Privacy policy

Article 1. Who are we?

The following information is provided so that you may be informed of Swan Paris’ commitments regarding the protection of personal data. Swan Paris is a simplified joint-stock company, located at 12, rue du Sentier – 75002 Paris, registered with the Paris Trade and Companies Register under number 899 782 684, acting as the data controller for the personal data processing operations referred to in this document. In the course of its business activities, Swan Paris may collect and process personal data relating to its clients. With a view to promoting innovation while respecting individuals, Swan Paris has implemented the technical and organizational measures necessary to protect the personal data it processes.

Article 2. What personal data do we process?

In connection with the processing of personal data on our website, Swan Paris collects and processes the following data: • last name; • first name; • postal address; • date of birth; • email address; • telephone number; • bank details.

Article 3. For what purposes do we process your data?

The processing operations we carry out are intended to achieve the following purposes: • management and performance of concluded contracts; • order processing; • parcel delivery; • management of business relationships; • sending the newsletter; • customer service management; • management of the website personal account; • measurement of quality and satisfaction; • improvement of the services provided.

Article 4. On what legal bases do we process your data?

We only implement data processing operations if at least one of the following conditions is met: • performance of a contract when such processing is necessary for proper performance of the parties’ obligations or for the performance of pre-contractual measures, such as order review; • the legitimate interests pursued by Swan Paris, such as monitoring service quality and developing its business activity; • where your consent to the processing operations has been obtained; • compliance with legal obligations.

Article 5. To whom do we disclose your data?

The personal data we collect, as well as any data collected subsequently, is intended for us in our capacity as data controller. We ensure that only authorized persons have access to this data. Our service providers may receive this data in order to perform the services we entrust to them. Certain personal data may be disclosed to third parties or legally authorized authorities in order to comply with our legal, regulatory, or contractual obligations. Such data may be communicated to these entities for the purposes set out in this information notice. These operations are carried out on the basis of instruments compliant with applicable regulations and capable of ensuring the protection of your data and respect for your rights.

Article 6. How long do we retain your data?

The retention periods we apply to your personal data are proportionate to the purposes for which it was collected. Data is retained: • for three (3) years from your last incoming contact; • in the case of newsletter subscription, for the duration of the subscription. However, at the end of the periods mentioned above, your personal data may be subject to intermediate archiving in order to comply with our legal, accounting, and tax obligations (such as the obligation to retain invoices for ten (10) years under Article L.123-22 of the French Commercial Code).

Article 7. How do we ensure the security of your data?

Swan Paris attaches particular importance to the security of personal data by implementing technical and organizational measures appropriate to the sensitivity level of the personal data, in order to ensure the integrity and confidentiality of the data and protect it against malicious intrusion, loss, alteration, or disclosure to unauthorized third parties.

Article 8. What rights are you entitled to?

8.1 Your right to be informed

You acknowledge that this privacy policy informs you of the purposes, legal framework, interests, and recipients or categories of recipients with whom your personal data is shared. In addition to this information, and in order to guarantee fair and transparent processing of your data, you declare that you have received additional information regarding: • the retention period of your personal data; • the existence of the rights available to you and the procedures for exercising them. If we decide to process data for purposes other than those indicated, all information relating to these new purposes will be provided to you.

8.2 Your right of access and rectification

You have the right to access and to have your personal data rectified. In this respect, you may obtain confirmation as to whether or not your personal data is being processed and, where it is, you may access your data as well as the following information: • the purposes of the processing; • the categories of personal data concerned; • the recipients or categories of recipients of the personal data; • where possible, the envisaged retention period of the personal data or, where not possible, the criteria used to determine that period; • the right to lodge a complaint with a supervisory authority; • the existence of automated decision-making, including profiling, and in such case, meaningful information about the underlying logic, as well as the significance and the envisaged consequences of such processing for the data subjects. You may ask us, as applicable, to have your personal data corrected or completed where it is inaccurate, incomplete, ambiguous, outdated, or obsolete.

8.3 Your right to erasure

You may request the erasure of your personal data where one of the following grounds applies: • the personal data is no longer necessary with regard to the purposes for which it was collected or otherwise processed; • you withdraw previously given consent; • you object to the processing of your personal data where there is no legal ground for such processing; • the processing of personal data is not compliant with applicable laws and regulations. However, this right cannot be exercised where retention of your personal data is necessary under law or regulations, including, for example, for the establishment, exercise, or defense of legal claims.

8.4 Your right to restriction of processing

You may request restriction of the processing of your personal data in the cases provided for by applicable laws and regulations.

8.5 Your right to object

You have the right to object to the processing of personal data concerning you where such processing is based on the legitimate interest of the data controller.

8.6 Your right to data portability

Since May 25, 2018, you have the right to data portability. The data to which this right may apply is: • only your personal data, which excludes anonymized personal data or data that does not concern you; • declarative personal data as well as the operational personal data referred to above; • personal data that does not adversely affect the rights and freedoms of third parties, such as data protected by trade secrets. This right is limited to processing operations based on consent or on a contract, and to personal data that you have personally generated.

8.7 Your right to withdraw your consent

Where the data processing we carry out is based on your consent, you may withdraw it at any time. We will then cease processing your personal data, without affecting prior processing operations for which you had given consent.

8.8 Your right to lodge a complaint

You have the right to lodge a complaint with the CNIL in France, without prejudice to any other administrative or judicial remedy.

8.9 Your right to define post-mortem directives

You may define directives regarding the retention, erasure, and disclosure of your personal data after your death, through a trusted third party, certified and responsible for ensuring that the deceased’s wishes are respected, in accordance with applicable legal requirements.

Article 9. How to exercise your rights

You may exercise your rights electronically at the following address: ag.gremmel@gmail.com , or by post at the following address: 12 rue du Sentier – 75002 Paris, by providing proof of your identity. To do so, you must clearly indicate your last name(s), first name(s), and the address to which you wish the response to be sent. As a rule, you may exercise all your rights free of charge. However, regarding the right of access, you may be required to pay reasonable fees based on administrative costs for any additional copies of the data you request. Regarding the right to information, Swan Paris will not be obliged to respond where you already have the information you are requesting. Swan Paris will inform you if it cannot comply with your requests.

Article 10. Changes to this policy

This policy, accessible to all on Swan Paris’ website https://www.swanparis.com , is updated regularly to take account of legislative and regulatory developments. Date of last update: Thursday, June 3, 2021