Privacy policy
1. Data controller
The following information is provided to you so that you can familiarize yourself with the personal data protection commitments of RED LUXURY, whose registered office is located at 4 rue d'Astorg – 75008 Paris, which acts as the data controller for the processing of personal data referred to in this document, hereinafter referred to as “the Data Controller” or “we.”
2. The personnal data we process
In the context of personal data processing, the Data Controller collects and processes the following data: title, surname, first name(s), date of birth, email address, telephone number, billing address, delivery address, company, password.
3. The purposes and legal bases of our data processing
3.1 The purposes of our processing
The processing we carry out is for the following purposes:
- Website content management;
- Order management;
- Marketing communication/communication with customers and prospects management;
- Customer journey tracking;
- Monitoring customer relations and customer complaints;
- Audience analysis;
- Managing requests from the contact form;
- Statistics and reporting.
3.2 Legal basis for our processing activities
We only process data if at least one of the following conditions is met:
- we have obtained your consent to the processing operations;
- our legitimate interest, or that of a third party, justifies our processing of the personal data concerned;
- the performance of a contract between us and you requires us to process the personal data concerned;
- we are bound by legal and regulatory obligations that require the processing of the personal data concerned.
3.3 Legitimate interests pursued
The legitimate interests pursued by the Data Controller may include ensuring the continuity of its business, improving the consumer experience, building consumer loyalty, and understanding consumer expectations.
4. Those who receive your data
The personal data we collect, as well as any data collected subsequently, is intended for us in our capacity as Data Controller.
We ensure that only authorized persons have access to this data. Our subcontractors/service providers may receive this data in order to perform the services we entrust to them.
Your personal data may be reconciled, pooled, or shared between all parent companies, sister companies, and subsidiaries of the Data Controller.
It may be communicated to these entities for the purposes set out in this information notice. These operations are carried out on the basis of instruments that comply with applicable regulations and are designed to ensure the protection and respect of your rights.
5. Transfers of your data
We transfer your personal data to partners located in the United States. Each of these transfers is governed by legal instruments that comply with the applicable legal framework.
6. How long we keep your data
The retention periods we apply to your personal data are proportionate to the purposes for which it was collected. Consequently, we organize our data retention policy as follows:
| Purpose of processing | Retention period |
|---|---|
| Prospecting | Three years from the last contact from you or, where applicable, from the end of the commercial relationship plus the duration of the legal limitations period. |
| Customer | In the context of contracts entered into, data is retained for the entire duration of the commercial relationship plus the duration of the legal requirements. |
| Cookies | Thirteen months from the date of installation on your device. |
| Contracts worth more than €120 for accounting purposes | 10 years from the date of conclusion of the contract. |
| In the event of the exercise of rights of access, rectification, erasure, or restriction, data relating to identity documents and information enabling these rights to be taken into account | 1 year from receipt of the request |
| In the event of the exercise of the right to object, data relating to identity documents and information enabling this right to object to be taken into account | 6 years from receipt of the request |
7. Your rights
7.1 How to exercise your rights
You can exercise your rights by email at the following address: contact@maisonmontignac.com or by mail at the following address: 4 rue d'Astorg – 75008 Paris.
To do so, you must clearly indicate your surname(s) and first name(s), and the address to which you would like the response to be sent.
In principle, you can exercise all of your rights free of charge. However, with regard to the right of access, you may be asked to pay reasonable fees based on the administrative costs of providing any copies of the data you request.
With regard to the right to information, the Data Controller will not be obliged to comply with your request if you already have the information you are requesting.
The Data Controller will inform you if it is unable to comply with your requests.
These rights are not absolute and are subject to various conditions under:
- applicable local data protection or privacy laws;
- and the laws and regulations applicable to you.
The Data Controller wishes to inform you that failure to provide or modification of your data may have consequences for the processing of certain requests in the context of the performance of contractual relationships and that your request to exercise your rights will be kept for follow-up purposes for 6 years with regard to the exercise of the right to object and 1 year with regard to the exercise of other rights.
All of your rights are detailed below.
7.2 Your right to information
You acknowledge that this information notice informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared, and the possibility of data transfer to a third country or international organization.
In addition to this information, and in order to ensure fair and transparent processing of your data, you declare that you have received additional information concerning:
- the retention period for your personal data;
- the existence of your rights and how to exercise them.
If we decide to process data for purposes other than those indicated, all information relating to these new purposes will be communicated to you.
7.3 Your right to access and rectify your data
By exercising this right, you will receive confirmation as to whether or not your personal data is being processed and, if so, you will have access to your data and information concerning:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients, in particular recipients who are established in third countries;
where possible, the envisaged period for which the personal data will be stored or, where that is not possible, the criteria used to determine that period; - the existence of the right to request the Data Controller to rectify or erase your personal data, the right to request a restriction on the processing of your personal data, the right to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- information about the source of the data when it is not collected directly from the data subjects;
- the existence of automated decision-making, including profiling, and in the latter case, useful information concerning the underlying logic, as well as the significance and expected consequences of this processing for the individuals concerned.
You may ask us to have your personal data corrected or completed if it is inaccurate, incomplete, or outdated.
7.4 Your right to erasure of your data
You may request that we erase your personal data when one of the following grounds applies:
- the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
- you withdraw your previously given consent;
- you object to the processing of your personal data when there is no legal basis for such processing;
- the processing of personal data does not comply with the provisions of applicable laws and regulations;
- your personal data was collected when you were a minor.
However, you cannot exercise this right when the storage of your personal data is necessary in accordance with legislation or regulations, particularly for example for the establishment, exercise, or defense of legal claims.
7.5 Your right to restrict data processing
You may request that the processing of your personal data be restricted in the cases provided for by law and regulations.
7.6 Your right to object to data processing (unsubscribe)
You have the right to object to the processing of your personal data when the processing is based on the legitimate interest of the Data Controller.
In the case of direct communication, this right can be exercised by any means, including by clicking on the unsubscribe links at the bottom of the communications sent.
7.7 Your right to data portability
You have the right to data portability.
The data to which this right applies are:
- only your personal data, which excludes anonymized personal data or data that does not concern you;
- declarative personal data and operational personal data;
- personal data that does not infringe on the rights and freedoms of third parties, such as data protected by trade secrets.
This right is limited to processing based on consent or a contract, as well as personal data that you have personally generated.
This right does not include derived data or inferred data, which is personal data created by the Data Controller.
7.8 Your right to withdraw your consent
When the data processing we carry out is based on your consent, you may withdraw it at any time. We will then stop processing your personal data without affecting the previous operations for which you had given your consent.
7.9 Your right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority, without prejudice to any other administrative or judicial remedy.
7.10 Your right to define post-mortem guidelines
You have the option of defining guidelines for the storage, erasure, and communication of your personal data after your death with a trusted, certified third party who is responsible for enforcing the wishes of the deceased, in accordance with the requirements of the applicable legal framework.
