivery address outside France and Belgium, you are redirected to the payment interface of our partner Global-e, which acts as a registered merchant for this transaction. In this case, your personal data is collected directly by Global-e, which shares some of it with us. Special provisions apply to the processing of your personal data. We invite you to consult the “Orders delivered outside France and Belgium” section below.
What does the personal data use policy cover?
The present policy informs you of the characteristics of this processing and of your rights regarding your personal data.
This privacy policy is drafted in accordance with the French Data Protection Act n°78-17 of January 6, 1978 (known as the “Loi informatique et libertés” or “LIL”) and the General Regulation on the Protection of Personal Data (“RGDP”) n°2016/679.
Who is responsible for this policy?
The co-processors are :
1/ ETABLISSEMENTS RICHARD PONTVERT ET COMPAGNIE, a public limited company with share capital of €823,834, headquartered at 65 rue des Tuiliers 38430 Saint Jean de Moirans, registered under number 349 869 594.
2/ CAPUCE, a public limited company with share capital of 1,552,000, headquartered at 65 rue des Tuiliers 38430 Saint Jean de Moirans, registered under number 349 869 594.
Whose legal representative is Mr Eric Forestier, General Manager
The contact details of the co-controllers are as follows:
65 rue des Tuiliers 38430 Jean de Moirans
Tel: +33 4 76 93 88 00.
Mail: contact@paraboot.com
Who is this policy aimed at?
This policy applies to users of the site.
More specifically, it concerns :
-newsletter subscribers
-candidates who apply on the site (online recruitment)
-our online store customers
-people who reserve products online for in-store delivery
-persons to whom we have entrusted technical services (hosting provider, maintenance, site security)
-people who have access to the site’s back office for administration purposes
-people who contact us using the site’s contact form
-people browsing the site (Internet users)
Purposes (what data is collected for)
The purpose of the processing is to manage the website.
This processing is carried out for various purposes determined either by ETABLISSEMENTS RICHARD PONTVERT ET COMPAGNIE or by CAPUCE.
ETABLISSEMENTS RICHARD PONTVERT ET COMPAGNIE determines the following purposes:
-online application management (online recruitment)
-technical management of the site (maintenance, hosting, site security)
-website administration
-managing inquiries via the contact form
-site cookie management
CAPUCE determines the following purpose:
-manage customer orders on the online store
Co-responsibility is ensured for the following purposes:
-Newsletter subscription management
-product reservation management
-Management of after-sales service and product returns
Legal basis for processing: what gives us the right to process data
The legal bases for processing are as follows:
-to manage newsletter subscriptions, the legal basis is the subscriber’s consent
-for the management of online applications (online recruitment), the legal basis is the consent of applicants
-the legal basis for processing orders in the online store is the order placed by these customers (the contract)
-For the management of after-sales service and product returns, the legal basis is the order placed by these customers (the contract)
-for technical management of the site (maintenance, hosting, site security), the legal basis is legitimate interest and contracts with service providers
-for the administration of the website, the legal basis is legitimate interest
-for the management of online reservations, the legal basis is the execution of pre-contractual measures
-for the management of requests for information via the contact form, the legal basis is legitimate interest (enabling online communication)
-for the management of cookies on the site, the legal basis is the consent of the persons concerned when such consent is mandatory
Data retention period
Data is kept for no longer than is necessary for the purposes for which it is recorded (principle of minimization of processing).
Maximum shelf lives are as follows:
-to manage newsletter subscriptions: the e-mail address is kept until the person concerned unsubscribes
-for online application management (online recruitment): 2 years for unsuccessful applications
-for the management of orders on the online store: 10 years from the completion of the order. Bank details are kept for 30 days
-for after-sales service and product returns: 10 years from order date
-for technical management of the site (maintenance, hosting, site security): 13 months maximum for IP addresses and connection logs
-for website administration: as long as the persons concerned administer the site
-for online reservation management: the time required to make a reservation
-for the management of requests for information via the contact form: 3 years from the date of the request
-for managing cookies on the site: 13 months maximum
Processed data
The data controller processes the following categories of data:
-Identification data (surname, first name, address, e-mail, telephone, etc.)
