1. WHO ARE WE?
Our company Bonpoint SAS (Simplified Joint Stock Company) with a capital of €500,000, having its registered office at 62 avenue d’Iéna, 75116 PARIS, registered with the Paris Trade and Companies Register under number 702 041 526, represented by Mr. Pierre-André Cauche in his capacity as President, hereinafter referred to as "Our Company," is responsible for the collection, processing, and use of the data you provide to us.
Our Company is not required to appoint a Data Protection Officer under the applicable regulations. However, designated contacts are appointed within the company to ensure ongoing compliance with these regulations and the implementation and regular updating of best practices regarding the protection of personal data (hereinafter referred to as "PD").
2. WHAT DATA DO WE COLLECT AND USE?
The data that the Bonpoint brand collects about you is limited to the information you provide in connection with the services offered and your interactions with the brand:
Account creation and billing information
Your first and last names, postal address, phone number, date of birth, and the data necessary for payment processing, login IDs and passwords (encrypted and stored only to recognize your authentication on the site), persons to whom purchases must be shipped.Financial information related to transactions
Credit card number and expiration date, name and address of the cardholder.Information related to browsing habits (Google Analytics)
Cookie ID, pages visited, actions performed on the site, frequency, plus demographic and geographic data.Information related to purchasing habits (Magento)
Purchase history, habits, and preferences.
3. HOW ARE THEY COLLECTED?
With your prior consent, this data is collected when you provide it to us following an order process, when opening a customer account, or when subscribing to our newsletter. They are used to process your orders, including any warranties, our service offerings, as well as the technical administration of Our Site.
4. FOR WHAT PURPOSES DO WE USE YOUR DATA AND ON WHAT LEGAL BASIS?
We assure you that the personal data you provide to us is used only for explicit and legitimate purposes. It allows us to:
Process your orders, payments, delivery of goods, and provision of services you request.
Manage our customer relationships.
Send you newsletters or invitations to events.
Facilitate and streamline the processing of your order as much as possible.
Improve our service towards you.
Seek to prevent any form of fraud and the risk of unpaid invoices.
Process and resolve your complaints or questions.
5. WITH WHOM DO WE SHARE YOUR DATA? (WHO ARE THE RECIPIENTS OF YOUR DATA?)
We may transmit your information to third parties such as service providers of Our Company, our partners, or affiliated or subsidiary companies of our group ("Group Companies"), particularly for the purpose of processing your order, sending our newsletters, or to facilitate and optimize our services to you.
We assure you that all your personal data is confidential, and access is limited to employees of Our Company, service providers, and agents of Our Company who need it in the course of performing their duties. We guarantee that all our employees who have access to your personal data are bound by a confidentiality obligation and are subject to disciplinary measures and/or other sanctions in case of non-compliance with these obligations.
To process payments, we transmit your payment data to the following authorized service provider: CIC. You can also find more information about the data protection measures they apply on their websites.
Furthermore, we do not share, sell, or disclose your data (customer files) to third parties unrelated to Our Company.
6. ARE YOUR PERSONAL DATA TRANSFERRED?
If the Site is accessed from a country outside the European Union, whose legislation regarding the collection, use, and transfer of data differs from that of the European Union, Our Site being governed by French law, the corresponding terms of use, and this Policy, you consent to your personal data (hereinafter referred to as "Personal Data") being transferred to the European Union.
We may also transfer your data to Group Companies which may be located outside the European Union, always within the scope of the purposes stated above. When this is the case, we ensure, prior to the transfer, that these entities provide an adequate level of protection in accordance with applicable legislation.
Your Personal Data will in no case be transferred outside countries belonging to the European Economic Area or already considered, at the date of transfer, by the European Commission as providing an adequate level of protection to citizens.
You can consult the list of these countries at the following address:
https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en
7. FOR WHAT PURPOSES DO WE USE COOKIES, TARGETING, AND SOCIAL PLUGINS?
Our Company uses small text files (also called cookies) stored on your hard drive when you visit Our Site. They save information such as language preference, visit duration, and pages viewed. These cookies allow us to improve the smoothness of navigation on Our Site, analyze user traffic and usage, and produce statistics to help us enhance the presentation of our products and our communication.
You have the option to customize the settings for these cookies in your browser. If you wish to prevent their storage on your hard drive, you can select “Reject cookies” in your browser settings.
