PRIVACY POLICY
Through this document, the company JASMIN 23 09 distributing the SLOW POTTER brand (hereinafter referred to as “SLOW POTTER” or “we”) wishes to inform Internet users consulting this website about the purpose, nature and scope of the processing of personal data concerning them. Within the meaning of the General Data Protection Regulation GDPR, the data controller on our website is the company JASMIN 23 09, 25 rue Titon, 75011 Paris, France (sawasdee@slowpotter.com).
USE OF PERSONAL DATA
We collect, process and use personal data in order to provide our services. We also promote our products and inform customers and potential buyers about the nature and function of our products. The scope of the processing of personal data therefore depends primarily on the way in which our website is visited, in other words whether it is a simple “visit”, or a visit resulting in by a commercial transaction.
Children’s privacy
Our website is accessible to everyone, but it is not intended for children. To our knowledge, we do not collect personal data attributed to users considered to be children by the law in force in their country.
Nature of data collected
- The information provided by the user when creating their customer account and for the execution of their orders.
When a user places an order on our site, they must provide contact and payment information as well as an email address. The email address is used in particular to send notifications from Slow Potter to the customer, for example concerning the confirmation, shipping or tracking of their order, etc. - Information provided by the user when subscribing to the newsletter, in order to follow Slow Potter news.
The nature of the data collected in this context is clearly identifiable with regard to the information requested in the forms. The user can delete their customer account at any time by sending a request to this effect to the address of the data controller: Jasmin 2309, 25 rue Titon, 75011 Paris, France – sawasdee@slowpotter.com. We store and use the data communicated to us by the customer in order to execute the contracts concluded with them. Once the contract has been duly executed or the customer account deleted, the data is blocked taking into account the retention periods provided for by tax and commercial law; at the end of these periods, the data is deleted unless the user expressly consents to us continuing to process their data or if the law authorizes us to carry out further processing of the data, of which we would inform the user afterwards.
Communication of personal data to third parties *
- Communication to authorities based on legal obligations
Based on legal obligations, your personal data may be disclosed pursuant to a law, regulation or pursuant to a decision of a competent regulatory or judicial authority. In general, we undertake to comply with all legal rules which could prevent, limit or regulate the dissemination of information or data and in particular to comply with Law No. 78-17 of January 6, 1978 relating to the computing, files and freedoms. - Communication to third parties with recipient restrictions
The personal data that you provide to us when placing your order is transmitted to our suppliers for processing. This information is considered by our suppliers to be strictly confidential. - Virality of conditions for reuse of personal data
If your personal data is communicated to a third party, the third party’s confidentiality conditions apply. - Use of payment service providers
Payments are processed by the following payment service providers:
– PayPal
-Stripe
As part of the order process, and in accordance with art. 6, para. 1, point b of the GDPR, the information communicated by the customer as well as the information relating to the order (name, address, account number, bank code, where applicable credit card number, invoice amount, currency and number transaction) are transmitted to the payment service provider chosen by the customer. The transmission of data is carried out solely for the purpose of executing the payment by the payment service provider and only if it is essential for this operation. The user has the possibility to object to the processing of his data at any time by sending a message to this effect to the payment service provider. The data protection policy and contact details of the payment service provider are indicated at the bottom of this document.
Purpose of reusing collected personal data
- Carry out operations relating to customer management concerning:
– the contracts ; the orders ; the deliveries ; the bills ; accounting and in particular the management of customer accounts
– monitoring customer relations such as carrying out satisfaction surveys, managing complaints and after-sales service - The development of commercial statistics
- The organization of competitions, lotteries or any promotional operation, excluding online gambling and games of chance subject to approval by the Online Gaming Regulatory Authority
- Management of requests for rights of access, rectification and opposition
- Management of unpaid debts and disputes, provided that it does not relate to offenses and/or that it does not result in exclusion of the person from the benefit of a right, a service or a contract
- Managing people’s opinions on products, services or content We also use the customer’s personal data when our legitimate interests require it, unless the interests or fundamental freedoms and rights of the user prevail. Our use of data pursues the following objectives: • contact, while respecting the legislation in force, the customer by e-mail or by post to offer them vouchers, discounts and promotions, collect their opinion via surveys or questionnaires;
Data aggregation
Aggregation with non-personal data
We may publish, disclose and use aggregated information (information relating to all of our Users or specific groups or categories of Users that we combine in such a way that an individual User can no longer be identified or mentioned) and information non-personal for industry and market analysis, demographic profiling, promotional and advertising purposes and other commercial purposes.
