OH MY CREAM attaches great importance to the protection of the personal data and privacy of its users and customers. To this end, OH MY CREAM undertakes to process such personal data in accordance with the laws and regulations applicable in the countries from which its users access the www.ohmycream.com website, including in particular the European General Data Protection Regulation ("RGPD") and the French Data Protection Act no. 78-17 of January 6, 1978, as amended.
This Privacy Policy sets out the manner in which OH MY CREAM collects and processes personal data communicated by the user on the website www.ohmycream.com (hereinafter the "Site").
All personal data is subject to computer processing for the purpose of processing and delivering orders, choosing the samples offered and suggesting products suited to the Customer's needs. This data is exclusively reserved for OH MY CREAM.
1. What is personal data?
Personal data refers to any information relating to an identified or identifiable natural person (referred to as a "data subject").
In the context of the Site, the persons concerned are Internet users visiting this website and customers purchasing products on the Site.
The personal data concerned by this Privacy Policy is therefore all data relating to these Internet users and users (customers), insofar as they are identified or identifiable, for example by means of their user account identifier.
2. What personal data is collected, for what purposes, and on what legal basis?
All personal data communicated by the user on the www.ohmycream.com site - through a purchase or the creation of an account - is processed electronically or manually for the following purposes:
- Commercial relationship management (order processing and delivery, choice of samples offered with orders, invoices): When you place an order with us, we record your data in order to process your order as efficiently as possible and to ship the products you have purchased. This information is also kept for security purposes, to comply with legal and regulatory obligations, and to enable us to improve and personalize our offers. Your e-mail address enables us to send you an order confirmation and to communicate with you if necessary. Your e-mail address is also used to identify you when you log in to your user account. The personal data collected on www.ohmycream.com are exclusively reserved for OH MY CREAM.
This processing is based on the need for its implementation for the execution of a contract to which the user is a party, namely the Site's general terms and conditions of sale (GTC/SGC).
- Customer relationship management Customer relationship management: after-sales service, beauty advice, product suggestions adapted to customer needs, return-to-stock notifications.
This processing is based on the necessity of its implementation for the execution of a contract to which the user is a party, namely the Site's general terms and conditions of sale (GTCS/GMCS).
The processing of customer feedback on products is based on their consent.
- Login to your user account When you place an order on our Site, we offer you access to your password-protected "User Account". This allows you to access information about your past orders and to correct your personal information if necessary. It is important not to divulge to third parties the access data to your "User Account", which is for strictly personal use only.
This processing is based on the necessity of its implementation for the execution of a contract to which the user is a party, namely the general terms and conditions of use of the Site (CGU/ CGV).
- Advertising, marketing research and analysis. We use your data to send you information about our products and to recommend products for sale on our site that may be of interest to you. We use e-mail advertising only to the extent permitted by law.
This processing is based on your consent.
- Newsletter subscription Subscribe to our newsletter: If you decide to subscribe to our newsletter, you will receive information about special offers which you can stop receiving at any time by clicking on the link provided in each newsletter. The information collected when you subscribe to our newsletter enables us to provide you with more relevant commercial offers.
This processing is based on your consent.
- Site consultation For security reasons, the following data may be collected and temporarily recorded during your visits to our Site: domain name or IP address, http response code, number of bytes transferred, address of the website from which the user arrived. This processing is based on OH MY CREAM's legitimate interest, which is to gain better knowledge of the number of visitors to the Site.
This data may also be used to provide our users with more relevant offers (notably through the use of cookies). This processing is based on your consent (via the cookies banner).
- Ask OMCTo facilitate your exchanges with our customer service department, we use the Hero chat application. This application is developed and offered by the American solution Hero, in compliance with European regulations. The data collected by Hero is stored in the European Union and is only kept for the time strictly necessary for our internal quality control. To find out more about Hero's data protection policy, go to this page.
3. Who is the data controller and how can I contact him?
The company responsible for processing personal data is OH MY CREAM, a société par actions simplifiée (simplified joint stock company), registered in the Paris Trade and Companies Register under number 751 427 527, with its registered office at 47 rue de Babylone, 75007 Paris, France.
If you have any questions about this Privacy Policy, the processing of personal data on the Site, or in general about the protection of personal data and privacy within OH MY CREAM, you can contact us at the following email address: contact@ohmycream.com.
4. With whom is the data shared?
The personal data collected and processed as set out in Article 2 above are used by competent and authorized persons within OH MY CREAM.
It may also be shared with service providers and subcontractors to the extent necessary to achieve the processing purposes described above.
Secure data transfer: Our site is protected by a security system. We have adopted the SSL (Secure Socket Layer) encryption process, which protects your data against loss, destruction, access, modification or dissemination by unauthorized third parties.
5. Pow long are data stored?
The personal data collected and listed as set out in Article 2 above are kept by OH MY CREAM and any subcontractors for periods not exceeding the fulfilment of the purposes described.
6. Your rights
In accordance with applicable laws and regulations on the protection of personal data, you have the following rights regarding the processing of your personal data.
You can exercise these rights by contacting us at : SAS OH MY CREAM 47 rue de Babylone, 75007 Paris, France or by email: contact@ohmycream.com.
- Access, rectification and deletion rights You have the right to access, modify, rectify and delete your personal data. You may modify the personal data contained in your user account, or request correction of your personal data if it proves to be inaccurate, incomplete or obsolete. You may also request access to or deletion of your personal data in accordance with applicable regulations.
- Right to portability of personal dataThis right differs from the right of access to personal data in that (i) it concerns only the data supplied by the user to OH MY CREAM and (ii) it allows the user to obtain this data in a structured, machine-readable format.
- Right to object You may, for legitimate reasons, object at any time, selectively or globally, to the use of your personal data for advertising or research purposes. To this end, a simple written notification of your request is sufficient by email or post to the above address.
- Right to limit processing: In certain cases provided for by the applicable regulations, you may ask OH MY CREAM to limit the processing of your personal data.
- Right to define directives concerning the fate of data after deathThe user may provide OH MY CREAM with instructions concerning the storage, deletion and communication of his or her personal data after his or her death.
- Right to withdraw consent at any time: For all processing operations, among those listed above, whose legal basis is the user's consent, the user has the right to withdraw this consent at any time, without having to justify it. In this respect, the customer may subscribe to the OH MY CREAM newsletter and thus choose to be regularly informed of offers. They may unsubscribe at any time by clicking on the link provided for this purpose on each newsletter.
- Right to lodge a complaint with a supervisory authority: The user has the right to lodge a complaint concerning the processing carried out by OH MY CREAM with the competent supervisory authority. In France, this supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).
7. Modification of this Privacy Policy
OH MY CREAM reserves the right to modify and update this Privacy Policy. OH MY CREAM will publish this new Privacy Policy on its Site. In order to be informed of these possible modifications, OH MY CREAM advises the user to reread this Privacy Policy on the Site regularly.
