The principles of personal data protection by Colorful Black (PSDV SARL company)

Requests for changes to your personal data

  • As a user of the services of the company PSDV SARL you can modify the personal data concerning you from your customer account.
  • If you wish to delete your customer account, you can also perform this action from the latter. Please note that this action is irreversible; you will lose access to your order history, your loyalty points, your promo codes… but it will be possible to create a new customer account.
  • It is possible to export your personal data from your customer account.
  • For any other request to access, obtain, rectify or delete your personal data, please contact our customer service.

The following text describes the principles with which PSDV SARL collects different types of data on its customers as well as the commitments made concerning the security and data protection policy of PSDV SARL in order to respect your privacy as much as possible. .

Definitions

In order to avoid an imprecise interpretation, some elements of understanding of terms used:

  • Personal data = any information relating to an identified or identifiable natural person is deemed to be an “identifiable natural person” a natural person who can be identified, directly or indirectly.
  • Processing = any operation or set of operations carried out or not using automated processes and applied to data or sets of personal data (collection, recording, transmission, storage, conservation, extraction, consultation, use, interconnection, segmentation, etc.).

    Data controller

    Any processing of personal information communicated to PSDV SARL is carried out under the responsibility of the said company PSDV SARL, Colorful Black, 7 rue Poissonnière 75002 Paris (France), SIRET 53112660500025.

    How do we collect your data?

    The collection of your personal data (such as name, email and contact details) is most often based on your customer relationship or other relevant relationship with us.

    For example, we collect data when you perform actions on our services, by registering as a user of our site, by using the services of PSDV SARL or by providing us with other information.

    When you use the network and communication services of PSDV SARL, for example by making a call or by creating your customer account or by sending an e-mail, the identification data is stored in our systems for the use of the services.

    When you visit PSDV SARL websites or load pages on them, you leave us various types of anonymous browsing data, such as your IP address and browsing history. The operation of the services is based on the use of cookies. We may collect data based on your consent. We record customer service calls so that we can verify the actual chat, if necessary. We also collect data from our potential customers when they participate in contests, sweepstakes or customer events.

    What data do we collect?

    This data includes your first and last name, address, telephone number, email address, date of birth, direct marketing information and consent, company contact person information, company name, information provided by you- even, customer classification information, order, delivery, agreement and billing We store what can be connected to you.

    Data created and collected during communication includes information about the communicating parties, connection time, routing information, data transfer protocol, connection format, and location information.

    When surfing the Internet, "measurement data" is collected using cookies. This data cannot be associated with a person.

    The customer information we collect helps us personalize and continually improve your shopping experience on PSDV SARL services. We use this information to process orders, deliver products and services, process payments and communicate with you about your orders, products, services and promotional offers, maintain and update our files and thus your accounts with us, provide you with content such as wishlists and customer reviews and recommend products and services that may be of interest to you. We also use this information to improve our stores and websites, prevent or detect fraud or abuse on our website and allow third parties to provide technical, logistical or other functions on our behalf.

    List of types of information we collect

    • Information you provide to us

    We collect and store all information you provide to us through our website or otherwise. You can choose not to provide us with certain information, this decision may nevertheless limit the use of our services. We use the information that you communicate to us, in particular in order to respond to your requests, to personalize your future purchases, to improve our services and to communicate with you.

    • Information Collected Automatically

    Each time you contact us, we receive and store certain types of information. Like many other websites, we notably use "cookies" and obtain certain types of information when your browser accesses the PSDV SARL website or advertisements and other content displayed on other websites by PSDV SARL or for its account.

    • Email Information

    To optimize the usefulness and interest of our e-mails, if your computer allows it, we frequently receive confirmation of the e-mails sent by PSDV SARL that you have opened. If you do not wish to receive e-mail from us, simply notify us in your account.

    How do we handle your information?

    Please note that the staff of PSDV SARL and its subsidiaries and their subcontractors act under the obligation of secrecy when processing data concerning you.

    We maintain the confidentiality of data concerning you and ensure that it is only used for predefined purposes. Your data is processed for the purpose of producing and delivering the agreed communication and other services, developing the services, invoicing, providing you with the best and most comprehensive service possible, and informing you about our services.

