Policies

General statement

DEBAUVE & GALLAIS
places great importance on protecting your privacy. That is why
we have adopted common principles in our Privacy Policy.

DEBAUVE & GALLAIS,
, with its headquarters located at 30 Rue des Saints-Pères, 75007 Paris, is
the entity responsible for processing your personal data.

It applies uniformly to all
services provided by DEBAUVE & GALLAIS,
with the understanding that additional information may be provided to you if
necessary in the case of a specific order.

At
your use of the site https://debauve-et-gallais.com/
we may collect personal data about you. The purpose of this document is to inform you of
how we use and protect your personal data, as well as
why we process this data.

General statement

DEBAUVE & GALLAIS places a high priority on protecting your privacy. That is why we have established a set of guiding principles in our Privacy Policy.

DEBAUVE & GALLAIS, headquartered at 30 Rue des Saints-Pères, 75007 Paris, is responsible for processing your personal data.

These terms apply uniformly to all services provided by DEBAUVE & GALLAIS; please note that additional information may be provided to you if necessary in the case of a specific order.

When you use the website https://debauve-et-gallais.com/, we collect certain personal data about you. The purpose of this document is to inform you about how we use and protect your personal data, as well as the reasons why we process this data.

I. What personal data do we process?

The collection of personal data is limited to what is strictly necessary (data minimization principle).

We collect and use only the personal data we need to provide you with high-quality, personalized products and services.

We may collect various categories of personal data from you, which have been identified in advance as either required or optional for processing your request, including:

identification and contact information (Company, last name, first name, mailing address, email address, phone number, fax number, gender, job title, and signature);
Information required for shipping and processing your orders (shipping address, billing address, EU VAT number, etc.);
identification and authentication data, particularly when using our services (technical logs, system logs, security information, IP address);
data regarding your interactions with us on our websites, apps, social media pages, during in-person meetings and phone or video calls, and in emails.

We never collect sensitive data.

The data we use may be collected directly from you or obtained from the following sources, for the purpose of verifying or enriching our databases:

publications and databases made available by official authorities (Official Gazette);
service providers;
third parties such as credit reporting agencies, in compliance with data protection regulations;
websites/directories/databases/social network pages containing information that you have made public or that has been made public by third parties.

Where the processing of your personal data is based on your consent, you may decide to withdraw it at any time. If your consent is withdrawn, this will not affect the processing of your personal data based on other legal grounds, such as the fulfilment of your orders and the retention of your order data in accordance with applicable law.

If you no longer wish to receive our advertising or promotional information, we remind you that you can revoke your consent to direct marketing at any time directly from the unsubscribe link included in every advertising e-mail we send you. If you do so, we will promptly update our databases and take all reasonable steps to respond to your request as quickly as possible, but we may continue to contact you to the extent necessary in connection with any product or service you have requested.

II. How long do we retain your personal data, why do we do so, and on what legal grounds?

We collect your data for the following purposes and on the following legal bases:

To process your order and carry out customer management activities related to contracts, orders, invoices, and the monitoring of our contractual relationship with our customers. For this purpose, we base our processing on your consent and on the performance of the contract that you or your company has entered into with us. Personal data is retained for the duration of the contractual relationship. In addition, your data (with the exception of your bank details) is archived for evidentiary purposes for a period of 5 years;
Tracking customer behavior. For this purpose, we base our processing on our legitimate interest in developing and promoting our business. Personal data is retained for 3 years from the date of your last visit to our website;
Compiling a database of customers and prospects. For this purpose, we base our processing on our legitimate interest in developing and promoting our business. For customers, data is retained for the duration of the contractual relationship. For prospects, data is retained for a period of 3 years from the date of your last contact;
To send newsletters, solicitations, and promotional messages. For this purpose, we base our processing on our legitimate interest in developing and promoting our business. The data is retained for 2 years from the date of your last contact;
To provide you with information about our products and services. For this purpose, we process your data based on our legitimate interest in responding to your pre-sales and post-sales inquiries. The data is retained for as long as necessary to process your request for information and is deleted once the request has been processed;
To comply with the legal obligations applicable to our business. For this purpose, we base our processing on the need to comply with our legal and regulatory obligations. Invoices are archived for a period of 10 years, while data related to your transactions (excluding banking information) is retained for 5 years;
Processing requests to exercise rights. For this purpose, we process your data based on our need to comply with our legal and regulatory obligations. If we ask you to provide proof of identity, we will retain it only for as long as necessary to verify your identity.

III. To whom may your personal data be disclosed?

Personal data collected in connection with the services offered by DEBAUVE & GALLAIS is processed in accordance with secure protocols and enables DEBAUVE & GALLAIS to manage the data received in its computer systems. In order to fulfill the aforementioned purposes, we may disclose your personal data only to:

Members of our company ;
service providers and subcontractors performing services on our behalf;
Distribution network, business partners;
financial or judicial authorities, government agencies, or public bodies, upon request and to the extent permitted by law;
certain regulated professions such as lawyers, notaries, auditors and bailiffs.

