Privacy policy for motoblouz.com website
We are aware of the importance of respecting the rights of individuals and their privacy, and of the stakes involved in the protection of personal data, and therefore provide you with this privacy policy. The purpose of this policy is to inform you about the processing of personal data by D3T Distribution SAS (hereinafter referred to as "We" and "MOTOBLOUZ") in connection with the management of its e-commerce site "https://motoblouz.com" (hereinafter referred to as the "Website"), and the management of commercial operations.
As this policy may be updated following changes in our practices or in applicable legislation, we invite you to consult it in order to keep abreast of developments.
Date of last update: 14/12/2023. To consult previous versions, click here: [link to previous policy versions].
Definition of terms used
All of the following terms, whether used in the singular or plural, with or without capitalization, shall have the following definition:
- "Personal Data": any information relating to a person who can be identified, directly or indirectly;
- "Data Controller ": the person or company that determines the purposes and means of processing personal data;
- "Data Protection Officer (DPO)" or "Délégué à la protection des données ": the person responsible, in complete independence, for ensuring compliance with employee and customer data protection within the company;
- "Processing of personal data ": any operation carried out on data, whatever the process used (such as collection, access, storage, modification, deletion, dissemination, etc.);
- "Purpose(s) of processing ": the objective(s) of processing, i.e. the reason why data is processed;
- "Data subject" means an identified or identifiable natural person to whom the personal data processed relates;
- "Recipient" : the person (person in charge of payroll) or company (subcontractors, service providers) authorized to obtain communication of personal data, whether a third party or not;
- "Data Transfer ": any transmission, or sole provision, of personal data to another legal entity established outside the European economic area, or being established within the European Economic Area while remaining subject to the legislation of a third country.
The data controller for all data processing carried out on this website is exclusively the company D3T DISTRIBUTION SAS (hereinafter referred to as "We"), whose registered office is at 72 RUE ELIE CARTAN 62220 CARVIN and which is registered with the R.C.S. de ARRAS under number 478 566 250 (hereinafter the "Data Controller" or "MOTOBLOUZ").
As part of the management of our Website and the provision of related services, we may collect and process your personal data for the purposes set out below. Your data is only processed for the retention periods necessary for the purposes for which it is to be processed.
What are the purposes and legal basis of the processing? |
What data do we collect for this purpose? |
How long is your data stored? |
In order to allow you to create a user account on the website, enabling you in particular to identify yourself in order to: order our products, contact our customer service, or share your opinions and comments on our products directly on the website. This processing is based on our legitimate interest in securing and controlling the consultation of our website, insofar as your interests, freedoms and fundamental rights do not prevail. |
|
This data is kept for a period of 5 years from your last interaction. This last interaction is your last traceable contact with our systems. This could be your last contact with us, your last connection, or a click on a link in an e-mail. This data is then anonymized. |
In order to supply you with the products you have requested, to manage orders, deliver goods and process payment. This processing is necessary for the execution of a contract to which you are a party, or for the execution of pre-contractual measures taken at your request. Where you expressly consent, we will store your credit card details to facilitate future payments. |
|
Your data will only be kept for the duration of the contractual relationship. Your bank details are automatically deleted once you have paid for your purchase. However, in compliance with accounting obligations, invoices are kept for 10 years. If you consent to the storage of your credit card details to facilitate future payments, these will be stored by our payment service provider until your credit card expires (i.e. for a maximum of 3 years), or until your consent is withdrawn. |
The transmission of your data to our payment service providers in the case of split payments. This processing is necessary for the performance of a contract to which you are a party, or, where applicable, for the performance of pre-contractual measures taken at your request. |
For more information on the data processed, please consult the privacy policy of our fractional payment service providers responsible for processing. |
We do not store this data after it has been transmitted; it will be deleted immediately. We invite you to consult the confidentiality policy of our fractional payment service providers responsible for processing for any information relating to their retention periods. |
To enable you to join our loyalty program and benefit from its advantages. This processing is necessary for the performance of a contract to which you are a party. |
|
This data is kept for the duration of the loyalty program. |
To enable you to benefit from promotional offers as a member of a partner insurance company, or as a member of a partner insurance company. This processing is based on our legitimate interest in providing you with promotional offers, insofar as your interests, freedoms and fundamental rights do not take precedence. |
This information is used to confirm that you are a member of the insurance company concerned. |
This data is only kept for the time required to verify your status as a member of the partner insurance company. If necessary, the copy of your green card will be automatically deleted after consultation. |
To monitor and manage customer relations and after-sales service, and to respond to your complaints. This processing is necessary for the performance of a contract to which you are a party. |
|
Data is only kept for the duration of the contractual relationship. However, certain data may be kept for 5 years in order to exercise or defend legal rights. |
To generate aggregate statistics on sales of our products. This processing is based on our legitimate interest in monitoring and supervising commercial operations, insofar as your interests, freedoms and fundamental rights do not prevail. |
|
The data is processed solely for the purposes of aggregated statistics. Aggregated sales statistics are anonymous data. |
To enable you to contact us to send us feedback on our products, or to contact our customer service department directly in the event of difficulties. These comments, including your opinions, are also used to improve our products and meet your expectations. This processing is based on our legitimate interest in exchanging with our customers, insofar as your interests, freedoms and fundamental rights do not prevail. |