    We also use your data for communication with customers, such as sending information regarding our services and for direct marketing purposes.

    We also use the data for customer profiling using billing, usage amounts, length of customer relationship and external classifications.

    We use both summary usage data and person-specific data to create target groups for marketing.

    We process the data of our potential customers for direct marketing purposes.

    We make every effort to ensure that customer data is up-to-date and correct.

    We remove obsolete and unnecessary data where possible.

    We protect all data about you through personal task-based access rights and prevent third-party access to the data.

    Where do we send your data?

    We only submit your data to the extent permitted by applicable law and as indicated in the file description to authorities and other telecommunications companies.

    When we use subcontractors, we will sign a security agreement with them which also covers the use of your data. We are also responsible for this kind of manipulation for you.

    Data protection principles of PSDV SARL

    The purpose of this data protection policy is to describe the principles and practices we observe at PSDV SARL to ensure the protection of privacy, confidentiality of communication and legal protection of our customers.

    PSDV SARL regularly updates this policy as operations or services change or develop. For this reason, we encourage you to regularly review the latest statement.

    Important core values ​​for PSDV SARL include the confidentiality of customer data and communication, as well as the protection of customer privacy in all business operations. When handling the personal data of our customers, we follow French legislation, orders and instructions from the authorities and good data processing practices.

    PSDV SARL implements a high level of data protection. Personal and identification data as well as location-related data are collected only for specific predefined and lawful purposes and are not processed in a manner incompatible with those purposes.

    We protect the security of your personal information during transmission by using Secure Sockets Layer Software (SSL) which encrypts the information you enter before it is sent to us.

    We maintain physical and electronic security measures and backup procedures in connection with the collection, storage and disclosure of personal customer information. Our security procedures may require us to ask you for proof of your identity before we can provide you with your personal information.

    We constantly train our staff on the principles of data processing and monitor the use of data by appropriate means.

    General principles of customer data management

    The processing of personal data must always be justified for the operations of PSDV SARL. PSDV SARL has defined the purpose of collecting, handling and submitting personal data in the following section.

    PSDV SARL only processes customer data necessary for its operations, as defined for the purpose of use indicated in the file description for the customer register. We make every effort not to process incorrect, incomplete or outdated data.

    The processing of customer data is usually based on a relevant relationship, information received while using or registering for a service, or your consent. We may also process your data for other reasons, for example at your request or where required by law. Your information may be processed within PSDV SARL. We encourage our customers to regularly update their contact details.

    We record your conversations with our customer service to verify a business transaction, to respond to your requests and to monitor and develop the quality of the service.

    Please note that as a customer of PSDV SARL, you have the right to check which data concerning you has been stored in our information systems, or that there is no data concerning you in our file. You can also refuse the use of your data in accordance with the relevant legislation. The inspection can be carried out once a year free of charge. The request for data inspection must be made with a signed document between PSDV SARL and you.

    We use your email to send a newsletter. The legal basis for this processing is your express consent. We collect your consent when you tick the box at the time of the order summary.

    If you no longer wish to receive commercial prospecting by e-mail, you can let us know at any time by sending us an e-mail to the following address: info@colorfulblack.com

    Rights of data subjects

    As a person affected by the processing of personal data, you have the following rights:

    Under Article 15 of the GDPR, you have a right of access to personal data concerning you

    Under Article 16 of the GDPR, you have the right to rectification, as soon as possible, of personal data that is inaccurate. You have the right to request that this data be completed.

    Under Article 17 of the GDPR, you have a right to erasure of personal data insofar as the processing is not necessary for:

    • the exercise of the right to freedom of expression and information
    • compliance with a legal obligation
    • a reason of public interest
    • the establishment, exercise or defense of legal rights

    Under Article 18 of the GDPR, you have a right to restriction of processing in cases where:

    • you dispute the accuracy of the data
    • the processing of the data is unlawful but you oppose their erasure
    • we no longer need your data but they are still necessary for you to establish, exercise or defend your rights in court

    Under Article 21 of the GDPR, you have a right to object to data processing.

    Under Article 20 of the GDPR you have a right to receive your data in a structured, commonly used and machine-readable format (right to data portability),

    Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority.

