Your personal information (GDPR)

The principles of protection of personal data by Colorful Black (PSDV SARL company)

Requests for changes to your personal data

As a user of the services of the company PSDV SARL, you can modify your personal data from your customer account.
If you want to delete your customer account, you can also do this from it. Please note that this action is irreversible; you will lose access to your order history, loyalty points, promo codes, etc., but it will be possible to create a new customer account.
It is possible to export your personal data from your customer account.
For any other request to access, obtain, rectify or delete your personal data, we invite you to contact our customer service.

Below the text that follows describes the principles with which PSDV SARL collects different types of data on its customers as well as the commitments made concerning the security and data protection policy of PSDV SARL in order to respect, as much as possible, your privacy.

Definitions

In order to avoid an imprecise interpretation, here are some elements of understanding of the terms used:

Personal data = any information relating to an identified or identifiable natural person is deemed to be “an identifiable natural person” a natural person who can be identified, directly or indirectly.

Processing = any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means (collection, recording, transmission, storage, retention, retrieval, consultation, use, interconnection, segmentation, etc.).

Data controller

Any processing of personal information communicated to PSDV SARL is carried out under the responsibility of the said company PSDV SARL, Colorful Black, 7 rue Poissonnière 75002 Paris (France), SIRET 53112660500025.

How do we collect your data?

The collection of your personal data (such as name, email and contact details) is most often based on your customer or other relevant relationship with us.

For example, we collect data when you take actions on our Services, such as registering as a user of our Site, using PSDV SARL services, or providing us with other information.

When you use PSDV SARL's network and communication services, for example by making a call or creating your customer account or sending an e-mail, identification data is stored in our systems for the use of the services.

When you visit PSDV SARL websites or load pages from them, you leave us various types of anonymous browsing data, such as your IP address and browsing history. The operation of the services is based on the use of cookies. We may collect data based on your consent. We record customer service calls so that we can verify the actual discussion, if necessary. We also collect data from our potential customers when they participate in competitions, sweepstakes or customer events.

What data do we collect?

This data includes your name, surname, address, telephone number, email address, date of birth, direct marketing information and consent, company contact information, company name, information provided by yourself, customer classification information, order, delivery, agreement and invoicing We store what can be connected to you.

Data created and collected during communication includes information about the communicating parties, connection time, routing information, data transfer protocol, connection format, and location information.

When browsing the Internet, "measurement data" is collected using cookies. This data cannot be associated with a person.

The customer information we collect helps us personalize and continually improve your shopping experience on PSDV SARL services. We use this information to process orders, deliver products and services, process payments and communicate with you about your orders, products, services and promotional offers, maintain and update our files and thus your accounts with us, make available to you content such as wish lists and customer reviews and recommend products and services that may be of interest to you. We also use this information to improve our stores and websites, prevent or detect fraud or abuse on our website and allow third parties to provide technical, logistical or other functions on our behalf.

List of types of information we collect

Information you provide to us

We collect and store any information you provide to us through our website or otherwise. You may choose not to provide us with certain information, but doing so may limit your ability to use our services. We use the information you provide to us, in particular, to respond to your requests, personalize your future purchases, improve our services, and communicate with you.

Information collected automatically

Whenever you interact with us, we receive and record certain types of information. Like many other websites, we use "cookies" and obtain certain types of information when your browser accesses the PSDV SARL website or advertisements and other content displayed on other websites by or on behalf of PSDV SARL.

Email Information

To optimize the usefulness and interest of our emails, if your computer allows it, we frequently receive a confirmation of the emails sent by PSDV SARL that you have opened. If you do not wish to receive emails from us, simply notify us in your account.

How do we manage your information?

Please note that the staff of PSDV SARL and its subsidiaries and their subcontractors act under an obligation of secrecy when processing data concerning you.

We maintain the confidentiality of your data and ensure that it is only used for predefined purposes. Your data is processed for the purpose of producing and delivering the agreed communication and other services, developing services, billing, providing you with the best and most comprehensive services possible, and informing you about our services.

