PRIVACY POLICY

Privacy Statement Data Controller
Marion Buchenet - CMDV is under the micro-enterprise regime and is registered with the Nanterre Trade and Companies Register under number 832 525 547 and represented by Marion Buchenet as an individual entrepreneur and registered under the trade name CMDV.

Marion Buchenet - CMDV is the controller of the customer's personal data.
The customer can contact CMDV at any time via the contact details below:
Postal address: CMDV, 11, rue du Levant, 92380 Garches, France
Email: info@cmdvcollection.com
www.cmdvcollection.com

GENERAL
CMDV recognizes the importance of the confidentiality of the personal data of each user and customer of the site www.cmdvcollection.com.
A policy and strict security measures are used to protect the information communicated by each of them.
Below is described a summary of the categories of data processed by CMDV, the purposes of the basis of their processing and the legal basis on which they are processed.

HOSTING AND DATA ACCESS
Any user can visit the www.cmdvcollection.com site without providing any personal information.
Each time the www.cmdvcollection.com site is visited, the web server will save a server log file including the name of the file, the IP address, the volume of data transferred, the requesting provider, as well as the date and time. access time.
These access data are evaluated exclusively for the purpose of ensuring the proper functioning of the site and improving the services of CMDV.

CONFIDENTIALITY AND PROCESSING OF PERSONAL DATA
The customer is informed and accepts that his personal data may be collected by CMDV, which acts as data controller within the meaning of law 78-17 of January 6, 1978 relating to data processing, files and freedoms as amended by the General Data Protection Regulation 2016/679 dated April 27, 2016.

DATA COLLECTION OF USE
CMDV collects personal data when the customer voluntarily provides it when placing an order or when the user contacts CMDV by email for any request for information, for example.
The customer will have to fill in his personal data in the mandatory fields and these will be necessary to process the contract and proceed with the delivery of an order.
CMDV uses the data provided by the customer in accordance with Article 6, paragraph 1, point b of the GDPR for the processing of contracts and the processing of customer inquiries.
“Personal Data” refers to information concerning the customer as a natural person which is voluntarily communicated by him or which CMDV collects in the context of order taking.
Personal Data includes personal data (such as names and contact details) and available electronic identification data.

DATA COLLECTED WHEN A CUSTOMER BUYS ON THE SITE WWW.CMDVCOLLECTION.COM
During an online purchase, CMDV collects the names, addresses, email addresses, country of residence, title and may collect the customer's telephone number if necessary.

INFORMATION OF PERSONAL DATA
When buying a product online, CMDV requests mandatory information by email, such as name, address, country of residence and telephone number. Filling in this data is necessary so that CMDV can fulfill its contractual obligations with the customer, such as processing the order.

DATA PROCESSING
These contact details are used to process purchases and customer orders, as well as any returns and/or complaints that may be made.
These contact details are also used to communicate with the customer for any questions relating to orders, products or services. The legal basis is based on the necessity of the processing of customer data so that CMDV can fulfill its contractual obligations towards the customer under the purchase contract.
For this purpose, the customer's personal data is kept for as long as necessary.

The Customer's Personal Data is collected for the following purposes:
management of Orders and customer relations ;
customer information relating to offers and commercial information ;
improvement and personalization of the services offered to the customer;
compliance with legal and regulatory obligations.

They are intended for CMDV as well as any external service providers (particularly delivery service). After complete completion of the contract, the customer's data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law, unless the customer has expressly consented to further use of his data. or if CMDV reserves the right to use its data beyond this, which is permitted by law and of which the customer is informed in this statement.

INFORMATION SHARING
CMDV does not sell or rent the personal data of its customers to any other entity.
However, CMDV may be required to share its customers' information with certain suppliers such as for the purposes of preparing and delivering orders, processing payments, managing data for the purpose of administering the www.cmdvcollection.com site, communication with customers, distribution of e-mails (order confirmation or order dispatch) as well as management of the customer database.
If necessary, the personal data provided by the client will be able to be processed by these third parties, exclusively on behalf of CMDV and in compliance with the instructions given by CMDV to these subcontractors.
CMDV does not authorize any of its suppliers to reuse the personal information of its customers.

DATA TRANSFER
As part of the delivery of the product(s)
The customer's data is transmitted to the transport company responsible for the delivery, in order to be able to proceed with the delivery of the product(s) ordered and in order to execute the contract in good conditions and in accordance with the Article 6, paragraph 1, point b of the GDPR.

