Home > Privacy Policy
DATA PROTECTION POLICY
Date of last update: January 1, 2024
Our Privacy Policy aims to formalize our commitment to protecting the privacy of users of the nutriandco.com website, which is operated by PhytoSerenity SAS.
What is personal data?
Personal data is any information that enables a natural person to be identified directly or indirectly (the "personal data").
A person can be identified directly (for example: first and last name) or indirectly (for example: by a customer number, a telephone number, biometric data, several specific elements related to their physical, physiological, genetic, psychological, economic, cultural or social identity, as well as their voice or image).
We collect and process personal data exclusively in the context of the sale of our products and strictly in accordance with the French Data Protection Act No. 78-17 of January 6, 1978, as amended, as well as in accordance with the GDPR (European Union Regulation No. 2016/679). The data collected is essential for these processing operations. You will never be asked to provide so-called "sensitive" personal data such as your racial or ethnic origin, your political, philosophical or religious beliefs.
By registering on the Website, you authorize us to process your personal data in accordance with this Charter. If you refuse the terms of this Charter, please do not use the Website.
How is your personal data collected and processed?
Who is responsible for data processing?
The person responsible for data processing on the website www.PhytoSerenity.com is the company PHYTOSERENITY, a simplified joint-stock company with a share capital of €5,000, whose registered office is located at 335 Ferdinand Perrier Street, 69800 Saint-Priest, registered with the Aix-en-Provence Trade and Companies Register under number 884 514 688, identified with the VAT number: FR48884514688.
Scope and purpose of processing: Why is my data collected?
The collection of personal data on the domain www.phytoserenity.com is possible within several areas, in particular:
- While browsing our website www.PhytoSerenity.com we collect connection and navigation data;
- In the "Create account" area;
- In the ordering process, which requires the prior creation of an account;
- When adding products to the shopping cart through functional cookies;
- When paying for your order via the external service provider Paypal, Stripe or others;
The personal data collected on the website www.PhytoSerenity.com is necessary and mandatory for the following purposes:
- For the management of your newsletter subscription and for sending the corresponding commercial electronic communications (e-mails and/or SMS);
- For the proper functioning of payment processing services by credit card;
- For managing and monitoring your membership in the loyalty program;
- For managing, monitoring and processing your order on the e-commerce website;
- For the management of deliveries;
- For customer service administration, to respond to requests you may make to our customer service department and to confirm the information relating to you;
- To personalize your customer experience on the e-commerce website;
- For setting up targeted advertising;
- To enable the subsequent purchase of products that have been added to the shopping cart.
Legal basis: What is the legal basis for the processing?
In accordance with Article 6 of the GDPR is the legal basis that authorizes the processing of your personal data:
- Article 6.1.a of the European Regulation on the protection of personal data (consent) for subscribing to the newsletter, sending commercial electronic communications, managing and monitoring your membership of the loyalty program;
- Article 6.1.b of the European Regulation on the protection of personal data (performance of a contract or pre-contractual measures) for the processing of your order.
Who are the recipients of the personal data?
In accordance with Article 13.1e of the GDPR, the recipients of your personal data are
The data controller is PHYTOSERENITY, a simplified joint-stock company with a share capital of €5,000, whose registered office is located at 335 Ferdinand Perrier Street, 69800 Saint-Priest, registered with the Aix-en-Provence Trade and Companies Register under number 884 514 688, identified with the VAT number: FR48884514688;
Its service providers and subcontractors in the context of the following tasks: the management of customer service; the processing and delivery of your order on the e-commerce website; the routing of SMS and commercial emails;
Any legally authorized person who has access to the data (judicial services, if necessary).
How long will the data be stored?
The duration of the data processing is limited to the time during which you are subscribed to our communication services and, if necessary, to ensure the provision of the products or services, it being understood that you can unsubscribe at any time by clicking on the link provided for this purpose in any email sent by PHYTOSERENITY.
Request for the provision of personal data:
In accordance with Article 13.2.e of the GDPR:
- Providing your e-mail address is necessary to receive the above communications and is completely optional;
- The provision of your surname, first name, e-mail address and date of birth is necessary for the creation of your customer account. It is not possible to create a customer account without this data;
- The provision of your surname, first name, e-mail address, address and credit card information is necessary for the processing of your order. Without this data, it is not possible to process your customer order.
Where will my data be transferred to?
Data may be transferred outside the European Union. Some subcontractors, in particular in the context of the use of data for social networks, may transfer your data outside the European Union, always within the framework of Article 46.2.d of the GDPR. All PHYTOSERENITY subcontractors have provided the protection clauses defined and approved by the European Commission.
