OR FINE ART collects and processes the personal data provided in accordance with the regulations governing the protection of personal data as set out in Act no. 78-17 of 6 January 1978 relating to information technology, files, and civil liberties, known as the "Information Technology and Civil Liberties" Act, and in EU Regulation 2016/679 of 27 April 2016 relating to data protection, known as the "GDPR".
As such, OR FINE ART undertakes to ensure the respect of your privacy and to protect the personal data processed:
In a lawful, fair, and transparent manner;
Collected for specified, explicit, and legitimate purposes;
Adequate, relevant, and limited to what is necessary with regard to the purposes for which they are processed;
Processed in such a way as to ensure appropriate security of personal data.
1. WHO IS THE DATA CONTROLLER RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
The data controller is OR FINE ART, a limited liability company with share capital of €2,000.00 entered in the Paris Companies Register under no. 834 045 189, whose registered office is located at 4 Rue François 1er 75008 Paris, represented by its General Manager Mr Richard ORLINSKI.
OR FINE ART therefore determines the purpose and means of data processing, i.e. their objectives and the way in which they are achieved.
2. WHAT IS THE PURPOSE AND LEGAL BASIS OF COLLECTING AND PROCESSING YOUR PERSONAL DATA?
The following points provide further details on the purposes for which OR FINE ART collects and processes your personal data and the legal basis for implementing the data processing.
2. LEGAL FRAMEWORK
A1. Managing and processing your requests is done via the contact form.
A2. Your consent. You are entitled to withdraw your consent at any time, however, withdrawal of consent does not affect the legality of the processing based on the consent provided prior to such withdrawal.
B1. Managing and processing your requests if you contact us by telephone, e-mail, or by regular mail.
B2. Our legitimate interest in responding to your information requests. You have the right to object at any time to the processing of your personal data carried out on the basis of our legitimate interest.
C3. Sending our newsletter by e-mail.
C3. Your consent. You are entitled to withdraw your consent at any time, however, withdrawal of consent does not affect the legality of the processing based on the consent provided prior to such withdrawal.
D4. Sending commercial offers for products similar to those already ordered from the website.
D4. Our legitimate interest in presenting you with products that you may object to at any time.
E5. Creating your client account.
E5. Entering into a contract with you.
F6. Processing and tracking orders, deliveries, invoices, and payments.
F6. Entering into a contract with you.
G7. Recording your credit card number to facilitate future purchases.
G7. Your consent. You are entitled to withdraw your consent at any time, however, withdrawal of consent does not affect the legality of the processing based on the consent provided prior to such withdrawal. The cryptogram information provided for your bank card will be deleted once the purchase is settled.
H8. Compliance with accounting and tax requirements.
H8. Compliance with OR FINE ART's legal obligations.
I9. Managing preliminary disputes and litigation.
I9. Our legitimate interest in establishing the validity of a right or contract e.g. in the event of a dispute.
3. WHAT PERSONAL DATA DO WE COLLECT?
Personal data is any information relating to an identifiable individual, namely one who can be identified directly by their first and last name or indirectly by a telephone number or other identifier.
In the course of the various contacts we maintain with you, you may be asked to provide us with further information about yourself. This information may be collected when you fill in the various data collection forms on the site, when you make a purchase, or when you create a client account and so on. Thus, when you browse the Website, OR FINE ART is likely to collect the following personal data:
Identification data: Last name, first name, e-mail address, postal address, billing address, telephone number, user name, and password;
Payment data: bank card number, expiration date, and cryptogram on the back;
Data pertaining to customer relations: Purchase Orders, invoices, correspondence with the client, purchase and order history;
Content of messages sent via our contact email address;
The provision of certain data is compulsory and is indicated by the presence of a red asterisk.
OR FINE ART is also likely to collect personal data provided by you in the course of our communications should you contact us by telephone, e-mail, or by regular mail.
Furthermore, whenever you visit our Website, we may collect information relating to your connection and browsing. A number of different technologies may be used to compile this data. We refer to them generically as "cookies".
4. WHO HAS ACCESS TO YOUR PERSONAL DATA?
4.1 OR FINE ART STAFF
OR FINE ART undertakes to ensure that access to the personal data in its possession is only available to authorised employees in accordance with their responsibilities. These persons are qualified as "authorised persons".
4.2. OR FINE ART'S SUBCONTRACTORS
OR FINE ART relies on subcontractors located within the European Union, offering an adequate level of protection.
