Privacy policy for the website motoblouz.com
Sensitive to the respect of individuals' rights and their privacy, and aware of the issues related to the protection of personal data, we provide you with this privacy policy. This policy aims to inform you about all the processing of personal data carried out by D3T Distribution SAS (hereinafter referred to as “we” and “MOTOBLOUZ”) in the context of managing its e-commerce site “https://motoblouz.com” (hereinafter the “Website”), and managing commercial operations.
This policy will be updated following changes in our practices or applicable legislation; we invite you to consult it regularly to stay informed of any developments.
Date of last update: 14/12/2023. To consult previous versions, click here: [link to previous versions of the policies].
Definition of Terms Used
All terms below, whether used in the singular or plural, with or without capital letters, will have the following definition:
- « Personal Data(s) »: any information relating to an identified or identifiable person;
- « Data Controller »: the person or company that determines the purposes and means of processing personal data;
- « Data Protection Officer (DPO) » or « Delegate for Data Protection »: the person responsible, independently, for ensuring compliance with data protection for employees and customers within the company;
- « Processing of Personal Data »: any operation performed on data, regardless of the procedure used (such as collection, access, storage, modification, deletion, dissemination…);
- « Purpose(s) of Processing »: the objective(s) of a processing operation, i.e. the reason why the data is processed;
- « Data Subject »: refers to an identified or identifiable natural person to whom the processed personal data relates;
- « Recipient »: the person (payroll officer) or company (subcontractors, service providers) authorized to receive communication of personal data, whether or not it concerns a third party;
- « Data Transfer »: any transmission, or mere provision, of personal data to another legal entity established outside the European Economic Area, or established within the European Economic Area while remaining subject to the legislation of a third country.
The data controller for all processing carried out in the context of this Website is exclusively the company D3T DISTRIBUTION SAS (hereinafter referred to as “we”) located at 72 RUE ELIE CARTAN 62220 CARVIN and registered with the Arras Trade and Companies Register under number 478 566 250 (hereinafter referred to as the “Data Controller” or “MOTOBLOUZ”).
As part of managing our website and providing the associated services, we may collect and process your personal data for the following purposes. Your data is only processed for the necessary retention periods in relation to the purposes of processing.
What are the purposes and legal basis for processing? | What data do we collect for this purpose? | How long is your data retained? |
| To allow you to create a user account on the website, enabling you to identify yourself in order to: order our products, contact our customer service, or share your reviews and comments on our products directly on the website. This processing is based on our legitimate interest in securing and controlling access to our website, provided that your interests, freedoms, and fundamental rights do not prevail. |
| This data is retained for a period of 5 years from your last interaction. This last interaction is your last traceable contact by our systems. It may be your last contact with us, your last login, or a click on a link contained in an email. This data will then be anonymised. |
| To provide you with the requested products, manage orders, deliver goods, and process payments. This processing is necessary for the performance of a contract to which you are a party, or for the performance of pre-contractual measures taken at your request. When you expressly consent, we will retain your credit card data to facilitate your future payments. |
| Your data will only be retained for the duration of the contractual relationship. Thus, your banking data is automatically deleted after the payment of the purchase. However, in compliance with accounting obligations, invoices are retained for 10 years. When you consent to the retention of your credit card data to facilitate your future payments, this data will be retained by our payment service provider until your credit card expires (for a maximum of 3 years), or until you withdraw your consent, if applicable. |
| The transmission of your data to our payment service providers in the context of instalment payments. This processing is necessary for the performance of a contract to which you are a party, or if applicable, for the performance of pre-contractual measures taken at your request. |
For more information on the data processed, we invite you to consult the privacy policy of our responsible payment service providers. | We do not retain this data after transmission; it will be immediately deleted. We invite you to consult the privacy policy of our responsible payment service providers for any information regarding their retention periods. |
| To allow you to join our loyalty program and benefit from its advantages. This processing is necessary for the performance of a contract to which you are a party. |
| The data is retained for the entire duration of the loyalty program and for up to 5 years after the end of your membership or your last interaction with us (account login, purchase). |
| To provide you with promotional offers as a member of a partner insurance company, or as a member of a partner insurance company. This processing is based on our legitimate interest in providing you with promotional offers, provided that your interests, freedoms, and fundamental rights do not prevail. |
This information is used to confirm that you are indeed a member of the relevant insurance company. | This data is only retained for the duration necessary to verify your membership status with the partner insurance company. If applicable, a copy of your green card will be automatically deleted after consultation. |