    Collection, storage, extraction and processing of personal data
    Register of data collected directly via the services of PSDV SARL

    Contact form

    • Data collected: email and message
    • Objective pursued: Customer relationship management
    • Data retention: Registration in database
    • Shelf life: 1 year
    • Access to data: The PSDV SARL customer relations department
    • Is the data stored or processed outside the EU: Yes

    Creation of customer account

    • Data collected: name, surname, address, telephone number, e-mail address, date of birth, direct marketing information and consent, company contact person information, company name, information provided by you , customer classification information, order, delivery, agreement and billing. We store what can be connected to you.
    • Objective pursued: Order / Order tracking / Address / Returns / Credit note / Loyalty management
    • Data retention: Registration in database
    • Retention period: Customer lifetime / Customers inactive for more than 2 years are deleted
    • Access to data: Logistics (partially, only data related to the processing and shipping of your order) / Marketing department / Customer service
    • Is the data stored or processed outside the EU: Yes

    Newsletter opt-in form

    • Data collected: email
    • Objective pursued: Marketing emails
    • Data retention: Optin in database
    • Retention period: Customer opt-in period excluding customer refusal
    • Access to data: The marketing department
    • Is the data stored or processed outside the EU: No

    In accordance with the law "Informatique et Libertés", you can exercise your right of access to the data concerning you and have them rectified via the contact button available at the top of this page.

    Register of data transmitted to subcontractors via the services of PSDV SARL

    Cartsguru

    • Provider information: https://www.carts.guru/fr
    • Service provider location: France
    • Objective pursued: Marketing emails
    • Is the data stored or processed outside the EU: No
    • GDPR charter of the service provider: https://www.carts.guru/fr/politique-de-confidentialite/politique-de-confidentialite

    MailJet

    • Provider information: https://fr.mailjet.com
    • Service provider location: France
    • Objective pursued: Marketing emails
    • Is the data stored or processed outside the EU: No
    • GDPR charter of the service provider: https://fr.mailjet.com/rgpd/

    Nosto

    • Provider information: http://www.nosto.com/fr/
    • Service provider location: Finland
    • Objective pursued: Marketing emails + remarketing
    • Is the data stored or processed outside the EU: No
    • GDPR charter of the service provider: http://www.nosto.com/data-privacy/

    Reamaze

    • Provider information: https://www.smartsupp.com/
    • Service provider location: United States
    • Objective pursued: Chat / Instant discussion with our hotline
    • Is the data stored or processed outside the EU: Yes
    • GDPR charter of the service provider: https://www.reamaze.com/eu-dpa

    Google Analytics

    • Provider information: https://analytics.google.com/analytics
    • Service provider location: United States
    • Objective pursued: Site traffic analysis + Remarketing
    • Is the data stored or processed outside the EU: Yes
    • GDPR charter of the service provider: https://privacy.google.com/intl/fr_fr/businesses/compliance/

    GoogleAdwords

    • Provider information: https://adwords.google.com
    • Service provider location: United States
    • Objective pursued: Advertising + Remarketing
    • Is the data stored or processed outside the EU: Yes
    • GDPR charter of the service provider: https://privacy.google.com/intl/fr_fr/businesses/compliance

    Sending and sharing data

    PSDV SARL can only submit your data to third parties in accordance with the legislation in force. We submit information on request to authorities, for example the police and security authorities, as well as other authorities on the grounds specified by law.

    Information about our customers is an important part of our business and our job is not to trade in it. We share this information only in the cases previously expressed and for the purposes described in this privacy policy with PSDV SARL control and which are either subject to this privacy policy or apply rules at least as protective as those described in this policy. confidentiality.

    In addition, we may submit your data to subcontractors, in which case we will ensure that the confidentiality of the data is maintained, and we will also be responsible for data management in this case. If we process your data outside the EU region, we will protect your data by ensuring that the processor guarantees the appropriate processing of the data.

    Processing of identification and location data related to electronic communication

    PSDV SARL treats all data and messages created during communication as confidential. Our personnel are bound by an obligation of secrecy and a prohibition on using messages or other confidential information. When communication takes place over a network, it always leaves a trace. These network traces are called credentials if they can be connected to a person. Network traces are created, for example, during telephone calls, sending e-mail and SMS messages and browsing the Internet, and may contain information about the correspondents, the connection route or routing, the protocol of data transfer used, the event and the terminals used or their location.