We also use your data for customer communication, such as sending information about our services and for direct marketing purposes.

We also use data for customer profiling using billing, usage amounts, length of customer relationship and external classifications.

We use both summarized usage data and person-specific data to create target groups for marketing.

We process our potential customers' data for direct marketing purposes.

We endeavour to ensure that customer data is up to date and correct.

We delete obsolete and unnecessary data where possible.

We protect all data about you through task-based personal access rights and prevent third-party access to the data.

Where do we send your data?

We only submit your data to the extent permitted by applicable law and as indicated in the file description to authorities and other telecommunications companies.

When we use subcontractors, we will sign a security agreement with them that also covers the use of your data. We are also responsible for this kind of handling for you.

PSDV SARL data protection principles

The purpose of this data protection policy is to describe the principles and practices that we observe at PSDV SARL to ensure the protection of privacy, confidentiality of communication and legal protection of our customers.

PSDV SARL regularly updates this policy as operations or services change or develop. For this reason, we encourage you to regularly review the latest statement.

Important core values for PSDV SARL include confidentiality of customer data and communication, as well as protection of customer privacy in all company operations. When handling our customers' personal data, we follow French legislation, orders and instructions from authorities and good data processing practices.

PSDV SARL implements a high level of data protection. Personal and identification data as well as location-related data are collected only for specific, predefined and lawful purposes and are not processed in a manner incompatible with these purposes.

We protect the security of your personal information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you enter before it is sent to us.

We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of customer personal information. Our security procedures may require us to ask you for proof of identity before we can disclose your personal information to you.

We constantly train our staff on the principles of data processing and monitor the use of data by appropriate means.

General principles of customer data management

The processing of personal data must always be justified for the operations of PSDV SARL. PSDV SARL has defined the purpose of collecting, handling and submitting personal data in the following section.

PSDV SARL only processes customer data necessary for its operations, as defined in the purpose of use indicated in the file description for the customer register. We strive not to process incorrect, incomplete or obsolete data.

The processing of customer data is generally based on a relevant relationship, information received when using or registering for a service or your consent. We may also process your data for other reasons, for example at your request or when required by law. Your information may be processed within PSDV SARL. We encourage our customers to regularly update their contact details.

We record your conversations with our customer service to verify a business transaction, to respond to your requests, and to monitor and develop the quality of service.

Please note that as a client of PSDV SARL, you have the right to check what data about you has been stored in our information systems, or that there is no data about you in our file. You can also refuse the use of your data in accordance with the relevant legislation. The inspection can be carried out once a year free of charge. The request for data inspection must be made with a document signed between PSDV SARL and you.

We use your email address to send you a newsletter. The legal basis for this processing is your express consent. We collect your consent when you check the box at the time of the order summary.

If you no longer wish to receive commercial prospecting by email, you can let us know at any time by sending us an email to the following address: info@colorfulblack.com

Rights of data subjects

As a person concerned by the processing of personal data, you have the following rights:

Under Article 15 of the GDPR, you have a right of access to personal data concerning you.

Under Article 16 of the GDPR, you have the right to rectify, without undue delay, personal data that is inaccurate. You have the right to request that this data be completed.

Under Article 17 of the GDPR, you have the right to erasure of personal data to the extent that the processing is not necessary for:

the exercise of the right to freedom of expression and information
compliance with a legal obligation
a reason of public interest
the establishment, exercise or defense of legal rights

Under Article 18 of the GDPR, you have a right to restriction of processing where:

you dispute the accuracy of the data
the processing of the data is unlawful but you oppose their deletion
we no longer need your data but you still need it to establish, exercise or defend your legal rights

Under Article 21 of the GDPR, you have the right to object to data processing.

Under Article 20 of the GDPR you have the right to receive your data in a structured, commonly used and machine-readable format (right to data portability),

Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority.