| To ensure the follow-up and management of customer relations and after-sales service, as well as to respond to your complaints. This processing is necessary for the performance of a contract to which you are a party. |
| The data is only retained for the duration of the contractual relationship. However, certain data may be retained for 5 years for the exercise or defense of rights in court. |
| To generate aggregated sales statistics of our products. This processing is based on our legitimate interest in ensuring monitoring and supervision of commercial operations, provided that your interests, freedoms, and fundamental rights do not prevail. |
| The data is only processed for the purpose of generating aggregated statistics. The aggregated sales statistics are anonymised data. |
| To allow you to contact us to provide feedback on our products, or to directly contact our customer service in case of difficulties. These comments, including your reviews, are also used to improve our products and meet your expectations. This processing is based on our legitimate interest in communicating with our customers, provided that your interests, freedoms, and fundamental rights do not prevail. |
| Your reviews are published on the website for a maximum duration of 5 years. Your reviews are retained for a maximum duration of 5 years and are then anonymised. For the purpose of improving products and customer experience, anonymised reviews are retained for a maximum of 10 years. |
| To send you commercial prospecting via electronic means (email and SMS), including our newsletter, and to keep you informed about our products and commercial news. To transmit your email address or unique identifiers to our partners to send you commercial prospecting via these channels, which are particularly suited to your profile. These processes are based on your consent. |
| Until you withdraw your consent definitively. This data is retained for a period of 5 years from your last interaction. Your opposition, or the withdrawal of your consent, will be retained in an opt-out list for a period of 5 years from your last interaction. This last interaction is your last traceable contact by our systems. It may be your last contact with us, your last login, or a click on a link contained in an email. This data will then be anonymised. |
| To manage your requests for the exercise of rights regarding personal data. This processing is necessary to comply with a legal obligation to which we are subject. |
| Your data will be retained for 5 years after the request has been fulfilled. In principle, your identity document will be automatically destroyed after consultation. However, in some cases, it may be retained for evidentiary purposes for a duration of 6 years. |
| To personalise the offers and content presented on the website, and to adapt it to your profile. This processing is based on obtaining your consent when it involves cookies and trackers. This processing is based on obtaining your consent when it involves transmitting your data to our partners to send you targeted advertisements. This processing is based on consent when personalised offers are sent to you electronically (SMS/email). |
| This data is retained for a period of 5 years from your last interaction. This last interaction is your last traceable contact by our systems. It may be your last contact with us, your last login, or a click on a link contained in an email. This data will then be anonymised. |
| To optimise and ensure the management of our website and communication means (including correcting operational issues and computer bugs). As well as analysing and supervising the functioning of the website and communication means. This processing is based on our legitimate interest in ensuring the functioning and improvement of our website and communication means, provided that your interests, freedoms, and fundamental rights do not prevail. In the context of depositing certain cookies and trackers for this purpose, the processing may be based on obtaining your consent. |
| Your data is logged for a maximum period of 12 months. Cookies and trackers dedicated to audience measurement are retained for a maximum duration of 13 months, and the information collected through these means for a duration not exceeding 25 months. When processing is based on your consent, your data may be processed for a shorter duration if you withdraw it. |
| To comply with legal obligations, including tax obligations. This processing is necessary to comply with legal obligations to which we are subject. |
| In compliance with accounting obligations, invoices are retained for 10 years. |
| To ensure the defence of our rights in court or to ensure our defence in the context of legal action, as well as to pre-constitute evidence in these cases. This processing is based on our legitimate interest in ensuring the defence of our rights in court or our defence in the context of legal action, provided that your interests, freedoms, and fundamental rights do not prevail. |
| We retain your data from an incident or dispute for a duration not exceeding the legal limitation period (6 years maximum or 10 years in the case of bodily injury), or for the entire duration necessary in the context of legal proceedings. |
|
In order to ensure the management of unpaid debts, their recording, and the identification of individuals in a situation of unpaid debts for the purpose of excluding future transactions. This processing is necessary for the execution of a contract to which you are a party, or if applicable, for the execution of pre-contractual measures taken at your request. |
|
Your data is retained for a period of 48 hours following the regularisation of the unpaid debt. If the unpaid debt is not regularised, your data will be retained for a maximum period of 5 years from the occurrence of the unpaid debt. |
In any case, we strictly prohibit ourselves from collecting, storing, or using personal data of minors under the age of 16 who have not provided their consent as well as the approval of the person holding parental responsibility. In this case, we invite you to contact us to provide the relevant documents: consent from the holder of parental responsibility, proof of parental responsibility, as well as the explicit consent of the minor.
