PRIVACY POLICY

In accordance with European regulation 2016/679 of April 27, 2016

(known as “general data protection regulation” or GDPR)

This personal data protection charter (below: the “Charter”) describes the commitment of the IDGrafix Site published by IDC, SLu as data controller with regard to respect for private life and protection personal data of its users. This Charter has been written to allow you to become aware of the practices and conditions under which IDgrafix collects, uses and stores your personal data (below: the “Data”).

There you will find a description of the various Data that we may collect and process or that you may transmit to us when you access and/or use the site https://www.idgrafix.fr (the “Site”) on which our products are sold. The term “Site” only refers to the site https://www.idgrafix.fr.

Given the constant evolution of laws and regulations regarding technology and the protection of personal data, it is likely that this Charter will be updated. If you are a user of the Site, you will be informed of any modifications by email.

If any of the clauses of this Charter were to be declared void or contrary to the regulations, it will be deemed unwritten but will not result in the nullity of the other clauses of this Charter.

This Charter applies to the Data collected:

• Via simple navigation on the Site
• Via emails exchanged between IDgrafix and you or any other electronic messaging tool
• When you create a user account on the Site
• When you place an order on the Site
• When you subscribe to the Site Newsletter (the “Newsletter”)

It does not apply to information collected by any third parties or through sites managed by them, including via applications or content (including advertisements) redirecting the user to the Site. We thank you for carefully reading the Charter concerning the processing of your Data and we inform you that browsing our Site necessarily entails acceptance of this Charter. If the latter does not obtain your membership, we invite you to leave our Site. It is your responsibility to check that the Data communicated to IDgrafix is compliant. If necessary, you can correct and update them from your "My account" area.

1. WHAT DATA IS COLLECTED BY IDgrafix?

Depending on the nature and purpose of your interaction with IDgrafix (creation of a user account, subscription to the Newsletter, completion of contact forms, as well as during possible telephone exchanges) we may collect the following Data:

