Privacy policy for the website motoblouz.com

Introduction

Sensitive to the respect of individuals' rights and their privacy, and aware of the issues related to the protection of personal data, we provide you with this privacy policy. This policy aims to inform you about all the processing of personal data carried out by D3T Distribution SAS (hereinafter referred to as “we” and “MOTOBLOUZ”) in the context of managing its e-commerce site “https://motoblouz.com” (hereinafter the “Website”), and managing commercial operations.

Current Version

This policy will be updated following changes in our practices or applicable legislation; we invite you to consult it regularly to stay informed of any developments.

Date of last update: 14/12/2023. To consult previous versions, click here: [link to previous versions of the policies].

Definition of Terms Used

All terms below, whether used in the singular or plural, with or without capital letters, will have the following definition:

« Personal Data(s) »: any information relating to an identified or identifiable person;
« Data Controller »: the person or company that determines the purposes and means of processing personal data;
« Data Protection Officer (DPO) » or « Delegate for Data Protection »: the person responsible, independently, for ensuring compliance with data protection for employees and customers within the company;
« Processing of Personal Data »: any operation performed on data, regardless of the procedure used (such as collection, access, storage, modification, deletion, dissemination…);
« Purpose(s) of Processing »: the objective(s) of a processing operation, i.e. the reason why the data is processed;
« Data Subject »: refers to an identified or identifiable natural person to whom the processed personal data relates;
« Recipient »: the person (payroll officer) or company (subcontractors, service providers) authorized to receive communication of personal data, whether or not it concerns a third party;
« Data Transfer »: any transmission, or mere provision, of personal data to another legal entity established outside the European Economic Area, or established within the European Economic Area while remaining subject to the legislation of a third country.

Who is Responsible for the Processing Implemented on the Website?

The data controller for all processing carried out in the context of this Website is exclusively the company D3T DISTRIBUTION SAS (hereinafter referred to as “we”) located at 72 RUE ELIE CARTAN 62220 CARVIN and registered with the Arras Trade and Companies Register under number 478 566 250 (hereinafter referred to as the “Data Controller” or “MOTOBLOUZ”).

1. Why and how do we process your personal data?

As part of managing our website and providing the associated services, we may collect and process your personal data for the following purposes. Your data is only processed for the necessary retention periods in relation to the purposes of processing.

What are the purposes and legal basis for processing?

What data do we collect for this purpose?

How long is your data retained?

To allow you to create a user account on the website, enabling you to identify yourself in order to: order our products, contact our customer service, or share your reviews and comments on our products directly on the website.

This processing is based on our legitimate interest in securing and controlling access to our website, provided that your interests, freedoms, and fundamental rights do not prevail.

We are required to collect the following data: last name, first name, email, phone number, postal address, as well as your customer ID and the list of your previous purchases and orders, along with your password.
If you act on behalf of a company, we will also collect: the identity of this company and its VAT number.
We optionally collect the following data: your date of birth and the characteristics of your vehicles.

This data is retained for a period of 5 years from your last interaction.

This last interaction is your last traceable contact by our systems. It may be your last contact with us, your last login, or a click on a link contained in an email.

This data will then be anonymised.

To provide you with the requested products, manage orders, deliver goods, and process payments.

This processing is necessary for the performance of a contract to which you are a party, or for the performance of pre-contractual measures taken at your request.

When you expressly consent, we will retain your credit card data to facilitate your future payments.

We are required to collect the necessary data for the delivery of the goods: your identity (first and last name), your contact details, your address.
We also collect your banking details for payment management (and when you consent to facilitate your future payments): your full credit card number and its expiry date.

Your data will only be retained for the duration of the contractual relationship. Thus, your banking data is automatically deleted after the payment of the purchase.

However, in compliance with accounting obligations, invoices are retained for 10 years.

When you consent to the retention of your credit card data to facilitate your future payments, this data will be retained by our payment service provider until your credit card expires (for a maximum of 3 years), or until you withdraw your consent, if applicable.

The transmission of your data to our payment service providers in the context of instalment payments.

This processing is necessary for the performance of a contract to which you are a party, or if applicable, for the performance of pre-contractual measures taken at your request.

We transmit the following data: your identity, your location and address, your contact details, your gender, your postal code of birth, your birth name, your date of birth, the details of your order and its amount, as well as the payment method used for this purpose.

For more information on the data processed, we invite you to consult the privacy policy of our responsible payment service providers.

