Privacy Policy

This Confidentiality Policy applies to personal data (hereinafter the “Personal Data”) processed during your use of the Website “www.lilimargo.com” (hereinafter the “Site”).

 

1. Personal data

All Personal Data collected on the Site is processed in accordance with Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms as successively amended, including by the law of June 20, 2018 incorporating Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of individuals with regard to the processing of personal data and the free circulation of this data, as well as any legislation or regulation which would supplement or replace it (hereinafter the “Regulations applicable to Personal Data”).

 

By entering your phone number at checkout and initiating a purchase, subscribing via our subscription form or keyword, you agree that we may send you SMS notifications (for your order, including abandoned cart reminders) and SMS marketing offers. Marketing SMS messages will not exceed 10 per month. You acknowledge that consent is not a condition of any purchase.
If you would like to unsubscribe from receiving marketing messages and SMS notifications, reply STOP to any mobile message sent from us or use the unsubscribe link we have provided to you in any of our messages. You understand and agree that alternative methods of opting out, such as using alternative words or requests, will not be considered a reasonable means to opt out. Messages and data rates can be applied.
If you have any questions, text HELP to the number you received the messages from. You can also contact us for more information. If you wish to unsubscribe, please follow the procedures above.

 

The processing operations relating to your Personal Data as well as their characteristics are defined in the processing table .

 

1.1.Who processes your Personal Data and who has access to it?

1.1.1.     Data controller

 

All Personal Data collected on the Site is processed under the responsibility of the company LILI MARGO, registered in the Nanterre Trade and Companies Register under number 833348650 and having its head office at 99 rue Paul Vaillant Couturier, 92240, Malakoff (hereinafter “LILI MARGO” or “we”). Within the meaning of the applicable regulations, LILI MARGO is responsible for the processing concerned. 

 

1.1.2.     Recipients

 

Within LILI MARGO, and with regard to each processing operation, your Personal Data is only communicated or made accessible to people to whom it is necessary to communicate it for the purposes and taking into account the purpose of the processing in question.

 

Your Personal Data may be communicated to third parties with regard to the purpose of the corresponding processing.

 

The recipients or categories of recipients of your Personal Data are identified in the processing table. 

 

1.1.3.     Transfer of Personal Data outside the European Union

 

Your Personal Data is stored on servers located in the European Union. They are not subject to transfer outside the European Union.

 

1.2.What categories of Personal Data do we collect and for what purpose(s)?

In accordance with the Regulations applicable to Personal Data, we only process your Personal Data if one of the following conditions is met:

•   The processing of your Personal Data is necessary for the execution of a contract to which you are party, and in particular the execution of your order on the site, or for the execution of pre-contractual measures taken at your request;
•   The processing of your Personal Data is necessary to comply with a legal obligation incumbent upon us;
•   The processing of your Personal Data is necessary for the pursuit of our legitimate interests;
•   You have expressly consented to the processing of your Personal Data for one or more specific purposes.

 

The Personal Data processed by us is listed by purpose in the processing table. . We only process your Personal Data for the specified purposes and with regard to the legal bases which are brought to your attention in the processing table. 

 

We only collect Personal Data strictly necessary for the pursuit of the purposes detailed below.

 

Please note that to benefit from certain services and functions on the Site, you will be asked to communicate certain Personal Data on a mandatory basis via collection forms. The obligatory nature of the responses is indicated by means of an asterisk (*) appearing in front of the corresponding box. The data identified as mandatory are necessary in order to benefit from the corresponding functionalities of the Site. If you fail to complete these fields, you will not be able to access the corresponding functionality.

 

You are solely responsible for the accuracy of the Personal Data communicated.

 

1.3.How long do we keep your Personal Data?

We only keep your Personal Data for the duration which is strictly necessary for the purpose of the processing. For each treatment, these durations are indicated in the treatment table. 

 

1.4. How is your Personal Data protected?

We are committed to protecting your Personal Data. To do this, we ensure that we take all useful physical, technical and organizational measures to prevent any unauthorized or unlawful processing, as well as any accidental loss, destruction or degradation of your Personal Data.

1.5. What are your rights?

You have a right of access, rectification, erasure, limitation, opposition concerning the processing of your Personal Data as well as a right to portability of your Personal Data by submitting your request to the addresses indicated in the “Contact Us” section, under the conditions set by the applicable regulations. You must indicate which right you intend to exercise as well as all the necessary details so that we can respond to your request.

These rights are exercised under the conditions set by the applicable regulations.