|
Your notices are published on the website for a maximum period of 5 years. Your feedback is kept for a maximum of 5 years, after which it is anonymized. In order to improve products and the customer experience, anonymized reviews are kept for a maximum of 10 years. |
In order to send you commercial prospecting by electronic means (e-mail and SMS), including our newsletter, and to keep you informed of our products and commercial news. In order to transmit your e-mail address, or unique identifiers, to our partners in order to send you commercial prospecting, via these channels, notably adapted to your profile. This processing is based on your consent. |
|
Until you definitively withdraw your consent. This data is kept for a period of 5 years from the date of your last interaction. Your opposition, or the withdrawal of your consent, will be kept on a prospecting opposition list for a period of 5 years from your last interaction. This last interaction is your last contact traceable by our systems. It may be your last contact with us, your last connection, or a click on a link in an e-mail. This data is then anonymized. |
To manage your requests to exercise your personal data rights. This processing is necessary to comply with a legal obligation to which we are subject. |
|
Your data will be kept for 5 years after the request has been made. In principle, your identity document will be automatically destroyed once it has been consulted. However, in certain cases, it may be kept for evidence purposes for a period of 6 years. |
In order to personalize the offers and content presented on the website, and to adapt it to your profile. This processing is based on the collection of your consent when it involves cookies and tracers. This processing is based on your consent when it involves the transmission of your data to our partners in order to send you targeted advertising. This processing is based on your consent when personalized offers are sent to you electronically (sms/email). |
|
This data is kept for a period of 5 years from your last interaction. This last interaction is your last contact traceable by our systems. It may be the last time you contacted us, the last time you logged on, or the last time you clicked on a link in an e-mail. This data is then anonymized. |
To optimize and ensure the management of our website and means of communication (including the correction of operating problems and computer bugs). To analyze and supervise the operation of the website and means of communication. This processing is based on our legitimate interest in ensuring the operation and improvement of our website and means of communication, insofar as your interests, freedoms and fundamental rights do not prevail. Where certain cookies and tracers are deposited for this purpose, processing may be based on the collection of your consent. |
|
Your data is logged for a maximum period of 12 months. Audience measurement cookies and trackers are kept for a maximum of 13 months, and the information collected through them for a maximum of 25 months. Where processing is based on your consent, your data may be processed for a shorter period if you withdraw your consent. |
To comply with legal and tax obligations. This processing is necessary to comply with legal obligations to which we are subject. |
|
In compliance with accounting obligations, invoices are kept for 10 years. |
In order to ensure the defense of our legal rights or to ensure our defense in the event of legal action, as well as to pre-constitute evidence in these cases. This processing is based on our legitimate interest in ensuring the defense of our legal rights or our defense in legal proceedings, insofar as your interests, freedoms and fundamental rights do not prevail. |
|
We retain your data from the time of an incident or dispute for a period not exceeding that of the legal statute of limitations.(6 years maximum, or 10 years in the case of personal injury), or for as long as is necessary for legal proceedings. |
In order to ensure the management of unpaid invoices, their registration, and the identification of persons in a situation of unpaid invoices for the purpose of excluding them from future transactions. This processing is necessary for the performance of a contract to which you are a party, or where applicable for the performance of pre-contractual measures taken at your request. |
|
Your data is kept for a period of 48 hours following settlement of the outstanding payment. If the outstanding payment is not settled, your data will be kept for a maximum of 5 years from the date of the outstanding payment. |
In any case, we strictly prohibit ourselves from collecting, storing or using the personal data of minors under the age of 16 who have not provided their consent and the approval of the person holding parental responsibility. In this case, we invite you to contact us in order to provide us with the corresponding documents: consent of the person holding parental responsibility, proof of parental responsibility, and the explicit consent of the minor.
The personal data we process is stored in the European Economic Area, but may also be transferred and stored outside the European Economic Area, particularly in connection with services provided by our subcontractors.
In our capacity as Data Controller, we may in certain circumstances share your data with third parties. We will only share your data with third parties who provide sufficient guarantees that they have implemented appropriate technical, organizational and legal measures to ensure the protection of your rights and data.
Depending on the degree of involvement in the processing concerned, i.e. when they determine the "why" and "how" of the intended processing, these recipients may qualify as separate Data Processors, Subcontractors, or Joint Data Processors with us.
The categories of recipients with whom your data is, or may be, shared are as follows:
- Our service providers and partners, including in particular :
- Our IT service providers and suppliers of IT solutions, who handle the processing of your data: in particular the hosting of your data, facilities management services in order to provide you with our products and services;
- Our service providers in charge of Marketing operations, our partners providing electronic communication platforms, and our suppliers and providers in charge of advertising, including targeted and personalized advertising: in order to carry out our commercial prospecting operations, or to keep you informed of our products or services and promotional offers;
- Our service providers and partners in charge of customer relationship management, and our partners in charge of managing feedback and opinions on your customer experience and our products;
- Our partners and suppliers of IT solutions to help you find and recruit new employees.