Collection of identity data
Free consultation
Consultation of the Site does not require registration or prior identification. It can be carried out without you communicating any personal data concerning yourself (last name, first name, address, etc.). We do not record any personal data for the simple consultation of the Site.
Collection of terminal data
Collection of profiling data and technical data for the purposes of providing the service
Some of your device’s technical data is collected automatically by the Site. This information includes in particular your IP address, Internet service provider, hardware configuration, software configuration, browser type and language, etc. The collection of this data is necessary for the provision of the services.
Collection of technical data for advertising, commercial and statistical purposes
The technical data of your device is automatically collected and recorded by the Site, for advertising, commercial and statistical purposes. This information helps us personalize and continually improve your experience on our Site. We do not collect or store any personal data (surname, first name, address, etc.) possibly attached to technical data. The data collected may be resold to third parties.
Cookies
Shelf life of cookies
In accordance with the recommendations of the CNIL, the maximum retention period for cookies is a maximum of 13 months after their first deposit in the User’s terminal, as is the duration of the validity of the User’s consent to the use of these cookies. The lifespan of cookies is not extended with each visit. The User’s consent must therefore be renewed at the end of this period.
Purpose of cookies
Cookies can be used for statistical purposes, in particular to optimize the services provided to the User, from the processing of information concerning the frequency of access, the personalization of pages as well as the operations carried out and the information consulted.
You are informed that Slow Potter may place cookies on your terminal. The cookie records information relating to navigation on the service (the pages you have consulted, the date and time of the consultation, etc.) which we can read during your subsequent visits.
Right of the User to refuse cookies, deactivation may result in degraded operation of the service
You acknowledge having been informed that Slow Potter may use cookies, and authorize it to do so. If you do not want cookies to be used on your device, most browsers allow you to disable cookies through the settings options. However, you are informed that certain services may no longer function correctly.
Possible association of cookies with personal data to enable the operation of the service
Slow Potter may collect browsing information through the use of cookies.
Retention of technical data
Retention period of technical data
Technical data is kept for the duration strictly necessary to achieve the purposes referred to above.
Period of retention of personal data and anonymization
Data retention for the duration of the contractual relationship
In accordance with article 6-5° of law n°78-17 of January 6, 1978 relating to data processing, files and freedoms, personal data subject to processing are not kept beyond the time necessary for the execution of the obligations defined at the conclusion of the contract or the predefined duration of the contractual relationship.
Conservation of anonymized data beyond the contractual relationship / after deletion of the account
We keep personal data for the period strictly necessary to achieve the purposes described in these T&Cs. Beyond this period, they will be anonymized and kept for exclusively statistical purposes and will not give rise to any exploitation of any kind whatsoever.
Deleting data after account deletion
Means for purging data are put in place in order to provide for their effective deletion as soon as the retention or archiving period necessary to achieve the determined or imposed purposes is reached. In accordance with law n°78-17 of January 6, 1978 relating to data processing, files and freedoms, you also have the right to delete your data which you can exercise at any time by contacting Slow Potter.
Account deletion
Account deletion on demand
The User has the possibility to delete his Account at any time, by simple request to Jasmin 2309, 25 rue Titon, 75011 Paris, France – sawasdee@slowpotter.com.