The personal data we process is stored within the European Economic Area but may also be transferred and stored outside the European Economic Area, particularly as part of the services provided by our subcontractors.
As the Data Controller, we may, in certain cases, share your data with third parties. We will only share your data with third parties that provide sufficient guarantees regarding the implementation of appropriate technical, organisational, and legal measures to ensure the protection of your rights and your data.
Depending on the level of involvement in the relevant processing, i.e., when they determine the "why" and "how" of the intended processing, these recipients may qualify as distinct Data Controllers, Subcontractors, or Joint Controllers with us.
The categories of recipients with whom your data is, or may be, shared are as follows:
- Our service providers and partners, including:
- Our IT service providers and IT solution suppliers, who handle the processing of your data: including the hosting of your data, IT management services to provide you with our products and services;
- Our service providers responsible for marketing operations, our partners supplying electronic communication platforms, and our advertising suppliers and service providers, including targeted and personalised advertising: to carry out our commercial prospecting operations, or to keep you informed about our products or services and promotional offers;
- Our service providers and partners responsible for customer relationship management, and our partners responsible for managing returns and feedback on your customer experience and our products;
- Our partners and service providers supplying IT solutions to assist in the search and recruitment of new employees.
- Our partners processing your data for their own purposes, including:
- Our social media partners for managing our pages on these platforms, for exchanges and interactions between you and us via the communication channels they provide, as well as for promoting our products and services on these platforms, including through advertising targeting;
- Our payment service partners, and our partners responsible for fraud prevention operations and credit risk analysis: who process your data to enable payments to be made on our website;
- Our partners responsible for auditing, law firms, or similar consultants and analysts, to enable us to defend our interests in court, to comply with our legal obligations, or to attest to the state of our compliance;
- Our marketplace operator partners on which we distribute our products and who process your data for purposes they determine, such as managing customer accounts;
- Our insurance partners to verify your identity in order to provide you with benefits and promotional offers as a member of the said insurance partner.
- In the event of the sale or purchase of one of our companies or assets, we may disclose your contact details to prospective sellers or buyers of these companies or assets;
- State authorities, government agencies, and judicial administrations: when a legal obligation requires us to transmit personal data following a request from them, or when such transmission is necessary to allow us to ascertain, exercise, or defend our rights in court.
- To any other natural or legal person to whom you have specifically requested us to transmit your data, or for whom you have specifically consented to the transmission of your personal data; as well as any natural or legal person for whom the transmission of your data is justified by an overriding legitimate interest prevailing over your own interests.
Your data is also made known to our strictly authorised employees.
If you wish to obtain a comprehensive list of the identity of each recipient, we invite you to contact us.
When we transfer your data outside the European Economic Area, we prioritise selecting Subcontractors established in countries whose legislation is recognised as adequate, namely countries benefiting from an adequacy decision from the European Commission.
