PRIVACY POLICY

www.theredshop77.com, hereinafter referred to as "we", "us", attaches great importance to the protection and respect of your privacy.

We hereby intend to provide you with clear and precise information regarding the collection and processing of the personal data that you may provide to us through the www.theredshop77.com website, hereinafter referred to as "TheRedshop".

Art. 1 Confidentiality rule

The General Data Protection Regulation of 27 April 2016 (hereinafter referred to as the GDPR) is applicable from 25 May 2018. It imposes strict rules and conditions on companies and merchants in the context of the processing of the personal data of their customers and prospects, in order to protect their privacy. 

Art. 2 The controller

The controller of your personal data is TheRedshop, which is responsible for the www.theredshop77.com website that you visit and to which you provide data. 

Art. 3 Legal basis for data processing and use

We may only use your personal data for purposes that are both legitimate and necessary {Art. 6 GDPR}. In concrete terms, this means that we process your personal data, whether in electronic form, for legitimate purposes in the context of the contractual relationship, business and security/safety.
These purposes include, but are not limited to, the following: Process and fulfill your orders and contracts; 
Manage your account and the business relationship;
You provide commercial, promotional, advertising or information about the use of our services;
Communications in the context of the performance of a contract;
Improve the design, layout, and overall functionality of the site;
Analyze data for statistical purposes

Art. 4 What is personal data ?

Personal data includes all information about you on the basis of which you can be identified {hereinafter referred to as "the data"}. Anonymous data, which does not allow you to be identified, is therefore not considered personal data. Your personal data may therefore include: Data relating to your identity {surname, first name, address, VAT number, company number, etc.};
Personal status data phone number, personal e-mail, etc.; 

Financial and transaction data {Payment method data, bank account number, billing details, etc.} 
Data relating to the performance of the contract concluded with us {subject of the contract, billing address, business data, etc.} 
Data relating to the use of electronic equipment, such as computers {password, log data, electronic identification data, billing details, etc.}

Sensitive data: The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, as well as

processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data relating to life

The sexual orientation of a natural person is prohibited.
We are committed to strictly adhering to this prohibition. 

Art. 5 Sources and origins of personal data

In principle, the data we hold comes from you when you fill in a form. If you do not intend to provide the mandatory or necessary information, you may lose the benefit of certain benefits and/or we may decide to terminate our services in your favor, or we will be unable to perform the contract.

Art. 6 Access to personal data – With whom do we share your information ?

In accordance with the regulations in force, the data may be transmitted to the competent authorities upon request, and in particular to public bodies, exclusively to meet legal obligations, court officers, ministerial officers and bodies responsible for debt collection,

As well as in the case of the search for the perpetrators of offenses committed on the Internet. Your data is essentially for internal use. We may communicate your data to third-party companies, which will be able to process them, within the framework of legitimate reasons and in particular the proper performance of the contract, when we use service providers and subcontractors for the execution of the order or services provided by us.
Securing payment, deliveries, sending commercial prospecting...

We only pass on to them the data they need to perform their services.

However, we will ensure that our subcontractors comply with the GDPR regulations.

The processing of data by the latter is governed by a strict legal framework.

Art.7 Data retention period

We take the necessary steps to ensure that the retention of personal data for the purposes described above does not exceed the legal periods.

Art.8 What are your rights ?

We undertake to take appropriate technical and organizational measures to ensure the security of the processing of personal data of each individual {Art. 32 GDPR}.

In accordance with the applicable laws and regulations on the protection of personal data, you have a number of rights in relation to your personal data, namely:

Right of access, Art. 15 GDPR and information

You have the right to be informed in a concise, transparent, intelligible and easily accessible manner about how your data is processed. You also have the right to obtain confirmation whether data concerning you is being processed and, where applicable, to access your own personal data and the right to obtain or make a copy of it to the extent reasonable.

Right to rectification {Art. 16 GDPR}

You have the right to obtain the rectification of inaccurate data concerning you. You also have the right to complete incomplete data.

Right to be forgotten (or Right to erasure) – Art. 17 GDPR and Right to restriction of processing, Art. (18 GDPR)
We undertake to grant the erasure of your personal data, in particular in the following cases: 

The personal data has been unlawfully processed.

Right of portability Art. (20 GDPR)
You have the right to receive your data in a structured, commonly used and machine-readable format, for your personal use or to transmit it to a third party of your choice.

Right to withdraw consent at any time (Art. 7 GDPR)

You can withdraw your consent to the processing of your data where the processing is based on your consent. 

The withdrawal of consent does not affect the lawfulness of the processing based on the consent carried out before such withdrawal.

Right to lodge a complaint (Art. 77 GDPR)

The customer has the right to lodge a complaint with the Privacy Commission at any time if he or she considers that the processing of his or her personal data constitutes a violation of the GDPR.

To exercise your rights, you can contact us by email: contact

Art. 9 Our commitment

Our goal is to implement security techniques to protect stored data from unauthorized access, misuse, alteration, unlawful or accidental destruction, and accidental loss. We will ensure that the necessary steps are taken to notify the Privacy Commission of the breach in question within 72 hours of becoming aware of it, unless the breach does not pose a high risk to human rights and freedoms. (Art.) 32-34 GDPR.

Art. 10 Procedure in the event of violations

It is always possible that personal data processed in the context of the contractual relationship may fall into the wrong hands as a result of human error, computer error, etc. When the violation poses a high risk to the person's rights and freedoms, we will immediately inform the person of the facts and measures.  

Art. 11 Consent

You give your express, informed and unambiguous consent to the processing of personal data as described in this ePrivacy Notice. You have the right to withdraw your consent at any time, upon written request. We reserve the right to change this ePrivacy Notice.

Art.12 Modification of our Privacy Policy

We may occasionally modify this privacy policy, in particular to comply with any regulatory, jurisprudential, editorial or technical developments.

Art.13 Contact

If you have any questions about this privacy policy or if you have any queries about your data, you can contact us:

By email to the following address: {contact@theredshop77.com};

By mail to the following address: {1 avenue Du PARC Les Myosotis, 77, 170 Brie-Comte-Robert, France}.