285KELVIN PRIVACY POLICY
Document updated on November 23, 2021
285Kelvin (‘ 285Kelvin ‘, ”our”, ”we” and ”us”) and our partners respect your privacy.
Please read this privacy policy carefully to understand how your personal data is collected, processed and stored when you use this 285Kelvin website, which can be accessed via the url https://285kelvin.com/.
All personal data collected on this website are processed under the responsibility of the company 285Kelvin, SASU with a share capital of 1000 €, registered in the Trade and Companies Register of Avignon under the number 907 812 085, and having its registered office at 2185 ROUTE DE BONNIEUX, 84560 MENERBES.
In the sense of the regulations applicable to personal data, 285Kelvin is therefore responsible for processing.
This privacy policy describes :
- How 285Kelvin uses your personal data
- How 285Kelvin shares your personal data
- How 285Kelvin protects your personal data
- Where 285Kelvin hosts and transfers your personal data
- How you can exercise your rights in relation to your personal data
- Updates to the privacy policy
- How to contact us
1. How 285Kelvin uses your personal data
285Kelvin may use your personal data for the following purposes:- Create your customer account on this website
- To manage orders for products and/or services
- Publish and manage reviews of products and/or services ordered on this website
- Responding to your contact request made from our website
2. How 285Kelvin shares your personal data
Within 285Kelvin, and in respect of each processing purpose, your personal data is collected, processed and stored by authorised 285Kelvin personnel only within the scope of their respective responsibilities, and in particular by the customer service, marketing and IT departments. We do not share personal data with other companies, organisations and individuals unless one of the following circumstances applies: (1) In fulfillment of a legal obligation, sharing in accordance with laws and regulations : 285Kelvin, may share your information as required by laws and regulations, to resolve legal disputes, or as required by judicial or administrative authorities under the law. 285Kelvin will ensure the lawfulness of any sharing of personal data by entering into data processing agreements with the companies with whom your personal data is shared, requiring them to comply with this privacy policy and to take appropriate security and confidentiality measures when processing personal data.3. How 285Kelvin protects your personal information
285Kelvin attaches great importance to the security of your personal data and has adopted standard industry practices to protect your personal data and to prevent unauthorised access, disclosure, use, modification, damage or loss of such information. We have also taken the necessary precautions to ensure the security and confidentiality of the data and to prevent it from being distorted, damaged or communicated to unauthorised persons by our host. 285Kelvin also adopts the following organisational measures: (1) We adopt reasonable and practicable measures to ensure that personal data collected is kept to a minimum and relevant as necessary, having regard to the purposes for which it is processed. (2) We keep your personal data for as long as is strictly necessary for the purpose for which it is processed, unless retention of your data is required or permitted by law. For example, we retain data relating to the fulfilment of your orders for the period required by law for the retention of accounting records, i.e. a maximum of 10 years from the relevant exercise. (3) We deploy access control mechanisms to ensure that only authorised personnel can access your personal data. In the event of a personal data breach, 285Kelvin will comply with the applicable legal and regulatory requirements for notification of personal data breaches to the relevant supervisory authorities and/or data subjects.4. Where 285Kelvin hosts and transfers your personal data
Your personal data will be hosted within the hosting facilities of our host, Hetzner, located in Germany. Where such transfers exist, we ensure that these transfers of personal data are regulated in accordance with applicable law to ensure an adequate level of data protection, either through an adequacy decision of the European Commission or through legal instruments such as data transfer agreements incorporating the European Commission’s Standard Contractual Clauses. If you have any queries regarding the recipients and transfers of data by us outside the European Union, please contact us at the addresses set out in the ‘How to contact us’ section below.5. How you can manage your rights regarding your personal data
You have the right to access, rectify, erase, limit and object to the processing of your personal data, as well as the right to define directives concerning the fate of your data after your death and the right to the portability of your personal data. You may contact us at any time at the addresses indicated in the “How to contact us” section below in order to exercise your rights with regard to personal data in accordance with the applicable regulations. You must indicate which right you wish to exercise and all the details necessary for us to respond to your request. These rights are exercised in accordance with the applicable regulations.- The right of access means that you can ask us at any time to tell you whether we are processing personal data about you and, if so, to tell you what personal data is involved and the nature of the processing.
- The right of rectification means that you can ask us to rectify your personal data if it is inaccurate. You may also request that your personal data, if incomplete, be completed insofar as this is relevant to the purpose of the processing in question.
- The right to erasure means that you may request the erasure of your personal data, in particular when :
- Their retention is no longer necessary for the purposes for which they were collected;
- Your personal data is processed on the basis of your consent, you wish to withdraw that consent, and there is no other legal basis for processing;
- You have objected to the processing of your personal data and therefore wish it to be deleted;
- Your personal data has been processed unlawfully
- Your personal data must be erased to comply with a legal obligation which is provided for either by European Union law or by French law..
- The right to restriction means that you can ask us to restrict the processing of your personal data:
- Where you challenge the accuracy of your personal data for a period of time that allows us to verify the accuracy of your data;
- When, following a processing operation established as non-compliant, you prefer the limitation of processing to the complete erasure of your personal data;
- When we no longer need your personal data for the purposes of processing but they are still necessary for the establishment, exercise or defence of legal claims;
- Where you have objected to the processing of your personal data and you wish to restrict the processing for the period of time necessary for us to verify whether the legitimate reason you are invoking is justified.
- The right to object means that you can object to the processing of your personal data, where such processing is based on the pursuit of 285Kelvin’s legitimate interests. The right to object is exercised subject to the provision of a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons to continue in accordance with the applicable regulations.
- The right to set out instructions on what to do with your data after your death allows you to make known your instructions regarding the retention, erasure and disclosure of your personal data after your death.
- The right to portability means that you can request that we receive your personal data in a structured, commonly used and machine-readable format and transmit it to you, or request that we transmit it directly to a third party of your choice where this is legally and technically possible.