Privacy Policy

This Privacy Policy applies to personal data (hereinafter the "Personal Data") processed during your use of the website "www.lilimargo.com" (hereinafter the "Site"). (hereinafter the "Site").

1. Personal Data

All Personal Data collected on the Site are processed in accordance with Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms as successively amended, including by the Law of June 20, 2018 incorporating Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as any legislation or regulation that would come in addition to or instead of it (hereinafter the "Regulation applicable to Personal Data").

The processing operations relating to your Personal Data and their characteristics are defined in the table of processing operations.

1.1 Who processes your Personal Data and who has access to it?

1.1.1. Person in charge of the processing

All of the Personal Data collected on the Site are processed under the responsibility of LILI MARGO, registered with the Nanterre Trade and Companies Registry under number 833348650 and having its registered office at 14 rue Ernest Renan, 92130, Issy les Moulineaux (hereinafter "LILI MARGO" or "we"). In accordance with the applicable regulations, LILI MARGO is responsible for the processing concerned.

1.1.2. Recipients

Within LILI MARGO, and with regard to each processing operation, your Personal Data is only communicated or made accessible to those persons to whom it is necessary to communicate it for the needs and purposes of the processing in question.

Your Personal Data may be communicated to third parties for the purpose of the corresponding processing.

The recipients or categories of recipients of your Personal Data are identified in the table of processing.

1.1.3. Transfer of Personal Data outside the European Union

Your Personal Data is stored on servers located in the European Union. It is not transferred outside the European Union.

1.2.What categories of Personal Information do we collect and for what purpose(s)?

In accordance with the applicable Personal Data Regulation, we only process your Personal Data if one of the following conditions is met:

• The processing of your Personal Data is necessary for the performance of a contract to which you are a party, and in particular the performance of your order on the site, or the performance of pre-contractual measures taken at your request;
• The processing of your Personal Data is necessary to comply with a legal obligation incumbent upon us;
• The processing of your Personal Data is necessary to pursue our legitimate interests;
• You have expressly consented to the processing of your Personal Data for one or more specific purposes.

The Personal Data processed by us is listed by purpose in the processing table.. We process your Personal Data only for the purposes identified and in accordance with the legal bases that are brought to your attention in the table of processing.

We only collect Personal Data that is strictly necessary for the purposes detailed below.

Please note that in order to benefit from certain services and functions on the Site, you will be asked to communicate certain Personal Data on a mandatory basis via collection forms. The mandatory nature of the answers is indicated by an asterisk (*) in front of the corresponding box. The data identified as mandatory are necessary in order to benefit from the corresponding features of the Site. If you do not fill in these fields, you will not be able to access the corresponding functionality.

You are solely responsible for the accuracy of the Personal Data provided.

1.3.How long do we keep your Personal Information?

We keep your Personal Data only for the time that is strictly necessary for the purpose of the processing. For each treatment, these durations are indicated in the table of treatments.

1.4. How is your Personal Information protected?

We are committed to protecting your Personal Data. To this end, we take all physical, technical and organizational measures to prevent any unauthorized or unlawful processing, as well as any accidental loss, destruction or damage of your Personal Data.

1.5. What are your rights?

You have the right to access, rectify, delete, limit, and oppose the processing of your Personal Data, as well as the right to portability of your Personal Data, by sending your request to the addresses indicated in the "Contact Us" section, in accordance with the applicable regulations. You must indicate which right you intend to exercise as well as all the details necessary for us to respond to your request.

These rights are exercised in accordance with the applicable regulations.

• The right of access means that you can ask us at any time to tell you whether we are processing personal data about you and, if so, to tell you what Personal Data is involved and the characteristics of the processing carried out.

• The right of rectification means that you can ask us to rectify your Personal Data when it is inaccurate. You may also request that your Personal Data, when incomplete, be completed insofar as this is relevant to the purpose of the processing in question.

• The right to erasure means that you may request the erasure of your Personal Data in particular when: (i) their retention is no longer necessary with regard to the purposes for which they were collected (ii) your Personal Data is processed on the basis of your consent, you wish to withdraw that consent, and there is no other legal basis that could justify the processing (iii) you have objected to the processing of your Personal Data and you therefore wish it to be erased (iv) your Personal Data has been processed unlawfully ; (v) your Personal Data must be erased in order to comply with a legal obligation which is provided for either by European Union law or by French law.

