PRIVACY POLICY
ARTICLE 1 – PREAMBLE
1.1. As part of the use of the services offered by Angélique Pernotte & Maïna Vila Cobarsi "(hereinafter “MAÏGY"), and in particular via its Site, MAÏGY may collect and process personal data. Any information relating to an identified or identifiable natural person (for example names, first names, identifier, email address, location data, etc.) is personal data.
1.2. MAÏGY is concerned about the protection of the privacy and personal data of users of its services. This policy is intended to specify the methods of collection and processing of personal data for which MAÏGY is responsible, in accordance with the applicable regulations in force.
1.3. This policy therefore aims to inform users of the Site's services of the practices put in place by MAÏGY for the collection, processing, use and sharing of personal data as well as the methods for exercising users' rights.
1.4. MAÏGY reserves the right to modify this policy at its discretion and at any time, without having to first inform the User, according to the technical and/or commercial evolution of its products and services, its processing practices and of transfer of personal data, as well as the evolution of the applicable regulations in force. The modifications will come into force on their date of posting online, and are binding on users on the date of their first use of the Site and/or the Application after their date of posting online.
ARTICLE 2 – CONTROLLER
2.1. MAÏGY, two self-employed companies registered with the REE under the number 890 994 296 00014 and 79877488100022, is responsible for the processing of personal data implemented by the Site and the Application.
ARTICLE 3 – COLLECTION AND PROCESSING OF YOUR DATA
3.1. Personal data concerning you may be collected directly by MAÏGY in particular because it is necessary for the management of the Subscriber Account and subscriptions, and for the commercial relations of the Site. Certain data is also kept for security purposes, in order to comply with legal and regulatory obligations and as well as to allow the Site to improve and personalize the Services offered.
3.2. MAÏGY does not collect any personal data about you from third parties.
3.3. Depending on the processing concerned, different personal data concerning you may be collected by MAÏGY. To date, there are four main treatments implemented by MAÏGY.
3.3.1. Creation and management of your Subscriber Account
Data controllers:Angélique Pernotte & Maïna Vila Cobarsi.
Data processed: data necessary for the creation and management of your account and the provision of digital content (gender, surname, first name, email address, password, date and history of your activity on the Account) as well as data relating to your payment namely the Stripe or Paypal subscription identifier, the dates and status of the subscription and the Stripe user identifier.
The duration of the conversation : 5 years from your last activity on the account. Payment data is deleted upon termination of the subscription in the event of tacit renewal, or at the end of the subscription period taken out in the absence of tacit renewal.
Your rights : you can request to consult and rectify your personal data if it is incorrect.
Data recipient: Marketing and sales team. Technical subcontractors responsible for hosting data and/or sending notifications and emails may process your personal data. Their access is strictly supervised by MAÏGY and their use is strictly limited to the execution of the service.
Transfer outside the EU: Your personal data remains inside the EU or EEA.
Legal basis for processing: The contract (CGUV) which binds the User to MAÏGY
Profiling or fully automated decision-making producing legal effects or significantly affecting you: none on the Subscriber Account.
3.3.2. Subscriber Account Features
Data controllers:Angélique Pernotte & Maïna Vila Cobarsi.
Data processed: data relating to the Subscriber's loyalty and the use of the functionalities of the Subscriber Account, and in particular to the monitoring of programs, to the production of private statistics for the Subscriber (areas of interest, profile photographs, history and objectives , session history, history of videos viewed, history of completed programs, number of styling hours performed), the Subscriber's management of the visibility of their Account (by choosing to make all or part of the data public or private information on their Account), the ability to add members of the community as friends, to make publications on their news feed, to watch programs with others, and to exchange with them via the Site.
The duration of the conversation : 2 years from the user's last activity on their Subscriber Account.
Your rights: you can request to consult, rectify or even delete your personal data by withdrawing your consent. You also have the right to portability of your data, under certain conditions. You can exercise your rights by clicking on data@trainsweateat.com, or by going to your Subscriber Account.
Recipient of the data: Management of MAÏGY. Their access is strictly supervised by MAÏGY and their use is strictly limited to the execution of the service, the use of the functionalities of the Subscriber Account and the loyalty of the Subscriber.
Transfer outside the EU: Your personal data remains inside the EU or EEA.
Legal basis for processing: Consent of the User.
Profiling or fully automated decision-making producing legal effects or significantly affecting you: none.
3.3.3. Your subscription memberships and/or orders on www.ladystylingwcs.com
Data controller: Maïna Vila Cobarsi & Angelique Pernotte
Data processed: data necessary for subscribing and paying for a subscription, renewal, data necessary for placing and paying for an order for videos. Your email allows you to be notified of the progress of your request.
