The purpose of this privacy policy is to explain why we collect your data and how we are committed to protecting it.
Shock Factory is committed to protecting your personal data and privacy.
As such, and in application of the General Data Protection Regulation (hereinafter referred to as "GDPR"), we hereby inform you of the conditions under which your personal data will be processed by us.
What personal data do we process?
Purposes:
We may collect and store your personal data, in particular in order to:
- Process and reply to your messages, Create and manage access to your accounts, Establish and monitor the commercial relationship that may arise from your messages, Improve our customer care and service, Manage the smooth operation and personalisation of services, Remember your choices regarding the use of cookies, Process and reply to your requests to exercise your rights, To meet regulatory requirements in force or in the process of being adopted.
Categories of data :
- Contact details (e.g. surname, first name, telephone number, email); Technical and location information generated in the course of using our services
Legal basis for processing
The processing of personal data is based :
- Either on the consent of the data subject (Article 6.1.a of the RGPD) for all processing that requires prior collection of consent. In online forms, mandatory fields are marked with an asterisk. If you do not answer the mandatory questions, we will not be able to provide you with the requested services.
- For the performance of a contract or pre-contractual measures,
- Or for the pursuit of a legitimate interest (Article 6.1.e of the RGPD).
- Or to comply with a legal or regulatory obligation;
Your data will be kept for as long as is necessary to fulfil the purposes mentioned above.
The length of time Customer personal data is kept depends on the purpose in question. In this context, the Customer's personal data is kept for the time necessary to fulfil the request. If the request is not fulfilled, the personal data is deleted within the period recommended by the Commission Nationale Informatique et Libertés (CNIL), at the end of a period of three years from the date of collection, subject to :
- legal archiving possibilities and obligations,
- obligations to retain certain data for evidential purposes and/or to make it anonymous.
The Customer's personal data collected and processed for the purposes of executing the offers are kept for the time required to manage the contractual relationship.
By way of derogation, the personal data required to establish proof of a right or a contract are archived in accordance with legal provisions (5 or 10 years after the end of the commercial relationship, depending on the case).
Who will receive your data?
Your personal data is intended for Shock Factory.
Our internal departments: They are processed by the staff of our various departments such as the sales department or the department in charge of IT security.
Traffic analysis (such as Google Analytics)
From time to time we may need to allow our partners to process, on our behalf, the personal information we hold about you for the purposes set out in this policy or as otherwise required by law.
Customer personal data collected is hosted in France.
In the event that we use a service provider located outside the European Union, we undertake to verify that appropriate measures have been put in place to ensure that personal data is afforded an adequate level of protection.
How does Shock Factory protect the security of your data?
We put in place all the organisational and technical measures necessary to ensure an appropriate level of security for your personal data, and in particular to prevent any loss of confidentiality, integrity or accessibility.
We frequently back up data and put in place technical and organisational measures to ensure that customers' personal data is kept securely for as long as is necessary for the purposes for which it is to be used.
What rights do you have over your personal data?
In accordance with Applicable Regulations, you have the following rights:
- A right of rectification: you have the right to obtain the rectification of inaccurate data concerning you. You also have the right to complete incomplete data concerning you, by providing a supplementary declaration. If you exercise this right, we undertake to communicate any rectification to all recipients of your data,
- A right of deletion: in certain cases, you have the right to obtain the deletion of your data. However, this is not an absolute right and we may, for legal or legitimate reasons, retain this data.
- A right to the limitation of processing: in certain cases, you have the right to obtain the limitation of the processing of your data,
- A right to data portability: you have the right to receive your data, which you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to pass it on to a third party of your choice. This right only applies where the processing of your data is based on your consent, on a contract or is carried out by automated means,
- A right to object to processing: you have the right to object at any time to the processing of your data for processing based on our legitimate interests, a public interest mission and for commercial prospecting purposes. This is not an absolute right and we may for legal or legitimate reasons refuse your request to object,
- The right to withdraw your consent at any time: you may withdraw your consent to the processing of your data where the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent carried out prior to such withdrawal,
- The right to lodge a complaint with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices.
