Privacy policy
1. Introduction
Maison Crivelli, a simplified joint-stock company registered with the Paris Trade and Companies Register under number 833 175 029, with its registered office at 280 rue Saint Honoré, 75001 Paris (hereinafter "Maison Crivelli") welcomes you to its website www.maisoncrivelli.com (hereinafter the "Site").
The elements below define the privacy policy governing the processing of personal data that may be collected on the Site (hereinafter the "Privacy Policy").
2. Purpose
In establishing a relationship of trust and transparency with all visitors and/or users of our Site, we wish to emphasize our commitment to respecting your privacy and protecting your personal data in accordance with EU Regulation 2016/679 (hereinafter "GDPR").
3. Scope
This Privacy Policy applies to all processing of personal data relating to data subjects.
The processing of personal data may be managed directly by Maison Crivelli or through a subcontractor specifically designated by Maison Crivelli.
This Privacy Policy is independent of any other document that may apply within the contractual relationship between Maison Crivelli and the data subjects.
The Site may contain links to other websites over which we have no control. We cannot be held responsible for the content or privacy policies of these sites.
4. Definitions
For a proper understanding of the Privacy Policy, it is specified that:
- "Personal data" means any information or set of information allowing a person to be identified directly (e.g. name, first name, email address, home address) or indirectly (e.g. through pseudonymized data such as a unique identification number). Unique identifiers such as a computer IP address may also be considered personal data.
- "Data controller" means the entity that determines the purposes and means of processing personal data and is responsible to data subjects for compliance with applicable regulations. The data controller is hereinafter referred to as "Maison Crivelli" or "we". Maison Crivelli has appointed a GDPR contact person for any questions regarding personal data processing: info@maisoncrivelli.com
- "Processor": any natural or legal person who processes personal data on behalf of Maison Crivelli.
- "Data subjects" or "you": visitors and/or users of the Site.
- "Recipients": natural or legal persons who receive personal data from Maison Crivelli.
5. Personal Data Processing
5.1 Personal Data
The Client is informed and agrees that their personal data may be collected on the Site and used by MAISON CRIVELLI as data controller under GDPR.
Collected data:
| Personal Data | Purpose of processing | Legal basis | Retention period | Data recipients |
|---|---|---|---|---|
| First name, last name, delivery address, billing address, email address, phone number | Order management | Contract | For the entire duration of the contractual relationship + 5 years (statutory limitation period). Legal archives (invoices): 10 years (legal obligation under the Commercial Code). | Service providers, subcontractors, accounting department |
| First name, last name, delivery address, billing address, email address, phone number | Account creation | Consent | Until account deletion or after 3 years of prolonged inactivity | |
| Email address | Commercial communication | Contract | Up to 3 years maximum from the last contact (e.g. click, purchase) or from the end of the relationship | Service providers, subcontractors, third parties |
| Bank details | Retention of payment card data following a transaction | Legal | Proof of payment (claims): 13 months (or 15 months for deferred debit) in secure archiving. Electronic wallet: Until consent is withdrawn or the card expires. | Service providers, subcontractors, third parties |
| IP Address | Targeted advertising, cookies | Consent | 13 months for the lifespan of tracking cookies | Service providers, subcontractors, third parties |
Data is not transferred outside the EU.
Additional details: Shopify, Inc. stores product, catalog, customer, and order data. Security: TLS encryption and 3D Secure used.
6. Data Retention
After the periods mentioned, data is deleted or anonymized unless required for legal disputes.
7. Data Subject Rights
You have rights including access, rectification, deletion, restriction, objection, portability, post-mortem directives, and protection against automated decision-making.
8. Exercising Rights
You may contact us via:
- online contact form
- MAISON CRIVELLI SAS, 164 Rue du Faubourg Saint-Honoré, 75008 Paris, France
Identity verification may be required.
9. Processors
We may share data with processors under GDPR compliance.
10. Processing Register
Maison Crivelli maintains a register of processing activities and complies with CNIL requirements.
11. Security Measures
We implement technical and organizational measures including access control, infrastructure security, encryption, audits, and monitoring.
12. Data Breaches
We notify CNIL and affected users when required.
13. Sale of Personal Data
We do not sell personal data.
14. International Transfers
Transfers outside the EU are protected by standard contractual clauses.
15. CNIL Complaint
You may file a complaint with CNIL (France).
16. Miscellaneous
This policy may be updated at any time.