We do not retain this data after transmission; it will be immediately deleted.

We invite you to consult the privacy policy of our responsible payment service providers for any information regarding their retention periods.

To allow you to join our loyalty program and benefit from its advantages.

This processing is necessary for the performance of a contract to which you are a party.

All personal data present on your customer account, your date of birth, the date of registration in the program, and the history of points and their use (conversion).

The data is retained for the entire duration of the loyalty program and for up to 5 years after the end of your membership or your last interaction with us (account login, purchase).

To provide you with promotional offers as a member of a partner insurance company, or as a member of a partner insurance company.

This processing is based on our legitimate interest in providing you with promotional offers, provided that your interests, freedoms, and fundamental rights do not prevail.

We are required to collect: your identity, the expiry date of your insurance, and your membership number or your license plate (depending on the relevant partner insurance).
In some cases, a copy of your green card may be requested.

This information is used to confirm that you are indeed a member of the relevant insurance company.

This data is only retained for the duration necessary to verify your membership status with the partner insurance company.

If applicable, a copy of your green card will be automatically deleted after consultation.

To ensure the follow-up and management of customer relations and after-sales service, as well as to respond to your complaints.

This processing is necessary for the performance of a contract to which you are a party.

We are required to collect your identity, your contact details,
We may also collect information related to

The data is only retained for the duration of the contractual relationship.

However, certain data may be retained for 5 years for the exercise or defense of rights in court.

To generate aggregated sales statistics of our products.

This processing is based on our legitimate interest in ensuring monitoring and supervision of commercial operations, provided that your interests, freedoms, and fundamental rights do not prevail.

We collect your purchase history as well as your precise location at the city level.

The data is only processed for the purpose of generating aggregated statistics.

The aggregated sales statistics are anonymised data.

To allow you to contact us to provide feedback on our products, or to directly contact our customer service in case of difficulties. These comments, including your reviews, are also used to improve our products and meet your expectations.

This processing is based on our legitimate interest in communicating with our customers, provided that your interests, freedoms, and fundamental rights do not prevail.

We are required to collect your name, first name, and email.
When you contact us via social media, we will also collect your identifier on that social network, and your profile picture if you have one.
We also collect information related to the reason for your request, as well as the content of your request and any attachments you have sent us (photographs, documents, etc.).

Your reviews are published on the website for a maximum duration of 5 years.

Your reviews are retained for a maximum duration of 5 years and are then anonymised. For the purpose of improving products and customer experience, anonymised reviews are retained for a maximum of 10 years.

To send you commercial prospecting via electronic means (email and SMS), including our newsletter, and to keep you informed about our products and commercial news.

To transmit your email address or unique identifiers to our partners to send you commercial prospecting via these channels, which are particularly suited to your profile.

These processes are based on your consent.

We are required to collect your name, first name, email, and phone number.
We also collect your purchasing habits as well as your personal preferences and the history of your orders.

Until you withdraw your consent definitively.

This data is retained for a period of 5 years from your last interaction.

Your opposition, or the withdrawal of your consent, will be retained in an opt-out list for a period of 5 years from your last interaction.

This last interaction is your last traceable contact by our systems. It may be your last contact with us, your last login, or a click on a link contained in an email.

This data will then be anonymised.

To manage your requests for the exercise of rights regarding personal data.

This processing is necessary to comply with a legal obligation to which we are subject.

We are required to collect your name, first name, contact address, and customer ID.
In some cases, we will consult a copy of your identity document to ensure that you are indeed the person concerned by the processing.

Your data will be retained for 5 years after the request has been fulfilled.

In principle, your identity document will be automatically destroyed after consultation. However, in some cases, it may be retained for evidentiary purposes for a duration of 6 years.

To personalise the offers and content presented on the website, and to adapt it to your profile.

This processing is based on obtaining your consent when it involves cookies and trackers.

This processing is based on obtaining your consent when it involves transmitting your data to our partners to send you targeted advertisements.

This processing is based on consent when personalised offers are sent to you electronically (SMS/email).

We are required to collect your identity (first and last name), your contact details.
We may also collect other information including your location, as well as your purchasing habits, your order history, and your previous interactions.

This data is retained for a period of 5 years from your last interaction.

This last interaction is your last traceable contact by our systems. It may be your last contact with us, your last login, or a click on a link contained in an email.

This data will then be anonymised.

