What is personal data?
“Personal data” means any piece of information that can be used to identify you, either directly (e.g. your name) or indirectly (e.g. when a pseudonym such as a unique identifier is used). Consequently, personal data includes information such as your street and email addresses, mobile phone number, usernames, profile photos, personal preferences and buying habits, user-generated content and financial data. Personal data can also include numbers that are unique to you, such as the IP address of your computer or the MAC address of your mobile device, and cookies.
Who is the data controller?
The controller of the personal data collected on this website is 1919 Bains de Mer SAS, a company registered on the Saint-Malo Trade and Companies Register under registration number 878 380 641, located at 16 rue des Rougeries, CS31809, 35418 Saint-Malo, with EU VAT number FR 68 878 380 641.
Why do we collect your personal data?
We may collect your personal data for one or more of the following purposes:
- To manage your access to certain services available on the website and enable you to use them;
- To carry out the processes involved in managing contracts, orders, deliveries, invoices, loyalty programmes and our relationships with our customers;
- To personalize information (newsletters, advertising and promotional messages, etc.) based on what we know about the way you use our website from the cookies we install. You are offered the option to refuse permission for this when we collect your personal data;
- To send you newsletters, advertising and promotional messages that we believe may interest you. If you do not wish to receive these, you can decline them when we collect your personal data;
- To provide efficient customer service (to communicate with customers, to manage newsletter sign-ups, to answer questions and to deal with complaints);
- To organize contests, prize draws and all promotional activities with the exception of online gambling for which approval is required from the French Regulatory Authority for Online Games (ARJEL);
- To create a database of registered members, users, customers and prospective customers;
- To prepare commercial and traffic statistics for the website;
- To manage debt collection and any disputes relating to the use of our products.
What personal data do we collect?
We may collect the following:
- Your identity and contact details (e.g. your name, email address, postal address, telephone number, etc.);
- Socio-demographic details (e.g. your age, profession, gender, etc.) that you share when you post a review or create an account on the website;
- Information about purchases you make on the website, the processing of these and the corresponding invoices (e.g. items chosen, delivery and billing addresses, value of the products, payment method, etc.);
- Any information that you share with our customer services department;
- Details from your Facebook and/or Instagram accounts (e.g. friends, contacts, etc.) if you decide to link them to your 1919 Bains de Mer SAS account on our website;
- Information about how you use the website, and in particular how you browse it (e.g. the pages you visit, the links you click, etc.). Some of this information may be collected via cookies when you browse the website.
When do we collect your personal data?
We may collect your personal data, either directly or indirectly through our service providers, for example when you:
- Browse our website;
- Create an account on our website;
- Use your account on our website;
- Log into your account on our website;
- Register for our newsletter;
- Place and pay for an order on our website;
- Post a customer review or a comment on our website or our social media channels;
- Engage with us via social media;
- Communicate with our customer services team or contact us to request information, regardless of the method of communication you use (e.g. telephone, post, contact form, etc.);
- Participate in a contest, promotional event or customer survey that we organize;
- Browse the internet or click on an advertisement for our products (in this case we collect the information via cookies or similar technology).
We only collect your personal data when it is strictly necessary and legal for us to do so. We undertake to limit the quantity of data we collect to the minimum required for the purposes set out in this policy.
Should we need to use your personal data for any purpose not covered by this policy, we will contact you to ask for your permission. There is no obligation to accept, but in some situations, we may be unable to meet your needs or requests if you refuse.
How do we use and manage cookies?
We collect and store certain information each time you view our website. We may record this information in files known as cookies, which serve to improve the user experience offered by the website.
Cookies are text files stored on your browser. They are often encrypted. They are created when your browser loads a given website: the website sends information to the browser, which creates a text file. Each time you return to this same website, the browser recovers the file and sends it to the website server.
There are two types of cookie:
- Technical cookies are used when you browse the website. They serve to facilitate and run some of its functions. A technical cookie can be used, for example, to memorize the answers you entered into a form or your user preferences, such as language version or website display settings, where such options are available.
- Advertising cookies can be created, not only by the website you are actually browsing but also by other websites that display advertisements, information, widgets or other elements on the page you are viewing. These cookies are often used to display targeted advertising, which is advertising tailored to be relevant to you based on your browsing history.
We use technical cookies. These cookies will be stored on your browser for a maximum of 13 months.
We may also use advertising cookies. You will be informed before they are used and will have the opportunity to deactivate them should you wish to do so.
We use Google Analytics, an audience analytics tool that generates a cookie that can measure the number of visits to the website, the number of pages viewed and website visitor activity. We may also collect your IP address to determine the town or city from which you log into our website.
Who are the recipients of your personal data?
Only our staff, the service providers responsible for monitoring our company (e.g. statutory auditors) and our subcontractors will have access to your personal data.
We may also communicate your personal data to the public authorities if, and only if, we are required to do so by a legal obligation, an officer of the court, a member of the legal professions or a debt collection agency.
How do we keep your personal data safe?
We take all necessary precautions and use all appropriate technical and organizational measures to protect the security, integrity and confidentiality of your personal data, and in particular to ensure that it is not corrupted, damaged or accessed by an unauthorized third party. We work only with trusted partners who undertake to implement these same precautions. These partners use your data only when we instruct them to do so, and in accordance with current legislation and regulations.
We never sell or disclose your data to third parties other than those mentioned above.
How long do we keep your personal data?
We do not hold your personal data for any longer than is necessary for the purposes for which we collected it:
- When you create an account: until you ask us to delete your account, or until it has been inactive for three years;
- When you place an order: for as long as we are in contact with you;
- When you participate in a contest or offer: for as long as the contest or promotional offer lasts;
- When you sign up for our newsletter: until you cancel your registration or ask us to delete your data, or until your account has been inactive for three years;
- When you request information: for as long as it takes to process your request;
- When you accept our cookies: for a maximum of 13 months from the date you give your consent;
- When we have a legal obligation to do so: for as long as the legal obligation lasts, or until the end of the limitation period for legal action.
How can you access your personal data?