Some features of Our Site (sharing content on social networks, direct video playback) rely on services offered by third-party sites. These features place cookies that allow them to track your browsing, analyze your browsing habits, measure Our Site’s audience, your interests, and offer you targeted promotions. These cookies are only placed if you give your consent. You can find information on the nature of these cookies and accept or refuse them either globally for the entire Site and all services, or service by service.
Furthermore, you can at any time delete cookies already stored on your computer. However, in this case, when you browse Our Site, some features will no longer be accessible, and the functionality will no longer be optimal. We disclaim all liability in this regard.
Our Site uses plugins from social networks such as Facebook, Instagram, and WhatsApp. If you do not want Facebook or Instagram to link the data collected via Our Site directly to your profile, we invite you to log out of the corresponding service before visiting Our Site. You can also completely prevent the plugin from loading with browser add-ons, for example, the script blocker “NoScript” (http://www.noscript.net/).
8. OUR NEWSLETTERS AND ADVERTISING CAMPAIGNS
If you have given your consent for this purpose, you will receive our newsletter as well as regular information about commercial promotions and products from Our Company.
We also wish to inform you about the service we use to send you the newsletters. This service is Scal-e.
Your data allows us to communicate with you as part of marketing campaigns (by email or mail) and to keep you informed about news or new products from Our Company that may interest you.
9. HOW LONG IS YOUR DATA RETAINED?
Our Company does not keep your personal data for longer than necessary for the purposes for which it is collected. The retention period is therefore limited according to the purpose of the processing and within the framework of applicable legislation.
Thus, data relating to our customers is kept for the entire duration of the commercial relationship, plus an additional 3 years for marketing and prospecting purposes, without prejudice to any applicable retention obligations or limitation periods.
Data relating to prospects is retained for a period of 3 years from the date of the last incoming contact with Our Company.
10. WHAT SECURITY DO WE PROVIDE FOR YOUR DATA?
Our Company protects and secures the personal data collected. We ensure their confidentiality and prevent them from being distorted, damaged, destroyed, or disclosed to unauthorized third parties.
We have therefore taken appropriate physical, electronic, and organizational protection measures to prevent any loss, misuse, unauthorized access or disclosure, alteration, or possible destruction of your personal data.
Among these protection measures, we use technologies specially designed to protect your personal data during its transfer. However, despite the efforts made, Our Company cannot guarantee the infallibility of this protection due to unavoidable risks that may occur during data transmission in general. That is why we advise you to exercise caution to prevent any unauthorized access to your personal data. In particular, to avoid intrusions into your personal data, do not forget to log out as soon as your computer is shared. Indeed, we would like to remind you that you are responsible for the confidentiality of your password and the information in your account.
Your credit card payment is secured with the 3D Secure system, which allows double identification of the cardholder via a one-time secure code sent by SMS. Payment validation by your bank can only take place after the secure code has been entered. Under no circumstances does Bonpoint retain your bank details. Transfers to banks are encrypted and secured.
11. WHAT ARE YOUR RIGHTS?
You can at any time (when creating your customer account, when placing an order, or in your personal account settings on Our Site) access your personal data, modify it, update it, or request its deletion.
You can also, without having to justify the reason and free of charge, exercise your rights to access, modify, update, or delete your data by sending your request in writing to our head office at:
"Bonpoint Company – CRM Department, 62 avenue Iéna, 75116 Paris."
To enable us to fulfill your request, you will need to provide a copy of your identity document. The processing time for these requests will be a maximum of one month.
You may also withdraw at any time the consent you have given us for the collection and use of your data, always without having to justify any reason, for marketing solicitations or the receipt of our newsletters by clicking on the hyperlink at the bottom of our communications.
12. WHO TO CONTACT IN CASE OF A DISPUTE?
In case of difficulties, Our Customer Service and Our Marketing Service are available to answer your questions and will do everything possible to provide you with a satisfactory response.
You can also, (under the French Data Protection Act of January 6, 1978, as amended, and the European General Data Protection Regulation No. 2016/679) at any time file a complaint with the CNIL, the supervisory authority in France, by email, telephone, or mail at the following address:
Mail: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Website: https://www.cnil.fr/fr/plaintes
Phone: +33 1 53 73 22 22
You also have the option to contact another equivalent supervisory authority in the EU Member State where you reside. The list is available at the following link: