Data Protection Charter

IEVA GROUP SAS, acting on its own behalf and that of its subsidiaries (hereinafter “IEVA DISTRIB”) is the publisher of the website www.ievadistrib.pro (the “Site”) on which you are offered (i) access to various services (newsletter), (ii) the “Contact Us” section to obtain various information (hereinafter “the Services”), (iii) as well as our products and services.

We attach great importance to the protection of the personal data of all users of our Site, in a constant concern for transparency, so that you are fully informed about the way in which we collect and use your data and the rights you have in this regard.

We of course comply with the General Data Protection Regulation, n°2016/679 of April 27, 2016 (hereinafter the “GDPR”), the “Informatique & Libertés” law n° 78-17 of January 6, 1978 as amended, as well as the law “for confidence in the digital economy” n° 2004-575 of June 21, 2004 (article L. 34-5 of the Postal and Electronic Communications Code).

This charter (hereinafter “the Charter”) sets out IEVA DISTRIB’s commitments to the protection of personal data (“Personal Data”) of Internet users visiting this site (hereinafter referred to as “the Site”), users of the Services and customers who purchase our products or services offered on this Site.

It may be modified at any time by us, in particular to comply with any regulatory, jurisprudential, editorial and/or technical developments.

You are advised to refer to the latest version of the Charter accessible on our Services before any navigation.

We have appointed a personal data protection officer who is responsible for answering all your questions about the protection of your personal data and ensuring that you fully exercise your rights in accordance with the legal provisions detailed above. You can contact him at the following email address: rgpd@ievagroup.com ).

The Charter applies in addition to the provisions of our General Conditions of Sale

ARTICLE 1: WHAT IS PERSONAL DATA?

Personal data (“Personal Data”) means any information relating to a natural person and enabling  to identify you directly or indirectly, such as, in particular, your name, date of birth, postal address, email address, customer number, user profile or digital identifiers such as the IP address of your computer or the MAC address of your mobile phone or your browsing data obtained via cookies.

ARTICLE 2: WHO IS THE IDENTITY OF THE DATA CONTROLLER?

IEVA GROUP SAS is responsible for processing the personal data that you communicate to us and that we collect to enable you to benefit from the Services, Products and Benefits offered on our Site:

IEVA GROUP SAS, having its registered office at 87, rue Réaumur, 75002 Paris, registered with the Paris Trade and Companies Register under number 881 983 589.

ARTICLE 3 – WHAT IS THE NATURE OF THE PERSONAL DATA COLLECTED BY ATELIER DU SOURCIL AND FOR WHAT PURPOSES?

We may collect and process personal data of our customers, our prospects and, more generally, users of the Site in the context of visiting the Site, using the Services, purchasing Products or Services.

The purposes of these treatments, their legal bases, as well as the nature of the personal data collected are presented below:

PURPOSE OF PROCESSING	DATA COLLECTED	LEGAL BASIS
Management online sales	First and last name, Mailing address Phone number Email address Shop Customer account username/password Customer number Purchase order, invoice and delivery note Payment terms	Execution of a contract and pre-contractual measures
Claims and Disputes Management	First and last name, Postal address Phone number Email address Shop Customer account username/password Customer number Purchase order, invoice and delivery note, payment details Complaint, unpaid bills	Execution of the contract
Recruitment of models for training in aesthetic services	Recruitment form: - First and last name, - Postal code - Telephone number, - Personal or professional email address - Photo (optional)	Legitimate interest (training)
Management of the “Contact us” section	First and last name, Email address Phone number	Execution of the contract Legitimate interest (commercial action)
Newsletter Management	Email address	Consent
Prospecting campaigns (emailing, SMS, competitions)	First and last name Email address Telephone number (for SMS)	Legitimate interest (commercial action)
Improving the user experience (navigation, use of the services offered, adaptation of content and targeted advertising)	IP address, browsing and connection data, behavioral tracking (via cookies)	Consent
Statistical studies and audience measurements	IP address, browsing and connection data, behavioral tracking (via cookies) The studies and measurements are anonymized	Consent
Management of the exercise of  GDPR rights of data subjects	First and last names Mailing address Email address Mailing address Email exchanges Copy of identity document Nature and purpose of the right to be exercised and nature of the personal data concerned	Legal obligation

IEVA GROUP SAS only collects Personal Data that is adequate, relevant and limited to what is necessary with regard to the purposes for which it is processed.

