PRIVACY POLICY
HINAHYA BIJOUX, a company registered with the Paris Trade and Companies Register under siren number 478329220, RCS number: Pontoise A 478329220 (hereinafter "HINAHYA BIJOUX"), undertakes to comply with current legislation in France (Law No. 78-17 of January 6, 1978 "Data Protection Act") and in Europe (Regulation 2016/679 of April 27, 2016 "GDPR"), to ensure the protection, confidentiality, and security of personal data, and to respect the privacy of its customers and all visitors to its platform.
This Privacy Policy (hereinafter "the Policy") describes how HINAHYA BIJOUX collects and processes Personal Data of individuals browsing its website or placing an order with it.
The Policy also specifies the legal bases on which HINAHYA BIJOUX relies to process Personal Data and to set retention periods.
In any event, HINAHYA BIJOUX undertakes to respect the following principles:
• Your data is used only for explicit, legitimate, and determined purposes related to the various functionalities offered on the Site, particularly for ordering products referenced therein.
• Only the Personal Data necessary for these purposes is collected and processed by HINAHYA BIJOUX.
• You are informed clearly and transparently about the purpose of using your collected Personal Data and about your data protection rights.
Article 1: Definitions
• "Client": Refers to any person placing an order for products through the Site.
• "Cookies": Refers to trackers allowing access to information stored in the Site Visitor's terminal equipment.
• "Order": Refers to any order placed by the Client through the Site.
• "Recipient": Refers to the natural or legal person receiving the communication of Personal Data, whether or not they are a third party.
• "Personal Data": Any information relating to an identified or identifiable natural person directly (by name or surname, for example) or indirectly (in particular by reference to an identifier such as a number, location data, an online identifier, etc.).
• "Data Subject" / "You": The identified or identifiable natural person whose Personal Data is processed by HINAHYA BIJOUX as a website Visitor or Client.
• "Controller": The natural or legal person who determines the purposes and means of the processing of Personal Data. Here, HINAHYA BIJOUX acts as the Controller.
• "Site": Refers to the website published by HINAHYA BIJOUX, accessible at the following URL: https://www.hinahyabijoux.com.
• "Processor": The natural or legal person who processes Personal Data on behalf of the Controller.
• "Processing": Any operation performed on Personal Data (collection, recording, storage, modification, transmission, erasure, etc.).
• "Third Party": Any authorized natural or legal person, public authority, service, or body other than the Data Subject, the Controller, or the Processor.
• "Visitor": Any person browsing the Site, whether a client of HINAHYA BIJOUX or not.
Article 2: When is your data collected?
Your Personal Data may be collected in the following situations:
• During visits and navigation on the Site.
• When creating a personal account on the Site.
• When placing an Order (product purchase).
• During exchanges related to product delivery.
• During contacts with after-sales service.
• When subscribing to the newsletter.
• During any exchange between you and HINAHYA BIJOUX.
Article 3: For what purposes is your data processed?
The Processing of your Personal Data carried out by HINAHYA BIJOUX aims to:
• Manage prospects.
• Send newsletters.
• Create a personal account on the Site.
• Place and manage an order.
• Process order payment.
• Deliver the order.
• Monitor the contractual relationship with customers.
• Provide after-sales service.
• Monitor statistics and audience measurement on the Site.
• Improve navigation on the Site.
Article 4: On what legal bases is your data collected? How long is it retained?
Purposes
Collected Data
Legal Basis
Retention Period
Prospect management, development and management of communication and prospecting operations (newsletter)
Contact details (name, first name, email address)
Consent
Up to 3 years from the last contact with the data subject
Product order & delivery management
Identification data and contact details (name, first name, email address, postal address, phone number)
Contract
Duration linked to the contract (if a contract is concluded), and during applicable limitation periods
Remote payment by credit card
Card number, expiry date
Contract
Until full payment, plus the withdrawal period for product sales
After-sales service
Contact details and billing data
Legal obligations
Duration linked to the contract (if a contract is concluded), and during applicable limitation periods
Interaction analysis (Audience measurement)
Content, establishments, pages viewed
Consent
6 months
Regarding retention periods, it is understood that HINAHYA BIJOUX retains your Personal Data only for the time necessary to fulfill the purposes for which it was collected, including to meet any legal or accounting requirements.
Article 5: Who are the recipients of your data?
Your personal data may be processed by the following individuals: • Authorized members of the HINAHYA BIJOUX team;
• Providers authorized by HINAHYA BIJOUX to deliver products;
• Suppliers of IT systems and business support for HINAHYA BIJOUX (e.g., IT, hosting and maintenance provider, secure payment solution provider).
Your Data will not be communicated to other persons without your consent.
The third parties with whom HINAHYA BIJOUX shares your Data are limited (by law and by contract) in their ability to use your Personal Data for the specific purposes that HINAHYA BIJOUX has identified.
In any event, HINAHYA BIJOUX makes its best efforts to ensure that the recipients of your Personal Data are subject to confidentiality and security obligations in accordance with this Privacy Policy, applicable laws, and particularly the GDPR and the Data Protection Act in its latest version.