Collection, storage, extraction and processing of personal data
Register of data collected directly via the services of PSDV SARL

Contact form

Data collected: email and message
Objective pursued: Customer relationship management
Data retention: Recording in database
Shelf life: 1 year
Access to data: PSDV SARL customer relations department
Is the data stored or processed outside the EU: Yes

Customer account creation

Data collected: name, surname, address, telephone number, email address, date of birth, direct marketing information and consent, company contact information, company name, information provided by yourself, customer classification information, order, delivery, agreement and billing. We store what can be connected to you.
Objective pursued: Order / Order tracking / Address / Returns / Credit / Loyalty management
Data retention: Recording in database
Retention period: Customer lifetime / Customers inactive for more than 2 years are deleted
Data access: Logistics (partially, only data related to the processing and shipping of your order) / Marketing department / Customer service
Is the data stored or processed outside the EU: Yes

Newsletter optin form

Data collected: email
Objective pursued: Marketing emails
Data retention: Database optin
Retention period: Duration of customer opt-in excluding refusal by the customer
Data access: The marketing department
Is the data stored or processed outside the EU: No

In accordance with the "Data Protection" law, you can exercise your right to access data concerning you and have it rectified via the contact button available at the top of this page.

Cartsguru

Provider information: https://www.carts.guru/fr
Provider location: France
Objective pursued: Marketing emails
Is the data stored or processed outside the EU: No
GDPR charter of the service provider: https://www.carts.guru/fr/politique-de-confidentialite/politique-de-confidentialite

MailJet

Service provider information: https://fr.mailjet.com
Provider location: France
Objective pursued: Marketing emails
Is the data stored or processed outside the EU: No
Service provider’s GDPR charter: https://fr.mailjet.com/rgpd/

Ours

Service provider information: http://www.nosto.com/fr/
Provider location: Finland
Objective pursued: Marketing emails + remarketing
Is the data stored or processed outside the EU: No
GDPR charter of the service provider: http://www.nosto.com/data-privacy/

Reamaze

Provider information: https://www.smartsupp.com/
Provider location: United States
Objective pursued: Chat / Instant discussion with our hotline
Is the data stored or processed outside the EU: Yes
GDPR charter of the service provider: https://www.reamaze.com/eu-dpa

Google Analytics

Provider information: https://analytics.google.com/analytics
Provider location: United States
Objective pursued: Analysis of site traffic + Remarketing
Is the data stored or processed outside the EU: Yes
Service provider's GDPR charter: https://privacy.google.com/intl/fr_fr/businesses/compliance/

Google Adwords

Service provider information: https://adwords.google.com
Provider location: United States
Objective pursued: Advertising + Remarketing
Is the data stored or processed outside the EU: Yes
GDPR charter of the service provider: https://privacy.google.com/intl/fr_fr/businesses/compliance

Sending and sharing data

PSDV SARL may only submit your data to third parties in accordance with applicable legislation. We submit information upon request to authorities, for example the police and security authorities, as well as other authorities for the reasons specified by legislation.

Information about our customers represents an important part of our business and our business is not to trade in it. We share this information only in the cases previously expressed and for the purposes described in this privacy policy with PSDV SARL controls and which are either subject to this privacy policy or apply rules at least as protective as those described in this privacy policy.

In addition, we may submit your data to subcontractors, in which case we will ensure that the confidentiality of the data is maintained, and we will also be responsible for the management of the data in this case. If we process your data outside the EU region, we will protect your data by ensuring that the subcontractor guarantees the appropriate processing of the data.

Processing of identification and location data relating to electronic communication

PSDV SARL treats all data and messages created during communication as confidential. Our staff is bound by an obligation of secrecy and a prohibition on using messages or other confidential information. When communication takes place via a network, it always leaves a trace. These network traces are called identification data if they can be connected to a person. Network traces are created, for example, when making telephone calls, sending e-mails and SMS messages and surfing the Internet, and may contain information about the correspondents, the connection route or routing, the data transfer protocol used, the event and the terminals used or their location.

