PHYT’S PRODUCTION CHARTER FOR THE PROTECTION OF PERSONAL DATA
When you browse our site, you are likely to send us personal data, directly or indirectly. Your personal data is precious, it is part of your privacy. This is why we are committed to collecting, using and storing them in conditions that ensure their protection and confidentiality, in accordance with the laws in force.
We invite you to carefully read this Personal Data Protection Charter (hereinafter “the Charter”). There you will find all the information on the data we collect, how we use it, its retention periods, the means we implement to ensure their protection, the rights you enjoy, etc.
Our Personal Data Protection Charter may be updated or modified, depending on the evolution of our tools and regulations. We therefore invite you to consult it regularly.
I. WHAT DATA IS AFFECTED BY THE CHARTER?
This Personal Data Protection Charter applies to all personal data that you communicate to us, directly or indirectly, when browsing our site (hereinafter “phytsproduction.com”).
“Personal data” is information that directly or indirectly identifies a natural person. This is, for example, your name, your e-mail address, your telephone number, but also data relating to your consumption habits, your skin type, etc.
II. WHO IS THE DATA CONTROLLER?
The law defines the data controller as the company that determines the purposes and conditions for the collection and use of your data.
This is the company LABORATOIRES PHYT’S PRODUCTIONS with a capital of 401,000 euros, registered with the RCS under the number 493 447 395, whose registered office is located at La Bouygue 46140 Caillac, France.
III. WHAT IS THE LEGAL BASIS FOR OUR PROCESSING OF PERSONAL DATA?
The processing of personal data that we carry out as part of our activity may have several legal bases:
- Legitimate interest: we need to collect your personal data to get to know you better in order to provide you with personalized offers and services, ensure the security of our Site, improve our content, etc.
- The execution of a contract: the collection of your data is necessary when you subscribe to one of our online services (creation of an account in our loyalty program, participation in a promotional offer, etc.)
- Your consent: the law requires you to collect your consent to collect or use your data. This is the case, for example, when we collect data relating to your health or your ethnic origin in order to advise you on appropriate products (e.g. skin problems revealing a pathology, color of your skin, etc.), or when we would like to send you commercial solicitations (eg: information on our products, etc.) by e-mail or by SMS / MMS.
IV. WHY DO WE COLLECT YOUR PERSONAL DATA?
We collect your personal data only when necessary, for explicit, legitimate and specified purposes.
Thus, we collect and process your personal data, in particular for:
- provide you with information relating to your order (tracking, delivery, etc.)
- improve the operation and content of our Website and our services, in order to better meet your needs and requests;
- collect your opinion on our products and services;
- carry out audience analyzes and statistical studies, for example in order to know and measure the number of visits to our Site, the activity and path of Internet users on our Site, the subscription rate to our services, etc. ;
- carry out satisfaction surveys on our products and services;
- detect fraudulent behavior and manage disputes;
- ensure the security of our site and our services.
V. WHAT DATA IS COLLECTED, WHEN AND FOR HOW LONG IS IT KEPT?
We respect the principle of data minimization. That is to say that we only collect the data strictly necessary for the achievement of our purposes.
Data can be collected:
- either directly from you, for example when you complete our collection forms on our Site (eg: when placing your order);
- either indirectly or automatically, for example when you browse our Site.
In our collection forms, the fields marked with an asterisk are mandatory. Failure to respond will prevent or compromise the provision of the services concerned.
We define the retention period of your data according to the time necessary to achieve the objectives of the collection. When our objectives are achieved, we delete your data, except in certain cases where the law requires us to keep it. In these cases, your data is archived under the conditions provided for by law.
