Purpose of processing	Examples of use	Legal basis for processing (GDPR)
Order management and customer relations	Process your purchase, ship your order, issue the invoice, manage after-sales service.	Execution of a contract (Article 6.1.b)
Communicating with you	Answer your questions and requests via our contact form or by email.	Our legitimate interest to provide quality customer service (Article 6.1.f)
Improvement of our Site and security	Analyze user navigation to improve the ergonomics of the Site, prevent fraud and ensure the security of our systems.	Our legitimate interest to guarantee the proper functioning and security of our Site (Article 6.1.f)
Marketing and commercial prospecting	Send you our newsletter and promotional offers by email.	Your consent prior and explicit (Article 6.1.a)

Article 3: Recipients of your data

We do not sell your personal data. They are only shared with the following recipients, when strictly necessary:

• Our subcontractors for the operation of the Site:

  • Shopify Inc., our e-commerce platform provider.

  • Our secure payment providers: Shopify, PayPal, Alma and Mollie.

  • Our transport partners for delivery: Chronopost and Mondial Relay.

  • Google Analytics, for audience analysis of the Site.

• The competent authorities: Upon request and in the context of judicial or administrative proceedings.

Article 4: Transfer of data outside the European Union

Some of our subcontractors (notably Shopify and Google) may transfer your data outside the European Union (notably to the United States and Canada). We ensure that these transfers are governed by appropriate guarantees to ensure a sufficient level of protection of your privacy:

• Either because the recipient country benefits from a adequacy decision of the European Commission (case of Canada).

• Either by the signature of Standard Contractual Clauses approved by the European Commission.

Article 5: Duration of retention of your data

Your data is kept for a period not exceeding that necessary for the purposes for which it was collected:

• For customers: The data is kept for the duration of the commercial relationship. They are then archived with restricted access for a period of 5 to 10 years to meet our legal obligations (accounting, tax, guarantee).

• For prospects: The data is retained for 3 years from your last contact with us. After this period, they are deleted.

Article 6: Your rights over your personal data

In accordance with the GDPR, you have the following rights:

• Right of access (article 15): The right to obtain confirmation that your data is being processed and, where applicable, to access it.

• Right of rectification (article 16): The right to obtain the correction of inaccurate data.

• Right to erasure or “right to be forgotten” (article 17): The right to obtain the deletion of your data, subject to our legal retention obligations.

• Right to restriction of processing (article 18): The right to request the freezing of the use of your data in certain cases.

• Right to portability (article 20): The right to receive your data in a structured format and to transmit it to another data controller.

• Right to object (article 21): The right to object at any time to the processing of your data for legitimate reasons, and in particular to their use for commercial prospecting purposes.

To exercise these rights, please contact our Data Protection Officer (DPO) by email at emmanuel@cura-naturale.fr. You may be asked to provide proof of identity to verify your identity.

If you believe that your rights have not been respected, you also have the right to lodge a complaint with the competent supervisory authority, the CNIL (National Commission for Information Technology and Liberties).

Article 7: Cookie management

A “cookie” is a small text file placed on your terminal when you visit the Site.

• Strictly necessary cookies: They are essential to the operation of the Site (e.g. shopping cart management, security). They do not require your consent.

• Performance and analysis cookies: They allow us to understand how you interact with the Site (e.g. Google Analytics) in order to improve its operation.

• Advertising cookies: They allow us to offer you relevant advertisements on other sites.

In accordance with regulations, we collect your explicit consent via an information banner before placing non-essential cookies. You can change your preferences at any time via our cookie management tool.

The cookie management tool used on our site is: Shopify consent banner.

Refusing certain cookies may alter your browsing experience.

Article 8: Modification of the confidentiality policy

We reserve the right to modify this privacy policy at any time. In the event of a substantial modification, we will notify you by e-mail or by posting on the Site.

Article 9: Contact us

For any questions relating to this policy or for any request regarding your personal data, please contact our Data Protection Officer (DPO):
Emmanuel NIELLINI
Email: emmanuel@cura-naturale.fr