PHYTOSERENITY, as the data controller of your personal data, undertakes to take all necessary measures to ensure the security and confidentiality of the personal data transmitted, in accordance with the legal provisions in force.
How is your personal data collected and processed?
DEFINITIONS, FEATURES AND APPLICATION OF THE RULES
Cookies are small text files that are sent to and stored on your computer or mobile device by websites you visit and that are sent back to these websites on each subsequent visit. Through these cookies, the website remembers your actions and preferences (for example, your login details, preferred language, font size, other display settings, etc.) so that you do not have to enter them again when you return to the website or visit another page on the same website.
Cookies are used for electronic authentication, tracking sessions and storing information about the activities of users who visit the website. They may also contain a unique identifier that allows a system to track your browsing activity on the website, for statistical or advertising purposes. When you visit a website, you may also receive cookies from other websites or servers on your computer or mobile device (third-party cookies). Some operations cannot be carried out without the use of cookies, which are sometimes technically necessary to ensure the proper functioning of the website.
There are different types of cookies, depending on their characteristics and functions, whose storage period on your computer or mobile device varies. Session cookies are automatically deleted when you close your browser, while persistent cookies remain on your device until a pre-programmed expiration date is reached.
The data protection regulations do not always require your consent to the use of cookies. For example, such consent is not required for "technical cookies". These cookies are used exclusively to transmit messages over an electronic communications network or to provide a service specifically requested by the user. In other words, these cookies are essential for the functioning of the website or for carrying out the activities you have requested.
Technical cookies that do not require your explicit consent are also covered by the French Data Protection Authority (see the recommendation entitled "Cookies: How do I make my website compliant?", which can be clicked here, defined as the "Recommendation"):
- "analytical cookies", which are used directly by the website operator to collect information in aggregated form about the number of users and how they visit the website;
- Navigation or session cookies (for logging in);
- functional cookies, which allow you to visit a website according to a set of selected criteria (such as the language, the products selected for a purchase) and which aim to improve the service provided.
In contrast, "profiling cookies", which are used to create user profiles and send advertising messages in line with the preferences you indicate when surfing the web, require your specific consent.
TYPES OF COOKIES USED BY THE WEBSITE AND OPTION TO DISABLE THEM
The website uses the following cookies, which can be disabled, with the exception of third-party cookies, for which you must refer directly to the cookie activation and deactivation modes indicated via the links:
- Navigation or session cookies, technically essential for the functioning of the website or to enable you to use the content and services you have requested;
- analytical cookies, which enable the system to recognize the frequency of visits to the website by users. These cookies do not collect information about the user's identity or other personal data. This personal data is aggregated and processed anonymously;
- functional cookies, which are used to activate certain functions of the website and a number of selected criteria (such as the language, the products selected for purchase) in order to improve the service;
- Profiling cookies, which are used to send advertising messages that match your preferences registered while browsing.
When surfing, Internet users have the right to select the cookies they wish to authorize.
ATTENTION: Deleting technical and/or functional cookies from the website may hinder navigation, make certain services or functions of the website inaccessible or cause malfunctions, in which case you will be forced to manually change or enter certain information or preferences each time you visit the website again.
What rights do I have?
You have the right to request access to your personal data from the data controller, as well as the right to rectification or erasure or restriction of processing of your data, the right to object to processing and, finally, the right to data portability. You have the possibility to change all your personal information in the "My Account" section. For all other requests regarding the rectification or erasure of personal data, please contact us.
Finally, you can object to direct marketing at any time. To facilitate access to your rights, each newsletter sent by PHYTOSERENITY provides you with an unsubscribe link that allows you to easily unsubscribe from newsletters and news with one click. You can also manage your direct marketing preferences directly from your web account or write to us at the following address.
If you wish to exercise these rights, simply contact us:
- in writing to the following address: Ferdinand Perrier Street 335, 69800 Saint-Priest;
- or contact our partner at the following e-mail address: [email protected]
In order to facilitate the processing of your request, it is recommended that you provide your last name, first name and e-mail address. In addition, PHYTOSERENITY may, if it deems it necessary, verify the identity of the customer by means of a valid identity document.
PHYTOSERENITY undertakes to send you a response within a maximum period of one month from the date on which you exercise your right. If necessary, this period may be extended by two months due to the complexity and number of requests.
If you believe that PHYTOSERENITY is using your personal data inappropriately, you can contact us.
Get in touch with us
If you have any questions about this privacy policy, please contact us.