• The right to limitation means that you can ask us to proceed to the limitation of the processing of your Personal Data (i) when you contest the accuracy of your Personal Data for a period of time allowing us to verify the accuracy of the same, (ii) when following a processing established as non-compliant, you prefer the limitation of the processing to the complete erasure of your Personal Data (iii) when we no longer need your Personal Data for the purposes of the processing, but they are still necessary for the establishment, exercise or defence of legal claims; (iv) where you have objected to the processing of your Personal Data and you wish to have the processing restricted for the period of time necessary for us to verify whether the legitimate reason you invoke is justified. Limiting the processing means that the processing of your Personal Data will then be limited to the storage of your corresponding Personal Data. We will not carry out any other operation on your Personal Data.

• The right to object means that you can object to the processing of your Personal Data, when such processing is based on the pursuit of LILI MARGO's legitimate interest. The right to object can be exercised provided that you can prove a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons to continue it in accordance with the applicable regulations. Where your Personal Data is processed for commercial prospecting purposes, you may object at any time to the processing of your Personal Data for this purpose.

• The right to define directives concerning the fate of your data after your death allows you to make known your instructions concerning the conservation, deletion and communication of your Personal Data after your death.

• The right to portability means that you may request that we receive your Personal Data in a structured, commonly used and machine-readable format and transmit it to you, or request that we transmit it directly to a third party of your choice where legally and technically possible.

Where we process your Personal Data on the basis of your consent, you may withdraw your consent at any time by contacting us at the addresses listed in the "Contact Us" section. However, the withdrawal of your consent does not affect the validity of the processing carried out prior to this withdrawal.

2. Cookies

2.1 What is a cookie?

A cookie is a tracer deposited on your terminal which is used to record information relating to your consultation and your navigation on the Site.

When you connect to the Site, we may install cookies on your terminal.

Some cookies are essential to the use of the Site (these are known as "essential" cookies), while others are used to personalise the content displayed, to compile statistics on the number of visitors to the Site or to display advertising.

Essential cookies, which are strictly necessary for the provision of a service you wish to access, do not require your prior consent to be used.

2.2 The cookies used

You will find below the characteristics of the cookie used on the Site, its purpose and how to deactivate it.

Name of the cookie	Purpose	Activate/Deactivate
Prestashop cookie	Storage of information necessary for the use of the site: Date of creation of the cookie and memorization of the acceptance; language of the user; group of user messages; guest identifiers if the user is connected; identifiers of the current connection of the user; storage of the user's product comparisons; storage of the last name, first name, email, current cart, encrypted password, connection status (if the user is connected or not). Lifetime: 1 month.

If you reject or delete this cookie, certain features and related functions of our Site may become unavailable to you and the use of our Site as you experience it may be impaired or impossible.

2.3 Retention period

The cookie is not kept for more than 1 month.

2.4 Your choices concerning cookies

When you visit our Site for the first time, LILI MARGO informs you of the use of a cookie with an information banner. By continuing to browse the Site when this banner is displayed, you consent to our use of this cookie.

However, you can deactivate the cookie at any time by referring to the table above.

You can also disable cookies through the settings in your web browser. The procedure for disabling cookies is different for each browser. Below are links to the relevant pages for each of the major browsers.

For Internet Explorer : https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies

Safari : http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html

Chrome : http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,

Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,

To disable cookies on your smartphone, directions are available at the links below:

For iOS : https://support.apple.com/fr-fr/HT201265

For Android : https://support.google.com/chrome/topic/3434352

3. Changes to the Privacy Policy

This Privacy Policy may be updated from time to time.

Where you have provided us with a valid email address, we will notify you of the change by email and provide you with the new version of the Privacy Policy before implementing the change. We also recommend that you regularly review this Privacy Policy to ensure that you are fully aware of our commitment to the security and protection of your Personal Information.