The table below tells you when your data is collected, what data is collected and how long it is kept:
| Time of collection | Categories of data collected | Shelf life |
| You browse our Site | We collect your technical connection and browsing data (e.g. your IP address, information about your browser, etc.) | 26 months from the date of collection |
| You create an account on our Site, you connect to your account, you complete your profile | We collect your identification data (e.g. surname, first name, postal address, email address, etc.) | 3 years from the date of creation of your account or of the last connection to your account |
| You give us your opinion on a product and/or service offered on our Site or on Laboratoires GAMARDE pages and accounts on social networks (Facebook, Instagram, etc.) | We collect the content of your review | 3 ans à compter de la date de votre avis |
| You contact our Consumer Service or our advisers by email, phone, chat, mail | We collect your identification data (e.g. name, first name, postal address, email address, etc.), the reason and content of the exchanges, as well as the responses to your requests, data relating to your health, if you decide or agree to communicate them to us, your browsing data in real time on our Site and the content of your messages in preview (not saved). | 3 years from each contact |
| You participate in a game / contest, a product test, a satisfaction survey | We collect your identification data (e.g. name, first name, postal address, email address, etc.), the content of your answers. | 3 years from the date of your participation |
| You write on our social media pages or in private messages | We collect the content of your messages (which may include data relating to your health or skin color) | 3 years from the date of your message |
| You declare a case of CosmetoVigilance | We collect your identification data (e.g. name, first name, postal address, email address, etc.), the reason and content of our exchanges, data relating to your health or skin color, if you decide or agree to communicate them to us banking or financial data (e.g. IBAN in case of reimbursement, etc.) | Duration provided by law |
VI. HOW DO WE COLLECT DATA FROM MINORS?
Our site is accessible to anyone, major or minor.
However, the additional consent of the holder of parental authority is required for minors under the age of fifteen who subscribe to our services or provide us with personal data concerning them.
VII. WHO ARE THE RECIPIENTS OF YOUR DATA?
We may need to transmit your data to the following companies or persons, who are involved in achieving the purposes described in IV above:
- Google, to measure the audience on our Site,
- administrative or judicial authorities at their request.
We choose subcontractors, service providers and suppliers who offer sufficient guarantees to ensure the protection, security and confidentiality of your personal data, in particular by implementing appropriate technical and organizational measures and meeting the requirements of the law. They are only allowed to process your data according to our instructions.
We do not sell or transfer your data to commercial companies other than those mentioned above.
VIII. HOW DO WE ENSURE THE SECURITY OF YOUR DATA?
LABORATOIRES PHYT’S PRODUCTIONS undertakes to implement reasonable means to ensure that your personal data is sufficiently protected, taking into account the sensitive nature of certain information collected. We use several technologies and procedures to protect your data from unauthorized access, use or disclosure. We require an equivalent level of security from our subcontractors.
For example, we or our subcontractors store your data on computer servers located in controlled places and to which access is limited. Unfortunately, the complete security of data transmission over the Internet cannot be guaranteed. Thus, we cannot fully guarantee the security of the data that you transmit to us by electronic means.
IX. WHERE DO WE STORE YOUR DATA?
Our company and our subcontractors process and store your data only in countries that are members of the European Union.
X. HOW CAN YOU EXERCISE YOUR RIGHTS?
In accordance with the laws in force, you benefit from:
- a right of access to data concerning you,
- a right to rectify your data,
- a right to erasure of data, for legitimate reasons,
- the right to oppose the processing of your data, for legitimate reasons,
- the right to withdraw your consent to the processing of your data,
- a right to restriction of processing,
- the right to data portability,
- the right to oppose commercial prospecting,
- the right to formulate directives concerning the storage, erasure and communication of your post-mortem personal data,
- the right to lodge a complaint with the CNIL
You can exercise these rights at any time at the following address: LABORATOIRES PHYT’S PRODUCTIONS – La Bouygue 46140 Caillac, France, or by sending us a message via our contact form.
XI. HOW TO CONTACT THE DPO?
LABORATOIRES PHYT’S PRODUCTIONS has appointed a Data Protection Officer (DPO) who can be contacted at the following coordinates: [email protected]