Your data is stored on SHOPIFY's servers in Canada.

In connection with the fulfillment of your order, your data may be transferred outside the European Union. In such cases, the transfer of your data is secured using the following measures:

either the data is transferred to a country for which the European Commission has issued an adequacy decision in accordance with Article 45 of the GDPR: in this case, that country ensures a level of protection deemed sufficient and adequate under the provisions of the GDPR;
either the data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, such transfers are based on appropriate safeguards as set forth in Article 46 of the GDPR, tailored to each service provider;
or the data is transferred on the basis of one of the appropriate guarantees described in Chapter V of the RGPD.

IV. What are your rights, and how can you exercise them?

In accordance with applicable regulations, you have various rights, namely:

Right of access: You may request information regarding the processing of your personal data, as well as a copy of such personal data.
Right to rectification: If you believe that your personal data is inaccurate or incomplete, you may request that it be corrected accordingly.
Right to erasure: You may request the erasure of your personal data to the extent permitted by law.
Right to restriction of processing: You may request that the processing of your personal data be restricted.
Right to object: You may object to the processing of your personal data on grounds relating to your particular situation. You have the absolute right to object to the processing of your personal data for direct marketing purposes, including profiling related to such marketing.
Right to data portability: Where this right applies, you have the right to have the personal data you have provided to us returned to you or, where technically feasible, to have it transferred to a third party.
The right to establish guidelines regarding the retention, deletion, or disclosure of your personal data, to be followed after your death.
Right to withdraw consent: If you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time.

You may exercise your rights by contacting DEBAUVE & GALLAIS at the following contact information:
Contact email: contact@debauve-et-gallais.com
Mailing address: ATTENTION: DPO, DEBAUVE & GALLAIS, 30 RUE DES SAINTS-PERES, 75007 PARIS

V. Security of Your Personal Data

DEBAUVE & GALLAIS takes all necessary technical and organizational security measures to ensure the protection of your personal information, in accordance with applicable regulations.

To this end, we have implemented technical measures (such as firewalls) and organizational measures (such as a login/password system, physical protection measures, etc.).

VI. Cookies

Subject to your consent, DEBAUVE & GALLAIS, as the publisher of the Website, may place cookies on the hard drive of your device (computer, tablet, mobile phone, etc.) when you visit our Website.

Cookies are small files stored on your computer when you visit our website. You can adjust your cookie preferences at any time using the cookie management banner available on our website.

DEBAUVE & GALLAIS uses the following cookies:

Name	Transmitter	Purpose	Duration
cart	Shopify	Save the contents of your cart	Session
cart_currency	Shopify	Save the selected currency	Session
localization	Shopify	Saves the selected language and region	Session
_shopify_essential	Shopify	Basic Store Operations	Session

Name	Transmitter	Purpose	Duration
_shopify_y	Shopify	Unique visitor ID for Shopify statistics	1 year
_shopify_s	Shopify	Session tracking for Shopify statistics	30 min
_shopify_analytics	Shopify	Browsing analytics	Session
_ga	Google Analytics	Unique visitor ID for traffic statistics	2 years
_ga_9ZZ8V6H0Z6	Google Analytics	Google Analytics Session State (GA4 property)	2 years
_ga_77D5GGBDCP	Google Analytics	Google Analytics Session State (GA4 property)	2 years

Name	Transmitter	Purpose	Duration
_gcl_au	Google Ads	Measuring Google Ad Conversions	90 days
_fbp	Meta (Facebook)	Meta Conversion Tracking and Remarketing	90 days
_shopify_marketing	Shopify	Marketing Campaign Attribution	Session
__kla_id	Klaviyo	Visitor identification for email segmentation	2 years

VII. How can you find out about changes made to this document?

In a world of constant technological change, we will regularly update this information document. We invite you to consult the latest version of this document on our website, and we will inform you of any substantial changes through our websites or by our usual means of communication.

VIII. How can you contact us?

If you have any questions or concerns regarding DEBAUVE & GALLAIS’s compliance with this policy, or if you would like to provide DEBAUVE & GALLAIS with suggestions or feedback aimed at improving the quality of this policy, you may contact DEBAUVE & GALLAIS using the following contact information:

Contact email: contact@debauve-et-gallais.com
Mailing address: ATTENTION: DPO, DEBAUVE & GALLAIS, 30 RUE DES SAINTS-PERES, 75007 PARIS

IX. Breach of Personal Data

In the event of a breach involving your personal data, DEBAUVE & GALLAIS undertakes to notify the CNIL in accordance with the requirements of the GDPR.

If you believe that DEBAUVE & GALLAIS is not complying with its obligations regarding your personal data, you may file a complaint or submit a request with the relevant authority. In France, the relevant authority is the CNIL, to which you can submit a request online by clicking on the following link: https://www.cnil.fr/fr/plaintes.