•   The right of access means that you can ask us at any time to tell you whether we are processing personal data concerning you and, if so, to tell you what Personal Data is concerned as well as the characteristics of the processing(s) carried out.

 

•   The right of rectification means that you can ask us to rectify your Personal Data when it is inaccurate. You can also request that your Personal Data, if incomplete, be completed to the extent that this is relevant to the purpose of the processing in question.

 

•   The right to erasure means that you can request to erase your Personal Data in particular when: (i) their retention is no longer necessary in view of the purposes for which they were collected (ii) your Personal Data is processed on the basis of your consent, you wish to withdraw this consent, and there is no other legal basis capable of justifying the processing (iii) you have opposed the processing of your Personal Data and you therefore wish them to be erased (iv) your Personal Data has been processed unlawful; (v) your Personal Data must be erased to comply with a legal obligation which is provided for either by European Union law or by French law.

 

•   Theright to limitation means that you can ask us to limit the processing of your Personal Data (i) when you contest the accuracy of your Personal Data for a period allowing us to verify the accuracy thereof, (ii) when following processing established as non-compliant, you prefer the limitation of processing to the complete erasure of your Personal Data (iii) when we no longer need your Personal Data for the purposes of processing but they are still necessary for you to establish, exercise or defend your claim. legal rights; (iv) when you have objected to the processing of your Personal Data and you wish to limit the processing for the period allowing us to verify whether the legitimate reason you invoke is justified. Limitation of processing means that the processing of your Personal Data will then only mean the storage of your corresponding Personal Data. We will then no longer carry out any other operation on your Personal Data in question.

 

•   The right to object means that you can object to the processing of your Personal Data, when this processing is based on the pursuit of the legitimate interests of LILI MARGO. The right to object is exercised subject to providing a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons justifying continuation in accordance with the applicable regulations. When your Personal Data is processed for commercial prospecting purposes, you can object at any time to the processing of your Personal Data for this purpose.

 

•   The right to define directives relating to the fate of your data after your death allows you to make known your instructions regarding the conservation, erasure and communication of your Personal Data after your death.

 

•   The right to portability means that you can ask us, under the conditions set by the applicable regulations, to receive your Personal Data in a structured, commonly used and machine-readable format, and to transmit them to you, or to ask us to transmit them directly to a third party of your choice when this is legally and technically possible.

 

When we process your Personal Data based on your consent, you have the option to withdraw your consent at any time by contacting the addresses indicated in the “Contact Us” section. However, the withdrawal of your consent does not call into question the validity of the processing carried out before this withdrawal.

2. Cookies

 

2.1.What is a cookie?

A cookie is a tracker placed on your terminal which is used to record information relating to your consultation and navigation on the Site.

When you connect to the Site, we may install cookies on your terminal.

Some cookies are essential for using the Site (these are so-called “essential” cookies), others allow you to personalize the content displayed, produce traffic statistics or display advertisements.

Essential cookies that are strictly necessary to provide a service you wish to access do not require your prior consent to be used.

 

2.2.Cookies used

Below you will find the characteristics of the cookie used on the Site, its purpose and how to deactivate it.

 

Cookie name	Purpose	Enable/Disable
Cookie Prestashop	Storage of information necessary for use of the site: Date of creation of the cookie and storage of acceptance; user language; usermessagegroup; guest IDs if user is logged in; credentials of the user's current connection; storage of user product comparisons; storage of name, first name, email, current basket, encrypted password, connection status (whether the user is connected or not).   Shelf life: 1 month.

 

If you reject or delete this cookie, certain elements and associated functions of our Site may become unavailable to you and your use of our Site as you experience it may be reduced or even impossible.

2.3. Shelf life

The cookie is not kept for more than 1 month.

 

2.4.Your choices regarding cookies

When you visit our Site for the first time, LILI MARGO informs you of the use of a cookie using an information banner. By continuing to browse the Site when this banner is displayed, you consent to our use of this cookie.

You can nevertheless deactivate the cookie at any time by referring to the table above.

You can also deactivate cookies through the settings in your Internet browser. The procedure to follow to deactivate cookies is different depending on each browser. Below you will find links to relevant pages for each of the major browsers.

For Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies

Safari: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html

Chromium: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,

Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,

 

To deactivate cookies on your smartphone, instructions are available on the links below:

For iOS: https://support.apple.com/fr-fr/HT201265

For Android: https://support.google.com/chrome/topic/3434352

 

3. Changes to the Privacy Policy

This Privacy Policy may be subject to updates.

