Privacy Policy
Who are we?
The company ESTEBAN BOUTIQUE SAS, registered with the RCS of Montpellier under number 424 724 714, with its registered office at ZAC Descartes – rue du perpignan CS 40014 LAVÉRUNE 34433 SAINT JEAN DE VÉDAS CEDEX (hereinafter "ESTEBAN") is the data controller for the personal data for the purposes described below.
Purposes and Legal Bases:
The table below summarizes the purposes for which ESTEBAN processes your personal data:
|
Purpose of Processing |
Legal Bases |
|
Order management |
The performance of the contract binding us or our legitimate interest (providing adequate customer service, notably communicating order status) for data exceeding what is strictly necessary for the performance of contractual obligations |
|
Customer account management |
The performance of the contract binding us or our legitimate interest (ensuring website security) for data exceeding what is strictly necessary for the performance of contractual obligations |
|
Commercial prospecting |
Our legitimate interest (informing about latest products, sending promotional offers, and improving customer experience) or your consent if required by regulations |
|
Statistical analysis |
Our legitimate interest (improving our offers) |
|
Management of questions and contact requests |
Our legitimate interest (responding to your requests and getting to know you better) |
|
Complaint management |
The performance of the contract binding us or our legitimate interest (improving our offers and customer experience) for data exceeding what is strictly necessary for the performance of contractual obligations |
|
Monitoring interests via cookies |
Your consent |
|
Management of a loyalty program and promotional operations (contests) |
The performance of our contractual relationship or our legitimate interest (promoting our offers) for data exceeding what is strictly necessary for the performance of contractual obligations |
|
Management of customer reviews and satisfaction surveys |
Our legitimate interest (promoting and improving our offers) |
|
Dispute management |
The performance of our contractual relationship or our legitimate interest (defending our interests) for data exceeding what is strictly necessary for the performance of contractual obligations |
|
Recruitment management |
The performance of pre-contractual measures or our legitimate interest (seeking talent and recruiting) or your consent if required by regulations for data exceeding what is strictly necessary for the performance of pre-contractual obligations or your consent when required by regulations |
|
Creation of a CV library |
Your consent |
Categories of data collected and sources:
The information collected by ESTEBAN that is essential to fulfill the aforementioned purposes is indicated by an asterisk on the collection forms. If you do not fill in these mandatory fields, ESTEBAN may not be able to provide the service concerned.
Your data is collected directly by ESTEBAN or may have been transmitted to us by our commercial partners (data brokers, advertising agencies, recruitment firms, etc.).
The personal data collected is retained by ESTEBAN in accordance with data protection regulations and legal prescription periods. For example:
> Data relating to recruitment management is retained for the time necessary to evaluate the application or for a period of 24 months if the job applicant has consented;
> Data relating to prospects is retained for 3 years from the last commercial contact;
> Data relating to customers is retained for the duration of the contractual relationship plus the statutory limitation period.
Recipients of the data:
The personal data processed is primarily accessible to the Commercial & Marketing Department, the Information Systems Department, the Financial Department and the Human Resources Department of ESTEBAN.
Your personal data may also be communicated to:
> IT service providers (external providers for IT maintenance, for example)
> Subcontractors involved in commercial prospecting (routing, etc.)
> ESTEBAN's parent company,
> Partners involved in recruitment management (recruitment agencies, etc.)
Subcontractors acting under ESTEBAN's instructions will be required to implement appropriate protection measures.
If certain ESTEBAN partners are located in countries whose regulations do not necessarily offer the same level of protection as that of the member states of the European Union, ESTEBAN will ensure that these transfers are carried out in accordance with the provisions imposed by French regulations (such as the implementation of contractual clauses adopted by the European Commission). You can contact our DPO (dpo@esteban.fr) for more information on these matters and a copy of the relevant documents.
Your rights:
> You have the right to request access to and rectification of your personal data.
> You have the right to request the restriction of the processing of your personal data, (i) if you dispute the accuracy of this data for the period allowing us to verify its accuracy, (ii) if you consider that we are processing your data unlawfully and you demand a restriction of their use rather than erasure, (iii) if we no longer need this data for the purposes mentioned above but they are still necessary for the establishment, exercise or defense of your legal claims, (iv) in case of exercising your right to object for the duration of the verification as to whether our legitimate grounds prevail over yours.
> You have the right to request the erasure of your personal data. In the event of a request for erasure of your data, ESTEBAN may nevertheless keep them in an intermediate archive, for the period necessary to satisfy its legal, accounting and tax obligations.
> You have the right to request, at any time, to exercise your right to object to processing carried out for reasons relating to your particular situation.
> You also have the right to object to commercial prospecting, without having to provide a reason
> You have the right to exercise the right to data portability, which gives you the right to obtain a copy of your personal data or to transfer them to a third party in a structured, commonly used and machine-readable format.
> You also have the right not to be subject to a decision based solely on automated processing and producing legal effects concerning you or significantly affecting you.
> You have the right to withdraw your consent at any time when the processing of your data is based on consent.
> You also have the right to set guidelines concerning the retention, erasure and communication of your personal data after your death.
These rights can be exercised, at any time, by sending an email to dpo@esteban.fr or a letter to the following address: RGPD ESTEBAN – ZAC Descartes – rue du perpignan CS 40014 LAVÉRUNE 34433 SAINT JEAN DE VÉDAS CEDEX.
You can also lodge any complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL). Additional information is available on its website www.cnil.fr.