In the absence of such an adequacy decision from the European Commission, we ensure that transfers are appropriately framed, notably through the use of standard contractual clauses for data protection adopted by the European Commission.
We implement specific measures to ensure the protection of your personal data and to guarantee its confidentiality, integrity, and availability throughout the processing. These measures are technical, such as the encryption of your personal data, and organisational, such as access restrictions to our premises or raising awareness among employees.
Furthermore, we also ensure that we only engage Subcontractors that have adequate technical and organisational measures in place regarding security, and appropriate guarantees concerning compliance with personal data regulations.
|
Concerned Right |
Description |
|
Right to Information |
You have the right to be informed about the processing of your personal data. |
|
Right of Access |
You have the right to obtain a copy and/or request access to all your personal data. |
|
Right to Rectification |
You have the right to correct or complete your personal data. |
|
Right to Restrict Processing |
You have the right to request the cessation of processing of your personal data. |
|
Right to Erasure (or Right to be Forgotten) |
You have the right to request, under certain conditions, the erasure of your data. If the data has been shared with authorized recipients, we will take appropriate measures to ensure this right is respected. |
|
Right to Object to Processing |
You have the right to object under certain conditions, for reasons related to your particular situation, to the processing of personal data concerning you. However, you can object at any time, and without condition, to processing carried out for commercial prospecting purposes, including profiling related to such prospecting. You can therefore specifically object to commercial prospecting by SMS and email, at any time, via the link « unsubscribe » in commercial prospecting emails, or directly in your customer area in the section « My Account – Contract Preferences – Newsletter/SMS ». |
|
Right to Register on the Telephone Preference Service (BLOCTEL) |
If you no longer wish to be contacted by telephone on the number provided, you have the option to register at any time on the telephone marketing opt-out list via the website accessible at « http://www.bloctel.gouv.fr ». |
|
Right to Withdraw Consent |
You have the right to withdraw your consent to processing at any time and easily. You can withdraw your consent to commercial prospecting by SMS and email, at any time, via the link « unsubscribe » in commercial prospecting emails, or directly in your customer area in the section « My Account – Contract Preferences – Newsletter/SMS ». |
|
Right to Data Portability |
You have the right to retrieve all your personal data in a structured format to transfer it to a new data controller. |
|
Right to Refuse Automated Decisions, including Profiling |
You have the right to object, under certain conditions, to profiling or automated decision-making concerning you. |
|
Right to Issue Directives |
You have the right to issue advance directives regarding the fate of your personal data after your death. |
|
Right to Lodge a Complaint with the Supervisory Authority |
You can submit a complaint to the National Commission on Informatics and Liberty (CNIL), which is the competent supervisory authority in France. This complaint can be made at the following address: https://www.cnil.fr/plaintes. |
You can exercise your rights by contacting the email address “dpo@motoblouz.com” and specifying the nature of your request. Proof of your identity may, in certain cases, be requested. This proof will not be retained and will be destroyed after verification. Furthermore, for each processing operation, the exercise of certain rights may be limited. This will be the case, for example, when legal obligations are imposed on the data controller.
Each request is processed as quickly as possible, and in any case within a maximum period of 30 days from its receipt. This period may be extended by an additional 2 months in the case of complex requests in accordance with the regulations
This processing allows us to measure the opening of our emails in order to establish statistics on the performance of our campaigns, personalise the content offered to you, and adjust the frequency of our communications to limit the sending of irrelevant messages.
We process your email address, your customer ID, as well as information related to the opening of our emails (email opened, date and time of opening).
This processing is based on your consent. For customers created before 14 April 2026, specific information has been provided, in accordance with CNIL recommendations, to allow them to object to this processing. In the absence of opposition, this processing is maintained. Customers created from 14 April 2026 onwards are only subject to this processing after having given their consent. You can withdraw your consent or object to this tracking at any time via the preference management link included in each of our emails or from your customer area.
Data related to opens are retained for a maximum period of 24 months from their collection.