To optimise and ensure the management of our website and communication means (including correcting operational issues and computer bugs). As well as analysing and supervising the functioning of the website and communication means.

This processing is based on our legitimate interest in ensuring the functioning and improvement of our website and communication means, provided that your interests, freedoms, and fundamental rights do not prevail.

In the context of depositing certain cookies and trackers for this purpose, the processing may be based on obtaining your consent.

We are required to collect your identity and customer profile, your IP address.
We may also collect or deposit information and trackers related to your terminal: User Agent, window size.

Your data is logged for a maximum period of 12 months.

Cookies and trackers dedicated to audience measurement are retained for a maximum duration of 13 months, and the information collected through these means for a duration not exceeding 25 months.

When processing is based on your consent, your data may be processed for a shorter duration if you withdraw it.

To comply with legal obligations, including tax obligations.

This processing is necessary to comply with legal obligations to which we are subject.

We are required to collect: your identity and address, the date of sale, and the description of the ordered products.

In compliance with accounting obligations, invoices are retained for 10 years.

To ensure the defence of our rights in court or to ensure our defence in the context of legal action, as well as to pre-constitute evidence in these cases.

This processing is based on our legitimate interest in ensuring the defence of our rights in court or our defence in the context of legal action, provided that your interests, freedoms, and fundamental rights do not prevail.

We are required to collect: your identity, your location and contact details, as well as the nature of the incident and its date of occurrence.
We may also collect other data necessary for the defence of rights in court, such as your purchase history.

We retain your data from an incident or dispute for a duration not exceeding the legal limitation period (6 years maximum or 10 years in the case of bodily injury), or for the entire duration necessary in the context of legal proceedings.

In order to ensure the management of unpaid debts, their recording, and the identification of individuals in a situation of unpaid debts for the purpose of excluding future transactions.

This processing is necessary for the execution of a contract to which you are a party, or if applicable, for the execution of pre-contractual measures taken at your request.

We are required to collect your identity, the payment methods that were used at the time of the unpaid debt occurrence, as well as the elements related to the payment incident (file number, date of the occurrence of the unpaid debt and its amount, and the subject of the unpaid debt).

Your data is retained for a period of 48 hours following the regularisation of the unpaid debt. If the unpaid debt is not regularised, your data will be retained for a maximum period of 5 years from the occurrence of the unpaid debt.

3. Who are the recipients of your personal data?

Where is your data stored?

The personal data we process is stored within the European Economic Area but may also be transferred and stored outside the European Economic Area, particularly as part of the services provided by our subcontractors.

Is your data shared with third parties?

As the Data Controller, we may, in certain cases, share your data with third parties. We will only share your data with third parties that provide sufficient guarantees regarding the implementation of appropriate technical, organisational, and legal measures to ensure the protection of your rights and your data.
Depending on the level of involvement in the relevant processing, i.e., when they determine the "why" and "how" of the intended processing, these recipients may qualify as distinct Data Controllers, Subcontractors, or Joint Controllers with us.

The categories of recipients with whom your data is, or may be, shared are as follows:

Our service providers and partners, including:

Our IT service providers and IT solution suppliers, who handle the processing of your data: including the hosting of your data, IT management services to provide you with our products and services;
Our service providers responsible for marketing operations, our partners supplying electronic communication platforms, and our advertising suppliers and service providers, including targeted and personalised advertising: to carry out our commercial prospecting operations, or to keep you informed about our products or services and promotional offers;
Our service providers and partners responsible for customer relationship management, and our partners responsible for managing returns and feedback on your customer experience and our products;
Our partners and service providers supplying IT solutions to assist in the search and recruitment of new employees.

Our partners processing your data for their own purposes, including:

Our social media partners for managing our pages on these platforms, for exchanges and interactions between you and us via the communication channels they provide, as well as for promoting our products and services on these platforms, including through advertising targeting;
Our payment service partners, and our partners responsible for fraud prevention operations and credit risk analysis: who process your data to enable payments to be made on our website;
Our partners responsible for auditing, law firms, or similar consultants and analysts, to enable us to defend our interests in court, to comply with our legal obligations, or to attest to the state of our compliance;
Our marketplace operator partners on which we distribute our products and who process your data for purposes they determine, such as managing customer accounts;
Our insurance partners to verify your identity in order to provide you with benefits and promotional offers as a member of the said insurance partner.