These purposes are specific and legitimate and, under no circumstances will your Personal Data be further processed in a manner incompatible with these purposes, unless we obtain your prior consent.

Commercial prospecting

When your Personal Data is used for direct marketing purposes by email or SMS, your prior consent is required.

You may therefore be offered the opportunity to receive commercial offers:

• From IEVA GROUP and the companies of IEVA Group to which it belongs
• From his partners.

By way of exception, and in accordance with applicable regulations, in the event that these contact details have been collected in connection with the sale of a product or the provision of a service and are used to send prospecting intended to promote similar products or services provided by IEVA GROUP, your Personal Data may be used without your consent. Similarly, your consent will not be required for prospecting by telephone or post. In both cases, IEVA GROUP processes your data for the purposes of interests considered legitimate by the regulations, without this having any consequences on your rights.

You can, however, object to any commercial prospecting by exercising  your right to object referred to in Article 8 below by indicating this when collecting your Personal Data or subsequently.

When collecting Personal Data, the account creation, online order or information forms specify the Personal Data that must be communicated to benefit from the Service concerned, the optional Personal Data and the consequences of non-communication of Personal Data.

The use of cookies

IEVA GROUP may also collect your browsing data using data collection tools: cookies, tags, connection cookies, beacons, and any other appropriate technical means (the "Cookies"), it being specified that their use is subject to your prior consent. In this regard, it is specified that when you connect to the site, an information banner is displayed and offers you either (i) to click on "I accept" to accept all Cookies (ii) to click on "No thanks" to refuse Cookies and continue browsing the Site or (iii) to click on "I choose" to select the Cookies that you accept.

For your information,  A Cookie is a small data file copied onto your computer's hard drive by a website. It records information about your computer's browsing on a site (such as the pages visited or the dates and times of consultation), which may be read during your subsequent visits to the Site. IEVA GROUP may place Cookies on your device when you visit the Site or when you register to access a Service.

The Cookies placed on the Site are of several types and serve different purposes:

– Navigation Cookies, which facilitate navigation on the Site or which are necessary for the provision of the Services, Products or Services that you order: “shopping cart” cookies, session cookies, or even flash cookies allowing a media player to function when this is necessary for the operation of the Services that you order, for example;

– Audience measurement cookies, which allow us to obtain anonymous traffic statistics. IEVA GROUP uses these cookies to detect navigation problems that may occur on the Site, improve its performance and functionality, or improve the Services;

– Behavioral analysis cookies, which allow us to collect behavioral data. This data allows us, for example, to know if you have already visited the Site before, helps us identify which information on the Site might interest you the most, and helps to improve your browsing experience and make it more interesting. To do this, we keep track of your preferences when you visit a particular site. They can also allow IEVA GROUP and its partners to display advertisements corresponding to your interests.

Cookies allow us to personalize your media content and ads, offer social media features and analyze our traffic. We also share information about your use of our site, such as navigation and/or geolocation data, with our social media, advertising and analytics partners, who may combine it with other information that you have provided to them or that they have collected from your use of their services.

You can refuse or selectively accept the installation of behavioral analysis cookies, geolocation cookies and/or audience measurement cookies and/or the installation of cookies by IEVA GROUP partners by configuring your Internet browser used from your terminal. Access to certain offers and sections proposed by the Services may then be altered or even impossible. You are invited to consult the CNIL website at the following address: http://www.cnil.fr or consult the help and documentation of your Internet browser.