Pursuant to the GDPR, the conditions for exercising these rights may vary depending on the lawfulness basis of the processing mentioned in the first paragraph.
We will respond to any exercise of rights as soon as possible and in any event within 30 days of receipt of the request.
We reserve the right to:
- To request proof of the applicant's identity if there is reasonable doubt as to the applicant's identity, in order to comply with the applicant's obligation of confidentiality,
- Extend the response time by two months, informing the applicant of the extension and the reasons for the extension within one month of receipt of the request,
- To refuse to respond to a request if it is considered to be abusive (in view of its number, repetitive or systematic nature).
Who should I contact for all RGPD-related queries?
You can contact the company using the contact details displayed on the shock-factory.fr website, in our legal notice, or via our contact page.
If, despite our efforts and commitments, you feel that your rights concerning your personal data have not been respected, you may submit a complaint to the Commission Nationale Informatique et Libertés: CNIL 3 Place de Fontenoy TSA 80715 75334 Paris Cedex 07.
Data Protection Policy subject to change
This Privacy Policy may change from time to time.
As we are constantly developing our services, we reserve the right to modify this Privacy Policy, in accordance with the legal provisions in force. Any changes will be published on this document in due course. We advise you to check this page regularly for any changes or updates to our Privacy Policy.
Cookie policy
What is a cookie?
Cookies are small text files that a website stores on your computer or mobile device when you visit the site.
They make your online experience easier by saving browsing information. Thanks to cookies, sites can keep you connected, remember your site preferences and offer you personalised content. Cookies can also be used to compile statistics on the browsing experience and to display targeted advertising.
In general, cookies can be classified by:
Domain:
- First-party cookies are issued by a website that a user visits directly.
- Third-party cookies are not created by the website consulted, but by a third party such as Google Analytics, DoubleClick, Facebook, Twitter, LinkedIn, Youtube, Vimеo, etc.
Purpose:
- Strictly necessary cookies are required for the website to function correctly.
- Preference cookies allow a website to remember choices you have made in the past.
- Statistics cookies help the website owner to collect statistical data and understand how visitors interact with the website.
- Marketing cookies track the user's online activity to help advertisers deliver more relevant ads.
Duration:
- Session cookies that are deleted when the user closes the browser.
- Persistent cookies remain on the user's device for a certain period of time.
What cookies and trackers do we use?
Mandatory cookies
PHPSESSID
First-party session cookie generated by PHP-based applications. This is a general-purpose identifier used to maintain the user's session variables. It is normally a randomly generated number. The way it is used can be site-specific, but a good example is maintaining a user's login status between pages.
Cookies for managing visitor statistics
_gid
Duration 1 day. This cookie is used by Google Analytics. It stores and updates a unique value for each page visited and is used to count and track page views.
_gat
Duration 1 minute. This cookie name is associated with Google Universal Analytics. According to the documentation, it is used to limit the request rate, which limits the collection of data on high-traffic sites.
_ga
Duration 2 years. This cookie name is associated with Google Universal Analytics - which is a major upgrade to Google's most commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a customer identifier. It is included in every page request on a site and used to calculate visitor, session and campaign data for site analysis reports.
Targeting cookies
YSC
More information .youtube.com / Third-party session This cookie is set by YouTube to track views of embedded videos.
VISITOR_INFO1_LIVE
More info .youtube.com / Third party 6 months This cookie is set by YouTube to keep track of user preferences for embedded YouTube videos; it can also determine whether the website visitor is using the new or old version of the YouTube interface.
Your cookie preferences
When you access the site for the first time, a cookie banner offers you the option of accepting or refusing Cookies that are not essential to the operation of the site. You may refuse or deactivate Cookies at any time, with the exception of those necessary for the stable operation of the site. You can modify your cookie management preferences at any time.