    PSDV SARL manages the communication identification and location information in accordance with applicable law for the purposes of, for example, the implementation and use of the services, billing and technical development. consent, marketing. The data may also be used for the billing of other service providers insofar as this is necessary.

    PSDV SARL can also manage identification data in the event of misuse, breach of data security and breakdown repair.

    In all of the above situations, we only process identification and location data to the extent necessary to perform a certain specific task.

    Use of location data

    A real location method where another person can track another person's whereabouts requires the consent of the person to be located. The client may not be located at all if he refuses geolocation services.

    If we submit location information to location service providers, we ensure by appropriate means that there is consent from the person to be located.

    Persons authorized to manage identification and location data

    Only specific persons at PSDV SARL whose work requires access to identification and location data, can process this data.

    In practice, permission is only granted to persons performing tasks related to billing, maintenance or development of communication networks or services, prevention and investigation of abuse, customer service and marketing. . Persons with the right to manipulate the data may only manage it to the extent required to perform individual tasks.

    Duration of identification and location data processing and data storage

    We process identification and location data for as long as necessary for the purposes of billing, technical development, troubleshooting, marketing, investigating misuse or data security. However, the manipulation only takes place to the extent required by the actions and without unduly compromising the confidentiality of a message and the protection of privacy.

    We store data required from billing for at least one year from the invoice due date and for a period not exceeding three years from the invoice due date, unless necessary to keep data for a longer period. linked to the collection of the invoice. Otherwise, data is stored to the extent permitted and required by relevant legislation.

    Websites, visit tracking

    We also collect data regarding website visits. This data includes the IP address and the corresponding DNS name, the organization that registered the IP address, the name and address of the page visited, the time the page was loaded and the type of browser.

    Please note that the IP address is an identification required for the functioning of the Internet, used to direct messages transmitted over the Internet to the appropriate places. Typically, the IP address is not connected to the person using the computer, but it may be connected to the organization that registered the IP address. The IP address connection can be established at the request of the authorities.

    Cookies

    As a customer of PSDV SARL, you can visit our websites anonymously. However, like most websites, we use cookie technology. When you view our website, the cookie sets a random number to the browser which does not indicate your identity. Cookies help PSDV SARL determine which sections of its websites are most popular, where visitors go and how long they stay there. The data is used to implement and develop services and target advertisements on the websites.

    You can prevent the storage of cookies by changing your browser settings. In some cases, prevention can slow down or make it impossible to navigate the pages or the website.

    Data Security

    We ensure the security of the data of our services using methods commensurate with the seriousness and sophistication of the threats as well as the cost.

    PSDV SARL takes care to perform actions to prevent data security breaches or eliminate disruptions that affect data security. Furthermore, we use every means to ensure that the confidentiality of messages or the protection of privacy is not unduly compromised when performing the above actions.

    We provide information about our services' data security actions and other data security issues through appropriate channels, such as our website or customer newsletters.

    In order to prevent data security breaches and eliminate disruptions to data security, we may, among other things, prevent the receipt of electronic messages, remove viruses and other malware from messages and take other measures comparable techniques. Necessary measures within the permitted and required limits specified in the relevant legislation. We use physical, administrative and technical safeguards to keep messages and identification data transmitted over the communication network secret. These actions reduce the risk of data about you being disclosed to third parties and prevent misuse or other unauthorized access. Some of our services also use industry-standard encryption methods.

    Please note that as a user of the services of PSDV SARL, you must also use the most appropriate methods to ensure your own data security. We encourage you to store and use our services and your terminals with care and to control their use, for example by using secure codes and unique passwords, and to use sufficient anti-virus and firewall services and keep them that way. than the updated operating system.

    Customer communication and direct marketing

    PSDV SARL sends customer messages regarding its products and services to its customers via the consent available in the customer account.

    PSDV SARL also sends direct marketing messages in electronic format. You have the right to prohibit PSDV SARL from sending direct marketing messages. You can opt out of marketing by following the instructions included in the direct marketing message or through your customer account available on our website.