-Data relating to product(s) ordered, returns, retractions, etc
-Connection data (IP addresses, terminal type, browser, logs, identifiers)
-Location data – zip code and address – (for online reservations and point-of-sale search on the “Boutiques” page)
-Financial information (bank details for orders)
Whether data collection is mandatory or optional
The data collected is mandatory for the purposes of processing, except in the following cases:
-Location data
-Certain connection data (collected via tracers)
Data sources
The data is transmitted directly by the person concerned either to ETABLISSEMENTS RICHARD PONTVERT ET COMPAGNIE or to CAPUCE (for online orders delivered in France or Belgium).
For orders delivered outside France and Belgium, data is collected directly by our partner Global-e, who transmits part of it to us (with the exception of payment information) to ensure the follow-up of your order and after-sales service.
Data recipients
Depending on their respective needs, the following recipients may receive all or part of the data:
1/ the co-treatment manager
2/ Our subcontractors :
-people in charge of technical services (hosting provider, maintenance, site security)
-online payment service providers (PayPal, American Express, Sofort rt Bancontact, etc.)
-the logistician
-carriers
3/ Global-e Online Ltd and its subsidiaries, which collects your data and transmits it to us (excluding payment information) for orders with delivery addresses outside France and Belgium (see dedicated section below)
Orders delivered outside France and Belgium – Data collection and sharing with Global-e
- Context
When you place an order on our site with a delivery address outside France and Belgium, you are automatically redirected to the payment interface of our partner Global-e Online Ltd (“Global-e”), a company specializing in the management of international e-commerce sales. Global-e acts as the Merchant of Record for this transaction.
- Global-e’s role :
As a registered dealer, Global-e :
– Collects your personal data directly via its payment interface
– Receives payment for your order
– Handles customs formalities and applicable taxes
– Processes refunds in the event of return
- Legal status: Global-e acts as an independent data controller for the data it collects.
Global-e is neither a subcontractor of R or C, nor a joint data controller with these companies. ETABLISSEMENTS RICHARD PONTVERT ET COMPAGNIE and CAPUCE on the one hand, and Global-e on the other, are distinct and independent data processors.
- Data collected by Global-e
When you place an order, Global-e directly collects the following data:
– Your identification data (surname, first name, e-mail address, telephone number)
– Your delivery address
– Information about your order (products, quantities, amounts)
– Your payment information (card number, etc.)
– Where applicable, your identity number (ID card, passport) if required by the destination country for customs formalities
- Data shared with us by Global-e
Global-e sends us the following data to enable us to follow up your order and provide after-sales service:
– Your identification data (surname, first name, e-mail address, telephone number)
– Your delivery address
– Information about your order (products, quantities, amounts, status)
Your payment information is not transmitted to us by Global-e.
- Legal basis for processing by us
We receive and process the data transmitted by Global-e on the basis of the execution of the contract (follow-up and preparation of your order) and our legitimate interest (after-sales service, accounting management, improvement of our services).
- Purposes of processing by Global-e: As an independent data controller, Global-e uses your data in particular to:
– Fulfillment and delivery of your order
– Processing payments and refunds
– Customs and tax formalities
– Customer service and complaints management
– Fraud prevention and transaction security
– Improving services and statistical analysis
– Where appropriate, marketing communications (subject to your consent where required; you can unsubscribe at any time via the unsubscribe links or by contacting dataprotection@global-e.com)
- Data access for our teams
To ensure that your order is processed correctly, some of our staff have access to the Global-e portal:
– Our logistics service: order consultation, shipping label printing
– Our customer service: order modification or cancellation, returns management, transactional e-mails, invoice printing
– Our accounting department: tracking transactions for accounting reconciliation
- Data retention by us
Data relating to your order (excluding payment information) transmitted by Global-e is stored in our systems (ERP, CRM, CMS) and kept in accordance with the periods indicated in this policy (10 years for orders), in order to ensure the follow-up of your order, after-sales service and compliance with our legal obligations.
