The policy set out below applies to the processing of personal data carried out by Bebel: Blonde and brunette in layette.

Bebel: Blonde and brunette in layette is an online store accessible via the Internet at https://blondeetbruneenlayette.com. It is published and owned by the managers of the company BEBEL, registered with the Marseille Trade and Companies Register under number 82767558800012 .

1. Legal framework – compliance with the GDPR and French law

The data controllers declare that they process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the GDPR) and French law no. 78-17 of 6 January 1978 relating to information technology, files and freedoms (as amended).

2. Retention period for personal data

The data will be kept for a period of 3 years from the date of collection.

​

3. Rights of the person whose data is collected

The person whose personal data is collected has the right to:

– to request from the data controller access to personal data, its rectification or erasure, or a restriction of processing relating to the data subject,

– to object to the treatment,

– to the portability of its data,

– to lodge a complaint with a supervisory authority,

– to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal, this right existing exclusively where the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR, i.e. on the consent of the data subject to the processing of his or her personal data for one or more specific purposes.

​

4. Customer Relationship Management

Personal data processed – We process the following personal data: title, first name, last name, telephone contact details, email address, postal address, date of birth, product or service purchased, purchase price, any discount, any promotional offer, date and place of purchase, delivery location, distribution channel, payment methods, payment information.

Purposes – The processing is intended for the execution of orders placed on our website and for managing the relationship with our customers.

Legal basis – This processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract. It is based on Article 6(1)(b) of the GDPR. The request for data is contractual in nature. The data subject is required to provide this data if they wish to benefit from our products or services. If the data subject does not provide the data, they will not be able to become a customer, purchase our products, or benefit from our services.

5. Use of Google Analytics

Personal data processed – Google processes the data mentioned in its privacy policy ( https://support.google.com/analytics/answer/6004245?hl=fr/ This data includes in particular the IP address of the devices used to access the site.

Purposes – This processing is used for the purposes of analysis and statistical study of the use of our site.