Datenschutzerklärung
UNISTELLAR takes great care to respect your privacy and to ensure the protection of your personal data.
This Personal Data Protection Policy (the "Privacy Policy") has been developed to inform you about how we collect and process your personal data ("Data") when using the Site and its features.
Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR") sets the legal framework applicable to the processing of personal data.
In accordance with the regulations in force, the purpose of this Privacy Policy is to inform you of the collection, use and, more generally, the processing that UNISTELLAR makes of your personal data.
This Privacy Policy was last updated on December 2022.
For a proper understanding of this Privacy Policy, it is understood that:
« The Site » refers to the present website in its entirety, including the online store and support section
« Us » ou « Unistellar » refers to UNISTELLAR SAS, 5 Allée Marcel Leclerc 13008 Marseille, France registration R.C.S. of Marseille under number 812 339 356
« User » refers to persons browsing the site and/or having made purchases via the Site.
PURPOSE
The purpose of this Policy is to indicate the type of data we collect and how we use it in order to inform Users in a transparent, understandable and concise manner in accordance with Article 12 of the GDPR.
No processing concerning User Data is carried out if it does not relate to personal data collected by or for our services, processed in connection with our services and if it does not comply with the general principles of the GDPR.
THE PERSONAL DATA WE PROCESS
We only collect personal data that is necessary for the purpose for which it is processed.
The compulsory nature of the information is indicated on the collection form when you register or modify the information.
The data collected are the following:
The information provided by the User
When you visit our Site, we may receive information about you, including support requests and related information via our forms. This includes the following data:
- Identification data, such as your first and last name;
- Contact information, such as your postal address and e-mail address;
This data is processed for the purpose of responding to requests submitted by the User and communicating with the User.
Information provided when creating an account or entering into a contract with Unistellar
The data are processed exclusively for the purpose of providing the service and responding to the User's request.
- Information you provide on the Site: Identifying information, such as your first and last name and Contact information, such as your mailing address and email address;
- Third party information: in the event that you ask us to send them an email with information about our products;
- Transactional information, i.e. all information related to your orders on the Site, such as the products purchased, and information related to your payment method; the date of purchase;
We keep the following information for administrative purposes: Title, Name, First Name, Contact Information, Billing Address, Delivery Address, Email and transactional information.
These will be kept for the duration of the Contract as well as for the legal period of conservation of these data.
During this period, we put in place all the necessary means to ensure the confidentiality and security of your personal data, so as to prevent their access by unauthorized third parties.
At the end of this period, the contact information used to contact you will be deleted from our database.
Information collected automatically:
- Login and browsing data, such as information about the hardware and software of your computer, smartphone or tablet. This information includes notably your IP address, device type and model, browser type. This information is used for the proper operation of the Site, to maintain its quality and for general statistical purposes and to meet our legal and regulatory obligations. We may use services such as Google Analytics to help us understand how our Users navigate the website.
All or part of this personal data is obtained when you:
- visit our Site (e.g., through cookies) or participate in a promotion;
- provide us with information via the Site, our site, or by telephone, e-mail, postal mail, or other forms
- send us comments or questions;
- and more generally, by any other means by which you contact us.
THE PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA
The legal basis will depend on the type of information involved and the specific context, but we will normally only collect information: a) where we need it to provide the service to you; b) where you have given us explicit consent to process; c) where it satisfies our legitimate interest such as compliance, security. d) where we have to comply with a legal obligation.
For purposes based on consent, it will be possible at any time for the User to withdraw consent.
The personal data we collect are processed in accordance with the regulations in force to meet explicit, legitimate and determined purposes.
These purposes are as follows:
Allow you to proceed with the purchase of products
We collect and use your personal data in order to enable us to supply the orders for products that we offer via the Site. This data is processed in particular to :
- process your order, in particular by managing its follow-up and its payment and to be able to validate it as well as, if necessary, to treat the possible incidents (management of the frauds, incidents of payment...);
- to provide assistance.
Your personal data are also essential to us in the context of our interactions with you as you browse the Site and, more generally, in the context of our commercial relations with you.