- Our partners who process your data for their own purposes, including in particular :
- Our partners who publish social networks for the management of our pages on these networks, for exchanges and interactions between you and us via the communications channels they make available, and for the promotion of our products and services on these networks, including through advertising targeting;
- Our payment services partners, and our partners responsible for anti-fraud operations and credit risk analysis: who process your data to enable payments to be made on our website;
- Our audit partners, law firms, or similar consultants and analysts, to enable us to defend our interests in court, to meet our legal obligations, or to certify our compliance;
- Our Marketplace partners, on whom we distribute our products and who process your data for purposes they determine, such as managing customer accounts;
- Our insurance partners for the purpose of verifying your identity in order to offer you benefits and promotional offers as a member of said insurance partner.
- In the event of the sale or purchase of any of our businesses or assets, we may disclose your contact details to prospective sellers or buyers of such businesses or assets;
- State authorities, government agencies and judicial authorities: where we are required by law to disclose personal data in response to a request from them, or where such disclosure is necessary to enable us to establish, exercise or defend legal claims.
- To any other recipient, whether a natural person or a legal entity, to whom you have specifically asked us to transmit your data, or on whose behalf you have specifically consented to the transmission of your personal data.as well as any natural or legal person for whom the transmission of your data is justified by a compelling legitimate interest overriding your own interests.
Your data will also be made available to our strictly authorized employees.
If you would like a complete list of the identity of each recipient, please contact us.
When we transfer your data outside the European Economic Area, we give priority to Subcontractors established in countries whose legislation is recognized as adequate, i.e. countries benefiting from an adequacy decision from the European Commission.
In the absence of an adequacy decision from the European Commission, we ensure that transfers are appropriately regulated, in particular by means of standard contractual data protection clauses adopted by the European Commission.
We implement specific measures to ensure the protection of your personal data and to guarantee its confidentiality, integrity and availability throughout processing. These measures are technical, such as encrypting your personal data, and organizational, such as restricting access to our premises or raising employee awareness.
In addition, we ensure that we only use subcontractors with adequate technical and organizational security measures, and with appropriate guarantees in terms of compliance with regulations relating to personal data.
Right concerned |
Description |
Right to information |
You have the right to be informed about the processing of your personal data. |
Right of access |
You have the right to obtain a copy and/or request consultation of all your personal data. |
Right to rectify data |
You have the right to correct or complete your personal data. |
Right to restrict processing |
You have the right to request that we stop processing your personal data. |
Right to erasure of data (or the right to be forgotten) |
You have the right to request, under certain conditions, the deletion of your data. If the data has been passed on to authorized recipients, we will take appropriate steps to ensure that this right is taken into account. |
Right to object to processing |
Under certain conditions, you have the right to object to the processing of your personal data for reasons relating to your particular situation. However, you may object at any time, and unconditionally, to processing carried out for the purposes of commercial prospecting, including profiling linked to such prospecting. In particular, you may object to commercial prospecting by SMS and e-mail at any time, via the "unsubscribe" link in commercial prospecting e-mails, or directly in your customer area under the heading "My account - Contract preferences - Newsletter/Sms". |
Right to register on the BLOCTEL list (anti-démarchage téléphonique) |
If you no longer wish to be contacted by telephone on the number you have provided, you have the option of register at any time on the anti-demarchage telephone list via the site accessible at "http://www.bloctel.gouv.fr". |
Right to withdraw consent |
You have the right to easily withdraw your consent to processing at any time. You can withdraw your consent to commercial prospecting by SMS and e-mail at any time, via the "unsubscribe" link in commercial prospecting e-mails, or directly in your customer area under the heading "My account - Contract preferences - Newsletter/Sms". |
Right to portability |
You have the right to recover all personal data concerning you, in a structured format, in order to transmit it to a new data controller. |
Right to refuse automated decisions, including profiling |
You have the right to object, under certain conditions, to profiling, or automated decision-making concerning you. |
Right to formulate directives |
You have the right to formulate an advance directive on the fate of your personal data after your death. |
Right to lodge a complaint with the supervisory authority |
You may submit a complaint to the Commission Nationale de l'Informatique et des Libertés (CNIL), the competent supervisory authority in France. This claim can be made to the following address: https://www.cnil.fr/plaintes. |
You can exercise your rights by contacting the e-mail address "dpo@motoblouz.com" and specifying the nature of your request. In certain cases, we may ask for proof of your identity. This proof will not be kept and will be destroyed after verification. In addition, for each processing operation, the exercise of certain rights may be restricted. This may be the case, for example, where the data controller is bound by legal obligations.
Each request is processed as quickly as possible, and in any case within a maximum of 30 days of receipt. This period may be extended to a further 2 months in the case of complex requests, in accordance with regulations.