The duration of the conversation : 3 years from delivery of the order or the end of the subscription.
Your rights :you can request to consult and rectify your personal data if it is incorrect. You also have the right to portability of your data under certain conditions.
Data recipient:Management of MAÏGY.
Transfer outside the EU: Your personal data remains within the EU or EEA.
Legal basis for processing: The contract which binds the User to MAÏGY.
Profiling or fully automated decision-making producing legal effects or significantly affecting you: none when placing an order or subscribing to a subscription.
3.3.3. Billing for your subscriptions and/or purchases
Data controller:MAÏGY, Angélique Pernotte & Maïna Vila Cobarsi
Data processed:data necessary for managing the invoicing of your subscriptions and/or online purchases: name, first name, billing address, address, e-mail, means of payment used, amount of the order, details of the products ordered or subscriptions taken out , date of purchase).
The duration of the conversation : Supporting documents for accounting documents are kept for 10 years from the close of the financial year during which the subscription or order took place.
Your rights : you can request to consult and rectify your personal data if it is incorrect.
Data recipient: Management of MAÏGY.
Transfer outside the EU: Your personal data remains within the EU or EEA.
Legal basis for processing:Legal obligation
Profiling or fully automated decision-making producing legal effects or significantly affecting you:No profiling or fully automated decision making on billing.
3.3.4. Marketing
Data controller: Angélique Pernotte & Maïna Vila Cobarsi
Data processed:data necessary for marketing management (newsletter type, promotional operations) namely: name, first name, postal address, e-mail, purchase history, browsing history.
The duration of the conversation : 3 years from the last contact, last activity, last purchase or subscription of services for a Customer, and 3 years from the last contact from the prospect.
Your rights : you can request to consult, rectify or even delete your personal data.
Data recipient: Direction of MAÏGY.
Transfer outside the EU:Your personal data remains within the EU or EEA.
Legal basis for processing: User consent (check box when creating an account, subscribing to a subscription and/or placing an order).
Profiling or fully automated decision-making producing legal effects or significantly affecting you:MAÏGY may be required to carry out profiling or fully automated decision-making for marketing operations.
ARTICLE 4 – COOKIES
4.1. MAÏGY uses cookies on its Site. A cookie is a small text file left on your computer when you first visit a Site. Your web browser will store it for a certain period of time, and send it back to the web server each time you reconnect.
4.2. Several types of cookies are used by MAÏGY:
(1) Cookies linked to operations relating to personalized advertising, intended to ensure advertising tracking. In particular, cookies from Google Tag Manager, Adjust, Google Analytics, Facebook Analytics, Pinterest, Snap Inc, TikTok are used.
(2) Audience measurement cookies (“analytics”), allowing MAÏGY to better understand the use made by the User of the Site, with the aim of improving them. There are several types of analytics cookies, each of which collects different types of data depending on their purpose and use, namely:
- Braze, Adjust, Google Tag Manager, Google Analytics and Facebook Analytics allow the collection of data intended to collect information relating to the pages and screens visited, the duration of visit, the number and types of videos watched.
- Firebase Performance Monitoring allows you to collect data relating to the performance of calls made and renderings on the screen;
- Firebase Crashlytics and Google Cloud Error Reporting make it possible to collect information relating to incidents, errors and bugs encountered when using the Site and the Application;
- Firebase in app messaging and Firebase Cloud Messaging allow the collection of data relating to the opening of communications such as “Push Notifications” or “In App” messages;
- Firebase A/B Testing allows you to collect experimentation metrics, making it possible to compare two different types of behavior in the Application and/or the Site, by two different Users, and to measure what is the best behavior (in terms of other terms the most appropriate) of the two;
- Firebase Remote Config allows you to collect information on the successful reception of remote configurations;
- Firebase Dynamic Links/Adjust allows you to collect data on the opening of deep links;
- YouTube allows you to collect the number of views of videos hosted on YouTube;
- JWPlayer and an internal cookie developed by TISSY allowing the collection of information relating to the viewing of videos.
(3) Sharing cookies, allowing you to share content from the Site on social networks. They may be posted on the Site by third-party sites, in particular through sharing buttons and accessible videos (Instagram, Facebook, Youtube, etc.).
(4) Functional cookies, intended to allow the User to choose the language used, and to ensure internal redirections (internal cookie), allow the authentication of the User (Firebase authentication), access to fonts characters (Google Fonts), access and playback of videos (JWPlayer) and photographs, images and other multimedia resources (Google Cloud Storage).
(5) Security cookies, intended to ensure the prevention of payment fraud (Stripe).