In order to ensure the quality of our products and services as well as to improve them, we also proceed to the establishment of general statistics, which are subject to an anonymization procedure when the processing of your personal data does not appear to be necessary for their realization.
The main legal bases for this processing are the execution of the General Terms and Conditions and, where applicable, your consent.
Inform you about our services and manage our relationship with you
Your personal information is also necessary for us to interact with you, particularly in connection with your use of the Site. We may use your personal data to inform you about products and services we offer, provided we have obtained your prior consent to receive such information.
Depending on how you use the Site and, where applicable, whether you have given your prior consent in relation to cookies, the information we have about you will enable us to send you information that we believe is most likely to interest you.
We may use services such as Google Analytics to help us understand how our Users navigate the website.
If you no longer wish to receive special promotional information, advertisements or other messages from us, you may click on the link at the bottom of the email to unsubscribe. For technical reasons, we need a reasonable amount of time to fulfill your request and you may receive a few messages following your request while we process it.
In order to ensure the quality of our services as well as to improve them, we also proceed to the establishment of general statistics, which are subject to a procedure of anonymization when the processing of your personal data does not appear to be necessary for their realization.
Finally, on your request, we may also send commercial information to a third party of your entourage which you think would be likely to be interested in our products. In such a case, we thank you for ensuring that you have their prior agreement to receive such a message from us.
The main legal bases for this processing are your consent and our legitimate interest.
Secure the Site
We ensure the security of your personal data, as well as the personal data of third parties, against fraudulent access, use or disclosure by implementing enhanced data protection through the use of appropriate physical and logical security measures to ensure the integrity of your data, as well as its confidential and secure treatment.
However, we remind you that no security system is infallible and we cannot guarantee that your information is totally secure.
The main legal basis for this processing is our legitimate interest.
Respect our legal and regulatory obligations
For the functioning of the Site, we are bound by various legal and regulatory obligations involving the conservation of your personal data. This data may also be used to identify the authors of content of an illicit nature.
For your convenience, we have provided a table summarizing the main purposes and legal bases for processing your personal data:
| Purpose | Data collected | Legal base |
|---|---|---|
| Creating a user account | Identification data (name, first name, e-mail) | Execution of pre-contractual/contractual measures, Consent |
| Supply of the order | Identification and billing data | Execution of a contract |
| Customer relationship management and customer service | Identification data | Execution of a contract |
| Customer billing | Identification and billing data | Execution of a contract |
| Management of user requests / support | Identification data | Execution of a contract |
| Management of the accountancy, the litigations, non-payments | Identification and billing data | Legal requirement |
| Management of un-subscriptions and account closures | Identification data | Execution of a contract |
| Subscription to newsletters and commercial communication | Identification data | Consent |
| Opposition list management | Legal requirement | |
| Measures of audience, elaboration of statistics | Identification data | Legitimate interest |
| Improving our services | Legitimate interest | |
| Management of requests for the rights of persons | Identification data | Legal requirement |
RECIPIENTS OF THE PERSONAL DATA PROCESSED
We process your personal data exclusively for the purposes described in this Policy. The information is intended solely for Unistellar and more specifically for authorized personnel.
However, we may solicit trusted partners as subcontractors in order to be able to provide you with all the services offered on the Site and more particularly:
- Payment service providers during an order to ensure payment (payment interface and management of bank cards by our bank)
- Service providers to manage the online store (Shopify)
- Service providers to manage the delivery;
- Service providers who assist Unistellar in the management of customer relations (CRM)
- Service providers who provide a consulting function (auditor, accountant, IT consultant, etc...).
- More generally, during the use of the Site, to ensure the hosting of your data, to send you an e-mail, to assist you in using the Site or to help us carry out statistical analyses.
In any case, these third parties are contractually prohibited from using the personal data we transmit to them for any purpose other than that for which they have been mandated, and they are required to maintain the security and confidentiality of your information with a protection equal to or greater than that which we implement.
We will only disclose your personal data without notice if:
- if required by applicable regulations,
- if such disclosure is necessary to comply with applicable law or regulation, legal process and/or administrative or court order;
- to protect and defend our rights or property or that of our partners;
- more generally, to act in urgent circumstances to protect the personal safety of users of the Site or third parties.