4. Contacting Us

If you have any questions about this Privacy Policy or if you wish to exercise your rights, you can contact us at

- by email : contact@lilimargo.com
- by post: 14 rue Ernest Renan, Issy-Les-Moulineaux

If you are not satisfied with the response, you have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés ("CNIL")

- by post: Commission Nationale de l'Informatique et des Libertés

3 Place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07

- On the CNIL website : www.cnil.fr

5. Table of Personal Data processing

Title of processing	Purpose	Legal basis of the processing	Data collected	Conservation period	Recipient(s) of the data
Opening of accounts	Management of customer accounts and sending of commercial prospecting	Consent (Art.6.1.a RGPD)	Civility, name, first name, pseudo, profile photograph, date of birth, company, email address, telephone numbers, city, country, order history;	3 years from the opening of the account if no order is placed If an order is placed, the retention period is that indicated in the "Order Management" line	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site
Management of orders	Management of customer contracts	Execution of a contract (Art 6,1,b RGPD)	Civility, name, first name, pseudo, email, company, billing address, delivery address, telephone numbers, means of payment, IP address, details of the order, order number, order tracking number, exchanges of information during the order;	5 years from the end of the contract for orders placed by professionals (Article L 110-4 of the Commercial Code; Article 2224 of the Civil Code) or for orders of a value of less than 120 euros placed by consumers > 10 years from the date of delivery for orders placed by professionals 10 years from the date of delivery for orders placed by consumers worth more than 120 euros (Article L 213-1 and Article D213-2 of the French Consumer Code), > 10 years from the end of the financial year for data used to prepare the accounts (Article L123-22 of the French Commercial Code)	- LILI MARGO employees in charge of the Website, customer service and IT - external service provider in charge of payments - external service providers in charge of delivery - external service providers in charge of IT maintenance and hosting of the Site
Management of "Ambassador" rewards	Management of "Ambassador" contracts	Execution of a contract (Art 6,1,b RGPD)	Civility, surname, first name, pseudo, email, registration, "ambassador" code, billing address, telephone numbers, bank identification statement, number of affiliates, total number of orders, dates of orders, amount of orders, amount of commissions, payment history;	5 years from the end of the contract	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site
Shopping cart" reminders	Restarting a shopping cart	Consent (Art.6.1.a RGPD)	E-mail address ;	3 years from the last connection (the user is an identified customer or prospect)	- LILI MARGO employees in charge of the Website, customer service and IT - external service providers in charge of IT maintenance and hosting of the Site
Management of information requests	Management of requests for information made on the Site	Consent (Art.6.1.a RGPD)	Civility, surname, first name, nickname, e-mail address, telephone numbers, city, country, subject of the request;	The duration of conservation depends on the nature of the request. For example, data corresponding to a request relating to an order in progress will be kept in accordance with what is indicated in the line "Management of orders data corresponding to a request relating to the products offered for sale or the terms of the "Ambassador" program will be kept for 3 years from the last contact with the user in the absence of an order	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site
Newsletter	Sending of a newsletter	Consent (Art.6.1.a RGPD)	Civility, surname, first name, pseudo, e-mail address, city, country;	Data is kept until you unsubscribe > in the event of unsubscription, the data required to manage objections is kept for 3 years from the date of unsubscription	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site - external service provider in charge of sending the newsletter
Consumer" opinions	Management of the opinions given by consumers through the functionalities of the Site and reusable for promotional purposes in accordance with the terms of a license.	Performance of a contract (Art 6,1,b RGPD)	Name, first name, nickname, date of publication, notice;	5 years from the end of the contract's execution	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of computer maintenance and hosting of the Site - external service providers in charge of communication
Targeted advertising	Targeted advertising	Consent (Art.6.1.a RGPD)	E-mail, navigation information, IP address	13 months from the date of consent	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site - external service providers in charge of communication
Sales statistics	Sales analysis	Legitimate interest of LILI MARGO to establish statistics in order to have a global vision of its sales, to analyze its results to improve its services (Art 6.1.f RGPD)	Name, first name, e-mail address, sales information	3 years after the last transaction with the user.	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Website
Connection tracking	Connection and navigation logs	Consent (Art.6.1.a RGPD)	When the user has logged in via his account: the data processed are all the information in the account When the user has not logged in via a customer account, only the IP address and browsing information are collected.	13 months for data from cookies > 3 years from the last connection if the user is an identified customer or prospect	- LILI MARGO employees in charge of the Website, customer service and IT. - external service providers in charge of IT maintenance and hosting of the Site - external service providers in charge of communication