In all cases, OR FINE ART undertakes to ensure that its subcontractors provide sufficient guarantees in terms of appropriate technical and organisational measures to ensure the security and confidentiality of your data.
4.3. OR FINE ART'S BUSINESS PARTNERS
OR FINE ART may share your personal data with its business partners. When browsing the Website, you have the option of consenting to the transmission of your data to our business partners. Our partners you authorise to access your data are thus data controllers for this purpose, subject to data protection rules.
For more information on the use of your personal data by our business partners, please refer to the Data Protection Policies of these partners.
4.4. AUTHORISED THIRD PARTIES
Upon request, or within the framework of a specific mission or exercising a disclosure right, OR FINE ART may be required to provide your personal data to authorities such as administrative or judicial agencies, in accordance with a legislative or regulatory provision.
5. HOW LONG WILL YOUR PERSONAL DATA BE RETAINED?
Your personal data shall be retained for the time necessary to achieve the purposes for which it was collected.
OR FINE ART stores the personal data necessary for fulfilling a contract throughout the duration of the commercial relationship. After a period of three years following your last contact with OR FINE ART, your personal data will be retained in an intermediate archive for 10 years, in accordance with the regulations.
Personal data relating to payment information is only retained until the product is received, together with the cancellation period provided for online sales. In order to facilitate future purchases, this payment data may be retained for a longer period. It may be stored until consent is withdrawn and/or the bank card expires, except for the visual cryptogram, which is deleted as soon as the purchase settles.
In the context of the contact form, sending the newsletter or commercial prospecting for similar products, and more generally any contact on your part, OR FINE ART will retain such personal data for a period of three years either from its initial collection or from your last contact.
Beyond these retention periods, your personal data may be subject to intermediate retention with restricted access, for the time necessary to comply with OR FINE ART's legal and regulatory obligations or within the framework of managing a possible dispute.
6. WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM?
Access rights: you may request access to your personal data held by us and obtain a copy of it in a legible, understandable format;
Rectification rights: you are entitled to rectify, complete, or update your personal data;
Erasure rights: you may request the deletion of your personal data, in particular when it is no longer necessary for the purposes for which it was collected;
Right to restrict processing: you may request that the use of your personal data be restricted in accordance with Article 18 of the GDPR;
Portability rights: you are entitled to request a copy of your personal data for the purpose of transferring it to another data controller;
Opposition rights: you may object to the processing of your personal data in accordance with Article 21 of the GDPR;
Right to withdraw consent: you are entitled to withdraw your consent to the data processing for which it was obtained. Withdrawal of consent does not affect the lawfulness of the processing based on the consent given prior to such withdrawal.
Before responding to a request to exercise a right, we are entitled to verify your identity and/or ask you to provide us with further information.
Following a request to exercise a right, OR FINE ART undertakes to provide you with information on the measures taken as soon as possible and in any event within one month of receipt of the request. This period may be extended by two months depending on the complexity and number of requests. OR FINE ART will inform you of this extension and of the reasons for the postponement within one month of receipt of the request.
In the event that OR FINE ART does not comply with the request, you will be informed, at the latest within one month of receipt of the request, of the reasons for its inaction and of the possibility of lodging a claim with a supervisory authority and of taking legal action.
In the event of a persistent disagreement concerning your personal data, you have the right to lodge a complaint with the French National Commission for Information Technology and Civil Liberties (CNIL) on its website https://www.cnil.fr/ or at the following address:
Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy - TSA 80715
75334 Paris Cedex 07
7. SECURITY OF THE PROCESSED PERSONAL DATA
OR FINE ART attaches the utmost importance to the security and integrity of your personal data. Thus, OR FINE ART undertakes to put in place and maintain appropriate technical and organisational measures to ensure the security and confidentiality of your personal data. This applies in particular to protect your personal data against accidental or illicit destruction, accidental loss, alteration, distribution or unauthorised access, as well as against any other form of illicit processing or communication to unauthorised persons.
In the event of a data breach likely to have an impact on you and cause a high risk to your rights and freedoms, OR FINE ART undertakes (i) to notify the French National Commission for Data Protection and Civil Liberties (CNIL) of this data breach as soon as possible, at the latest within 72 hours of becoming aware of it, (ii) to inform you as soon as possible, and (iii) to make every effort to take all possible measures to neutralise the data breach and minimise its impact.