As part of the payments The customer has access to two types of payment to validate his order.
Payment by PayPal link
Payment by card via Stripe link

PayPal 
The Paypal service provider itself collects this data if the customer creates an account there.
In this case, the customer must register with the payment service provider using his access data during the ordering process.
In this respect, the data protection declaration of the respective payment service provider applies.

Stripe
If the customer buys products online and chooses to pay by stripe, he must provide his credit card information via a Stripe payment link in order to make payment for his purchase.
The legal basis is based on the necessity of the processing of its data so that CMDV can fulfill its contractual obligations towards the customer under the purchase contract.

COOKIES
Cookies can be used on different pages.
According to the definition of the Commission Nationale de l'Informatique et des Libertés, a cookie is a small file stored by a server in the terminal (computer, telephone, etc.) of a user and associated with a web domain (it is that is, in the majority of cases, to all the pages of the same website).
This file is automatically resent during subsequent contacts with the same domain.

Cookies improve access to the www.cmdvcollection.com site and identify repeat visitors.
Moreover, they improve the user experience by following and targeting their interests.
However, this use is in no way linked to any personally identifiable information on the www.cmdvcollection.com site.
Some of these cookies are deleted after the end of the browser session (closing of the browser), others remain on the terminal and allow the browser to be recognized during a recurring visit.
The user has the possibility to check the storage period in the cookie settings of his web browser and to configure his browser in such a way that he is informed of the setting of cookies and decides individually whether to accept them or to exclude the acceptance of cookies. in some cases or in general.
Each browser differs in how it handles cookie settings.
This is described in the help menu of each browser, which explains how the user can change their cookie settings.
If cookies are not accepted, site navigation may become less fluid or restricted.

DURATION OF RETENTION OF PERSONAL DATA
CMDV will keep the Personal Data processed accurate and, where applicable, up-to-date.
In addition, CMDV will only retain Personal Data for the duration necessary for the purposes for which it was collected or processed.

RIGHT OF DATA SUBJECTS TO THE DATA COLLECTED
In accordance with the regulations applicable to personal data, the customer has a right of access, rectification, opposition, limitation of processing, erasure and portability of his data and has the following rights :
In accordance with Article 15 of the GDPR, the customer has the right to request information about his personal data processed by CMDV to the extent specified therein ;
In accordance with Article 16 of the GDPR, the customer has the right to immediately request the correction of incorrect or incomplete personal data stored by CMDV ;
in accordance with Article 17 of the GDPR, the customer has the right to demand the deletion of his personal data stored by CMDV, unless further processing is prohibited ;
on the exercise of freedom of expression and information ;
to fulfill a legal obligation ;
for reasons of public interest, or for the assertion, exercise or defense of legal claims is necessary ;
the right, in accordance with Article 18 of the GDPR, to request the restriction of the processing of his personal data, insofar as the customer contests the accuracy of the data ;
the processing is unlawful, but the customer refuses to delete it ;
CMDV no longer needs the data, but the customer needs it to assert, exercise or defend legal claims, or the customer has lodged an objection against the processing under Article 21 of the GDPR ;
in accordance with Article 20 of the GDPR, the customer has the right to receive his personal data provided by him in a structured, common and machine-readable format or to request the transfer to another controller ;
in accordance with Article 77 of the GDPR, the customer has the right to lodge a complaint with a supervisory authority.
As a rule, the customer can contact the supervisory authority of his usual place of residence or place of work.

In the event of questions concerning the collection, processing or use of his personal data, for information, correction, restriction or deletion of data as well as the revocation of the consent given or the opposition to a specific use of the data, the customer can contact CMDV directly via the contact given in our legal notice.
The customer can exercise his rights by sending his request by mail to the address of the CMDV head office.
CMDV
11 Levant Street
92380, Garches
France
Each request must be signed and accompanied by a photocopy of both sides of an identity document bearing the customer's signature and specifying the applicant's surname, first name and reply address.
The response to the request made on the basis of one or more Computer Rights and Freedoms will be sent within one month of receipt of the request.

In the event of a complaint being filed with the supervisory authority, the customer must contact this authority directly.
CMDV reserves the right to retain and process customer personal data in accordance with this policy to the extent required to fulfill its contractual obligations to the customer, and to the extent CMDV is required to do so by law or to defend itself in case of dispute, to prevent any form of fraud or abuse, or to apply its General Conditions.
To exercise his rights, the customer must send an email to info@cmdvcollection.com . In the event of a complaint being filed with the supervisory authority, the customer must contact this authority directly.