When you have provided us with a valid email address, we will notify you of this change by email and provide you with the new version of the Privacy Policy before implementing the change.  We also recommend that you regularly read this confidentiality policy in order to have complete knowledge of our commitments in terms of security and protection of your Personal Data.

4. Contact us

For any questions regarding this privacy policy as well as to exercise your rights, you can contact us:

-       by email: contact@lilimargo.com
-       by mail: 99 rue Paul Vaillant Couturier, 92240, Malakoff

 

If the response provided does not satisfy you, you have the right to lodge a complaint with the National Commission for Information Technology and Liberties (“CNIL”)

- by mail: National Commission for Information Technology and Liberties

3 Place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07 

- On the CNIL website: www.cnil.fr

5. Table of Personal Data processing

Title of treatment	Purpose	Legal basis for processing	Data collected	Retention period	Data recipient(s)
Opening accounts	Management of customer accounts and sending of commercial prospecting	Consent (Art.6.1.a GDPR)	Title, last name, first name, nickname, profile photograph, date of birth, company, email address, telephone numbers, city, country, order history;	> 3 years from account opening if no order is placed In the event of an order, the retention period is that indicated in the “Order management” line.	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site
Order management	Customer contract management	Execution of a contract (Art 6.1.b GDPR)	Title, last name, first name, nickname, email, company, billing address, delivery address, telephone numbers, means of payment, IP address, order details, order number, order tracking number, exchange of information when ordering;	> 5 years from the end of the contract for orders placed by professionals (Article L 110-4 of the Commercial Code; Article 2224 of the Civil Code) or for orders with a value of  less  than 120 euros placed by consumers  > 10 years from delivery for orders placed by consumers with a value of more than 120 euros (Article L 213-1 and Article D213-2 of the Consumer Code), > 10 years from the end of the accounting year for data involved in the establishment of accounting (Article L123-22 Commercial Code)	- LILI MARGO employees in charge of the Website, customer service and IT - external service provider in charge of payments - external service providers in charge of delivery - external service providers in charge of IT maintenance and hosting of the Site
Management of “Ambassador” rewards	Management of “Ambassador” contracts	Execution of a contract (Art 6.1.b GDPR)	Title, surname, first name, nickname, email, registration, “ambassador” code, billing address, telephone numbers, bank identity statement, number of affiliates, total number of orders, dates of orders, amount of orders, amount of commissions, payment history;	> 5 years from the end of the contract	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site
“Purchase basket” reminders	Relaunch shopping cart	Consent (Art.6.1.a GDPR)	E-mail address ;	> 3 years from the last connection (the user is an identified customer or prospect)	- LILI MARGO employees in charge of the Website, customer service and IT - external service providers in charge of IT maintenance and hosting of the Site
Managing inquiries	Management of requests for information made on the Site	Consent (Art.6.1.a GDPR)	Title, last name, first name, nickname, email address, telephone numbers, city country, subject of the request;	The retention period depends on the nature of the request. As an example, > the data corresponding to a request relating to a current order will be kept in accordance with what is indicated in the “Order management” line.   > data corresponding to a request relating to the products offered for sale or the terms of the “Ambassadrice” program will be kept for 3 years from the last contact with the user in the absence of an order	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site
Newsletter	Sending a newsletter	Consent (Art.6.1.a GDPR)	Title, last name, first name, nickname, email address, city country;	> data is kept until unsubscribe > in the event of unsubscription, the data necessary for managing objections is kept for 3 years from unsubscription	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site - external service provider in charge of sending the newsletter
“Consumer” review	Management of opinions given by consumers through the functionalities of the Site and reusable for promotional purposes in accordance with the terms of a license.	Execution of a contract (Art 6.1.b GDPR)	Name, first name, nickname, date of publication, review;	> 5 years from the end of the contract	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site - external service provider in charge of communication
Advertising targeting	Targeted advertising	Consent (Art.6.1.a GDPR)	Email, browsing information, IP address	> 13 months from consent	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site - external service provider in charge of communication
Sales statistics	Sales analysis	LILI MARGO's legitimate interest in establishing statistics in order to have an overall vision of its sales, to analyze its results to improve its services (Art 6.1.f GDPR)	Name, first name email address, sales information	> 3 financial years closed following last transaction with the user.	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site
Login tracking	Connections and navigation log	Consent (Art.6.1.a GDPR)	When the user has logged in via their account: the data processed is all account information When the user has not logged in via a customer account, only the IP address and browsing information are collected.	> 13 months for data from cookies > 3 years from the last connection when the user is an identified customer or prospect	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site - external service provider in charge of communication