PERSONAL DATA PROTECTION CHARTER

In accordance with European Regulation 2016/679 of April 27, 2016
(known as the "General Data Protection Regulation" or GDPR)

This personal data protection charter (hereinafter: the "Charter") describes the commitment of the Site Cherie-SHERIFF - 5 côte de Cazajus, Versant du Moulin, 31290 Montclar-Lauragais, edited by Céline Duralek as the data controller with regard to respect for privacy and the protection of personal data of its users. This Charter has been drafted to allow you to learn about the practices and conditions under which Chérie-SHERIFF collects, uses, and stores your personal data (hereinafter: the "Data").

 You will find the description of the different Data that we may collect and process or that you may transmit to us when you access and/or use the site https://www.cherie-sheriff.com (the "Site") where our products are sold. The term "Site" refers only to the site https://www.cherie-sheriff.com. 

Given the constant evolution of laws and regulations regarding technology and the protection of personal data, it is likely that this Charter will be updated. If you are a user of the Site, you will be informed of any changes by email.  

If any of the clauses of this Charter were to be declared null and void or contrary to regulations, it will be deemed unwritten but will not result in the nullity of the other clauses of this Charter. 

This Charter applies to Data collected: 

• •Via simple navigation on the Site
• •Via emails exchanged between Chérie-SHERIFF and you or any other electronic messaging tool
• •When you create a user account on the Site
• •When you place an order on the Site
• •When you subscribe to the Site's Newsletter (the "Newsletter") 

It does not apply to information collected by any third parties or through sites managed by them, including through applications or content (including advertisements) redirecting the user to the Site. We thank you for carefully reading the Charter regarding the processing of your Data and we inform you that browsing our Site necessarily entails acceptance of this Charter. If this Charter does not obtain your approval, we invite you to leave our Site. It is your responsibility to ensure that the Data communicated to Chérie-SHERIFF is accurate. If necessary, you have the possibility to correct and update them from your "My Account" space.

1. WHAT DATA IS COLLECTED BY Chérie-SHERIFF?  

Depending on the nature and purpose of your interaction with Chérie-SHERIFF (creation of a user account, subscription to the Newsletter, completion of contact forms, as well as during any telephone exchanges), we may collect the following Data:

• •Your email address will necessarily be requested if you wish to create a user account, communicate with us via the contact forms, and/or receive our Newsletter
• •Data relating to your identity such as your name, first names, email address, postal addresses, and telephone numbers may be requested
• •Data relating to navigation: this includes Data relating to how you use the Site, including: IP address, browser used, navigation duration, search history, operating system used, language, and pages viewed
• •Data concerning your visits to the Site, including traffic data, log files, and other communication data or resources that you use when accessing the Site
• •Data relating to orders: your postal address is necessary for invoicing. Similarly, your bank details, PayPal, or other financial partner must be provided to proceed with the payment of your order
• •Data relating to the use of social networks when you use their features.  

2. HOW IS YOUR DATA COLLECTED? 

Data can be collected in different ways on the Site. Data can be collected directly when you transfer them to us through contact forms, user account creation, Newsletter subscription available on the Site, and/or communicated when you contact us by phone. When you contact us through these different means, a copy of your exchanges with Chérie-SHERIFF, including email addresses, may be made and archived. Chérie-SHERIFF also indirectly collects certain Data through cookies/trackers. We invite you to read our Cookie Charter, intended to help you better understand these technologies and how we use them on the Site and as part of our services, applications, and tools. 

3. WHY IS YOUR DATA COLLECTED? 

If you are a simple user, we collect your Data to: 

- Send you our Newsletter and/or personalized commercial offers if you have consented 

- Manage orders and execute the contract 

- Ensure the security and traceability of purchases on the site

- Transmit information concerning your account (including purchase invoices, order history)

- Manage your requests sent via the contact page

- Allow you to leave a review on the products and/or the Site

- Inform you of changes concerning the Site or our offer of products and services

- Comply with our rights and obligations stipulated in the contracts concluded with users as well as for any other legal purpose.  