- International data transfers:
Global-e’s main servers are located in Ireland (European Union). However, in order to process your order, your data may be transferred to countries outside the European Union, in particular :
– Israel (Global-e headquarters) – country benefiting from an adequacy decision from the European Commission
– United States (Borderfree services, Global-e subsidiary) – transfers governed by the Data Privacy Framework and/or Standard Contractual Clauses
– Your order’s destination country (carriers, customs)
- Cookies
When you are redirected to the Global-e payment interface, the cookies used are those of Global-e and not those of Paraboot. To find out more about the cookies used by Global-e, please consult their cookie policy: https: //www.global-e.com/consumer-privacy-policy-fr
- Ordering information
When validating your order on the Global-e interface, you are informed that :
– Your purchase is made with Global-e as a registered merchant
– Your data will be processed in accordance with Global-e’s terms of sale and privacy policy
– Global-e shares your data (except payment information) with us
- Exercising your rights
For data processed by Global-e: you can exercise your rights directly with Global-e :
– By e-mail: dataprotection@global-e.com
– DPO Global-e: dpo@global-e.com
– Online privacy center: https: //global-e.privacy.saymine.io/Global-e
– Global-e EU representative (art. 27 RGPD): Rickert Rechtsanwaltsgesellschaft mbH, Colmantstraße 15, 53225 Bonn – art-27-rep-globale@rickert.law
- Find out more
We invite you to consult Global-e’s complete privacy policy for detailed information on their practices: https: //www.global-e.com/consumer-privacy-policy-fr
What safety measures are in place?
The data controller implements appropriate technical and organizational measures to guarantee a level of security appropriate to the risk.
The controller shall take steps to ensure that any natural person acting under the authority of the controller or the processor, who has access to personal data, does not process them unless instructed to do so by the controller, unless obliged to do so.
Whether or not data is transferred to a country outside the European Union, and associated guarantees
For orders delivered in France and Belgium, the co-controllers do not transfer any personal data outside the European Union.
For orders delivered outside France and Belgium, your data is collected by our partner Global-e and may be transferred to countries outside the European Union (including Israel and the United States). These transfers are framed by appropriate guarantees in accordance with the RGPD: Standard Contractual Clauses (SCC), adequacy decisions by the European Commission, or certification to the Data Privacy Framework. For more details, please see the “Orders delivered outside France and Belgium” section below, as well as Global-e’s privacy policy.
Automated decision-making
The processing does not involve fully automated decision-making.
For orders delivered outside France and Belgium, please refer to Global-e’s privacy policy.
Geolocation
If you use the online booking system from a computer and authorize access to your location, your browser gathers information on nearby wireless access points and your computer’s IP address and sends it to the default geolocation service provider.
For Firefox, this provider is Google Location Services. This submission is used to obtain an estimate of your location. This estimated location is then shared with ETABLISSEMENTS RICHARD PONVERT ET COMPAGNIE.
By default, Firefox determines your location by sending :
– your computer’s IP address,
– information on nearby wireless access points, and
– a random customer ID, assigned by Google, which expires after two weeks.
For more information: https: //support.mozilla.org/fr/kb/firefox-partage-t-il-ma-position-avec-sites-web?redirectslug=does-firefox-share-my-location-web-sites&redirectlocale=en-US
Google Location Services then returns a geolocation estimate. For a complete description of the information collected and used by Google, please consult Google’s geolocation privacy policy.
Information is exchanged via an encrypted connection to protect your privacy. When Firefox has your location information, it transmits it to the ETABLISSEMENTS RICHARD PONVERT ET COMPAGNIE company that requested it. At no time is the name, site address or cookies shared with Google Location Services. For a complete description of the information collected and used by Firefox, please consult your browser’s privacy policy.
If you use our services on a mobile device, it will send us data about your geographical location according to the settings you have defined on your phone. We will ask for your consent before using GPS or other tools to identify your exact location.
