Privacy Policy
Who are we?
The company ESTEBAN BOUTIQUE SAS, registered with the Montpellier Trade and Companies Register under number 424 724 714, with its registered office located at ZAC Descartes – rue du perpignan CS 40014 LAVÉRUNE 34433 SAINT JEAN DE VÉDAS CEDEX (hereinafter "ESTEBAN") is the data controller for the purposes described below.
Purposes and legal grounds:
The table below summarizes the purposes for which ESTEBAN processes your personal data:
|
Purposes of processing |
Legal grounds |
|
Order management |
Performance of the contract between us or our legitimate interest (providing adequate customer service, in particular communicating order status) for data that exceeds what is strictly necessary for the performance of contractual obligations |
|
Customer account management |
Performance of the contract between us or our legitimate interest (ensuring website security) for data that exceeds what is strictly necessary for the performance of contractual obligations |
|
Commercial prospecting |
Our legitimate interest (informing about the latest products, sending promotional offers and improving customer experience) or your consent if required by regulations |
|
Carrying out statistics |
Our legitimate interest (improving our offers) |
|
Management of questions and contact requests |
Our legitimate interest (answering your requests and getting to know you better) |
|
Complaint management |
Performance of the contract between us or our legitimate interest (improving our offers and customer experience) for data that exceeds what is strictly necessary for the performance of contractual obligations |
|
Tracking interests via cookies |
Your consent |
|
Management of a loyalty program and promotional operations (competitions) |
Performance of the contractual relationship between us or our legitimate interest (promoting our offers) for data that exceeds what is strictly necessary for the performance of contractual obligations |
|
Management of customer reviews and satisfaction surveys |
Our legitimate interest (promoting and improving our offers) |
|
Litigation management |
Performance of the contractual relationship between us or our legitimate interest (defending our interests) for data that exceeds what is strictly necessary for the performance of contractual obligations |
|
Recruitment management |
Performance of pre-contractual measures or our legitimate interest (seeking talent and recruiting) or your consent if required by regulations for data that exceeds what is strictly necessary for the performance of pre-contractual obligations or your consent where required by regulations |
|
Building a resume database |
Your consent |
Categories of data collected and sources:
The information collected by ESTEBAN that is essential to fulfill the aforementioned purposes is identified by an asterisk on the collection forms. If you do not fill in these mandatory fields, ESTEBAN may not be able to provide the service concerned.
Your data is collected directly by ESTEBAN or may have been transmitted to us by our commercial partners (data brokers, advertising agencies, recruitment agencies, etc.).
The personal data collected is stored by ESTEBAN in accordance with data protection regulations and according to legal limitation periods. For example:
> Data relating to recruitment management is kept for the time necessary to evaluate the application or for a period of 24 months if the job applicant has consented to it;
> Data relating to prospects is kept for 3 years from the last commercial contact;
> Data relating to customers is kept for the duration of the contractual relationship plus the limitation period.
Data recipients:
The processed personal data is mainly accessible to the Sales & Marketing Department, the Information Systems Department, the Finance Department, and the Human Resources Department of ESTEBAN.
Your personal data may also be communicated to:
> IT service providers (external providers for IT maintenance purposes, for example)
> Subcontractors involved in commercial prospecting (routing, etc.)
> ESTEBAN's parent company,
> Partners involved in recruitment management (recruitment agencies, etc.)
Subcontractors acting under ESTEBAN's instructions will be required to implement appropriate protection measures.
If some of ESTEBAN's partners are located in countries whose regulations do not necessarily offer the same level of protection as that of the European Union member states, ESTEBAN will ensure that these transfers are carried out in accordance with the provisions imposed by French regulations (such as the implementation of standard contractual clauses adopted by the European Commission). You may contact our DPO (dpo@esteban.fr) for further information on these topics as well as a copy of the relevant documents.
Your rights:
> You have the right to request access to and rectification of your personal data.
> You have the right to request the limitation of the processing of your personal data, (i) if you contest the accuracy of such data for the period allowing us to verify its accuracy, (ii) if you consider that we are processing your data unlawfully and you demand a limitation of its use rather than its erasure, (iii) if we no longer need your data for the purposes stated above but it is still necessary for the establishment, exercise, or defense of legal claims, (iv) in the event of exercising your right to object during the verification period to determine whether our legitimate grounds override yours.
> You have the right to request the deletion of your personal data. In the event of a request for deletion of your data, ESTEBAN may nevertheless store it in the form of intermediate archiving for the time necessary to fulfill its legal, accounting, and tax obligations.
> You have the right to request, at any time, to exercise your right to object to processing carried out for reasons relating to your particular situation.
> You also have the right to object to commercial prospecting, without having to provide a reason.
> You have the right to exercise the right to data portability, which gives you the right to obtain a copy of the personal data concerning you or to transfer it to a third party in a structured, commonly used, and machine-readable format.
> You also have the right not to be subject to a decision based exclusively on automated processing that produces legal effects concerning you or significantly affects you.
> You have the right to withdraw your consent at any time when the processing of your data is based on consent.
> You also have the right to provide instructions regarding the retention, deletion, and disclosure of your personal data after your death.
These rights can be exercised at any time by sending an email to dpo@esteban.fr or a letter to the following address: RGPD ESTEBAN – ZAC Descartes – rue du perpignan CS 40014 LAVÉRUNE 34433 SAINT JEAN DE VÉDAS CEDEX.
You may also lodge any complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL). Additional information is available on its website www.cnil.fr.
We do not sell, rent, or share your personal information — including your mobile service registration data and your consent to receive SMS — with third parties for advertising purposes.