In the event of the sale or purchase of one of our companies or assets, we may disclose your contact details to prospective sellers or buyers of these companies or assets;
State authorities, government agencies, and judicial administrations: when a legal obligation requires us to transmit personal data following a request from them, or when such transmission is necessary to allow us to ascertain, exercise, or defend our rights in court.
To any other natural or legal person to whom you have specifically requested us to transmit your data, or for whom you have specifically consented to the transmission of your personal data; as well as any natural or legal person for whom the transmission of your data is justified by an overriding legitimate interest prevailing over your own interests.

Your data is also made known to our strictly authorised employees.

If you wish to obtain a comprehensive list of the identity of each recipient, we invite you to contact us.

How are transfers of your personal data outside the European Economic Area regulated?

When we transfer your data outside the European Economic Area, we prioritise selecting Subcontractors established in countries whose legislation is recognised as adequate, namely countries benefiting from an adequacy decision from the European Commission.
In the absence of such an adequacy decision from the European Commission, we ensure that transfers are appropriately framed, notably through the use of standard contractual clauses for data protection adopted by the European Commission.

5. What rights do you have and how can you exercise them?

Concerned Right	Description
Right to Information	You have the right to be informed about the processing of your personal data.
Right of Access	You have the right to obtain a copy and/or request access to all your personal data.
Right to Rectification	You have the right to correct or complete your personal data.
Right to Restrict Processing	You have the right to request the cessation of processing of your personal data.
Right to Erasure (or Right to be Forgotten)	You have the right to request, under certain conditions, the erasure of your data. If the data has been shared with authorized recipients, we will take appropriate measures to ensure this right is respected.
Right to Object to Processing	You have the right to object under certain conditions, for reasons related to your particular situation, to the processing of personal data concerning you. However, you can object at any time, and without condition, to processing carried out for commercial prospecting purposes, including profiling related to such prospecting. You can therefore specifically object to commercial prospecting by SMS and email, at any time, via the link « unsubscribe » in commercial prospecting emails, or directly in your customer area in the section « My Account – Contract Preferences – Newsletter/SMS ».
Right to Register on the Telephone Preference Service (BLOCTEL)	If you no longer wish to be contacted by telephone on the number provided, you have the option to register at any time on the telephone marketing opt-out list via the website accessible at « http://www.bloctel.gouv.fr ».
Right to Withdraw Consent	You have the right to withdraw your consent to processing at any time and easily. You can withdraw your consent to commercial prospecting by SMS and email, at any time, via the link « unsubscribe » in commercial prospecting emails, or directly in your customer area in the section « My Account – Contract Preferences – Newsletter/SMS ».
Right to Data Portability	You have the right to retrieve all your personal data in a structured format to transfer it to a new data controller.
Right to Refuse Automated Decisions, including Profiling	You have the right to object, under certain conditions, to profiling or automated decision-making concerning you.
Right to Issue Directives	You have the right to issue advance directives regarding the fate of your personal data after your death.
Right to Lodge a Complaint with the Supervisory Authority	You can submit a complaint to the National Commission on Informatics and Liberty (CNIL), which is the competent supervisory authority in France. This complaint can be made at the following address: https://www.cnil.fr/plaintes.

You can exercise your rights by contacting the email address “dpo@motoblouz.com” and specifying the nature of your request. Proof of your identity may, in certain cases, be requested. This proof will not be retained and will be destroyed after verification. Furthermore, for each processing operation, the exercise of certain rights may be limited. This will be the case, for example, when legal obligations are imposed on the data controller.

Each request is processed as quickly as possible, and in any case within a maximum period of 30 days from its receipt. This period may be extended by an additional 2 months in the case of complex requests in accordance with the regulations

6. Tracking the Opens of Our Emails

Purposes

This processing allows us to measure the opening of our emails in order to establish statistics on the performance of our campaigns, personalise the content offered to you, and adjust the frequency of our communications to limit the sending of irrelevant messages.

Personal Data Processed

We process your email address, your customer ID, as well as information related to the opening of our emails (email opened, date and time of opening).

Legal Basis

This processing is based on your consent. For customers created before 14 April 2026, specific information has been provided, in accordance with CNIL recommendations, to allow them to object to this processing. In the absence of opposition, this processing is maintained. Customers created from 14 April 2026 onwards are only subject to this processing after having given their consent. You can withdraw your consent or object to this tracking at any time via the preference management link included in each of our emails or from your customer area.

Retention Period

Data related to opens are retained for a maximum period of 24 months from their collection.