We may also use cookies or trackers:

- To secure your navigation and improve your user experience, notably by recognizing the username and password you have already provided so that you do not have to enter them on each page of the Site where they are required. Refusal of these will prevent any order on the Site (Impossible Identification).

- Analyze traffic and data on the Site to measure the number of users of the Site, make it easier to use, and ensure its ability to respond quickly to your requests. 

Failure to correctly fill out the form(s) on the Site may block access to certain pages, notably those concerning the ordering of products or services.  

4. WHO PROCESSES YOUR DATA? 

Your Data is processed by the staff and collaborators of Chérie-SHERIFF in charge of:

 - Site management (Orders and shipments)

 - Support management, to answer all your questions 

 - Billing management.  

Furthermore, as part of our activity and for processing purposes, your Data may be communicated to subcontractors, service providers, or other third parties, and in particular: 

- PayPal 

- Bank Caisse d'épargne 

- Mailchimp

- Carriers (La Poste, Colissimo, ...) 

- Accounting services 

- Tax services 

- Google Analytics

Each of these actors respects a commitment to confidentiality regarding the use and processing of personal data.

For payment management and to facilitate the experience of its users, Chérie-SHERIFF offers the following payment methods to proceed with purchases on the Site: 

- Online payment by bank card (Carte Bleue, Visa Card, Eurocard/Mastercard) managed by Caisse d'épargne 

- Online payment by PayPal 

Chérie-SHERIFF has no access to your bank card identifiers and numbers. All transactions are secured using SSL encryption, guaranteeing both the identity of the payment organization and the confidentiality of the data. 

For sending our Newsletters, our emailing campaigns are managed through the services of Mailchimp.

All subcontractors, service providers, partners, or other third parties mentioned above are bound by contractual obligations to respect the confidentiality and protection of Data and to process them only for the purposes for which we transmit them to them. 

Your Data may be transmitted to any buyer or other successor in the event of a merger, assignment, restructuring, reorganization, dissolution, or other sale or transfer of part or all of the assets of Chérie-SHERIFF due to uncertainties or bankruptcy, liquidation, or other processes in which the Data of Chérie-SHERIFF users are among the transferred assets. 

Finally, we are also likely to disclose your Data: 

- To comply with any mandate required by current laws, including government and regulatory requests 

- If we believe that disclosure is necessary or required to protect the rights, property, or safety of Chérie-SHERIFF, its customers, or other stakeholders. 

This potential disclosure includes the exchange of information with other companies and organizations for the purpose of protection against fraud and counterfeiting.  

The Site may contain links to different sites and social network platforms managed on third-party servers by persons or organizations over which Chérie-SHERIFF has no control. As a result, we cannot in any way be held responsible for how your Data will be stored or used on the servers of these third parties. We advise you to read the applicable charter on the protection of personal data of each third-party website to which you will have access via the Site in order to appreciate how your Data will be used. 

 5. HOW LONG IS YOUR DATA RETAINED?  

Chérie-SHERIFF retains your Data only for the duration necessary for the purposes set out in Article 3. This retention period is not the same depending on the Data in question, the nature and purpose of the collection being likely to vary this period. Similarly, certain legal obligations impose a specific retention period. 

When you are subscribed to the Newsletter, we retain your email address until you unsubscribe. 

When you contact Chérie-SHERIFF using the contact form or communicate with us by phone, your data may be retained:

- Up to one (1) year from the last contact if you do not have a customer account or order placed on the Site. 

- Up to ten (10) years (legal duration) from the last order placed on the Site, if this information concerns this order. 

- In all other cases, the retention period of these exchanged Data shall not exceed one (1) year.

Regarding your user account, all your billing data are retained for ten (10) years from the date of purchase, even if you have made a request to deactivate your user account. 

If you make a request to delete personal Data, your user account on the Site will be deactivated and anonymized, then completely deleted at the end of the aforementioned periods from the day you made the request. Finally, regarding the Data collected through cookies or trackers, they will be retained for up to six (6) months for cookies or trackers measuring audience and up to thirteen (13) months for others. Beyond the aforementioned retention periods, your Data will be anonymized to be retained for exclusively statistical purposes.  

6. HOW IS YOUR DATA PROTECTED? 

Your Data is stored on a secure server protected by a firewall and antivirus. We have implemented technical and organizational measures designed to ensure the security and confidentiality of your Data against any accidental loss and against any unauthorized access, use, modification, and disclosure. Given the inherent characteristics of the Internet, it is however impossible for us to guarantee the optimal security of information exchanges on this network. We strive to protect your Data, but we cannot guarantee the absolute security of the information transmitted to the Site. You agree that you transmit your Data at your own risk. We cannot be held responsible for non-compliance with the privacy settings or security measures in place on the Site.  In this regard, you agree that the security of your information is also your responsibility. For example, it is your responsibility to keep secret the password that allows you to access your user account. Do not disclose it to third parties under any circumstances. Similarly, be vigilant when disclosing information in the public sections of the Site, as these can be viewed by any user of the Site.  

7. WHAT ARE YOUR RIGHTS? 

You can choose how the Data you transmit to us is used: 

- You can browse the Site without providing Data. In this case, you will not be able to use certain features of the Site and, in particular, make purchases (if you are a simple user) and/or downloads on the Site.  

- You can refuse to communicate your bank details or PayPal and/or your postal addresses.  In this case, you will not be able to make a purchase on the Site 

- You can decide to no longer receive the Newsletter as well as our personalized offers: you just need to log into your user account on the Site or click on the link present in the email sent to you. 

In any case, you have the possibility to access your user account at any time to consult or update your Data and unsubscribe from our Newsletter if you were subscribed. In accordance with the provisions of the applicable regulations regarding the protection of personal data, in particular the European regulation 2016/679 on the protection of Data (the "GDPR") as well as the law of January 6, 1978 No. 78-17 known as "Informatique et Libertés" and its amendments, you have a right of access and a right of rectification regarding your Data. 

Furthermore, subject to the conditions provided by said regulations for the exercise of these rights, you benefit from: 

- A right to the erasure of your Data (excluding accounting data whose retention for 10 years is required by French law - article L123-22 of the commercial code)

- A right to the limitation of the processing of your Data 

- A right to object to the processing of your Data for legitimate reasons, in accordance with article 21 of the GDPR 

- A right to portability regarding the Data you have provided (for automated processing based on consent or the execution of a contract) 

- The right to withdraw consent, when it has been requested from you. When the processing of your Data is carried out on the basis of your consent, you can withdraw it at any time. 

You acknowledge, however, that the processing carried out before the revocation of your consent remains perfectly valid. You also have a right to object without justification to Chérie-SHERIFF proceeding with an analysis of your Data to share it for marketing purposes.

However, in accordance with article 12.6 of the GDPR, for the exercise of these rights, Chérie-SHERIFF, as the controller of this processing, reserves the right to ask you to justify your identity. We inform you that the data allowing you to justify your identity will be deleted once we have responded to your request. You can exercise these rights by sending an email in French via our contact form or to the following address:  

Cherie SHERIFF - 5 côte de Cazajus, Versant du Moulin, 31290 Montclar-Lauragais

We have a period of one month to respond to any request relating to the exercise of your rights. This period may be extended by two months, due to the complexity or the large number of requests.  

8. STORAGE OF DATA COLLECTED BY Chérie-SHERIFF  

The Data collected as part of the use of the Site is stored exclusively on a server located in Europe (France), hosted by the company OVH - 2 rue Kellermann BP 80157 59053 ROUBAIX Email: support@ovh.com.