Finally, you are informed that HINAHYA BIJOUX may share your Personal Data to comply with legal obligations (for example, data transmission to administrations).
Article 6: Is your data transferred outside the European Union?
In principle, all your Data is stored within the European Union and is not transferred outside this territory.
However, if the processing of your Personal Data involved a transfer outside the European Union, these transfers would be carried out against appropriate guarantees of security and confidentiality in compliance with applicable regulations (in particular standard contractual clauses, in accordance with the models of clauses validated by the European Commission).
Article 7: What are your rights?
As a Data Subject whose Personal Data is processed, you have various rights.
However, these are not absolute and are subject to certain conditions, in accordance with the GDPR and other applicable current texts, including Law No. 78-17 of January 6, 1978, known as the "Data Protection Act".
7.1 The right of access
You have the right to obtain confirmation from HINAHYA BIJOUX as to whether or not your Personal Data is being processed by HINAHYA BIJOUX, as well as information on how it is processed.
You also have the right to obtain a copy of the Personal Data concerning you processed by HINAHYA BIJOUX.
7.2 The right to rectification
You can ask HINAHYA BIJOUX to take steps to correct your Personal Data if it is inaccurate or incomplete.
For example, if HINAHYA BIJOUX holds the wrong name or address for the delivery of the Products covered by your Order.
7.3 The right to erasure ("right to be forgotten")
You can request the erasure or deletion of your Personal Data.
For example, when there is no (or no longer any) compelling reason for HINAHYA BIJOUX to continue using it.
7.4 The right to restrict processing
You have the right to request the restriction of Personal Data Processing or to prevent the further use of your Personal Data.
7.5 The right to data portability
You have the right to retrieve and reuse certain Personal Data concerning you.
This right applies only to Personal Data that you have provided to HINAHYA BIJOUX, that the latter processes with your consent, for the purposes of contract execution, and processed by automated means.
Where applicable, HINAHYA BIJOUX will provide you with a copy of your Personal Data in a structured, commonly used, and machine-readable format (where technically possible).
HINAHYA BIJOUX may also, if you wish, transmit (as far as possible) this type of Personal Data directly to another data controller.
7.6 The right to object
You have the right to object to certain types of processing, for reasons relating to your particular situation, at any time, insofar as this processing has taken place for the purposes of legitimate interests pursued by HINAHYA BIJOUX.
In any event, HINAHYA BIJOUX will be authorized to continue processing your Personal Data if it is able to demonstrate that the Personal Data Processing is justified by freedoms or if this Personal Data is necessary for the establishment, exercise, or defense in legal actions.
7.7 The right to withdraw your consent
When HINAHYA BIJOUX processes your Personal Data on the legal basis of your consent, you have the option to withdraw your consent at any time.
However, you are hereby informed that the withdrawal in no way affects the lawfulness of the processing that took place before the exercise of this right of withdrawal.
7.8 The right to provide us with instructions on the use of your personal data after your death
You have the right to provide HINAHYA BIJOUX with instructions on the management (e.g., retention, erasure, and disclosure) of your Personal Data after your death.
You can modify or revoke your instructions at any time.
7.9 Right to lodge a complaint with the CNIL
In the event that you are not satisfied with HINAHYA BIJOUX's response to your complaint or if you believe that the Processing of your Personal Data is not compliant with the applicable regulations on personal data protection, you can lodge a complaint with the competent data protection supervisory authority.
The Commission Informatique et Libertés (CNIL) is the data protection authority in France.
Here is the updated version with HINAHYA BIJOUX:
Article 8: How can you exercise your rights?
If you wish to exercise any of your rights, you can contact us at the following email address: contact@hinahyabijoux.com.
To learn more about your rights, you can visit the CNIL website (www.cnil.fr/fr/comprendre-vos-droits).
When requesting to exercise rights, an identity document may be requested if necessary, particularly to preserve the security of the processing subject to the request.
A response will be sent to you, depending on the complexity of your request, within the deadlines prescribed by Article 12.3 of the GDPR.
Article 9: How is your personal data protected?
HINAHYA BIJOUX ensures that Personal Data is processed securely and confidentially, including when certain operations are carried out by Processors.
To this end, HINAHYA BIJOUX implements appropriate technical and organizational measures to prevent the loss, misuse, alteration, and deletion of your Personal Data.
These measures are adapted according to the level of sensitivity of the Personal Data processed and the level of risk presented by the Processing of this data or its implementation.
If a security breach concerning your Personal Data occurs, HINAHYA BIJOUX will inform you within the deadlines and according to the procedures specified by the legal and regulatory provisions in force.
Article 10: Can this Policy be modified?
HINAHYA BIJOUX reserves the right to modify this Privacy Policy.
• If the modifications are formal changes, the new policy will apply immediately.
• If the modifications or updates are substantial (for example, the insertion of a new purpose), communication will be made to the Data Subjects.
• If renewed consent collection were necessary, HINAHYA BIJOUX would obviously proceed with a new consent collection.