You can control the application of Cookies by referring to the methods presented in Article 6 of this Charter.

Cookies are necessary to allow you to benefit from certain features of the Site. If you have chosen to disable these Cookies via your internet browser, access to features and certain Services may then be impaired or even impossible. We therefore advise you to leave them active to fully enjoy our services and your browsing on our sites.

Cookies allow, during each of your visits, and according to the purposes determined in article 2:

• To carry out statistical studies,
• To identify yourself,
• To adapt the content of a service or an advertising offer to your behavioral data and,
• More generally, to study your behavior during your navigation on the Site in order to offer you a better browsing experience and use of our Services.

In addition, IEVA GROUP may process data relating to interactions between you and our company: opening or linking to newsletters we send, clicks on links in newsletters we send. This information allows us to tailor the exchanges we have with you.

ARTICLE 4 – WHO ARE THE RECIPIENTS OF PERSONAL DATA?

Personal Data is intended for IEVA GROUP and its subsidiaries.

By way of exception, they may be communicated to third parties in the following cases:

(1)  If you have checked the "Yes" box for the "Partners" option, you may also receive communications and commercial offers relating to products and/or services provided by our partners, in particular advertisers, advertising agencies and advertising networks. Our partners then have your declared data.

When transmitting your Personal Data to third parties, IEVA GROUP contractually supervises this transmission so that the partner complies with the regulations regarding personal data. However, IEVA GROUP is not responsible for the processing by its partners of your declared data once it has been transmitted to them. To no longer receive commercial offers from our current partners, we suggest that you refer to their conditions for more information. To no longer receive commercial offers from our future partners, you can at any time click on the administration interface provided for this purpose on our Services. You can also exercise your rights of access, rectification, opposition, erasure, data portability and limitation of processing with our various partners according to the terms they have established.

(2) Your Personal Data may also be transmitted to service providers appointed by IEVA GROUP to ensure the effectiveness of the Services you wish to use, the delivery of the Products you have ordered or the reservation of the Services you have chosen.

These service providers may be located outside the European Union. In this case, these service providers are signatories to the standard contractual clauses validated by the European Commission to ensure compliance with the GDPR.

(3) In accordance with the regulations in force, the reporting data may be transmitted to the competent authorities upon request.

ARTICLE 5 – HOW LONG IS PERSONAL DATA STORED?

Depending on the purpose of the processing, the retention period of Personal Data may vary.

Unless otherwise required by law, ATELIER DU SOURCIL retains Personal Data for the period necessary to achieve the intended purpose. Personal Data will therefore be retained for the period during which you use our services, and deleted no later than three years from our last contact, unless anonymized or legally required to retain certain data for a longer period.

PURPOSE OF PROCESSING	SHELF LIFE
Management online sales	10 years
Claims and Disputes Management	Until the final resolution of claims and disputes
Recruitment of models for training in aesthetic services	2 years
Management of the “Contact us” section	5 years
Newsletter Management	Subscription duration
Prospecting campaigns (emailing, SMS, competitions)	3 years from last contact
Improving the user experience (navigation, use of the services offered, adaptation of content and targeted advertising)	13 months
Statistical studies and audience measurements	13 months
Management of the exercise of  GDPR rights of data subjects	10 years

ARTICLE 6 – HOW TO CONTROL THE USE OF COOKIES

You can restrict the use of cookies by changing your browser settings:

In Internet Explorer:

Click Tools at the top of the browser window and select Internet Options.

In the options window, click the Privacy tab.
To enable cookies, set the slider to Medium or lower.
To disable cookies, move the slider to the top to block all cookies.

In Firefox:

Click Tools in the browser menu and select Options.
Select the Privacy pane.

To enable cookies, check the Accept cookies from the Site box.
To disable cookies, uncheck the Accept cookies from the Site box.

In Chrome:

Click the wrench icon in the browser toolbar.
Select the Settings option.

Click Show advanced settings.

In the Privacy section, click the Content Settings button.