PSDV SARL manages communication identification and location information in accordance with applicable law for the purposes of, for example, the implementation and use of services, billing and technical development. consent, marketing. The data may also be used for billing other service providers to the extent necessary.

PSDV SARL may also manage identification data in the event of misuse, data security breach and breakdown repair.

In all of the above situations, we process identification and location data only to the extent that it is necessary to perform a certain specific task.

Use of location data

A true location method where another person can track another person's location requires the person's consent to be located. The customer may not be located at all if they decline geolocation services.

If we submit location information to location service providers, we ensure by appropriate means that there is consent from the individual to be located.

Persons authorized to manage identification and location data

Only specific people at PSDV SARL whose work requires access to identification and location data may process this data.

In practice, permission is only granted to persons performing tasks related to billing, maintenance or development of communication networks or services, prevention and investigation of abuse, customer service and marketing. Persons with the right to handle data may only handle them to the extent required to perform individual tasks.

Duration of processing of identification and location data and storage of data

We process identification and location data for as long as necessary for billing purposes, technical development, troubleshooting, marketing, investigating misuse or data security. However, the handling only takes place to the extent required by the actions and without unduly compromising the confidentiality of a message and the protection of privacy.

We store the data required for invoicing for at least one year from the due date of the invoice and for a period not exceeding three years from the due date of the invoice, unless there is a need to retain the data for a longer period. related to the collection of the invoice. Otherwise, the data is stored to the extent permitted and required by the relevant legislation.

Websites, tracking visits

We also collect data about website visits. This data includes the IP address and corresponding DNS name, the organization that registered the IP address, the name and address of the page visited, the time the page was loaded, and the browser type.

Please note that the IP address is an identification required for the operation of the Internet, used to direct messages transmitted over the Internet to the appropriate places. As a rule, the IP address is not connected to the person using the computer, but it can be connected to the organization that registered the IP address. The IP address connection can be established at the request of the authorities.

Cookies

As a customer of PSDV SARL, you can view our websites anonymously. However, like most websites, we use cookie technology. When you view our website, the cookie sets a random number for the browser that does not indicate your identity. Cookies help PSDV SARL determine which sections of its websites are most popular, where visitors go and how long they stay there. The data is used to implement and develop services and target advertisements on the websites.

You can prevent the storage of the cookie by changing the settings of your browser. In some cases, prevention may slow down or make it impossible to navigate the pages or the website.

Data Security

We ensure the security of our services' data using methods proportionate to the severity and sophistication of the threats and the cost.

PSDV SARL takes care to carry out actions aimed at preventing data security breaches or eliminating disruptions that affect data security. In addition, we use all means to ensure that the confidentiality of messages or the protection of privacy is not unduly compromised when carrying out the above actions.

We provide information about our services' data security-related actions and other data security issues through appropriate channels, such as our website or customer newsletters.

In order to prevent data security breaches and eliminate disruptions affecting data security, we may, among other things, prevent the receipt of e-mail messages, remove viruses and other malware from messages and take other comparable technical measures. Necessary measures within the permitted and required limits specified in the relevant legislation. We use physical, administrative and technical safeguards to keep messages and identification data transmitted over the communication network secret. These actions reduce the risk that data about you will be disclosed to third parties and prevent misuse or other unauthorized access. Some of our services also use standardized encryption methods.

Please note that as a user of PSDV SARL services, you must also use the most appropriate methods to ensure your own data security. We encourage you to store and use our services and your terminals carefully and control their use, for example by using secure codes and unique passwords, and to use sufficient antivirus and firewall services and keep them and the operating system updated.

Customer communication and direct marketing

PSDV SARL sends customer messages regarding its products and services to its customers via the consent available in the customer account.

PSDV SARL also sends direct marketing messages in electronic format. You have the right to prohibit PSDV SARL from sending direct marketing messages. You can prohibit marketing by following the instructions included in the direct marketing message or through your customer account available on our website.