4.3. Analytics cookies are kept for a maximum period of thirteen months from the User's first visit. The data collected through these cookies may be kept for a maximum of twenty-five (25) months.
4.4. For each third-party cookie, the User can find all the information relating in particular to the purposes of use of the cookies and the data controller at the following addresses:
-
Google Analytics + Firebase Analytics https://marketingplatform.google.com/about/analytics/terms/us/
-
Other Firebase (Performance Monitoring / Crashlytics / Authentication / In app messaging / Firebase Cloud Messaging / A/B Testing): https://firebase.google.com/terms
-
Google Cloud (Error Reporting / Storage): https://cloud.google.com/terms
-
Google Fonts API https://developers.google.com/fonts/faq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users
-
Google Tag Manager: https://www.google.com/analytics/terms/tag-manager/
-
Facebook Analytics:https://fr-fr.facebook.com/business/gdpr
-
JWPlayer:https://www.jwplayer.com/privacy/
4.6. During your first visit to the Site, a banner informs you of the presence of cookies present on the Site and invites you to manage (accept or refuse) their use, by accepting or refusing their installation. To find out more about cookies, you can also consult the CNIL website: https://www.cnil.fr/fr/cookies-les-outil-pour-les-maitriser.
4.7. Functionality and security cookies are necessary for the proper use of the various services on the Site and do not require the User's consent. You can always object to their filing. In this case, your user experience may be degraded and certain functionalities of the Site and the Application may be unavailable, preventing access to certain services on the Site.
4.8. Sharing cookies, analytics, cookies linked to operations relating to personalized advertising and personalization require prior information and your prior consent. They will not be deposited until you have expressly consented to them.
ARTICLE 5 – YOUR RIGHTS
5.1. In accordance with the applicable regulations in force (law n°78-17 of January 6, 1978 as amended known as “Informatique et Libertés” and regulation (EU) n°2016/679 of April 27, 2016 relating to the protection of personal data), you have a right of access, rectification, opposition, erasure, as well as a right to portability.
5.2. Your right of access allows you to know what data concerning you is processed by the Site, to obtain communication of it, and to check its accuracy.
5.3. Your right to rectification allows you to request the correction of inaccurate data concerning you.
5.4. Your right of opposition allows you to object to your data being used by the Site for a specific objective, under the conditions set by the applicable regulations in force. This right can be exercised for prospecting or to request the deletion of personal information, provided that the legitimate interest on which the processing of the data concerned is based is not overriding for the Site.
5.5. MAÏGY only keeps your personal data for the duration necessary for the various processing operations carried out. At the end of the retention period indicated for each processing operation, the data is either archived by anonymization or deleted. When the legitimate basis for the processing of your data is based on your consent, or on the legitimate interest of MAÏGY, you can exercise your right to erasure, provided in particular that this does not go against the exercise of the right to freedom of expression and information, compliance with a legal obligation, their use for statistical purposes, the establishment, exercise or defense of rights in court.
5.6. You also have a right to the portability of your data, which allows you, subject to satisfaction of its legal conditions of exercise, to obtain a copy of the data held by MAÏGY on the basis of either consent or execution. of the contract, and possibly transmit them to another data controller. For more information on the conditions for exercising this right, you can consult the CNIL website: https://www.cnil.fr/fr/le-droit-la-portabilite-entreprises-et-reutiliser-une-copie-de-vos-donnees.
5.7. You can exercise your rights by contacting MAÏGY, either:
- By email to lady styling.wcs@gmail.com ;
5.8. To facilitate the processing of your request, you should:
- Inform us of the processing operations concerned by your request;
- Tell us the rights you intend to exercise;
- Send us a copy of your identity document to enable us to ensure, in the event of legitimate doubt, your identity.
5.9. If, however, you are not satisfied with the processing of your request to exercise your rights, you always have the possibility of contacting the CNIL.
ARTICLE 6 – TRANSFER OF DATA
6.1. Personal data collected and processed by MAÏGY may be transmitted to commercial, technical partners, suppliers and independent third parties who contribute to MAÏGY's contractual relationships.
6.2. These include service providers responsible for ensuring the management (technical, marketing and/or commercial) and hosting of the Site, as well as the payment and fraud prevention process.
6.3. These service providers may be located in Europe, in the European Economic Area or even sometimes outside the European Union. In this last hypothesis, service providers located outside the European Union have access to users' personal data exclusively for the purposes of carrying out the services for which MAÏGY has entrusted them, and under conditions likely to ensure a level of protection. sufficient and appropriate data. In any case, these transfers are governed by legal tools when the level of security provided by the service provider does not appear sufficient.