To enable cookies, select Allow local data storage in the Cookies section. Both first-party and third-party cookies are then allowed. To accept only first-party cookies, select Block all third-party cookies without exception.

To disable cookies, select Block all sites from storing data in the Cookies section.

In Safari:

If necessary, open Safari.

Choose Safari > Preferences, then click Privacy.
In the Block Cookies section, specify whether Safari should accept cookies from the Site and under what circumstances.

For an explanation of each option, click Details.
To see which websites store cookies on your computer, click Details.

For other browsers and mobile devices:

If you want to restrict the use of cookies for another browser or on a mobile device, go to the official webpage of the browser or device manufacturer or consult the documentation they provided to you, and then follow the instructions.

IEVA GROUP may use identification technologies other than cookies that fulfill the same role as cookies, and in mobile environments where cookies do not work. These solutions may be SDKs (Software Development Kits) or Local Storage, or any other suitable solution.

ARTICLE 7 – WHAT SECURITY MEASURES?

Any user opening an account is asked to create a username or nickname and a password. This password must be kept secret and you must limit access to your computer or mobile devices and log out once you have finished using our services.

As Personal Data is confidential, IEVA GROUP limits access to it to only those employees of the company or service providers who need it in the context of carrying out the processing.

All persons having access to Personal Data are bound by a duty of confidentiality and are liable to disciplinary measures and/or other sanctions if they do not comply with these obligations.

ARTICLE 8 – WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

You have, subject to the limits provided for by the regulations in force, several rights with regard to the processing of your Personal Data:

• The right to information prior to the collection of your Personal Data, which is one of the purposes of this charter
• The right of access to the Personal Data that we process,
• The right to request the rectification of inaccurate, incomplete, ambiguous or outdated Personal Data (which you can also do directly in the “my account” section when you have created one),
• The right to request that IEVA GROUP delete your Personal Data (right to erasure) or stop processing it (right to restriction) in certain circumstances
• The right to object to the processing of your Personal Data for reasons relating to your particular situation, and in any event for commercial prospecting purposes,
• The right to withdraw your previously given consent (in particular to receive information from us), which does not call into question the validity of the processing of your Personal Data prior to this withdrawal,
• The right to request that we provide you with your Personal Data or transfer it to another service provider (right to portability),
• The right to define guidelines relating to the fate of your Personal Data after your death,
• The right to make a complaint with the national authority responsible for the protection of Personal Data (in France, this is the National Commission for Information Technology and Civil Liberties, the CNIL, whose contact details can be found at: https://www.cnil.fr/fr/plaintes ).
• The right to register on the Bloctel system’s telephone canvassing opt-out list: https://www.bloctel.gouv.fr .

To stop receiving messages from IEVA DISTRIB, you can also click on the unsubscribe link included in each of our messages.

For any questions or to exercise your rights, simply send an email (rgpd@atelierdusourcil.com) or a letter to the following address:

IEVA GROUP
The Data Protection Officer
87 rue Reaumur, 75002 PARIS

When you wish to exercise a right, your requests must be submitted in writing and must be signed and accompanied by a photocopy of an identity document bearing your signature. The request must specify the address to which the response should be sent.

IEVA GROUP will have 1 (one) month to respond following receipt of your request. This period may be extended by two months, taking into account the complexity and number of requests addressed to IEVA GROUP. In this case, we will inform you of this extension and the reasons justifying it.

ARTICLE 9 – WHAT ABOUT THE USE OF MY DATA VIA SOCIAL NETWORKS?

You can join our Instagram, Pinterest, and Facebook accounts from our Site and follow our news through them. The only data that IEVA GROUP may collect is anonymous and processed for purely statistical purposes (in particular to track the number of subscribers who follow these accounts).

IEVA GROUP is not responsible for the processing of Personal Data by these social networks. To understand your rights with respect to these social networks and configure options to protect your privacy, you should consult the privacy policy of each of them.