Cookies and other tracers used on the site
A cookie is a tracker. When an Internet user browses a website, it collects personal information about him or her.
When you use your computer, cookies are managed by your Internet browser (Internet Explorer, Firefox, Safari or Google Chrome).
Some cookies are internal to the website, while others are third-party cookies placed on the site by third-party companies.
The third-party trackers we use on the website are the following:
–Google Analytics(seehttps://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gtagjs_and_analyticsjs_-_cookie_usage)
=> Statistical processing cookies: _ga; _gat; _gid; collect
These cookies generate data that enables us to compile general statistics on how visitors use our website. We use the services of Google Analytics from Google Inc.
–Addthis (seehttps://www.oracle.com/legal/privacy/addthis-privacy-policy.html#publisher-visitors)
=> Statistical processing cookies: __atuvc; __atuvs; loc; uvc
These cookies generate data that enables us to compile specific statistics on the sharing of our website content with social networks.we use the services of Addthis.
–Youtube
=> Preference cookie: yt-player-bandwidth
These cookies generally enable a website to analyze information that modifies the way the site behaves or displays. The one we use is used to determine optimal video quality based on the visitor’s device and network settings.
=> Marketing cookies : GPS ; IDE ; NID ; PREF ; r/collect ; rc::a ; rc::b ; test_cookie ; VISITOR_INFO1_LIVE ; YSC ; yt.innertube::nextld ; yt.innertube::requests ; yt-player-headers-readable ; yt-player-two-stage-token ; yt-remote-cast-installed ; yt-remote-connected-devices ; yt-remote-devices-id ; yt-remote-fast-check-period ; yt-remote-session-app ; yt-remote-session-name.
These cookies are mainly used to keep statistics on :
-how the visitor uses videos on the Youtube service via our website
-user bandwidth on pages with embedded Youtube videos
-the user’s video playback preferences for Youtube videos embedded on the website
Further information
Learn more aboutAnalytics cookies and privacy
Google: https: //www.google.com/policies/technologies/cookies/
We use cookies that require the user’s consent.
Consent is obtained when a Cookie banner appears on the website.
Unless the Internet user has been informed and has given his express consent, cookies are not deposited or read on his terminal.
Consent is requested for each type of cookie (by purpose).
The list of third-party cookies is given at the time of consent.
The user has the option of postponing his choice and deciding at a later date. Until consent is given, no cookies are deposited.
The user has the option of refusing the deposit of these cookies.
Consent can be withdrawn at any time, just as easily as it was given.
Cookies have a maximum lifetime of 13 months. At the end of this period, consent is requested again.
Internet users are informed that they may also deactivate cookies by configuring their Internet browser:
If you wish to delete the cookies stored on your terminal and set your browser to refuse cookies, you can do so via your browser preferences.
These navigation options relating to cookies are usually found in the browser’s “Options”, “Preferences” or “Tools” menus.
To find out more about the rules applicable to cookies, please consult the following links:
https://www.cnil.fr/fr/cookies-et-autres-traceurs-la-cnil-publie-de-nouvelles-lignes-directrices
https://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000038783337
Fate of personal data after death – Right of access, rectification, deletion and portability of data
The person concerned by a processing operation can define directives concerning the conservation, deletion and communication of his or her personal data after his or her death. These directives may be general or specific.
Data subjects also have the right to access, object to, rectify, delete and, under certain conditions, port their personal data. The data subject has the right to withdraw consent at any time if consent is the legal basis for processing.
The request must indicate the first and last name, e-mail or postal address of the person concerned, and must be signed and accompanied by valid proof of identity.
To exercise these rights, please contact :
Eric Forestier – General Manager
65 rue des Tuiliers 38430 Jean de Moirans
Tel: +33 4 76 93 88 00.
Mail: contact@paraboot.com
Claim
The person concerned by a processing operation has the right to lodge a complaint with the supervisory authority (CNIL): https: //www.cnil.fr/fr/webform/adresser-une-plainte
