Dataskydd

NorthSheep verkar i flera länder i Europa, som ett resultat av detta tillämpar vi allmänna EU-regler för e-butiker.

 

Data protection

Personal data protection policy

When you browse our site, you are required to provide us with personal data. We thank you for your trust and would like to inform you here about the use of your data as well as your rights.

CNIL formalities

(With the RGPD, it is no longer necessary to carry out formalities with the CNIL, except for the health sector and for certain requests for opinions. It is up to you to check if your store is concerned.)

Purposes of data collection and processing

We collect the data you provide to us when you place an order or when you contact us. Mandatory fields are indicated as such.
The personal data collected on our site is used to process orders and manage the commercial relationship (deliveries, invoices, after-sales service).

Recipients of personal data and data transfer

The recipients of your personal data collected on our site are first and foremost ourselves for the processing of your orders and the management of the customer relationship.

To enable the execution of the contract between us, we transmit the data to our payment or payment security providers, our delivery providers, our business partners. The transmission of personal data to these service providers takes place only within the framework of the necessary performance of the contract.

(Please quote the name of each service provider and detail for each: - the contact details - the purpose of the data transfer, - what data is transmitted to it, - the location (EU / European Economic Area or outside) and therefore whether a transfer data takes place outside the EU or European Economic Area, if so what are the guarantees (decision of adequacy or appropriate guarantees internal company rules, standard contractual clauses or certification mechanisms, exemptions etc ...). Thus for example if the service provider service is based in the United States and is certified under the EU-US-Privacy Shield to mention it. Indeed, due to this agreement between the United States and the European Commission,the latter has found an adequate level of data protection for companies certified under the Privacy Shield).

Your rights

You have the right to obtain information about your personal data stored with us free of charge and to request, where appropriate, the correction, limitation of processing, portability of the data or their deletion.

As a person concerned by the processing of personal data you have the following rights: Under Article 15 of the GDPR, you have a right of access to personal data concerning you. Under article 16 of the GDPR, you have the right to rectify, as soon as possible, personal data that is inaccurate. You have the right to request that this data be completed.

Under article 17 of the GDPR, you have a right to erasure of personal data insofar as the processing is not necessary for - the exercise of the right to freedom of expression and information - compliance with a legal obligation - a reason of public interest - the establishment, exercise or defense of legal claims. Under Article 18 of the GDPR, you have a right to limit processing in cases where: - you dispute the accuracy of the data - the processing of the data is unlawful but you oppose its erasure - we no longer need your data but it is still necessary for you to establish, exercise or defend your legal rights. Under Article 21 of the GDPR, you have a right to object to data processing. Under Article 20 of the GDPR you have a right to receive your data in a structured, commonly used and machine-readable format (right to data portability),
Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. For any question relating to the collection, processing or use of your personal data, for any request for information, correction, blocking or deletion of data as well as for any withdrawal of the agreements given or any opposition to use particular data, please contact the following person (please provide name and contact details).

Commercial prospecting by email with newsletter subscription

We send you commercial prospecting by email on the legal basis of your express consent obtained when you subscribe to the newsletter or when you check the “receive the newsletter” box on the purchase summary page. If you no longer wish to receive commercial prospecting by e-mail, you can let us know at any time by one of the following means: Mention here the methods you actually offer, for example:

 

• click on the unsubscribe link in each email
• send an email to the contact form in in the customer area

 

After you unsubscribe, we delete your e-mail address, unless you have expressly consented to a further use of your data or if we reserve the right to a wider use of the data, authorized by law, and of which we you inform in this statement.

Registration of bank details

To improve your shopping experience, we suggest that you store your bank details so that you do not have to enter them for each new order. The legal basis for recording your bank details is your consent. Thus, your bank details (card number, expiration date, name of the holder) are only stored if you have given your prior consent to do so. We will never memorize the visual cryptogram located on the back of your bank card. Indicate by what means the user of the E-COMMERCE SITE can simply withdraw his consent relating to the storage of his bank details. For example: In any case, you can, at any time, let us know that you no longer want your bank details to be stored by sending a message through the contact form. Your bank details will then be deleted from our databases. Or :

All your cards registered with us are visible in the "my account" section, subject to SSL security. These cards can be deleted at any time.

Right to object

Insofar as we process personal data as explained above in order to safeguard our legitimate interests which prevail when balancing the respective interests of the parties, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right of objection for reasons which arise from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes, unless we can justify compelling legitimate reasons for this processing which outweigh your interests, rights and freedoms, or if the processing participates in the assertion, exercise or defense of legal rights.

This does not apply if the processing is carried out for direct marketing purposes. We will then no longer process your personal data for this purpose.