Privacy Policy

Privacy policy

Identification of the data controller

www.leo-store.fr website is the property of the association L31 RECORDS (“publisher”), registered on RNA under number W313034022, headquartered at 2 impasse de Columbus - 31200 Toulouse - France.

Publisher attaches particular importance to the protection of personal data collected. Publisher undertakes to comply with applicable texts and particularly with the General Data Protection Regulation (“GDPR”) and amended French Data Protection Act (Loi Informatique et Libertés) of January 6, 1978.

Publisher is the data controller for the processing operations indicated below, unless otherwise stipulated.

Definitions

Personal data: means any information relating to an identified or identifiable natural person.

Site: refers to the Internet site accessible at the URL www.leo-store.fr

User(s): refers to the user who accesses the Site in order to open an account, simply place an order or contact the Publisher.

What data is collected by the data controller?

When creating an account: surname, first name, e-mail address, password.

This information is required to open an online account.

When placing an order: e-mail address, first name, last name, address, zip code, city, country, telephone number (for delivery services).

When you send us a message via the “Contact us” page, you will be asked for your name and e-mail address.

When you subscribe to our newsletter, only your e-mail address will be requested.

Why is your data collected?

Your data is collected to enable you to have an online account on the Site.

When you place an order, the data collected enables us to manage the order, process delivery, respond to your queries and requests to exercise your rights. We may also prospect for products equivalent to those you have ordered from us.

Your data may also be used simply to reply to your message if you have sent us one.

Your data may also be used to send you our newsletter.

What are the legal bases for this processing?

When you create an account and place an order, you accept our general terms and conditions of sale and use. We are therefore contractually bound, and the processing is necessary for the performance of this contract. The legal basis is therefore the contract.

When you send us a message via the “Contact us” page, the legal basis for data processing is our legitimate interest.

When you subscribe to our newsletter, your consent is obtained.

How long do we keep data?

Publisher keeps your data for three (3) years from the last contact with you, solely in order to be able to offer you prospecting for products equivalent to those ordered. Data required to send you the newsletter will be kept for the same period, unless you give your consent again at the end of this period.

Data collected via your account is kept for a period of two (2) years from the last connection to your account unless, at the end of this period, you request that your account remain open for a further period of two (2) years.

When you place an order, your data is kept for the duration of the legal retention period for commercial contracts.

When you contact us via the “Contact us” page, your data will be deleted after a period of six (6) months following the transmission of your message.

Your data is secured in accordance with industry standards. Employees are subject to a confidentiality clause.

Where is data hosted?

Data is hosted by the Publisher in the European Union. The hosting provider is Shopify, which acts as a subcontractor for the Publisher.

Who receives the data?

Internal recipients: the Publisher's sales department will have access to the data in order to contact you.

External recipients: To benefit from the service, you must agree to your data being passed on to external partners: the delivery service provider and the hosting company.

The Publisher may also communicate personal data in order to cooperate with administrative and judicial authorities.

Is data transferred outside the EU?

Data may be transferred outside the EU to Canada and the United States by the Shopify hosting provider. The subcontractor undertakes to ensure that transfers are carried out in compliance with the RGPD.

What are your rights?

Right of access

The User has the right to obtain confirmation that his or her personal data is or is not being processed by the Publisher as well as, where it is, access to such data as well as the following information:

- purposes of processing ;

- categories of personal data concerned

- the recipient or categories of recipient to whom the personal data has been or will be disclosed, in particular recipients established in third countries or international organizations;

- where possible, estimated duration of storage of personal data or, where this is not possible, the criteria used to determine this duration;- the right to ask the Publisher to rectify or delete personal data;

-the right to lodge a complaint with a supervisory authority;

- the fact of automated decision-making, including profiling, and, at least in such cases, useful information concerning the underlying logic, as well as the significance and anticipated consequences of such processing for the data subject.

Right to request restriction of processing

User may request Publisher to restrict the processing of his/her personal data, in particular if he/she disputes the accuracy of the data, for the period of time necessary for the data controller to verify the accuracy of the data; if the processing is unlawful but the User does not wish his/her data to be deleted; if the Publisher no longer needs the data but the User requires it for the establishment, exercise or defense of legal claims.

Right to erasure

User may request the Publisher to delete his/her personal data, in particular when he/she has withdrawn his/her consent to the processing of his/her data or when the data is no longer necessary for the purpose for which the Publisher needed to process it.

Right of rectification

User may request the Publisher to rectify personal data collected by the Publisher.

Right to request data portability

Publisher undertakes to offer you the possibility of having all your personal data returned to you on request. The User is thus guaranteed greater control over his or her data, and retains the possibility of reusing it. This data will be supplied to the User or to a third party designated by the User in an open and easily reusable format.

Each User has the right to exercise the aforementioned rights, by writing :

- by e-mail, enclosing a proof of identity, to the following address contact@l31-records.fr ;

- by letter accompanied by a copy of a signed identity document to the postal address 2 impasse de Columbus - villa 13 - 31200 Toulouse - France.

Publisher will use its best efforts to respond to the User's request within one month of receipt.

If User is not satisfied with the Editor's response, or wishes to contest it, he/she may lodge a complaint with the CNIL (www.cnil.fr/fr/plaintes

Cookies

Purpose of cookies

Cookies may be used for statistical purposes, in particular to optimize the services provided to the User, based on the processing of information concerning the frequency of access, the personalization of pages as well as the operations carried out and the information consulted.

You are informed that Publisher may place cookies on your device. The cookie records information relating to navigation on the service (the pages you have viewed, the date and time of viewing, etc.) that the Publisher may read during your subsequent visits.

Cookie retention period

In accordance with the recommendations of the CNIL, the maximum duration of storage of cookies is 13 months maximum after their first deposit in the User's terminal, as is the duration of the validity of the User's consent to the use of these cookies. The lifespan of cookies is not extended with each visit. The User's consent must therefore be renewed at the end of this period.

User's right to refuse cookies

In the event of refusal to register cookies on your terminal, or in the event of deletion of those registered there, the User may no longer benefit from a certain number of functionalities. Where applicable, the Publisher declines all responsibility for the consequences linked to the degraded functioning of its services resulting from the impossibility of registering or consulting the cookies necessary for their functioning and which would have been refused or deleted.

Duration of consent for the deposit of the cookie is thirteen (13) months.

For cookies management, the configuration of each browser is different. It is described in the help menu of your browser, which will allow you to know how to modify the recording of cookies.

Below, the User can click on the name of their browser to access the corresponding help menu:

Below, the User can also click on the name of their browser to configure it to send a code indicating to websites that they do not wish to be tracked. (Option “Do No Track”).