HOW LONG WE KEEP YOUR DATA
We will only retain your personal data for as long as is necessary for the purposes described in this Privacy Policy, unless the law requires your personal data to be retained otherwise.
For example, we retain data according to the following principles:
-
Order Data: Personal data relating to orders placed by Users will not be kept beyond the period of retention strictly necessary for the management of the commercial relationship, with the exception of those necessary for the establishment of proof of a right or a contract which may be archived.
Data relating to invoicing is kept for 10 years.
Data relating to contracts concluded between merchants and non-merchants are kept for 5 years.
Customer data is kept for the duration of the business relationship. It may be kept for commercial prospecting purposes for a maximum of 3 years from the end of the commercial relationship, unless the User deletes his account and therefore all his personal data. The data can nevertheless be kept longer if consent via an explicit act of will has been collected. - Data relating to contacts and prospects: 3 years from the date of their collection or the last contact from the prospect.
- Data relating to cookies: 6 months
- Data in the context of the fight against money laundering: 5 years from the date of collection.
After this period, this data may be archived in order to manage ongoing claims and disputes as well as to meet legal and/or regulatory obligations and/or to respond to requests from authorities authorized to make such requests.
Your banking data is not kept beyond the time necessary to complete the transaction without your prior consent to do so.
TRANSFER OF YOUR DATA OUTSIDE THE EUROPEAN UNION
As part of the provision of services and the operation of the Site, we may transfer your personal data to countries outside the European Union that have not been the subject of a decision of adequacy of protection by the European Commission.
In this case, we make sure that this transfer is carried out in accordance with the regulations in force by taking all the appropriate measures and in order to ensure the confidentiality and the security of this data under legal, technical and operational guarantees.
YOUR RIGHTS AND HOW TO EXERCISE THEM
In accordance with the regulations in force, you have the right to access, oppose, rectify and delete your personal data, as well as the right to limit the processing carried out, to portability and to define the fate of your data in the event of your death, subject to the legal and regulatory obligations that would require us to keep them. The exercise of some of these rights is likely to prevent us from providing you with access to the Site and/or from using all or part of the services offered on it.
- Right of access: Users have a right of access enabling them to ask Unistellar whether data concerning them is being processed. Users may request a copy of their personal data being processed.
- Right of rectification: any User has the right to request the rectification of inaccurate or incomplete information concerning him/her.
- Right to erasure: any User may request the erasure of his or her data.
- Right to portability: Users have the right to recover part of their data in an open and readable format.
- Right to define the fate of data in case of death: Users are informed that they have the right to formulate directives concerning the conservation, deletion and communication of their data post-mortem.
These rights can be exercised by contacting us at the following address support@unistellaroptics.com with proof of your identity.
You have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the supervisory authority in charge of compliance with obligations regarding personal data.
Finally, it is specified that we can be brought to communicate your personal data, under the conditions envisaged by the law, to a judicial or administrative authority duly authorized.
SECURITY OF THE INFORMATION
We are very concerned about the security of your data and we are committed to take every precaution to prevent information from being altered, erased by mistake, or made available to unauthorized parties. Physical and technical security measures are put in place to ensure the security of the information.
Among these measures are mainly:
- Management of authorizations for data access
- Internal backup measures
- Adoption of a security policy
- Adoption of continuity recovery plans
In the event of a personal data breach, Unistellar will notify the CNIL in accordance with the requirements of the GDPR.
In the event that the breach poses a high risk to users, Unistellar will communicate to the users concerned the necessary information and recommendations.
CHANGES TO THIS PRIVACY POLICY
We may make changes to this Privacy Policy from time to time, including as a result of changes to our services and/or as required by applicable law, and such changes will apply to personal data collected after the effective date set forth in the Privacy Policy and will be communicated to you via a notice on the Site or otherwise.
In any event, we recommend that you periodically review this Privacy Policy to obtain the latest information about our privacy practices.
After reviewing this policy, if you have any further questions or would like more information about our privacy practices, please contact us by e-mail at support@unistellaroptics.com.
The most current version of the Privacy Policy is as of the date indicated on this document.