• You will necessarily be asked for your email address if you wish to create a user account, communicate with us via the contact forms and/or receive our Newsletter.
• Data relating to your identity such as your last name, first names, email address, postal addresses and telephone numbers may be requested from you
- • Data relating to navigation: this is Data relating to the way in which you use the Site including: the IP address, the browser used, browsing time, search history, operating system used, language and pages viewed
- • Data about your visits to the Site, including traffic data, log files and other data or communications resources you use when accessing the Site
- • Data relating to orders: your postal address is necessary for issuing invoices. Likewise, your bank details, PayPal, or other financial partner must be provided to proceed with the payment of your order.
- • Data relating to the use of social networks when you use their functionalities.
2. HOW IS YOUR DATA COLLECTED?
Data may be collected in different ways on the Site. The Data may be collected directly when you transfer it to us using the contact and user account creation and Newsletter subscription forms available on the Site and/or communicated when you contact us by telephone. When you contact us using these different means, a copy of your exchanges with IDgrafix, including email addresses, may be made and archived. IDgrafix also indirectly collects certain Data using cookies/trackers. We invite you to read our Cookies Charter, intended to help you better understand these technologies and the use we make of them on the Site and within the framework of our services, applications and tools.
3. WHY IS YOUR DATA COLLECTED?
If you are a simple user, we collect your Data for:
- Send you our Newsletter and/or personalized commercial offers if you have consented to this
- Manage orders and execute the contract
- Ensure the security and traceability of site purchases
- Send you information concerning your account (including purchase invoices, order history)
- Manage your requests sent via the contact page
- Allow you to leave an opinion on the products and/or the Site
- Inform you of changes concerning the Site or our offer of products and services
- Respect our rights and obligations stipulated in contracts concluded with users as well as for any other legal purpose.
We may also use cookies or trackers:
- To secure your browsing and help improve your user experience, in particular by recognizing the username and password that you have already provided so that you do not have to enter them on each page of the Site where these are required. Refusal of these will prevent any order on the Site (Identification impossible).
- analyze traffic and data on the Site in order to measure the number of users of the Site, to make it easier to use and to ensure its ability to respond quickly to your requests.
Refusal to correctly complete the form(s) on the Site may block access to certain pages, in particular those regarding the ordering of products or services.
4. WHO PROCESS YOUR DATA?
Your Data is processed by IDgrafix staff and collaborators in charge of:
- Site management (Orders and shipments)
- Support management, to answer all your questions
- Billing management.
Furthermore, as part of our activity, and for processing purposes, your Data may be communicated to subcontractors, service providers or other third parties, and in particular:
- PayPal
- HIPAY Bank
- Carriers (La Poste, Colissimo, etc.)
- Accounting services
- Tax services
- Google Analytics (if used)
Each of its actors respects a confidentiality commitment concerning the use and processing of personal data.
For payment management and to facilitate the experience of its users, IDgrafix offers the following payment methods to make purchases on the Site:
- Online payment by Bank Card (Carte Bleue, Visa Card, Eurocard / Mastercard) managed by HIPAY
- Online payment by PayPal
IDgrafix has no access to your identifiers and bank card numbers. All transactions are secured using SSL encryption, guaranteeing both the identity of the payment institution and the confidentiality of the data.
For sending our Newsletters, our emailing campaigns are managed via Mailjet services.
All subcontractors, service providers, Partners or other third parties mentioned above are obliged by contractual obligations to respect the confidentiality and protection of the Data and to process them only for the purposes for which we transmit them.
Your Data may be transferred to any buyer or other successor in the event of a merger, assignment, restructuring, reorganization, dissolution or other sale or transfer of part or all of the assets of IDgrafix due to uncertainties or bankruptcy, liquidation or other processes in which IDgrafix User Data is among the assets transferred.
Finally, we may also disclose your Data:
- to comply with any mandate required by applicable laws, including government and regulatory requests
- if we consider that disclosure is made necessary or required for the protection of the rights, property or security of IDgrafix, its customers or other stakeholders.
This possible disclosure includes exchanging information with other companies and organizations for the purposes of protection against fraud and counterfeiting.
The Site may contain links to various sites and social networking platforms managed on third-party servers, by people or organizations over which IDgrafix has no control. Therefore, we cannot under any circumstances be held responsible for the way in which your Data will be stored or used on the servers of these third parties. We advise you to read the applicable charter for the protection of personal data of each third-party website to which you access via the Site in order to assess the way in which your Data will be used.
5. HOW LONG IS YOUR DATA KEPT?
IDgrafixne only keeps your Data for the duration necessary for the purposes set out in Article 3. This retention period is not the same depending on the Data in question, the nature and purpose of the collection being likely to vary this duration. Likewise, certain legal obligations impose a specific retention period.
When you are subscribed to the Newsletter, we keep your email address until you unsubscribe.
When you contact IDgrafix using the contact form or communicate with us by telephone, your data may be kept:
- up to one (1) year from the last contact if you do not have a customer account or an order placed on the Site.
- up to ten (10) years (Legal Duration) from the last order placed on the Site, if this information concerns this order.
- In all other cases, the retention period of this Data exchanged cannot exceed one (1) year.
With regard to your user account, all of your billing data is kept for ten (10) years from the date of purchase even if you have made a request to deactivate your user account. .
If you make a request for deletion of Personal Data, your Site user account will be deactivated and anonymized, then completely deleted at the end of the aforementioned periods from the day you made the request. Finally, with regard to Data collected using cookies or trackers, they will be kept for up to six (6) months for cookies or trackers measuring the audience and up to thirteen (13) months for others. Beyond the aforementioned retention periods, your Data will be anonymized to be kept for statistical purposes only.
6. HOW IS YOUR DATA PROTECTED?
Your Data is kept on a secure server and protected by a firewall and antivirus. We have implemented technical and organizational measures intended to guarantee the security and confidentiality of your Data against any accidental loss and against any unauthorized access, use, modification and disclosure. Given the particularities inherent to the Internet, it is however impossible for us to guarantee optimal security of the exchange of information on this network. We strive to protect your Data, but we cannot guarantee the absolute security of information transmitted to the Site. You agree that you transmit your Data at your own risk. We cannot be held responsible for non-compliance with the confidentiality settings or security measures in place on the Site. As such, you agree that the security of your information is also your responsibility. For example, it is your responsibility to keep secret the password allowing you to access your user account. Do not under any circumstances disclose it to third parties. Likewise, be careful when disclosing information in public sections of the Site, which can be viewed by any user of the Site.
7. WHAT ARE YOUR RIGHTS?
You can choose how the Data you transmit to us is used:
- You can browse the Site without providing any Data. If applicable, you will not be able to use certain features of the Site and in particular, make purchases (if you are a simple user) and/or downloads from the Site.
- You can refuse to communicate your bank or PayPal details and/or your postal addresses. In this case, you will not be able to make a purchase on the Site.
- You can decide to no longer receive the Newsletter as well as our personalized offers: simply log in to your Site user account or click on the link in the email sent to you.
In any case, you have the possibility of accessing your user account at any time to consult or update your Data and unsubscribe from our Newsletter if you were subscribed to it. In accordance with the provisions of the regulations applicable to the protection of personal data, in particular European regulation 2016/679 on data protection (the “GDPR”) as well as the law of January 6, 1978 n°78-17 known as “Informatique et Libertés” and its modifications, you have the right to access and a right of rectification to your Data.
In addition, subject to the conditions provided for by said regulations for the exercise of these rights, you benefit from:
- A right to erasure of your Data (excluding accounting data, the retention of which for 10 years is required by French law - article L123-22 of the commercial code)
- A right to limit the processing of your Data
- A right to object to the processing of your Data for legitimate reasons, in accordance with Article 21 of the GDPR
- A right to portability of the Data you have provided (for automated processing based on consent or the execution of a contract)
- The right to withdraw consent, when this has been requested. When the processing of your Data is carried out on the basis of your consent, you can withdraw it at any time.
You acknowledge, however, that processing carried out before the revocation of your consent remains perfectly valid. You also have the right to object without reason to IDgrafix analyzing your Data to share it for marketing purposes.
However, in accordance with article 12.6 of the GDPR, for the exercise of these rights, IDgrafix, as responsible for this processing, reserves the right to ask you to prove your identity. We inform you that the data used to prove your identity will be deleted once we have responded to your request. You can exercise these rights by sending an email in French to contact @ idgrafix. fr or at the following address: IDC, Slu - Mirrador El Tarter - AD100 El Tarter - ANDORRA
We have one month to respond to any request relating to the exercise of your rights. This deadline may be extended by two months, due to complexity or too many requests.
8. STORAGE OF DATA COLLECTED BY IDgrafix
The Data collected as part of the use of the Site is stored exclusively on a server located in Europe , hosted by the company OVH .