PERMISSION TO ACCESS
The customer has the right to obtain confirmation of whether or not the data concerning him is being processed and, in the event of processing, to access information and personal data concerning, among other things, the purpose of the processing, the category of personal data processed, the category of third parties to whom his data has been or will be disclosed and the envisaged duration of storage of his personal data (or the criteria determining it).

Right of rectification
The customer has the right to request rectification of inaccurate personal data concerning him and to complete partial data.

Right to deletion
In certain circumstances, the customer has the right to request the erasure of his personal data or to limit the processing of his data, in particular:
when it is no longer necessary for CMDV to process his data with regard to the reasons for which they were collected ;
when the processing depended on the customer's consent, the customer has withdrawn his consent, and there is no other legal basis for the processing of his data ;
when the processing of customer data our legitimate interest as legal basis, the customer objects to this processing, and there is no overriding legitimate interest that can justify this processing ;
when the customer has objected to the processing of their data for direct marketing purposes ;
when the customer's personal data has been unlawfully processed ;
when the customer's personal data must be erased in accordance with a legal obligation incumbent on CMDV ;
when the personal data collected is that of a child (under the age of 13) within the framework of the policy relating to information society services.

Right of objection – direct marketing and profiling
In the event that CMDV uses the processing of the customer's personal data for direct commercial purposes, including profiling, the customer has the right to oppose the processing of his personal data in the insofar as this processing is indeed linked to direct marketing.

Data transferability
If CMDV's processing is based on the client's consent or if the processing is necessary for the implementation of a contract with the client, the latter has the right to request a copy of the data he has shared , in a structured, commonly used and machine-readable format. The customer has the right to transmit this data to another data controller.

Right to lodge a complaint with the supervisory authority
If the customer considers that the processing of his data violates applicable data protection laws, the customer has the right to lodge a complaint with the supervisory authority, in particular in the Member State of his habitual residence or there where the alleged violation took place.

RIGHT OF OPPOSITION
Insofar as CMDV processes personal data as described above, the client may object to the personal data collected being used by an organization for a specific processing purpose.
If the processing is carried out for direct marketing purposes, the consumer may exercise this right at any time as described above.
If the processing is carried out for other purposes, the customer only has the right to object if there are reasons arising from his particular situation.
After having exercised its right of opposition, CMDV no longer processes its personal data for these purposes, unless CMDV can prove compelling reasons worthy of protection for the processing, overriding the interests, rights and freedoms of the customer or if the processing serves to assert, exercise or defend legal legal claims.
This does not apply if the processing is carried out for direct marketing purposes.
In this case, CMDV no longer processes the personal data for this purpose.

CONSENT AND WITHDRAWAL
The customer confirms having read and understood the content of this privacy policy.
When the legal basis is based on the client's consent, they accept the processing of their personal data by CMDV, in accordance with the provisions hereof.
In the event of a wish to object, or withdrawal of consent to one of the processing operations, the customer must contact CMDV at the following address: info@cmdvcollection.com
The customer will note that his withdrawal will not affect CMDV's right to process this data when such processing is necessary for CMDV to fulfill its contractual obligations towards the customer, and/or insofar as CMDV is required to do so. by law or to defend itself in the event of a dispute, to prevent any form of fraud or abuse, or to apply its general conditions.

SECURITY MEASURES
CMDV undertakes to protect and ensure the security and confidentiality of its client's Personal Data in accordance with the Data Protection Act, in particular by taking all necessary precautions to prevent this data from being distorted, damaged or that unauthorized third parties have access.
In the event of a violation of Personal Data, CMDV notifies the violation in question to the CNIL as soon as possible.
If the violation of Personal Data is likely to create a high risk for the rights and freedoms of a client, CMDV informs the person concerned as soon as possible of the violation of personal data.

PRIVACY OF CHILDREN´S INFORMATION AND LEGAL PURCHASE AGE
CMDV does not wish to collect the personal information of minors under the age of sixteen.
If a customer is under eighteen years old, he must inform his parents or legal guardians in order to obtain their consent before making a purchase or providing personal data on the www.cmdvcollection.com site.

UPDATE OF THE PERSONAL DATA POLICY
CMDV may modify the Personal Data policy at any time.
If CMDV uses the Customer's Personal Data in a manner different from that stipulated in the Personal Data policy in force at the time of collection, these modifications will be published in a new version of this Personal Data policy.

last update: 01.09.2023