Indications in the event of a security breach detected by Slow Potter
Information to the User in the event of a security breach
We undertake to implement all appropriate technical and organizational measures in order to guarantee a level of security adapted to the risks of accidental, unauthorized or illegal access, disclosure, alteration, loss or even destruction of the personal data about you. In the event that we become aware of illegal access to personal data concerning you stored on our servers or those of our service providers, or of unauthorized access resulting in the realization of the risks identified above, we undertake has :
– notify you of the incident as soon as possible;
– examine the causes of the incident and inform you;
– take the necessary measures within reason in order to reduce the negative effects and harm that may result from the said incident
Limitation of liability
Under no circumstances can the commitments defined in the point above relating to notification in the event of a security breach be assimilated to any recognition of fault or responsibility for the occurrence of the incident in question.
Transfer of personal data abroad
Slow Potter undertakes to comply with the applicable regulations relating to data transfers to foreign countries and in particular according to the following terms:
Slow Potter transfers the personal data of its Users to countries recognized as offering an equivalent level of protection.
Modification of the T&Cs and the confidentiality policy
In the event of modification of these T&Cs, commitment not to lower the level of confidentiality substantially without prior information of the persons concerned.
We undertake to inform you in the event of a substantial modification of these T&Cs, and not to lower the level of confidentiality of your data substantially without informing you and obtaining your consent.
Applicable law and terms of recourse
Arbitration clause
You expressly accept that any dispute likely to arise as a result of these T&Cs, in particular its interpretation or execution, will be subject to an arbitration procedure subject to the rules of the arbitration platform chosen by mutual agreement, to which you will adhere without reservation.
Data portability
Slow Potter undertakes to offer you the possibility of having all the data concerning you returned to you upon simple request. The User is thus guaranteed better control of his data, and retains the possibility of reusing them. This data must be provided in an open and easily reusable format.
* To ensure the provision of our services, we are required to transmit the personal data of our users to the following third parties, for the purposes detailed below:
Mailchimp
Purpose of processing: sending newsletter, notifications Categories of data
Personal data categories: stock data, email address
Data subjects: customers, potential buyers or Internet users visiting the Slowpotter.com website
Legal basis: consent, art. 6, para. 1, point a of the GDPR, legitimate interests, art. 6, para. 1, point f of the GDPR
Service Provider: Mailchimp, Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
Data protection policy: Opt-out option in the newsletter, https://mailchimp.com/legal/privacy/
Google Analytics
Purpose of processing: statistical analysis of Slowpotter.com’s Internet offering. The data is processed completely anonymously.
Categories of personal data: usage data
Persons concerned: Slow Potter customers, potential buyers or Internet users visiting the Slowpotter.com website
Legal basis: execution of the contract, art. 6 par. 1 point. b GDPR, legitimate interests, art. 6 par. 1 point. f GDPR
Service provider: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Data protection policy: browser plug-in, opt-out link
Stripe
Purpose of processing:
payment service provider, selected by the Slow Potter customer
Categories of personal data: stock, payment, contractual data
Applicable people: Slow Potter customers
Legal basis: execution of the contract, art. 6, para. 1, point b of the GDPR.
Service Provider: Stripe Inc., 185 Berry Street, Suite 550, San Francisco, CA 94107, USA
Data protection policy: https://stripe.com/de/privacy
Paypal
Purpose of processing: payment service provider, selected by the Slow Potter client
Categories of personal data: stock, payment, contractual data
Applicable people: Slow Potter customers
Legal basis: execution of the contract, art. 6, para. 1, point b of the GDPR
Service provider: PayPal (Europe) S.à r.l. et Cie S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg
Data protection policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
Colissimo
Purpose of processing: shipping of orders
Categories of personal data: postal details
Applicable people: Slow Potter customers
Legal basis: consent, art. 6, para. 1, point a of the GDPR
Service provider: La Poste / Colissimo, 9 rue du Colonel Pierre Avia – 75015 Paris France
Data protection policy: https://www.laposte.fr/particulier/politique-de-protection-des-donnees